This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json) Hash identifier: nbMgfnnnGiNsqKQ/B4tJ9krToOie3Qv+hiEQjwGtI58= Subject key identifier: 86:03:43:35:AB:D9:28:67:B9:1F:68:3D:A1:A0:CA:ED:4A:08:9C:96 Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24 Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324 Certificate serial: 019B72C7E9485E4BED0737B21A6C3E9B4D92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft Manifest number: 17A9 Signing time: Wed 31 Dec 2025 05:01:02 +0000 Manifest this update: Wed 31 Dec 2025 05:01:02 +0000 Manifest next update: Thu 01 Jan 2026 05:01:02 +0000 Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: D//v+RqqaNr2yFYKeRN70Sdts5+vhdhaGeblPVR8AwU=) 2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:e9:48:5e:4b:ed:07:37:b2:1a:6c:3e:9b:4d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324 Validity Not Before: Dec 31 05:01:02 2025 GMT Not After : Jan 1 05:01:02 2026 GMT Subject: CN=86034335abd92867b91f683da1a0caed4a089c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:31:16:c7:ef:97:7c:9d:a6:bf:38:b4:ad: e6:5c:b5:89:22:05:46:76:48:e9:24:26:ac:8d:0a: 9d:ef:5d:0c:8f:a1:15:b3:ee:c0:4e:ed:45:ea:f2: b5:4f:1c:23:80:2d:2b:35:29:7f:0c:c8:06:ba:a8: c0:19:7b:96:a3:89:d7:70:d4:fe:67:0e:6c:00:90: 1f:5f:27:6e:ae:c9:29:0f:82:c1:3b:0a:e2:8c:2d: ec:f2:95:50:6a:18:15:51:df:fd:56:ee:81:56:fd: 57:3a:08:a7:c6:25:f7:67:e7:e7:9c:f7:bb:0e:77: 1f:a1:b9:69:78:58:67:e2:0a:6a:8b:f2:d3:72:c1: 81:f5:50:37:dd:5b:70:82:c6:da:4f:9a:2a:f8:0d: b9:be:c6:e1:dd:fd:14:c6:c5:9e:cb:d7:f2:71:6d: 74:e7:9a:1f:f5:06:5e:e7:95:8b:57:c2:3b:78:27: 26:28:07:24:a7:bc:f1:f2:ae:ed:1a:06:a4:f6:2e: 38:b7:0c:37:f5:7f:ce:c7:37:47:51:65:e9:f1:ed: 60:67:f3:1a:f4:a0:0c:24:3c:01:71:9d:a8:12:7a: 48:f3:06:a0:85:83:29:21:b7:8e:82:69:bf:68:5a: 31:53:7a:45:d1:d4:ca:48:8f:d4:ed:df:7b:e1:d5: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:03:43:35:AB:D9:28:67:B9:1F:68:3D:A1:A0:CA:ED:4A:08:9C:96 X509v3 Authority Key Identifier: keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:45:5f:72:d7:86:79:c5:7e:5b:de:75:7d:f3:d1:f3:38:14: 72:73:cd:08:73:e2:9e:20:ff:2a:b1:18:2b:bd:2e:48:10:74: 71:42:4d:fe:a1:fb:86:8b:ee:57:cc:32:83:de:3c:c0:1f:fd: 38:a1:2d:e6:d2:32:7e:c0:f5:d5:eb:21:9b:1e:f5:b0:7d:a0: 26:d5:c2:99:da:7c:9a:5e:80:e9:77:54:e8:76:2e:3d:a3:54: 37:4b:38:a0:08:fd:7d:b1:20:c1:a8:23:78:42:ea:88:5c:da: 93:fb:c0:a2:eb:7d:2c:1b:ad:f5:cc:ed:81:ac:5f:86:c7:05: aa:21:80:f2:97:a7:90:0f:ef:db:0e:4e:f3:de:b2:c7:31:ca: ad:08:9b:16:7e:d0:c6:f6:85:c3:22:5f:a7:df:a2:a7:80:1b: da:6f:33:6c:11:0c:5b:8e:e0:86:9f:a6:82:70:06:0a:b8:a4: 61:18:06:2a:e3:76:de:b4:8c:55:db:f5:1a:32:b9:8c:8a:4a: a8:cb:15:fe:f4:05:dc:20:19:a6:4d:f2:d8:ce:71:4b:4d:42: 5a:18:cc:4a:c2:63:ca:c7:94:52:bc:52:51:75:08:4b:15:fc: 97:44:08:12:e0:86:e1:9a:03:a3:42:be:75:8b:d7:5c:86:c8: de:f2:c3:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx+lIXkvtBzeyGmw+m02SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNmI0YzU4ZTZjZmQ5ZmE3ZTcyMjJhNThiMzYyNmRiN2I5 ODUzMjQwHhcNMjUxMjMxMDUwMTAyWhcNMjYwMTAxMDUwMTAyWjAzMTEwLwYDVQQD Eyg4NjAzNDMzNWFiZDkyODY3YjkxZjY4M2RhMWEwY2FlZDRhMDg5Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXwxFsfvl3ydpr84tK3mXLWJIgVG dkjpJCasjQqd710Mj6EVs+7ATu1F6vK1TxwjgC0rNSl/DMgGuqjAGXuWo4nXcNT+ Zw5sAJAfXydurskpD4LBOwrijC3s8pVQahgVUd/9Vu6BVv1XOginxiX3Z+fnnPe7 DncfoblpeFhn4gpqi/LTcsGB9VA33VtwgsbaT5oq+A25vsbh3f0UxsWey9fycW10 55of9QZe55WLV8I7eCcmKAckp7zx8q7tGgak9i44tww39X/OxzdHUWXp8e1gZ/Ma 9KAMJDwBcZ2oEnpI8waghYMpIbeOgmm/aFoxU3pF0dTKSI/U7d974dUlfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYDQzWr2ShnuR9oPaGgyu1KCJyWMB8GA1UdIwQY MBaAFONrTFjmz9n6fnIipYs2Jtt7mFMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMt ODAwYzk5ODUxMzY4LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMtODAwYzk5ODUxMzY4 LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEVfcteG ecV+W951ffPR8zgUcnPNCHPiniD/KrEYK70uSBB0cUJN/qH7hovuV8wyg948wB/9 OKEt5tIyfsD11eshmx71sH2gJtXCmdp8ml6A6XdU6HYuPaNUN0s4oAj9fbEgwagj eELqiFzak/vAout9LBut9cztgaxfhscFqiGA8penkA/v2w5O896yxzHKrQibFn7Q xvaFwyJfp9+ip4Ab2m8zbBEMW47ghp+mgnAGCrikYRgGKuN23rSMVdv1GjK5jIpK qMsV/vQF3CAZpk3y2M5xS01CWhjMSsJjyseUUrxSUXUISxX8l0QIEuCG4ZoDo0K+ dYvXXIbI3vLDfA== -----END CERTIFICATE-----Generated at Wed Dec 31 07:59:41 2025 by rpki-client