This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json) Hash identifier: PSTfhYPOmug2po0um5kXlumaHDKnyZQBN6EPCYfcrsY= Subject key identifier: 55:0C:9E:9F:B9:C5:E8:56:E5:02:6C:7C:FE:00:82:0F:A8:42:2B:7F Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75 Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575 Certificate serial: 019B3B34AD4B559E52D4A3FE9EED433FCFA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft Manifest number: 154E Signing time: Sat 20 Dec 2025 10:01:06 +0000 Manifest this update: Sat 20 Dec 2025 10:01:06 +0000 Manifest next update: Sun 21 Dec 2025 10:01:06 +0000 Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=) 2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: 7gcv4oJ5TmdM5DHXYX4ioUdZ/E3LZsOFI6IKS/MJ/Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:ad:4b:55:9e:52:d4:a3:fe:9e:ed:43:3f:cf:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575 Validity Not Before: Dec 20 10:01:06 2025 GMT Not After : Dec 21 10:01:06 2025 GMT Subject: CN=550c9e9fb9c5e856e5026c7cfe00820fa8422b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d7:19:52:ff:b5:42:a3:c0:a2:ae:f8:15:c9: 8b:b8:8b:76:57:d7:c0:82:fc:d6:6a:8e:f8:33:f1: 46:67:b9:f1:a9:be:91:7b:53:b6:1a:9c:b7:5b:6d: 6f:be:be:1f:4b:cb:a3:8f:04:ba:0d:cd:ba:a7:9b: a9:3b:73:a3:86:52:1b:f5:a6:e2:f9:95:fe:c8:dd: 3e:e2:15:83:75:61:2a:ca:14:56:32:6d:fd:c2:51: ea:84:3f:5e:7d:2d:38:08:b3:6a:c0:88:34:3b:49: de:8d:2d:02:2e:6d:78:87:0d:e2:b5:b6:81:d8:f5: c7:6c:d5:f8:3c:28:d2:24:4f:a5:80:80:ce:08:55: 67:c0:95:d0:84:84:88:78:17:1e:d1:2f:ae:6d:55: 7f:bb:3b:a6:d2:55:35:e8:b2:f8:68:57:58:7a:60: 00:d6:2a:1d:6a:b5:23:f2:89:2f:32:f8:2c:78:06: da:cf:a8:1c:e8:1f:7a:ae:95:7d:fd:72:58:0c:80: eb:07:ee:4a:f2:74:63:71:18:6c:1d:3e:b1:a5:07: 15:ab:67:16:4e:4b:b3:ae:9d:70:c3:3d:9b:f5:0e: 4d:04:5c:91:34:b6:02:a6:29:59:e6:7b:f8:a1:70: 96:49:a3:45:e9:c2:5e:fc:cf:b8:3b:12:7a:a8:1c: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0C:9E:9F:B9:C5:E8:56:E5:02:6C:7C:FE:00:82:0F:A8:42:2B:7F X509v3 Authority Key Identifier: keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:87:63:71:a8:20:d8:d9:d2:81:8b:62:eb:6e:d0:e2:6a:9c: 5b:b9:2c:7d:9e:03:b4:51:5e:d3:69:17:00:40:85:f7:5e:d0: 46:8b:46:29:50:90:92:f7:a8:a4:3f:e1:28:c3:14:ec:1e:f2: e5:cf:d3:a5:8f:9a:ca:bf:70:1e:ca:27:c1:c2:8f:69:e2:84: 71:c4:9c:87:88:61:c7:45:c4:e9:07:1d:07:2f:ef:d3:2b:2f: 13:b7:dd:29:55:1b:75:ac:6d:82:ee:2d:9e:b1:66:2a:f1:97: 68:17:67:de:d7:c4:20:b7:d8:c4:49:de:4f:7f:12:be:ed:7f: 7c:6c:6e:ec:6d:22:92:77:34:27:e7:4c:15:01:a0:dc:78:ac: 37:91:8f:f7:ff:67:90:6f:12:99:82:a0:92:95:97:b8:9e:13: 38:c4:8e:60:18:10:62:67:57:97:df:84:86:ad:1c:08:2d:80: b1:f7:42:54:5a:78:61:c5:df:79:e8:e2:96:08:5c:ac:24:50: fc:55:22:4e:f0:62:4b:95:46:67:23:f5:ad:ff:05:3f:7c:e3: 7c:53:74:b2:6f:a7:5e:bf:23:f2:d3:f6:87:f7:d9:29:bc:13: cd:b9:0a:20:22:f7:4b:f8:4e:98:0f:04:73:c8:08:8b:02:dc: 59:33:25:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NK1LVZ5S1KP+nu1DP8+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYmQ3ZGRjZTRmZDcwM2JjM2ZiY2FmYzFiNWQ1NzdlMWE3 NTc1NzUwHhcNMjUxMjIwMTAwMTA2WhcNMjUxMjIxMTAwMTA2WjAzMTEwLwYDVQQD Eyg1NTBjOWU5ZmI5YzVlODU2ZTUwMjZjN2NmZTAwODIwZmE4NDIyYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69cZUv+1QqPAoq74FcmLuIt2V9fA gvzWao74M/FGZ7nxqb6Re1O2Gpy3W21vvr4fS8ujjwS6Dc26p5upO3OjhlIb9abi +ZX+yN0+4hWDdWEqyhRWMm39wlHqhD9efS04CLNqwIg0O0nejS0CLm14hw3itbaB 2PXHbNX4PCjSJE+lgIDOCFVnwJXQhISIeBce0S+ubVV/uzum0lU16LL4aFdYemAA 1iodarUj8okvMvgseAbaz6gc6B96rpV9/XJYDIDrB+5K8nRjcRhsHT6xpQcVq2cW Tkuzrp1wwz2b9Q5NBFyRNLYCpilZ5nv4oXCWSaNF6cJe/M+4OxJ6qBzs6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUMnp+5xehW5QJsfP4Agg+oQit/MB8GA1UdIwQY MBaAFAq9fdzk/XA7w/vK/BtdV34adXV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDIt N2QzNDhjY2ExZDIwLzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDItN2QzNDhjY2ExZDIw LzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4djcagg 2NnSgYti627Q4mqcW7ksfZ4DtFFe02kXAECF917QRotGKVCQkveopD/hKMMU7B7y 5c/TpY+ayr9wHsonwcKPaeKEccSch4hhx0XE6QcdBy/v0ysvE7fdKVUbdaxtgu4t nrFmKvGXaBdn3tfEILfYxEneT38Svu1/fGxu7G0iknc0J+dMFQGg3HisN5GP9/9n kG8SmYKgkpWXuJ4TOMSOYBgQYmdXl9+Ehq0cCC2AsfdCVFp4YcXfeejilghcrCRQ /FUiTvBiS5VGZyP1rf8FP3zjfFN0sm+nXr8j8tP2h/fZKbwTzbkKICL3S/hOmA8E c8gIiwLcWTMlWw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:10:58 2025 by rpki-client