This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft File: ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json) Hash identifier: kUKr8t4PLBoVaAXlvLdW9yoGWdwuq10AbFrgtJ4Y3c8= Subject key identifier: 86:EA:94:40:69:D4:48:0D:6B:C9:D4:18:69:0A:42:BB:9B:3D:48:65 Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Certificate serial: 019B39B3EC6009387EB395433FBB23C448DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 03:00:51 +0000 Manifest this update: Sat 20 Dec 2025 03:00:51 +0000 Manifest next update: Sun 21 Dec 2025 03:00:51 +0000 Files and hashes: 1: 7cZbkQqr-SEdfr0tEW8C1Pix35Y.roa (hash: xSjPvHmjy6FdGTZKdoGxVAJ1Yq148v83DxivVL7nC44=) 2: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: o1MPtznQYnLg86cd4/HsGpZbtuXbqxY1dlPSMmItpn8=) 3: Vtkp4nVzagTb1teWd63BFZh8RwU.roa (hash: TYSKwA87i0+WxUKYjqVqa3ovHNk1VR5486G73L2E0tU=) 4: hPSG-Jdcz29OBANRkLWHEzWA5Kk.roa (hash: U4NiT3zb8/Cvex2X+6FLghtEgLR1KuWHLdqLp8Ppbzc=) 5: u6NL_ogOmQanKJmr1VOq5ASIrTw.roa (hash: IVLfxh3xnjFSGQTmPY15cQ9GzgVAKww2vTiXyy5nK8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:ec:60:09:38:7e:b3:95:43:3f:bb:23:c4:48:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3 Validity Not Before: Dec 20 03:00:51 2025 GMT Not After : Dec 21 03:00:51 2025 GMT Subject: CN=86ea944069d4480d6bc9d418690a42bb9b3d4865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:f6:91:f3:23:c7:13:b5:71:96:f3:ed:24: f4:a7:69:a5:0d:57:f2:5b:bc:0b:e1:9d:11:4a:9f: c3:8c:b0:57:d0:b0:b1:64:b6:1b:e2:ce:02:89:d7: 86:13:34:b1:a3:e1:30:03:2d:83:aa:19:67:1d:d2: a6:fd:a8:13:04:12:62:91:0a:20:13:23:f6:6b:cf: 0d:70:2d:7c:78:35:17:ab:b0:d5:53:2d:1f:4c:05: 93:70:11:d1:19:12:0b:94:67:ba:ef:db:a8:34:2f: 78:03:21:1d:9f:14:19:31:13:32:84:32:57:1e:94: 2e:c9:15:ca:05:4b:6d:38:ee:6e:d7:fb:02:6c:37: f1:2c:8b:d6:6e:fc:04:20:c1:36:cc:b5:d8:e5:5b: b8:0c:d6:3e:a7:f2:46:f8:20:1d:f2:d9:cd:a9:85: 35:8b:31:91:aa:ff:15:38:d7:cb:fb:8c:9c:1d:1c: 99:b8:95:38:2d:79:36:4b:53:ea:76:88:ad:9f:00: 9d:36:c4:b9:8c:74:90:9a:8a:fa:09:66:e1:47:4d: 9e:a9:d6:e6:5b:bd:aa:e6:81:b2:bd:b7:67:36:ab: 91:05:09:f2:06:71:77:95:46:e4:cf:f8:cc:4c:01: 3b:ed:d9:aa:b0:1e:dc:fd:62:77:e9:0f:47:e1:e4: aa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EA:94:40:69:D4:48:0D:6B:C9:D4:18:69:0A:42:BB:9B:3D:48:65 X509v3 Authority Key Identifier: keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:65:e7:d5:0c:58:b9:86:69:98:fc:ef:4e:9d:27:15:b4:51: c2:83:e3:56:3c:e3:13:6c:3e:83:90:e1:59:19:ee:dc:07:47: 6b:42:ef:a6:3c:13:db:88:80:44:6a:60:bd:08:9e:b4:69:15: e8:21:8c:76:1e:b8:34:88:df:d2:99:80:f0:38:62:42:f5:80: 99:7e:2b:8a:e9:68:58:8b:db:c0:ed:af:f1:a9:6e:fe:f6:3c: 61:50:92:c1:13:d9:17:90:eb:c1:8d:91:2b:d7:40:3e:12:a4: d2:36:fb:19:af:ec:dc:b2:65:42:cb:d0:8f:39:cb:41:8d:6e: dc:80:01:70:d5:5a:b9:e3:23:54:c9:de:06:fe:96:1c:ab:fb: 14:b0:ea:25:83:f0:3e:5f:f9:5c:42:a0:a2:b7:6b:1b:c8:f2: 8f:43:6e:2d:c5:7e:65:55:10:c7:19:36:b4:44:b4:ec:05:32: 0b:6e:3f:4b:e2:ae:84:fe:75:b8:b2:86:b4:2f:c3:46:88:16: 57:6f:d9:76:fd:de:4d:48:00:a5:98:6c:bf:45:68:71:02:35: 6c:a0:93:23:9c:00:e2:c4:f7:cb:25:f0:d4:21:28:d3:e0:98: da:8b:26:44:ca:24:53:0e:21:d8:e6:10:42:5a:b8:4b:89:74: dc:dd:0f:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+xgCTh+s5VDP7sjxEjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2IyYzM4NzEwNjkwMDJhZDBiMmY0MmIwY2JmNWU5MmUz YmU0YjMwHhcNMjUxMjIwMDMwMDUxWhcNMjUxMjIxMDMwMDUxWjAzMTEwLwYDVQQD Eyg4NmVhOTQ0MDY5ZDQ0ODBkNmJjOWQ0MTg2OTBhNDJiYjliM2Q0ODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtj2kfMjxxO1cZbz7ST0p2mlDVfy W7wL4Z0RSp/DjLBX0LCxZLYb4s4CideGEzSxo+EwAy2DqhlnHdKm/agTBBJikQog EyP2a88NcC18eDUXq7DVUy0fTAWTcBHRGRILlGe679uoNC94AyEdnxQZMRMyhDJX HpQuyRXKBUttOO5u1/sCbDfxLIvWbvwEIME2zLXY5Vu4DNY+p/JG+CAd8tnNqYU1 izGRqv8VONfL+4ycHRyZuJU4LXk2S1PqdoitnwCdNsS5jHSQmor6CWbhR02eqdbm W72q5oGyvbdnNquRBQnyBnF3lUbkz/jMTAE77dmqsB7c/WJ36Q9H4eSqJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbqlEBp1EgNa8nUGGkKQrubPUhlMB8GA1UdIwQY MBaAFAA7LDhxBpACrQsvQrDL9ekuO+SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGIt YjM1YTBhMTQ1M2ZiLzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGItYjM1YTBhMTQ1M2Zi LzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGXn1QxY uYZpmPzvTp0nFbRRwoPjVjzjE2w+g5DhWRnu3AdHa0LvpjwT24iARGpgvQietGkV 6CGMdh64NIjf0pmA8DhiQvWAmX4riuloWIvbwO2v8alu/vY8YVCSwRPZF5DrwY2R K9dAPhKk0jb7Ga/s3LJlQsvQjznLQY1u3IABcNVaueMjVMneBv6WHKv7FLDqJYPw Pl/5XEKgordrG8jyj0NuLcV+ZVUQxxk2tES07AUyC24/S+KuhP51uLKGtC/DRogW V2/Zdv3eTUgApZhsv0VocQI1bKCTI5wA4sT3yyXw1CEo0+CY2osmRMokUw4h2OYQ Qlq4S4l03N0PdA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:28:16 2025 by rpki-client