This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json) Hash identifier: JT9J3W3MsyxpeP+ZU2Ger+4CQyTTeA26gh9GzDq/KxU= Subject key identifier: A9:61:D5:27:8A:54:8A:C5:D5:C5:67:C5:26:60:4C:22:96:54:FF:EC Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e Certificate serial: 019B733581BC43765EFFD96A080174057EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft Manifest number: 17AC Signing time: Wed 31 Dec 2025 07:00:44 +0000 Manifest this update: Wed 31 Dec 2025 07:00:44 +0000 Manifest next update: Thu 01 Jan 2026 07:00:44 +0000 Files and hashes: 1: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=) 2: kNjtAZnBIdDs69zL_sxo5b2kvsE.roa (hash: ZvUWHB49abkoN+508ycB2Kcm14s8kB/R0ioTMdmzGbc=) 3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: VgSwEGVN2OgEbtxr5PNulIu1yX5aJiQQ5EiLB9cjdZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:81:bc:43:76:5e:ff:d9:6a:08:01:74:05:7e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e Validity Not Before: Dec 31 07:00:44 2025 GMT Not After : Jan 1 07:00:44 2026 GMT Subject: CN=a961d5278a548ac5d5c567c526604c229654ffec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:30:a0:32:b4:98:dc:0f:4f:4e:74:9f:95: 49:a6:35:9b:79:a9:f4:e8:13:83:a7:89:9a:94:1c: 35:5b:b9:9b:33:5c:69:83:f6:3e:e0:f5:b5:f6:46: 30:6f:4a:2f:ba:ee:13:20:5d:92:9d:07:69:a2:8e: a0:ac:54:d7:56:ed:21:e5:4f:a7:0f:0c:ea:d7:c5: 1a:02:d2:ae:a3:f9:86:64:5e:04:ad:05:a7:44:82: 01:ac:87:80:45:eb:bd:7c:46:f0:1b:ef:59:8e:44: 3f:32:be:50:cc:87:9e:01:fa:59:36:37:cf:78:94: f0:cc:e6:b5:dd:1c:7b:4b:c3:4a:27:6f:5c:3a:d8: d0:22:aa:0b:b4:9a:6e:46:42:67:b9:88:6d:27:5d: ef:32:f9:11:cd:2b:3f:94:02:2c:b5:5a:d6:17:76: 9d:bf:4d:04:51:f2:77:5c:34:69:4f:fe:62:a6:66: ee:45:71:50:e1:15:09:d2:9c:95:3c:e9:d7:0b:e3: 8a:fc:94:12:f6:9b:d9:fa:78:49:45:2a:9b:b1:af: d5:87:ec:69:36:2c:6b:ac:30:01:19:86:ef:d2:b7: 8b:46:a1:39:6b:82:b7:18:07:56:93:44:e5:75:67: 10:be:6e:58:68:30:d3:5b:00:98:02:f2:2b:7d:29: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:61:D5:27:8A:54:8A:C5:D5:C5:67:C5:26:60:4C:22:96:54:FF:EC X509v3 Authority Key Identifier: keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bd:d4:be:fa:4d:36:31:4f:b1:47:8e:e7:36:7d:c8:c5:e4: 1a:ee:5c:a8:b4:95:63:1c:e7:31:ad:28:93:36:62:b4:ef:37: 75:11:ed:3e:11:14:53:c8:b7:49:ad:f2:cc:e5:41:7c:ee:79: e1:94:68:c0:8a:bd:22:8b:05:75:9f:fd:7f:79:40:94:64:80: 34:aa:41:0e:cc:0d:8f:c3:18:90:43:52:11:9f:92:11:0a:fa: 84:66:98:96:d4:9e:1f:a7:71:23:4f:d9:c9:e9:94:38:c4:f5: 5c:8a:31:6b:51:a5:70:1e:fd:95:7c:ed:a9:c7:a1:c4:71:b0: b8:91:ee:d9:d7:70:12:9d:0c:82:0f:26:95:49:cf:46:f0:8f: 14:78:27:1c:66:25:ae:0a:d7:79:5e:e9:b4:f8:1c:96:1e:54: c4:55:89:c3:35:30:da:e6:0a:92:ea:59:81:a1:9a:a1:7b:1a: af:eb:19:7e:48:22:db:aa:56:93:e7:2c:db:67:ea:e5:c0:c2: 27:fe:c0:24:e7:93:78:0c:42:ed:ec:21:34:f9:87:53:52:32: 30:4c:1d:bf:dc:db:d4:1e:25:0a:92:0f:6e:f9:44:68:c7:57: f5:f0:8d:16:b7:03:53:15:6d:6f:d9:e6:ef:2f:ed:f1:e2:76: 66:00:2f:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNYG8Q3Ze/9lqCAF0BX69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMjAwZDBlN2FkM2NlZjcyMjM4YjUxNjRjNGIyY2RkZTIz YTZhMWUwHhcNMjUxMjMxMDcwMDQ0WhcNMjYwMTAxMDcwMDQ0WjAzMTEwLwYDVQQD EyhhOTYxZDUyNzhhNTQ4YWM1ZDVjNTY3YzUyNjYwNGMyMjk2NTRmZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7swoDK0mNwPT050n5VJpjWbean0 6BODp4malBw1W7mbM1xpg/Y+4PW19kYwb0ovuu4TIF2SnQdpoo6grFTXVu0h5U+n Dwzq18UaAtKuo/mGZF4ErQWnRIIBrIeAReu9fEbwG+9ZjkQ/Mr5QzIeeAfpZNjfP eJTwzOa13Rx7S8NKJ29cOtjQIqoLtJpuRkJnuYhtJ13vMvkRzSs/lAIstVrWF3ad v00EUfJ3XDRpT/5ipmbuRXFQ4RUJ0pyVPOnXC+OK/JQS9pvZ+nhJRSqbsa/Vh+xp NixrrDABGYbv0reLRqE5a4K3GAdWk0TldWcQvm5YaDDTWwCYAvIrfSmOIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlh1SeKVIrF1cVnxSZgTCKWVP/sMB8GA1UdIwQY MBaAFJsgDQ560873Iji1FkxLLN3iOmoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2Mt YTRmMDhkYmI4NWE1LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2MtYTRmMDhkYmI4NWE1 LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmr3UvvpN NjFPsUeO5zZ9yMXkGu5cqLSVYxznMa0okzZitO83dRHtPhEUU8i3Sa3yzOVBfO55 4ZRowIq9IosFdZ/9f3lAlGSANKpBDswNj8MYkENSEZ+SEQr6hGaYltSeH6dxI0/Z yemUOMT1XIoxa1GlcB79lXztqcehxHGwuJHu2ddwEp0Mgg8mlUnPRvCPFHgnHGYl rgrXeV7ptPgclh5UxFWJwzUw2uYKkupZgaGaoXsar+sZfkgi26pWk+cs22fq5cDC J/7AJOeTeAxC7ewhNPmHU1IyMEwdv9zb1B4lCpIPbvlEaMdX9fCNFrcDUxVtb9nm 7y/t8eJ2ZgAv6Q== -----END CERTIFICATE-----Generated at Wed Dec 31 13:27:46 2025 by rpki-client