This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json) Hash identifier: bQ7AHTKVjH8k8C1wNRbX+QRcN9RRiIruCNV+zYGmmRs= Subject key identifier: 08:42:C6:D2:D2:DB:3C:2B:89:83:BD:0B:08:41:1D:5A:77:27:98:91 Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Certificate serial: 019B3D5A301947CDDB8AD5FD2E222D05ACC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft Manifest number: 0BC5 Signing time: Sat 20 Dec 2025 20:01:19 +0000 Manifest this update: Sat 20 Dec 2025 20:01:19 +0000 Manifest next update: Sun 21 Dec 2025 20:01:19 +0000 Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=) 2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=) 3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: GDalX5dKZPsoMNdRMdKXZ0duEeI2CJlJIzwNIMKBYpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:30:19:47:cd:db:8a:d5:fd:2e:22:2d:05:ac:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Validity Not Before: Dec 20 20:01:19 2025 GMT Not After : Dec 21 20:01:19 2025 GMT Subject: CN=0842c6d2d2db3c2b8983bd0b08411d5a77279891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:4e:1f:4b:9a:f8:de:76:df:7a:70:a2:ec: d7:2a:24:b7:d3:4e:3e:75:d3:9b:84:a7:b3:fc:1d: 28:48:5c:aa:eb:c3:da:27:2d:81:73:3c:90:b1:cf: 6b:d4:9f:91:2d:9f:fa:29:60:f5:38:13:71:28:cc: c9:9c:cd:8f:91:6c:23:e8:f2:73:75:4f:83:94:d3: 6b:f8:37:b4:e4:a6:b7:ab:50:50:05:47:2a:72:3a: 13:c0:ee:76:58:9a:93:21:74:68:18:df:9a:9e:6e: 96:10:ca:5a:74:dd:26:d3:4c:d7:c5:51:93:af:51: 17:47:e3:9d:b6:a1:b9:69:80:a6:5d:fe:d7:5c:bf: a3:7c:e0:7c:1b:97:35:d6:d4:cf:7f:64:82:7a:09: 35:59:86:a3:98:98:94:1e:d3:fe:3f:a1:3d:6b:da: 8a:2a:94:59:75:a2:3e:a0:e6:a9:23:cd:15:0c:61: 92:00:26:c9:5e:bf:8e:35:71:44:9c:7c:d3:97:d3: 43:13:13:51:2d:0d:7a:99:f4:df:1a:1c:ba:5b:49: 82:e9:6c:fe:6d:bc:9e:9c:df:f2:53:77:87:c9:22: 56:ea:e7:e2:11:53:de:7d:46:de:9f:cf:82:18:cf: 18:80:6f:a9:e7:13:ec:c0:3f:0f:c4:01:a9:c7:8e: 24:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:42:C6:D2:D2:DB:3C:2B:89:83:BD:0B:08:41:1D:5A:77:27:98:91 X509v3 Authority Key Identifier: keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:46:00:e0:81:bb:7c:c6:6d:15:08:6d:cc:21:5f:e1:89:36: 81:2a:d4:25:5c:6f:70:ea:01:f6:0a:0d:9e:b8:b1:6e:66:35: 9c:89:6b:ce:94:82:0a:54:03:96:24:24:78:2d:9b:0a:69:a0: 8d:0e:ce:3b:d6:2d:04:0e:1c:85:49:a5:a3:50:02:8c:ec:65: 2d:b2:61:29:80:ea:37:58:7f:20:c7:a2:fd:d3:7f:57:8e:f7: ef:d2:f9:8a:ad:2f:23:1d:84:52:91:e1:85:97:ad:db:f1:6d: 11:b5:a0:73:5e:f4:69:cd:3b:84:c5:3a:cd:da:72:7d:ec:86: 7a:1a:60:51:45:7e:87:b2:51:82:d9:ff:25:d2:77:1a:7b:16: 40:82:30:66:b9:28:41:d4:2d:02:43:b2:69:4f:57:6a:e7:1c: bc:d1:2d:1f:d0:60:75:b1:85:e6:89:60:38:13:68:a5:32:1d: 02:c9:9a:47:a6:db:34:fd:f9:08:a7:49:49:63:8e:6d:47:55: a8:8f:7f:f6:4d:76:2b:a0:a2:4b:f7:30:bf:cd:a0:0f:1e:d8: b5:61:e8:f8:b6:88:39:d0:79:f1:ae:07:6c:c1:90:80:29:9e: 6a:01:f0:d8:79:ca:d7:86:88:46:0d:7c:a1:b4:5c:e9:2e:8b: a8:ea:75:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WjAZR83bitX9LiItBazJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2I1MjljOWRjOTUyNmYwOTliZjE2YWM4OWRjYzhhZGZl MTgyNDAwHhcNMjUxMjIwMjAwMTE5WhcNMjUxMjIxMjAwMTE5WjAzMTEwLwYDVQQD EygwODQyYzZkMmQyZGIzYzJiODk4M2JkMGIwODQxMWQ1YTc3Mjc5ODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj1OH0ua+N5233pwouzXKiS3004+ ddObhKez/B0oSFyq68PaJy2BczyQsc9r1J+RLZ/6KWD1OBNxKMzJnM2PkWwj6PJz dU+DlNNr+De05Ka3q1BQBUcqcjoTwO52WJqTIXRoGN+anm6WEMpadN0m00zXxVGT r1EXR+OdtqG5aYCmXf7XXL+jfOB8G5c11tTPf2SCegk1WYajmJiUHtP+P6E9a9qK KpRZdaI+oOapI80VDGGSACbJXr+ONXFEnHzTl9NDExNRLQ16mfTfGhy6W0mC6Wz+ bbyenN/yU3eHySJW6ufiEVPefUben8+CGM8YgG+p5xPswD8PxAGpx44kfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhCxtLS2zwriYO9CwhBHVp3J5iRMB8GA1UdIwQY MBaAFK07UpydyVJvCZvxasidzIrf4YJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTIt YjIwZWJlNTk1NDc1LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTItYjIwZWJlNTk1NDc1 LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkYA4IG7 fMZtFQhtzCFf4Yk2gSrUJVxvcOoB9goNnrixbmY1nIlrzpSCClQDliQkeC2bCmmg jQ7OO9YtBA4chUmlo1ACjOxlLbJhKYDqN1h/IMei/dN/V47379L5iq0vIx2EUpHh hZet2/FtEbWgc170ac07hMU6zdpyfeyGehpgUUV+h7JRgtn/JdJ3GnsWQIIwZrko QdQtAkOyaU9XauccvNEtH9BgdbGF5olgOBNopTIdAsmaR6bbNP35CKdJSWOObUdV qI9/9k12K6CiS/cwv82gDx7YtWHo+LaIOdB58a4HbMGQgCmeagHw2HnK14aIRg18 obRc6S6LqOp1fA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:19 2025 by rpki-client