This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json) Hash identifier: 1nGrKpyQNXiB4SZQVyOXGffDIX0cfZNYtGWC1Xy4ods= Subject key identifier: FF:F8:CA:8C:92:34:75:38:10:63:36:44:D6:45:D6:C6:2A:E6:FA:50 Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Certificate serial: 019B446E9A4027B282B82739CAE08411E971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft Manifest number: 86 Signing time: Mon 22 Dec 2025 05:00:57 +0000 Manifest this update: Mon 22 Dec 2025 05:00:57 +0000 Manifest next update: Tue 23 Dec 2025 05:00:57 +0000 Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: sf7c8DT3+auAGgvBR1tBJDIT1TZU1u61jYwJ/gzaF8Y=) 2: C47lvglUJPUc1uI67gUUufPEDSs.roa (hash: E+7Tw0jGhEeXyLDUBjLwrw3FkNQ1C9Bm1zuyOyb3PzQ=) 3: nJ0AhkIAYhs6kgmeWNk0eh88IlU.roa (hash: cH4HPEM9cZKNpHMHjaKhXAEvP0Kxctiu8x8yjGmy1pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:9a:40:27:b2:82:b8:27:39:ca:e0:84:11:e9:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Validity Not Before: Dec 22 05:00:57 2025 GMT Not After : Dec 23 05:00:57 2025 GMT Subject: CN=fff8ca8c9234753810633644d645d6c62ae6fa50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:38:8a:85:e9:44:46:e8:82:24:e0:1d:84: 06:59:18:96:dd:25:8d:d7:a2:4b:19:52:e0:8a:09: fb:de:7b:67:bd:32:d5:0b:ce:a4:1f:fa:c5:c7:8c: 9c:06:37:7d:82:92:6c:65:48:55:f7:34:b9:a0:72: 17:38:7a:f6:2a:49:13:13:a0:4e:26:24:cb:ac:3c: f5:77:17:30:29:d9:af:c0:cf:fa:55:4f:80:ff:63: d0:06:51:f1:ff:88:dc:e1:e4:2e:d0:92:0f:da:ff: 41:91:6e:ed:95:63:e3:48:3e:35:97:37:4e:62:fd: ec:f2:ae:a4:e6:75:8a:ce:f1:97:4c:7a:50:2e:a6: eb:07:42:d2:3f:9f:db:46:f0:93:a2:2c:63:dd:54: 49:29:e1:c0:e1:27:c5:ad:14:4d:53:4e:9f:5d:13: a4:47:f9:b4:58:a0:ef:df:3c:02:ec:16:de:8c:a5: 4c:b8:f8:93:b0:2c:a5:0f:07:90:57:66:1e:f1:62: 58:ba:ef:df:dc:03:f5:78:28:f7:c0:f0:87:54:46: 57:4a:e5:d1:86:cf:ce:1e:97:f0:ba:43:7d:07:6f: d3:53:3f:d1:9b:be:33:f6:64:e1:a4:b9:d1:24:9b: d2:35:ca:52:dd:60:a6:32:4b:64:d0:e9:ef:d5:ac: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F8:CA:8C:92:34:75:38:10:63:36:44:D6:45:D6:C6:2A:E6:FA:50 X509v3 Authority Key Identifier: keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:26:dc:4f:77:4e:42:41:04:fb:73:5b:5c:c1:88:67:cf:7d: 44:9e:e7:9f:76:73:89:c4:6b:9e:35:a3:ee:6c:d1:99:82:4a: 36:f3:c6:18:22:13:4e:e7:18:ef:5e:54:ef:a2:b3:be:ed:b8: 85:02:4d:ad:d7:4c:ac:51:b1:45:cf:ca:fd:c1:5e:b8:15:e1: a3:69:bc:1f:b4:e7:f4:c4:5d:af:10:b8:2f:db:da:9c:21:ae: 71:29:d4:a6:4c:de:10:4a:8c:78:4c:2a:3b:51:a9:10:e0:d0: c3:32:e8:92:5b:71:c5:a3:f6:a4:1a:f6:1f:55:b3:0c:d0:56: 8c:ad:9d:3e:8b:cc:48:79:85:09:eb:8b:30:c8:d6:c0:35:97: b9:55:f4:8b:8f:21:5b:30:8f:5f:4f:1f:15:30:74:5e:8d:91: b1:eb:4e:7f:c7:37:3e:95:9c:d7:b7:1d:d7:a2:4c:f2:87:6d: 82:75:f8:02:b0:ef:b5:c8:92:07:76:07:1a:f7:6e:d0:51:c6: d0:56:81:f9:dc:d9:b5:82:52:6d:a2:9a:8c:3c:41:07:5e:76: 2d:56:2e:c3:c6:77:94:b2:6f:e7:22:76:42:a4:12:f3:49:6e: 52:5b:de:9f:a7:2e:5b:6e:4f:64:6a:7e:eb:64:1e:f0:15:b0: 76:36:77:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbppAJ7KCuCc5yuCEEelxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm YWRjODcwHhcNMjUxMjIyMDUwMDU3WhcNMjUxMjIzMDUwMDU3WjAzMTEwLwYDVQQD EyhmZmY4Y2E4YzkyMzQ3NTM4MTA2MzM2NDRkNjQ1ZDZjNjJhZTZmYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Y4ioXpREbogiTgHYQGWRiW3SWN 16JLGVLgign73ntnvTLVC86kH/rFx4ycBjd9gpJsZUhV9zS5oHIXOHr2KkkTE6BO JiTLrDz1dxcwKdmvwM/6VU+A/2PQBlHx/4jc4eQu0JIP2v9BkW7tlWPjSD41lzdO Yv3s8q6k5nWKzvGXTHpQLqbrB0LSP5/bRvCToixj3VRJKeHA4SfFrRRNU06fXROk R/m0WKDv3zwC7BbejKVMuPiTsCylDweQV2Ye8WJYuu/f3AP1eCj3wPCHVEZXSuXR hs/OHpfwukN9B2/TUz/Rm74z9mThpLnRJJvSNcpS3WCmMktk0Onv1awA3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/4yoySNHU4EGM2RNZF1sYq5vpQMB8GA1UdIwQY MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt NDdkMzA4NzEzN2Y0LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0 LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaybcT3dO QkEE+3NbXMGIZ899RJ7nn3ZzicRrnjWj7mzRmYJKNvPGGCITTucY715U76Kzvu24 hQJNrddMrFGxRc/K/cFeuBXho2m8H7Tn9MRdrxC4L9vanCGucSnUpkzeEEqMeEwq O1GpEODQwzLokltxxaP2pBr2H1WzDNBWjK2dPovMSHmFCeuLMMjWwDWXuVX0i48h WzCPX08fFTB0Xo2RsetOf8c3PpWc17cd16JM8odtgnX4ArDvtciSB3YHGvdu0FHG 0FaB+dzZtYJSbaKajDxBB152LVYuw8Z3lLJv5yJ2QqQS80luUlven6cuW25PZGp+ 62Qe8BWwdjZ3Zw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:18:39 2025 by rpki-client