This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft File: rUZjafOSfaDIn7X0s-qeMk-SioQ.mft (raw, json) Hash identifier: 6rV5lFQO+vA3Hwq0fSPq8d2fekDFoqe1xyQlXAcV7Vc= Subject key identifier: 7E:F4:19:C9:35:D5:62:37:0C:B4:C6:14:9F:E3:BC:59:DC:88:04:93 Authority key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84 Certificate issuer: /CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84 Certificate serial: 019B41DBA200A5BAE3B8ADEBC67D6050FE9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft Manifest number: 07A1 Signing time: Sun 21 Dec 2025 17:01:11 +0000 Manifest this update: Sun 21 Dec 2025 17:01:11 +0000 Manifest next update: Mon 22 Dec 2025 17:01:11 +0000 Files and hashes: 1: e2krXZzkR-AkHScvd476IUHzrz0.roa (hash: KJC7yZeLdAZIJXLO5En/1DBnqhI+LO45sglWIneobpg=) 2: rUZjafOSfaDIn7X0s-qeMk-SioQ.crl (hash: q8I636HDO+Rv8lm9WGLhjLDawJQCX7EryBjxDlw7PU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:a2:00:a5:ba:e3:b8:ad:eb:c6:7d:60:50:fe:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84 Validity Not Before: Dec 21 17:01:11 2025 GMT Not After : Dec 22 17:01:11 2025 GMT Subject: CN=7ef419c935d562370cb4c6149fe3bc59dc880493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:44:eb:dc:19:3c:6c:82:80:e2:55:29:82: 89:41:b8:6f:68:38:be:43:78:40:54:7a:8f:8e:e4: f8:2c:a0:01:92:c1:c7:93:8b:1d:03:31:f4:a3:f0: 0a:aa:49:f1:0c:05:c4:f1:96:d9:e7:a2:72:c2:29: 71:97:e2:19:74:b1:69:78:96:08:2f:8c:6c:76:83: c4:b1:cd:28:8b:c4:36:9c:64:c0:4c:b2:3d:5d:f2: af:31:12:93:bc:5c:ca:57:61:f7:fa:27:5e:a9:63: 52:91:8d:31:cb:76:24:16:89:c3:dd:29:66:19:97: ec:0e:12:a8:b0:bc:fc:52:94:20:2a:6d:9f:62:64: 78:52:be:c7:3b:99:49:04:1d:c6:fd:3f:6a:41:85: 18:25:a2:f3:94:d7:cb:d4:87:8b:af:45:e2:16:dd: fc:1d:93:ba:b0:50:4d:5d:16:ea:f5:9f:b3:77:ea: 7f:be:3b:85:64:f6:bf:99:21:ff:8d:88:42:fb:c9: d7:b1:4c:7b:38:fe:7a:a0:ac:8b:9b:c8:2b:b9:1b: bb:b8:28:75:dc:54:5c:42:ff:8f:1b:52:e6:21:3b: c7:6f:e1:95:15:16:0c:02:4c:67:84:00:71:3f:40: 27:8e:5e:57:a6:aa:52:c5:69:0c:2b:cd:7c:88:48: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F4:19:C9:35:D5:62:37:0C:B4:C6:14:9F:E3:BC:59:DC:88:04:93 X509v3 Authority Key Identifier: keyid:AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:bd:13:24:6d:f1:68:c5:6a:db:34:ae:09:ab:37:4e:8f:0b: 58:38:3b:ac:90:b4:79:3c:7f:2e:4a:a0:84:80:9d:40:c1:fc: 6c:19:7b:9b:ab:27:4a:f5:be:e0:9d:87:7f:ce:37:d7:e6:6d: 83:78:41:0b:72:37:c4:ff:f8:9c:c3:8e:c9:21:aa:72:fd:6e: 5b:43:73:9f:a4:69:25:dd:0c:0d:43:e0:88:a9:24:95:55:54: 09:40:f2:fd:5b:89:da:69:12:aa:2b:c9:7e:65:53:26:f8:22: 80:34:1d:12:03:76:27:48:88:40:f5:56:42:dc:27:bd:74:03: 77:42:1c:0c:32:5f:74:10:8a:ed:04:de:19:a7:4f:b0:5a:89: 86:b1:1e:7a:87:13:40:44:e9:d1:62:11:ba:c5:a5:ff:7b:d6: d2:0d:31:9c:91:56:d6:40:55:69:b6:51:53:09:7c:17:a0:f3: 16:88:ec:0b:aa:3b:aa:dc:12:eb:32:b6:f8:e6:43:ab:a9:6a: 85:de:71:9e:22:72:2b:4b:e2:99:dc:8e:5e:12:59:05:9d:93: 8c:7b:8d:1b:88:0c:e8:fc:19:01:7b:9a:cc:5e:fd:d4:c4:94: c9:70:86:da:05:e6:6f:e0:dc:df:c4:1c:63:41:dc:57:37:06: 86:83:91:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB26IApbrjuK3rxn1gUP6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNDY2MzY5ZjM5MjdkYTBjODlmYjVmNGIzZWE5ZTMyNGY5 MjhhODQwHhcNMjUxMjIxMTcwMTExWhcNMjUxMjIyMTcwMTExWjAzMTEwLwYDVQQD Eyg3ZWY0MTljOTM1ZDU2MjM3MGNiNGM2MTQ5ZmUzYmM1OWRjODgwNDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfZE69wZPGyCgOJVKYKJQbhvaDi+ Q3hAVHqPjuT4LKABksHHk4sdAzH0o/AKqknxDAXE8ZbZ56Jywilxl+IZdLFpeJYI L4xsdoPEsc0oi8Q2nGTATLI9XfKvMRKTvFzKV2H3+ideqWNSkY0xy3YkFonD3Slm GZfsDhKosLz8UpQgKm2fYmR4Ur7HO5lJBB3G/T9qQYUYJaLzlNfL1IeLr0XiFt38 HZO6sFBNXRbq9Z+zd+p/vjuFZPa/mSH/jYhC+8nXsUx7OP56oKyLm8gruRu7uCh1 3FRcQv+PG1LmITvHb+GVFRYMAkxnhABxP0Anjl5XpqpSxWkMK818iEjoqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH70Gck11WI3DLTGFJ/jvFnciASTMB8GA1UdIwQY MBaAFK1GY2nzkn2gyJ+19LPqnjJPkoqEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclVaamFmT1NmYURJbjdYMHMtcWVNay1TaW9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yN2M2YTEtMWM5NC00YTQ5LThlM2Qt OWZkNTAzOTcwZmYwLzEvclVaamFmT1NmYURJbjdYMHMtcWVNay1TaW9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yN2M2YTEtMWM5NC00YTQ5LThlM2QtOWZkNTAzOTcwZmYw LzEvclVaamFmT1NmYURJbjdYMHMtcWVNay1TaW9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnL0TJG3x aMVq2zSuCas3To8LWDg7rJC0eTx/LkqghICdQMH8bBl7m6snSvW+4J2Hf8431+Zt g3hBC3I3xP/4nMOOySGqcv1uW0Nzn6RpJd0MDUPgiKkklVVUCUDy/VuJ2mkSqivJ fmVTJvgigDQdEgN2J0iIQPVWQtwnvXQDd0IcDDJfdBCK7QTeGadPsFqJhrEeeocT QETp0WIRusWl/3vW0g0xnJFW1kBVabZRUwl8F6DzFojsC6o7qtwS6zK2+OZDq6lq hd5xniJyK0vimdyOXhJZBZ2TjHuNG4gM6PwZAXuazF791MSUyXCG2gXmb+Dc38Qc Y0HcVzcGhoOR5A== -----END CERTIFICATE-----Generated at Sun Dec 21 23:10:07 2025 by rpki-client