This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json) Hash identifier: +iZQiMP2DwJrLP7djj9JMgFC+HAxt2ndczI7BabuZZs= Subject key identifier: 93:55:A1:C7:B1:3B:53:17:B2:3C:20:AF:FA:FE:F4:D3:C9:E2:85:5C Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e Certificate serial: 019B50A96F082C86B6DB6D8831CE1E679BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft Manifest number: 1648 Signing time: Wed 24 Dec 2025 14:00:39 +0000 Manifest this update: Wed 24 Dec 2025 14:00:39 +0000 Manifest next update: Thu 25 Dec 2025 14:00:39 +0000 Files and hashes: 1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=) 2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: Mv5eMukY7o4a0JHM4cAq+PlNp4eoIj28c2arA4Cln94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:6f:08:2c:86:b6:db:6d:88:31:ce:1e:67:9b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e Validity Not Before: Dec 24 14:00:39 2025 GMT Not After : Dec 25 14:00:39 2025 GMT Subject: CN=9355a1c7b13b5317b23c20affafef4d3c9e2855c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:74:63:b9:a4:ce:64:65:14:2a:b3:19:45:1a: 37:41:62:be:a5:fe:36:6b:ed:5c:b1:d8:ef:83:8a: e3:64:a8:8f:ee:5a:89:51:90:d2:4a:d8:4e:60:bf: 1d:1e:74:4f:b7:c2:a6:03:b8:d0:31:39:8e:7f:e7: c2:37:2a:0b:07:9a:df:74:12:08:11:75:96:0d:77: c4:c7:1b:f0:7a:48:f4:ef:85:d2:cb:06:5b:d7:55: a4:3c:8f:d2:64:88:11:0f:69:95:ae:2b:0e:46:75: 96:45:48:7e:d1:9b:45:94:fc:b5:3c:ea:de:6c:ff: ed:72:87:5d:af:d4:6b:eb:d6:2f:92:23:b4:6e:98: 0b:83:57:b6:62:47:63:0b:e7:04:ed:b5:ec:4b:0f: e5:5a:c1:0b:5c:f6:30:7c:5c:ff:00:6f:b0:af:2b: 57:38:03:12:a6:66:d2:3a:a7:fe:b6:af:48:f0:d2: 79:3f:03:10:2e:2c:af:04:ed:70:49:0b:03:eb:23: bc:9c:69:b4:fa:bb:df:85:72:1c:78:c9:58:ef:26: ee:1b:69:da:0a:0f:fb:3a:2c:b5:d0:a1:ca:92:97: 60:7d:20:5c:58:fb:d8:c9:10:d6:24:56:95:b7:1e: b3:35:6e:f0:a9:e9:15:d3:e1:92:66:1a:91:c7:55: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:55:A1:C7:B1:3B:53:17:B2:3C:20:AF:FA:FE:F4:D3:C9:E2:85:5C X509v3 Authority Key Identifier: keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5d:90:ae:93:55:0c:35:00:66:4d:dd:48:07:6d:73:09:2f: e6:da:ff:46:1d:5d:15:04:95:e7:25:77:7c:1c:56:2c:a5:33: c6:c1:d2:ab:93:5f:43:a7:f9:3d:c3:2b:de:3c:d3:dd:85:10: b9:ef:30:4f:29:ac:11:a5:b7:b3:85:e0:3f:80:6e:f4:b2:93: dd:d8:96:28:1d:b1:98:3c:e5:ff:4f:c4:63:ad:7e:b2:62:59: e0:3c:5b:e2:eb:27:f5:04:29:24:b8:23:ec:de:13:62:7e:9c: f5:e4:13:ab:67:a6:a2:bf:2d:8b:17:e7:82:30:ff:b1:fd:94: e6:64:b7:bd:55:53:d8:b7:e4:09:34:d1:00:91:fe:b6:97:44: 5b:2c:fa:32:1e:8b:ab:e8:ec:d8:cb:60:9b:62:73:6f:71:0b: 2e:8d:96:80:91:f1:46:8e:f6:5e:cd:3e:10:c7:b8:de:a3:23: d7:4c:1e:6c:f2:ad:40:25:41:8c:ce:62:7d:c2:a2:94:d2:31: 30:e5:5a:6b:71:9c:d9:94:0a:42:74:b9:7f:48:a0:52:29:1c: fa:1a:cc:17:31:a4:84:cb:f2:a7:26:a0:f7:59:d9:c3:27:62: 22:52:e4:cb:a1:65:4a:55:e2:ab:54:ce:4e:6d:bd:e2:a3:e2: b9:d9:fb:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqW8ILIa2222IMc4eZ5u7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl ZDJlM2UwHhcNMjUxMjI0MTQwMDM5WhcNMjUxMjI1MTQwMDM5WjAzMTEwLwYDVQQD Eyg5MzU1YTFjN2IxM2I1MzE3YjIzYzIwYWZmYWZlZjRkM2M5ZTI4NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3RjuaTOZGUUKrMZRRo3QWK+pf42 a+1csdjvg4rjZKiP7lqJUZDSSthOYL8dHnRPt8KmA7jQMTmOf+fCNyoLB5rfdBII EXWWDXfExxvwekj074XSywZb11WkPI/SZIgRD2mVrisORnWWRUh+0ZtFlPy1POre bP/tcoddr9Rr69YvkiO0bpgLg1e2YkdjC+cE7bXsSw/lWsELXPYwfFz/AG+wrytX OAMSpmbSOqf+tq9I8NJ5PwMQLiyvBO1wSQsD6yO8nGm0+rvfhXIceMlY7ybuG2na Cg/7Oiy10KHKkpdgfSBcWPvYyRDWJFaVtx6zNW7wqekV0+GSZhqRx1VJ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNVocexO1MXsjwgr/r+9NPJ4oVcMB8GA1UdIwQY MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt ZTkyMzBlNTg4NjI2LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2 LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABV2QrpNV DDUAZk3dSAdtcwkv5tr/Rh1dFQSV5yV3fBxWLKUzxsHSq5NfQ6f5PcMr3jzT3YUQ ue8wTymsEaW3s4XgP4Bu9LKT3diWKB2xmDzl/0/EY61+smJZ4Dxb4usn9QQpJLgj 7N4TYn6c9eQTq2emor8tixfngjD/sf2U5mS3vVVT2LfkCTTRAJH+tpdEWyz6Mh6L q+js2Mtgm2Jzb3ELLo2WgJHxRo72Xs0+EMe43qMj10webPKtQCVBjM5ifcKilNIx MOVaa3Gc2ZQKQnS5f0igUikc+hrMFzGkhMvypyag91nZwydiIlLky6FlSlXiq1TO Tm294qPiudn7rQ== -----END CERTIFICATE-----Generated at Wed Dec 24 19:31:33 2025 by rpki-client