This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json) Hash identifier: Posqvpb9s3ihwj6ac43B0GtQWpcQv45DjxNNH7u0DQY= Subject key identifier: 6E:52:E9:28:A2:CF:DE:FE:A7:16:F3:2F:EB:17:B7:5A:01:BE:E7:9F Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Certificate serial: 019B3C7EC83768306B705BB6DAD558181C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:01:40 +0000 Manifest this update: Sat 20 Dec 2025 16:01:40 +0000 Manifest next update: Sun 21 Dec 2025 16:01:40 +0000 Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: wjqYjllaR4S3mrivKvlU7bdkdUSTPZy4ks8cPGRMy8c=) 2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=) 3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:c8:37:68:30:6b:70:5b:b6:da:d5:58:18:1c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Validity Not Before: Dec 20 16:01:40 2025 GMT Not After : Dec 21 16:01:40 2025 GMT Subject: CN=6e52e928a2cfdefea716f32feb17b75a01bee79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:2e:cf:b4:59:71:2d:4c:f7:55:47:f0:78: cb:7b:c5:20:11:b7:38:62:eb:60:76:3e:e9:ca:67: 5c:5e:2d:3b:b4:07:a5:3f:79:31:40:c3:b3:4b:ec: 4b:6f:97:0f:05:6f:6a:c0:8a:5e:14:db:24:c6:c0: 8b:b9:9c:8a:e9:d8:5e:02:66:c0:54:90:46:5b:e6: df:ef:53:e6:28:2d:ad:f4:b1:88:1a:35:16:e4:0b: 3a:52:18:34:21:48:dd:69:0e:28:80:64:02:97:0f: 12:6a:23:67:c8:fe:71:0a:c1:90:e2:ec:71:68:88: 0a:de:1b:9a:48:6e:6d:39:2f:0a:06:45:28:5b:09: 1c:42:ee:9c:f3:53:58:ae:12:56:2f:d0:5b:25:bf: 28:82:1c:c7:7c:21:cb:3b:1b:54:e3:38:0a:98:f3: 91:1c:24:ec:40:22:d3:a0:6c:f9:62:29:d0:b3:d4: c7:0a:b8:cb:5d:8c:33:c1:62:52:c9:ec:ef:6c:cf: 91:0d:96:36:3e:19:ec:f5:64:01:9a:e7:b2:c3:60: 59:fc:19:15:bc:30:0a:92:c4:68:78:63:4b:6b:89: 3e:84:e7:16:90:c1:ae:7e:91:c0:c8:31:af:f3:80: d2:75:7f:36:dd:fc:d4:31:eb:bb:65:ca:5f:6e:6e: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:52:E9:28:A2:CF:DE:FE:A7:16:F3:2F:EB:17:B7:5A:01:BE:E7:9F X509v3 Authority Key Identifier: keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:71:25:be:cf:ac:15:5f:04:71:5c:fd:bb:32:cc:d8:97:a0: 00:3c:05:05:54:59:2b:ce:82:01:7f:e3:ab:08:61:87:f1:00: 89:e8:12:ac:d8:a5:32:c0:18:59:7f:36:b5:d6:f0:79:53:dd: bf:be:5f:c9:e3:60:5e:98:25:8b:c3:ee:e3:5e:4b:e1:f6:f4: 43:78:d8:f8:84:d1:72:78:b4:22:d9:70:50:10:2a:9c:3b:0d: 21:61:82:e5:a4:0a:b1:39:4b:4c:a6:18:e5:e8:d1:7c:ea:9e: d0:0f:13:36:9f:65:d3:ed:4a:cb:05:28:82:61:27:3a:d2:47: 81:94:3e:81:d3:70:a8:84:7e:ad:51:fb:da:a6:27:99:7c:74: c6:47:9e:d4:d9:ba:c8:d3:40:b8:05:47:ad:15:3a:1c:16:4e: 28:01:bf:d6:cc:8a:f7:1a:6c:09:5e:0c:ee:86:85:ff:84:7f: be:21:d7:94:b7:5c:98:4c:a8:3b:4f:58:d7:ee:25:0d:2c:63: f5:09:7f:04:4d:17:7c:fe:9c:ba:50:cb:f4:85:e7:0b:41:b5: 39:1b:f9:b9:c0:c8:dd:86:06:f5:9a:b3:4b:5f:53:52:a4:fd: fa:8e:ad:d9:bc:3a:7d:a3:44:d6:ea:cd:77:7b:ed:58:2a:a3: 2c:bd:00:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fsg3aDBrcFu22tVYGByJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2NhYjc0NzlhNGUwZDhhNDE3NzM1MGEwMGE2OWJkODgz YjA0OGQwHhcNMjUxMjIwMTYwMTQwWhcNMjUxMjIxMTYwMTQwWjAzMTEwLwYDVQQD Eyg2ZTUyZTkyOGEyY2ZkZWZlYTcxNmYzMmZlYjE3Yjc1YTAxYmVlNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt4uz7RZcS1M91VH8HjLe8UgEbc4 Yutgdj7pymdcXi07tAelP3kxQMOzS+xLb5cPBW9qwIpeFNskxsCLuZyK6dheAmbA VJBGW+bf71PmKC2t9LGIGjUW5As6Uhg0IUjdaQ4ogGQClw8SaiNnyP5xCsGQ4uxx aIgK3huaSG5tOS8KBkUoWwkcQu6c81NYrhJWL9BbJb8oghzHfCHLOxtU4zgKmPOR HCTsQCLToGz5YinQs9THCrjLXYwzwWJSyezvbM+RDZY2Phns9WQBmueyw2BZ/BkV vDAKksRoeGNLa4k+hOcWkMGufpHAyDGv84DSdX823fzUMeu7Zcpfbm6XSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5S6Siiz97+pxbzL+sXt1oBvuefMB8GA1UdIwQY MBaAFEbMq3R5pODYpBdzUKAKab2IOwSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgt MmYzMDI1MmViNDQyLzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgtMmYzMDI1MmViNDQy LzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3Elvs+s FV8EcVz9uzLM2JegADwFBVRZK86CAX/jqwhhh/EAiegSrNilMsAYWX82tdbweVPd v75fyeNgXpgli8Pu415L4fb0Q3jY+ITRcni0ItlwUBAqnDsNIWGC5aQKsTlLTKYY 5ejRfOqe0A8TNp9l0+1KywUogmEnOtJHgZQ+gdNwqIR+rVH72qYnmXx0xkee1Nm6 yNNAuAVHrRU6HBZOKAG/1syK9xpsCV4M7oaF/4R/viHXlLdcmEyoO09Y1+4lDSxj 9Ql/BE0XfP6culDL9IXnC0G1ORv5ucDI3YYG9ZqzS19TUqT9+o6t2bw6faNE1urN d3vtWCqjLL0AQQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:13 2025 by rpki-client