This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json) Hash identifier: 6Db/XM9JwbikHi3iNh/0SoIhB0+Xe8iwdA4U2O25jvU= Subject key identifier: 4C:61:66:BF:96:48:67:71:04:BB:AD:57:65:F9:EC:5D:B6:F7:63:EA Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26 Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26 Certificate serial: 019B53AAC1F9827393B6F363E5DAE2B38455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft Manifest number: 15C7 Signing time: Thu 25 Dec 2025 04:00:58 +0000 Manifest this update: Thu 25 Dec 2025 04:00:58 +0000 Manifest next update: Fri 26 Dec 2025 04:00:58 +0000 Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=) 2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=) 3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: 5IeQKxMoEgNN+7NsOHnfttoZhIcHggRyfryVi0YXr6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:c1:f9:82:73:93:b6:f3:63:e5:da:e2:b3:84:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26 Validity Not Before: Dec 25 04:00:58 2025 GMT Not After : Dec 26 04:00:58 2025 GMT Subject: CN=4c6166bf9648677104bbad5765f9ec5db6f763ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:85:f3:b6:62:d7:87:c4:ae:0a:95:d0:44:79: bc:d9:b7:bf:f7:93:fe:a0:15:ae:cb:5d:0f:1f:fa: 4b:ed:38:35:55:c8:be:5d:de:88:34:b9:ea:7a:33: a6:62:b2:3b:96:3b:02:38:08:c3:7a:fa:4e:80:37: 48:fe:ac:bc:f5:f9:04:64:f9:2f:b8:61:86:fa:81: d3:d2:7a:b2:4e:68:58:71:84:f4:74:89:4e:7e:9d: 47:ab:e9:35:31:f5:6a:f6:8d:63:ff:ca:78:b6:3f: 2a:dc:55:ac:22:45:76:04:f3:17:d7:2f:69:d9:3b: 11:30:38:4f:57:46:3d:8a:c3:e0:09:cc:84:1c:3b: d0:ec:06:74:41:57:20:ac:c5:dc:d1:f1:58:ce:cc: 6e:7b:4a:7b:04:22:1a:5b:80:4a:a9:e3:a5:77:a7: 2e:bb:be:31:33:c3:f4:00:3c:1f:94:20:0c:18:5f: 12:5e:40:ca:a1:cb:5f:a3:72:bd:d4:9a:14:d1:93: 9d:0d:93:62:6e:91:d4:3c:c2:4d:a8:1c:da:e2:4b: 78:d9:bc:f7:50:09:3f:27:93:13:5a:49:a8:39:97: e2:05:83:8f:58:cd:a5:e1:d0:b9:c3:d0:b9:e0:5b: 33:ed:e7:1d:db:65:5f:6f:cf:3a:71:3d:18:10:1d: a9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:61:66:BF:96:48:67:71:04:BB:AD:57:65:F9:EC:5D:B6:F7:63:EA X509v3 Authority Key Identifier: keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a7:fb:a0:67:0a:29:2b:6c:ba:84:b8:cb:54:70:77:01:0b: 28:13:e3:f8:de:cf:3f:f0:b4:6f:cd:95:68:67:8a:56:32:d8: 71:dc:e2:87:a5:e4:26:fe:eb:18:7d:a6:c9:53:da:12:1f:a6: a4:91:e8:e1:29:4a:eb:93:fc:25:96:8d:a8:3c:70:1d:2a:44: 79:b5:65:5c:65:a1:2c:75:68:8f:74:fb:78:37:8f:fd:c2:90: aa:16:e1:b5:c8:33:e5:da:72:35:9a:aa:1f:d5:0c:2c:82:41: d3:dd:76:b2:f2:e3:b3:e9:f9:ce:f8:06:93:ae:5d:bb:bf:02: 42:f7:da:99:e6:d0:01:76:9a:b8:54:a7:8c:0f:9e:fb:67:f7: fc:62:48:dd:9b:58:40:cc:1c:24:57:42:98:48:bf:8c:3c:2f: 25:a1:70:be:e2:ac:a4:d8:d7:70:6f:cd:71:23:cf:09:d7:5f: a3:64:df:59:1b:f4:ea:cb:a0:e1:38:54:ec:ca:b6:64:85:0c: c6:a4:17:d6:c6:9e:13:c2:29:5f:bd:45:97:9c:d4:2f:08:f4: 57:05:18:44:6f:ab:5c:e1:22:56:18:5a:ea:5f:42:56:f3:b4: 41:02:53:48:f2:e9:fb:01:43:ae:04:03:06:50:9e:b2:b4:d3: 00:40:a3:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqsH5gnOTtvNj5dris4RVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOWFmYWRlNDE4M2FlODAwNDhkNmI4NDgxOGVlYzQ2ZjY4 MGZhMjYwHhcNMjUxMjI1MDQwMDU4WhcNMjUxMjI2MDQwMDU4WjAzMTEwLwYDVQQD Eyg0YzYxNjZiZjk2NDg2NzcxMDRiYmFkNTc2NWY5ZWM1ZGI2Zjc2M2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YXztmLXh8SuCpXQRHm82be/95P+ oBWuy10PH/pL7Tg1Vci+Xd6INLnqejOmYrI7ljsCOAjDevpOgDdI/qy89fkEZPkv uGGG+oHT0nqyTmhYcYT0dIlOfp1Hq+k1MfVq9o1j/8p4tj8q3FWsIkV2BPMX1y9p 2TsRMDhPV0Y9isPgCcyEHDvQ7AZ0QVcgrMXc0fFYzsxue0p7BCIaW4BKqeOld6cu u74xM8P0ADwflCAMGF8SXkDKoctfo3K91JoU0ZOdDZNibpHUPMJNqBza4kt42bz3 UAk/J5MTWkmoOZfiBYOPWM2l4dC5w9C54Fsz7ecd22Vfb886cT0YEB2pCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExhZr+WSGdxBLutV2X57F2292PqMB8GA1UdIwQY MBaAFK2a+t5Bg66ABI1rhIGO7Eb2gPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWIt YzAyMzM0YmUxMjhjLzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWItYzAyMzM0YmUxMjhj LzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKf7oGcK KStsuoS4y1RwdwELKBPj+N7PP/C0b82VaGeKVjLYcdzih6XkJv7rGH2myVPaEh+m pJHo4SlK65P8JZaNqDxwHSpEebVlXGWhLHVoj3T7eDeP/cKQqhbhtcgz5dpyNZqq H9UMLIJB0912svLjs+n5zvgGk65du78CQvfamebQAXaauFSnjA+e+2f3/GJI3ZtY QMwcJFdCmEi/jDwvJaFwvuKspNjXcG/NcSPPCddfo2TfWRv06sug4ThU7Mq2ZIUM xqQX1saeE8IpX71Fl5zULwj0VwUYRG+rXOEiVhha6l9CVvO0QQJTSPLp+wFDrgQD BlCesrTTAECjNg== -----END CERTIFICATE-----Generated at Thu Dec 25 06:23:27 2025 by rpki-client