This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json) Hash identifier: 7Vo4WIcap4M7jFeQsrsnsvIlrrdDONkCAqoLlj/P0es= Subject key identifier: 22:E8:02:5F:95:D1:90:2E:7E:FF:33:03:6B:69:7A:D6:9A:E9:83:33 Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72 Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772 Certificate serial: 019B3A908144C35B69E0D2C60CE657012032 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft Manifest number: 0BDA Signing time: Sat 20 Dec 2025 07:01:47 +0000 Manifest this update: Sat 20 Dec 2025 07:01:47 +0000 Manifest next update: Sun 21 Dec 2025 07:01:47 +0000 Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: mO/iaTmxgVWxJHZv+xDXhnakbUG2coW8KBy95B8o8yc=) 2: Z5D0NVCwHJbOdqOfz7YRUkDvwoM.roa (hash: /SfJY+dyJrOKz4DAI8X3q+GRzV5c6LDRGv5YHHv/zzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:81:44:c3:5b:69:e0:d2:c6:0c:e6:57:01:20:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772 Validity Not Before: Dec 20 07:01:47 2025 GMT Not After : Dec 21 07:01:47 2025 GMT Subject: CN=22e8025f95d1902e7eff33036b697ad69ae98333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:76:fe:4e:05:94:e8:d8:2b:25:73:29:04:fd: e5:5a:7f:51:78:82:86:2f:65:5e:f5:55:f2:f3:4a: 7b:5b:10:9d:40:44:ff:d5:23:f2:b8:7f:06:23:c7: 92:4a:bc:c6:cb:e1:a4:f5:1d:e9:d2:f4:19:38:76: ac:bd:7d:1f:84:3e:af:dc:76:8a:69:a3:71:98:88: 6b:24:99:6f:c4:35:78:a6:a1:49:67:da:33:97:b2: 08:f0:d3:74:b8:e5:cf:d5:72:bc:68:32:72:24:63: 75:40:c5:da:c9:48:01:7d:79:a5:00:27:12:38:d9: 3e:c6:d6:1e:23:8a:c1:8e:46:72:ff:ea:7e:f4:4d: 01:47:2d:64:49:c0:fa:fc:78:be:69:d2:48:f2:94: 3a:6e:36:07:9e:ce:6e:8b:29:09:3b:2c:a3:1d:a4: e1:13:8a:11:4e:22:1a:84:f3:ae:67:0e:c1:e1:9c: 16:b2:d3:d1:8c:97:1a:0b:de:ab:1e:89:d3:e3:ec: 77:6a:6e:3f:5e:f1:38:fb:cf:99:fb:c8:a1:cb:4b: 05:cb:e9:68:b0:7d:24:6b:c8:65:9d:35:45:17:0d: 56:7f:84:f6:28:33:0a:e0:ef:43:d0:05:d9:94:4a: 58:76:8b:a5:77:94:be:cb:e3:32:96:0b:7d:3d:27: 7b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E8:02:5F:95:D1:90:2E:7E:FF:33:03:6B:69:7A:D6:9A:E9:83:33 X509v3 Authority Key Identifier: keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3e:4a:01:7f:bd:5f:32:fb:01:3a:1b:03:4b:6d:4b:05:9d: 6a:6e:00:53:2c:a9:b7:49:21:73:c9:1f:25:d7:a2:82:c8:28: 8d:56:61:ae:7d:a7:b8:4e:97:50:57:0b:97:bb:cb:e8:cd:df: 97:75:ec:59:38:23:af:b4:8c:e4:2b:d0:63:5b:50:c3:7f:7c: 26:ec:1e:2c:01:aa:f4:e4:a1:aa:08:45:13:50:da:53:1f:45: 6a:b6:f7:3d:a8:56:12:e1:2e:ee:9a:98:23:04:d9:31:a0:8b: 4a:ae:3d:12:26:68:49:3c:e7:56:d1:d3:b1:e2:b2:a8:a9:0c: 36:c1:64:2c:53:10:b8:98:78:82:cd:66:b5:6e:67:28:56:99: 3a:1e:43:ba:ea:92:f0:a0:7b:6f:62:a8:45:1e:d7:8f:a2:b7: 93:f5:81:90:52:58:46:0f:23:74:2b:67:75:34:3d:8a:9d:ec: 67:74:56:42:ca:e1:cf:ba:47:16:96:a7:92:66:7a:0f:7e:5b: 7b:4b:7a:f1:b0:54:88:61:a4:85:55:69:57:fa:40:a3:b6:74: 21:5a:84:f3:eb:6e:05:e4:5b:4b:e6:21:1a:20:39:3a:cf:cf: d4:64:0d:2c:ca:94:01:62:73:c8:88:28:d5:f4:46:a8:df:fc: 39:11:37:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kIFEw1tp4NLGDOZXASAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNjNhOWQ3MDIzYjNjYjAwMzI5MTJkY2FhYzljNTYzYzkw YTk3NzIwHhcNMjUxMjIwMDcwMTQ3WhcNMjUxMjIxMDcwMTQ3WjAzMTEwLwYDVQQD EygyMmU4MDI1Zjk1ZDE5MDJlN2VmZjMzMDM2YjY5N2FkNjlhZTk4MzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hb+TgWU6NgrJXMpBP3lWn9ReIKG L2Ve9VXy80p7WxCdQET/1SPyuH8GI8eSSrzGy+Gk9R3p0vQZOHasvX0fhD6v3HaK aaNxmIhrJJlvxDV4pqFJZ9ozl7II8NN0uOXP1XK8aDJyJGN1QMXayUgBfXmlACcS ONk+xtYeI4rBjkZy/+p+9E0BRy1kScD6/Hi+adJI8pQ6bjYHns5uiykJOyyjHaTh E4oRTiIahPOuZw7B4ZwWstPRjJcaC96rHonT4+x3am4/XvE4+8+Z+8ihy0sFy+lo sH0ka8hlnTVFFw1Wf4T2KDMK4O9D0AXZlEpYdould5S+y+Mylgt9PSd7SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLoAl+V0ZAufv8zA2tpetaa6YMzMB8GA1UdIwQY MBaAFONjqdcCOzywAykS3KrJxWPJCpdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yZDUzMzctZGEyNC00Y2U4LWEzYjct YzMwMmMxMGVjNWMwLzEvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yZDUzMzctZGEyNC00Y2U4LWEzYjctYzMwMmMxMGVjNWMw LzEvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFz5KAX+9 XzL7ATobA0ttSwWdam4AUyypt0khc8kfJdeigsgojVZhrn2nuE6XUFcLl7vL6M3f l3XsWTgjr7SM5CvQY1tQw398JuweLAGq9OShqghFE1DaUx9Farb3PahWEuEu7pqY IwTZMaCLSq49EiZoSTznVtHTseKyqKkMNsFkLFMQuJh4gs1mtW5nKFaZOh5DuuqS 8KB7b2KoRR7Xj6K3k/WBkFJYRg8jdCtndTQ9ip3sZ3RWQsrhz7pHFpankmZ6D35b e0t68bBUiGGkhVVpV/pAo7Z0IVqE8+tuBeRbS+YhGiA5Os/P1GQNLMqUAWJzyIgo 1fRGqN/8ORE3Jw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:51:42 2025 by rpki-client