This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft File: t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json) Hash identifier: FzoD05WbQRVbqnB528ePgliSfuE+IGnmSm6OMureArs= Subject key identifier: 22:D2:EA:B9:B8:E7:98:66:12:5A:11:56:08:C8:2B:B3:C4:93:6B:BB Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79 Certificate issuer: /CN=b79e5d4f835ea88d76b60256e0037547cd968279 Certificate serial: 019B3C1028BFC512ACA1B08688E89D65632F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft Manifest number: 06D2 Signing time: Sat 20 Dec 2025 14:00:50 +0000 Manifest this update: Sat 20 Dec 2025 14:00:50 +0000 Manifest next update: Sun 21 Dec 2025 14:00:50 +0000 Files and hashes: 1: jruZxZ6v3fQQDOP1XhyiLrCoyWo.roa (hash: JwmXnt+QW5OLkAvlfiLvs8bXFlLMvqHA2E9khKbsWec=) 2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: IpZywMyBL/30u3vt2CZza0lvHT3Pv7iMbq07BE9z7so=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:28:bf:c5:12:ac:a1:b0:86:88:e8:9d:65:63:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279 Validity Not Before: Dec 20 14:00:50 2025 GMT Not After : Dec 21 14:00:50 2025 GMT Subject: CN=22d2eab9b8e79866125a115608c82bb3c4936bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:da:01:e7:4e:a5:af:1c:ac:cc:d2:35:1d: 79:33:af:e2:c9:83:aa:9c:81:23:82:f9:a9:02:21: 49:ca:c3:fb:f5:95:11:db:ab:bd:5b:25:a3:92:57: 1b:5f:ea:0f:0d:52:5c:10:51:4f:61:69:aa:83:93: cb:d5:a8:67:0d:a8:7e:45:4d:1f:2a:18:69:d2:fe: f1:f6:e2:ff:96:4c:a2:ee:51:e7:a1:d0:18:76:32: 56:7d:5e:86:da:b0:a4:17:ac:10:a8:26:55:03:46: dc:75:b3:5b:6e:ac:a1:3b:3f:17:82:e8:26:37:5e: fa:05:3f:96:f8:7f:74:27:f0:d5:a4:cb:90:8c:a3: af:c3:71:cf:4b:64:2c:c3:94:03:9c:a3:42:80:ff: a5:65:36:15:61:1d:db:13:df:5e:ff:c3:79:90:7a: 50:af:27:f8:b3:df:9b:11:5a:b0:2f:28:8b:fd:aa: cd:3b:59:dd:14:9b:81:bc:f7:33:0a:29:fc:ed:ca: 01:06:cc:09:0b:01:81:a5:01:d4:f6:7d:c6:0d:4b: e4:f6:6c:97:0c:3a:7d:e3:95:82:73:72:8e:ea:71: 7b:1f:db:08:5a:04:1b:0e:fa:4e:51:3e:b1:9e:76: 7b:37:1c:a0:42:62:98:6d:63:1f:81:c9:5f:3c:a5: 46:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:EA:B9:B8:E7:98:66:12:5A:11:56:08:C8:2B:B3:C4:93:6B:BB X509v3 Authority Key Identifier: keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:34:22:c1:cc:a8:4a:f0:08:a3:8f:dd:72:e7:14:17:9f:3d: ce:06:63:30:ab:89:2f:0c:54:fd:f5:a8:d1:1c:4c:88:a6:df: e0:ff:00:8f:1c:9d:8d:95:90:34:4f:26:bc:84:32:2a:4e:86: 00:7a:ff:9a:6a:c2:d7:b0:ae:82:67:48:50:32:a0:f1:c6:97: 15:44:24:c8:08:6c:9d:8e:39:65:4e:4d:73:71:86:68:92:93: a9:57:24:ef:d5:e8:cb:b7:8a:46:00:7b:88:a4:0e:fd:77:20: 15:df:6a:e6:49:06:28:9c:e4:b6:19:fa:45:3e:bd:7b:9f:a2: dc:3c:f3:52:ed:cf:17:33:e3:7a:88:cd:6e:da:6d:55:b2:c6: b4:84:ad:e1:e2:2a:6c:15:08:dc:c9:eb:96:fe:9c:e2:d5:0f: f7:9f:a1:96:27:8a:bc:73:1c:14:ce:87:f2:4b:9f:2f:6a:1a: ae:f3:84:64:6a:1a:5b:ee:f4:ac:78:df:00:bc:37:8f:ae:84: ab:78:65:f6:6b:07:40:f8:b3:73:ce:63:61:b4:d7:34:22:da: 9a:6f:48:56:e1:37:2a:04:42:f7:a2:2d:8d:26:ea:f9:ea:66: e3:48:d4:11:ce:47:c5:7a:01:d1:11:ee:77:0f:ec:24:75:13: 2c:df:fc:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ECi/xRKsobCGiOidZWMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OWU1ZDRmODM1ZWE4OGQ3NmI2MDI1NmUwMDM3NTQ3Y2Q5 NjgyNzkwHhcNMjUxMjIwMTQwMDUwWhcNMjUxMjIxMTQwMDUwWjAzMTEwLwYDVQQD EygyMmQyZWFiOWI4ZTc5ODY2MTI1YTExNTYwOGM4MmJiM2M0OTM2YmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHzaAedOpa8crMzSNR15M6/iyYOq nIEjgvmpAiFJysP79ZUR26u9WyWjklcbX+oPDVJcEFFPYWmqg5PL1ahnDah+RU0f Khhp0v7x9uL/lkyi7lHnodAYdjJWfV6G2rCkF6wQqCZVA0bcdbNbbqyhOz8Xgugm N176BT+W+H90J/DVpMuQjKOvw3HPS2Qsw5QDnKNCgP+lZTYVYR3bE99e/8N5kHpQ ryf4s9+bEVqwLyiL/arNO1ndFJuBvPczCin87coBBswJCwGBpQHU9n3GDUvk9myX DDp945WCc3KO6nF7H9sIWgQbDvpOUT6xnnZ7NxygQmKYbWMfgclfPKVGGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLS6rm455hmEloRVgjIK7PEk2u7MB8GA1UdIwQY MBaAFLeeXU+DXqiNdrYCVuADdUfNloJ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMt OWI3ZDQ5YWRlZGIzLzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMtOWI3ZDQ5YWRlZGIz LzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzQiwcyo SvAIo4/dcucUF589zgZjMKuJLwxU/fWo0RxMiKbf4P8AjxydjZWQNE8mvIQyKk6G AHr/mmrC17CugmdIUDKg8caXFUQkyAhsnY45ZU5Nc3GGaJKTqVck79Xoy7eKRgB7 iKQO/XcgFd9q5kkGKJzkthn6RT69e5+i3DzzUu3PFzPjeojNbtptVbLGtISt4eIq bBUI3Mnrlv6c4tUP95+hlieKvHMcFM6H8kufL2oarvOEZGoaW+70rHjfALw3j66E q3hl9msHQPizc85jYbTXNCLamm9IVuE3KgRC96ItjSbq+epm40jUEc5HxXoB0RHu dw/sJHUTLN/8ZA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:55:45 2025 by rpki-client