This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json) Hash identifier: /3DcD06zNOosuAV4SKZnW6F+DEiPD0NF94E6ZFyJY/A= Subject key identifier: 8A:7B:EC:DB:58:CC:9F:86:EB:35:2A:B8:B9:7A:16:FA:38:3F:01:4C Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43 Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43 Certificate serial: 019B3D233D8BC25338E4398B492DEB39B738 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 19:01:18 +0000 Manifest this update: Sat 20 Dec 2025 19:01:18 +0000 Manifest next update: Sun 21 Dec 2025 19:01:18 +0000 Files and hashes: 1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=) 2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: tYg0gKOqxPJyCLA1euY0o9w7C+ORvf1RxHVPuE75PdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:3d:8b:c2:53:38:e4:39:8b:49:2d:eb:39:b7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43 Validity Not Before: Dec 20 19:01:18 2025 GMT Not After : Dec 21 19:01:18 2025 GMT Subject: CN=8a7becdb58cc9f86eb352ab8b97a16fa383f014c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:40:3a:94:1d:6c:fc:89:88:ed:58:e6:73: 32:50:0a:b3:c8:87:d0:ce:53:8a:9a:9e:47:31:ba: 46:75:8b:52:b0:2d:c7:1c:fa:78:75:c5:6a:bc:9e: e8:35:59:4b:8b:fd:d2:52:e8:91:6b:fd:80:40:e5: be:18:b7:85:82:ac:3f:86:f4:1f:bd:ba:c7:54:87: f1:95:69:dc:79:47:d9:b3:6e:82:e2:e0:99:a9:2f: 65:2a:05:d0:b0:11:16:68:45:d6:69:91:c1:96:94: 49:18:45:cc:00:b8:7d:ce:6b:82:48:77:52:1e:12: d6:e4:28:c2:1d:f4:58:51:5c:81:61:7e:00:e2:55: fb:19:0a:cd:c0:f3:85:d3:b1:0c:c4:c8:48:36:42: 96:d4:b8:34:99:69:5d:91:be:95:78:97:be:12:bb: f6:ce:5c:20:fc:51:9b:2b:90:8c:dd:5d:7a:7e:17: 45:dc:18:d0:96:60:e8:89:c7:e7:0b:43:c9:07:88: 2b:33:21:24:72:6e:43:07:0b:d6:ae:93:32:0a:2b: 5f:d0:15:c4:45:bf:07:72:28:47:1f:0f:30:c9:de: cb:36:3e:52:41:53:e6:5c:31:bd:17:dd:22:db:40: df:9b:34:99:92:a7:fc:13:85:42:14:2b:26:b6:63: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7B:EC:DB:58:CC:9F:86:EB:35:2A:B8:B9:7A:16:FA:38:3F:01:4C X509v3 Authority Key Identifier: keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f6:80:c9:87:9d:d4:ae:cc:a7:9c:33:08:68:f8:d3:88:d3: 38:77:73:50:80:1c:27:6f:21:cd:39:09:76:e5:66:69:ab:54: d9:f7:1e:06:e0:f3:94:82:43:20:34:cc:24:90:c8:3d:75:fb: 5e:b8:b9:f6:be:d5:b2:ab:39:6e:e0:75:9b:65:a5:c6:0f:3c: e1:a3:14:22:4c:03:37:4a:a8:d2:2a:a7:54:d2:99:3d:a0:d1: 83:35:39:a5:c5:77:60:a6:ec:1e:48:dd:ea:2d:5a:96:d7:1b: 66:bc:7b:a8:2c:d6:06:69:79:68:a8:8b:12:e1:c2:4b:b6:6b: cf:0d:a8:dd:be:ee:7c:fc:32:41:4c:9b:42:3a:28:80:78:8c: af:92:55:53:00:b9:c1:f7:40:fc:34:af:89:5a:29:78:5a:24: 1f:fa:b0:63:30:52:eb:39:ec:fc:e7:5f:00:bf:ce:7f:cc:4b: ea:7b:79:d0:d4:ab:9e:1c:f8:d4:a0:d2:2f:61:30:0b:c4:62: 36:34:b3:98:36:26:4a:9b:f5:5c:a4:f0:4a:19:73:19:7a:93: aa:91:7c:ad:b4:54:ad:62:39:d5:52:0c:83:d4:8a:e3:9f:98: 0c:3d:ab:a3:af:d6:2b:c1:d6:85:4f:06:49:c4:2f:ed:cc:e0: 0e:99:4c:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iz2LwlM45DmLSS3rObc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDVkNDUyYThlZDUzNTI4N2ZlYjM2NTE0YmM4N2MwMjIz NTVhNDMwHhcNMjUxMjIwMTkwMTE4WhcNMjUxMjIxMTkwMTE4WjAzMTEwLwYDVQQD Eyg4YTdiZWNkYjU4Y2M5Zjg2ZWIzNTJhYjhiOTdhMTZmYTM4M2YwMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp29AOpQdbPyJiO1Y5nMyUAqzyIfQ zlOKmp5HMbpGdYtSsC3HHPp4dcVqvJ7oNVlLi/3SUuiRa/2AQOW+GLeFgqw/hvQf vbrHVIfxlWnceUfZs26C4uCZqS9lKgXQsBEWaEXWaZHBlpRJGEXMALh9zmuCSHdS HhLW5CjCHfRYUVyBYX4A4lX7GQrNwPOF07EMxMhINkKW1Lg0mWldkb6VeJe+Erv2 zlwg/FGbK5CM3V16fhdF3BjQlmDoicfnC0PJB4grMyEkcm5DBwvWrpMyCitf0BXE Rb8HcihHHw8wyd7LNj5SQVPmXDG9F90i20DfmzSZkqf8E4VCFCsmtmNeXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp77NtYzJ+G6zUquLl6Fvo4PwFMMB8GA1UdIwQY MBaAFGnV1FKo7VNSh/6zZRS8h8AiNVpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2Yt ZGQ5NDQzNTc5ZWQ1LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2YtZGQ5NDQzNTc5ZWQ1 LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPaAyYed 1K7Mp5wzCGj404jTOHdzUIAcJ28hzTkJduVmaatU2fceBuDzlIJDIDTMJJDIPXX7 Xri59r7Vsqs5buB1m2Wlxg884aMUIkwDN0qo0iqnVNKZPaDRgzU5pcV3YKbsHkjd 6i1altcbZrx7qCzWBml5aKiLEuHCS7Zrzw2o3b7ufPwyQUybQjoogHiMr5JVUwC5 wfdA/DSviVopeFokH/qwYzBS6zns/OdfAL/Of8xL6nt50NSrnhz41KDSL2EwC8Ri NjSzmDYmSpv1XKTwShlzGXqTqpF8rbRUrWI51VIMg9SK45+YDD2ro6/WK8HWhU8G ScQv7czgDplM5A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:02:55 2025 by rpki-client