This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json) Hash identifier: FNVbfiWD4kq96eN3AmtZfaHyZnDhMEVLaCr4PCGxSFE= Subject key identifier: 03:B0:A6:DE:41:66:22:F9:F7:28:5B:28:59:2F:FF:BF:B6:AC:8D:6C Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64 Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664 Certificate serial: 019B4C27BD136C87DBEBF89B469227CEBD34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft Manifest number: 10CF Signing time: Tue 23 Dec 2025 17:00:31 +0000 Manifest this update: Tue 23 Dec 2025 17:00:31 +0000 Manifest next update: Wed 24 Dec 2025 17:00:31 +0000 Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=) 2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: E2s134UfkDWCnA7amTq66PZPeAaNxE/2XBjizNnH1YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:27:bd:13:6c:87:db:eb:f8:9b:46:92:27:ce:bd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664 Validity Not Before: Dec 23 17:00:31 2025 GMT Not After : Dec 24 17:00:31 2025 GMT Subject: CN=03b0a6de416622f9f7285b28592fffbfb6ac8d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:cf:42:ea:dd:1d:95:96:a6:d0:b7:1c:be:a0: 16:e9:14:1b:df:20:ae:2d:b7:c1:5b:08:cd:0d:8f: 97:6d:72:03:cf:43:87:4f:85:ad:d9:c2:1d:c8:5c: 93:c0:24:50:99:e5:a8:28:3f:a5:e3:a6:af:ed:f8: cd:90:42:1b:dd:70:1e:1b:2b:64:4e:d4:9b:7f:36: d6:b9:e0:c2:3f:c1:d9:d2:2d:68:0f:5b:93:29:b7: cf:45:77:75:6b:c1:e2:f3:f6:69:e2:d4:9a:91:4d: 08:c7:a7:24:d7:4c:48:0f:f2:ca:e8:e5:2c:79:da: a1:de:18:e6:7c:f1:62:3c:20:eb:80:57:ba:85:86: 0e:8c:21:ba:fa:bc:67:f9:4d:0b:ad:e6:3c:46:2a: 56:00:c8:da:58:b2:fb:30:16:69:d0:c7:4b:8e:1d: da:a6:c1:84:a1:a3:be:8a:c4:c3:9f:d3:27:38:e8: 85:18:d2:4b:e0:f8:06:5f:03:4c:c1:ca:4c:52:90: d1:c5:46:b8:0f:b6:2d:df:fb:5a:6e:60:43:a9:cc: 66:8b:e2:90:e9:cd:9b:ca:f9:9a:31:e0:bb:bd:51: 0b:0c:67:c1:45:ef:11:85:3d:1b:63:36:dd:5f:bd: 66:16:59:a7:09:66:a4:d3:f4:65:06:33:ec:b5:a5: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B0:A6:DE:41:66:22:F9:F7:28:5B:28:59:2F:FF:BF:B6:AC:8D:6C X509v3 Authority Key Identifier: keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:dd:da:d9:a6:0f:e0:65:cb:53:2a:0a:aa:18:77:30:f6:4b: b4:77:e4:f8:08:05:29:4e:d6:2b:95:35:1b:09:e5:1d:28:1b: a6:c7:2a:91:cb:be:ea:44:a3:38:61:0e:78:f2:bb:73:23:66: c6:24:67:3d:2d:c6:e6:e1:1c:56:1a:9b:ad:ad:c5:66:43:02: ad:e2:0b:3f:56:ba:27:3a:05:da:8f:f6:0e:38:30:44:5d:90: b0:54:4e:2e:b5:cd:b4:07:e8:43:04:71:89:ec:b2:dd:5a:a3: 54:f6:b3:e5:cb:92:85:5e:f6:8f:c4:f6:34:29:f3:5c:bb:a3: 9c:83:49:59:5c:f6:ae:a9:5e:ac:72:a8:8c:08:26:c9:56:11: 3f:d4:20:f2:ee:e1:bd:c2:07:a1:73:4b:1d:fc:da:c3:ac:fc: f5:be:3b:32:f5:75:e1:2d:b5:7b:3c:01:8d:43:3e:10:55:f8: 86:2c:45:66:96:80:66:c4:7a:74:4a:6c:ab:90:4e:81:b9:c9: f2:cc:43:e1:5b:61:0b:8b:91:42:97:d6:0b:6b:f3:e9:04:a5: 12:f3:2e:8f:81:9b:3b:90:f2:d3:85:1f:18:40:d4:94:99:8d: 8d:03:f3:0b:c0:48:48:ce:9c:a4:30:c4:a6:0e:58:ed:a1:73: 8e:00:70:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMJ70TbIfb6/ibRpInzr00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDYwNDg1NzFkODdlYWJjNGJlZDFhN2NkZmY4MzU4N2Zi ODk2NjQwHhcNMjUxMjIzMTcwMDMxWhcNMjUxMjI0MTcwMDMxWjAzMTEwLwYDVQQD EygwM2IwYTZkZTQxNjYyMmY5ZjcyODViMjg1OTJmZmZiZmI2YWM4ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+c9C6t0dlZam0LccvqAW6RQb3yCu LbfBWwjNDY+XbXIDz0OHT4Wt2cIdyFyTwCRQmeWoKD+l46av7fjNkEIb3XAeGytk TtSbfzbWueDCP8HZ0i1oD1uTKbfPRXd1a8Hi8/Zp4tSakU0Ix6ck10xID/LK6OUs edqh3hjmfPFiPCDrgFe6hYYOjCG6+rxn+U0LreY8RipWAMjaWLL7MBZp0MdLjh3a psGEoaO+isTDn9MnOOiFGNJL4PgGXwNMwcpMUpDRxUa4D7Yt3/tabmBDqcxmi+KQ 6c2byvmaMeC7vVELDGfBRe8RhT0bYzbdX71mFlmnCWak0/RlBjPstaWLHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOwpt5BZiL59yhbKFkv/7+2rI1sMB8GA1UdIwQY MBaAFGnWBIVx2H6rxL7Rp83/g1h/uJZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAt ZjE5NmZkMGE0OTdiLzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAtZjE5NmZkMGE0OTdi LzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt3a2aYP 4GXLUyoKqhh3MPZLtHfk+AgFKU7WK5U1GwnlHSgbpscqkcu+6kSjOGEOePK7cyNm xiRnPS3G5uEcVhqbra3FZkMCreILP1a6JzoF2o/2DjgwRF2QsFROLrXNtAfoQwRx ieyy3VqjVPaz5cuShV72j8T2NCnzXLujnINJWVz2rqlerHKojAgmyVYRP9Qg8u7h vcIHoXNLHfzaw6z89b47MvV14S21ezwBjUM+EFX4hixFZpaAZsR6dEpsq5BOgbnJ 8sxD4VthC4uRQpfWC2vz6QSlEvMuj4GbO5Dy04UfGEDUlJmNjQPzC8BISM6cpDDE pg5Y7aFzjgBwgA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:58 2025 by rpki-client