This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft File: rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json) Hash identifier: fadHossL4/qCQa6lw/Is9bDavGwNRLNOCImWHIiCci4= Subject key identifier: 56:4D:28:F8:24:52:5C:A6:41:5D:11:B3:EA:92:EC:FB:6C:68:C2:E3 Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B Certificate issuer: /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b Certificate serial: 019B34C607C092BA8FC1EB09FB3B33DBA740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:02:31 +0000 Manifest this update: Fri 19 Dec 2025 04:02:31 +0000 Manifest next update: Sat 20 Dec 2025 04:02:31 +0000 Files and hashes: 1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=) 2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: NKKxkKqDAPzRpshEsGehKu+no4PGIdfZMDXzd4FZfvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:07:c0:92:ba:8f:c1:eb:09:fb:3b:33:db:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b Validity Not Before: Dec 19 04:02:31 2025 GMT Not After : Dec 20 04:02:31 2025 GMT Subject: CN=564d28f824525ca6415d11b3ea92ecfb6c68c2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:7b:b0:cc:17:9a:7b:81:92:db:26:3c:47: 90:c5:41:48:f5:9d:8c:aa:51:d4:13:3f:93:50:a0: 4d:62:2d:81:8c:ab:3a:ed:db:53:be:e0:aa:ae:dc: 7c:80:72:49:62:3a:66:16:2b:bb:b2:11:ad:1c:7a: 9f:29:4d:2f:c4:15:67:68:45:3c:52:99:3a:d7:df: 0a:3a:a2:60:4a:d5:5c:2a:a9:e5:b0:76:8d:9d:9e: 08:3e:39:66:4c:b6:72:8f:60:d0:7d:fb:2c:a7:ab: e2:fb:35:21:b4:df:2d:5e:08:29:7d:56:0b:2f:e5: ba:7a:63:88:f9:ff:31:02:a0:3a:1c:7d:61:f6:a1: a2:02:50:11:9c:ce:dd:c7:65:36:f0:68:4c:8f:5f: f9:2d:0b:8f:82:bd:46:95:97:91:1d:4c:2f:fa:9c: e8:fb:82:dc:bd:ce:bc:b2:73:5c:c9:e9:e4:56:c3: 94:65:81:eb:e6:b4:62:bf:c2:47:e1:ce:1c:d9:0f: 93:2f:45:29:eb:38:28:67:21:5b:b3:e5:26:13:a6: 9f:f8:ca:97:50:0a:6b:91:43:d9:f5:94:dc:51:8b: fc:29:34:61:cf:95:f5:6e:76:0f:89:7c:05:49:c8: 2b:23:2b:35:bb:4a:f5:ca:89:c9:18:04:70:9c:5b: 8e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4D:28:F8:24:52:5C:A6:41:5D:11:B3:EA:92:EC:FB:6C:68:C2:E3 X509v3 Authority Key Identifier: keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:15:c4:02:b6:6a:58:c6:f2:20:b6:65:ad:67:3b:5f:39:79: 5f:12:2e:70:03:c1:38:7a:e6:2c:f1:6c:2e:c6:37:b1:a9:b7: 00:c5:b9:95:eb:9a:35:91:8b:db:a3:d3:56:c6:05:d4:a6:cb: d4:0d:c8:5f:09:7d:0b:2a:8f:3f:8d:08:6e:92:59:cc:b3:72: 89:19:a2:75:39:4d:1d:f0:8f:74:cb:0b:7d:b7:1c:b5:c3:34: 0a:86:85:87:73:9d:34:62:e6:35:94:36:1f:6e:53:10:e3:28: a4:94:b6:71:b0:73:03:36:9b:00:3c:cf:a6:d7:0f:6d:57:9b: 28:88:57:59:e6:3a:b0:f7:0d:f3:c8:0d:48:38:6e:4a:40:42: 14:72:66:66:10:bb:f9:4d:3d:52:b1:b8:85:cc:2f:e6:d7:19: 7c:ef:cc:6f:13:17:da:05:9a:82:eb:45:53:fa:ee:44:5a:d7: 2f:75:31:61:72:9b:2d:0c:ce:d2:38:71:fc:25:4c:4f:f1:4a: 91:5e:20:43:0b:9e:fe:94:06:5b:45:16:05:a8:3c:36:33:81: a9:ba:31:0e:4b:65:76:30:21:d7:64:23:31:5f:cf:3c:a2:b2: 4b:17:fa:21:00:6e:3a:78:93:c1:78:81:f8:4c:4c:27:cf:09: 25:b4:03:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xgfAkrqPwesJ+zsz26dAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZDZlZjE3ZTZmOTUxODE4OTBlNTRkMDAwYTJhYzhmZjJk MjQ5OWIwHhcNMjUxMjE5MDQwMjMxWhcNMjUxMjIwMDQwMjMxWjAzMTEwLwYDVQQD Eyg1NjRkMjhmODI0NTI1Y2E2NDE1ZDExYjNlYTkyZWNmYjZjNjhjMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyp7sMwXmnuBktsmPEeQxUFI9Z2M qlHUEz+TUKBNYi2BjKs67dtTvuCqrtx8gHJJYjpmFiu7shGtHHqfKU0vxBVnaEU8 Upk6198KOqJgStVcKqnlsHaNnZ4IPjlmTLZyj2DQffssp6vi+zUhtN8tXggpfVYL L+W6emOI+f8xAqA6HH1h9qGiAlARnM7dx2U28GhMj1/5LQuPgr1GlZeRHUwv+pzo +4Lcvc68snNcyenkVsOUZYHr5rRiv8JH4c4c2Q+TL0Up6zgoZyFbs+UmE6af+MqX UAprkUPZ9ZTcUYv8KTRhz5X1bnYPiXwFScgrIys1u0r1yonJGARwnFuOCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZNKPgkUlymQV0Rs+qS7PtsaMLjMB8GA1UdIwQY MBaAFK7W7xfm+VGBiQ5U0ACirI/y0kmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTct MGFlMGYxYWNjZGE0LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTctMGFlMGYxYWNjZGE0 LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRXEArZq WMbyILZlrWc7Xzl5XxIucAPBOHrmLPFsLsY3sam3AMW5leuaNZGL26PTVsYF1KbL 1A3IXwl9CyqPP40IbpJZzLNyiRmidTlNHfCPdMsLfbcctcM0CoaFh3OdNGLmNZQ2 H25TEOMopJS2cbBzAzabADzPptcPbVebKIhXWeY6sPcN88gNSDhuSkBCFHJmZhC7 +U09UrG4hcwv5tcZfO/MbxMX2gWagutFU/ruRFrXL3UxYXKbLQzO0jhx/CVMT/FK kV4gQwue/pQGW0UWBag8NjOBqboxDktldjAh12QjMV/PPKKySxf6IQBuOniTwXiB +ExMJ88JJbQDMg== -----END CERTIFICATE-----Generated at Fri Dec 19 08:23:15 2025 by rpki-client