This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft File: rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json) Hash identifier: eOPANg9Z/jADAbRooy9b6NDDubsXfwBWUPYuy0064zk= Subject key identifier: 0A:0C:2D:D4:51:28:3D:69:4D:71:65:97:5D:8A:CF:F8:BB:54:7A:6D Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e Certificate serial: 019B4CCD5E142396675EB9017D2E2D42F72B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft Manifest number: 06F0 Signing time: Tue 23 Dec 2025 20:01:25 +0000 Manifest this update: Tue 23 Dec 2025 20:01:25 +0000 Manifest next update: Wed 24 Dec 2025 20:01:25 +0000 Files and hashes: 1: 32XJfOuajaXKWFXToBNlGxtkW6Q.roa (hash: dKLGEpCpRymK3fL0g+5BlFVGvIZeLfMhwXmSO0Ljm9k=) 2: JNkggvQx74p1btfiu-ncCk_cuvY.roa (hash: 3PlXzxEghXwRv2XVfxrZveNHTFUHK5O1XcLko9Bh3BM=) 3: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (hash: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=) 4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: 6cGVUuOI7vMjz80hhWFfRUav622mXBOfJo2fJ6gvSmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:5e:14:23:96:67:5e:b9:01:7d:2e:2d:42:f7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e Validity Not Before: Dec 23 20:01:25 2025 GMT Not After : Dec 24 20:01:25 2025 GMT Subject: CN=0a0c2dd451283d694d7165975d8acff8bb547a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:bf:fd:f1:d1:f1:b1:7c:9a:e1:b2:06:54: 8d:85:c7:f2:48:4d:57:df:78:ba:26:bb:f7:10:84: ce:8a:fd:53:67:57:cf:1d:a5:e2:f1:0a:88:89:5d: 29:00:e0:b3:6a:94:ca:7f:23:35:32:a2:85:35:3a: ee:9c:8a:1f:74:3f:91:05:c0:fa:a2:d6:59:be:be: c8:6d:c4:1a:78:cb:46:f6:be:35:08:11:f0:aa:da: 16:70:f1:43:30:28:de:36:c6:2b:37:27:8c:22:8b: d1:3c:7c:27:e9:7d:e9:72:f4:30:e7:3d:cb:4b:0f: 56:9e:5d:f6:fc:7f:6a:a5:e3:99:15:20:a5:86:27: 36:45:61:f6:49:e6:f8:44:59:1d:ad:9c:7c:be:5d: 95:89:ac:aa:ed:ff:e2:a7:03:ec:29:9e:b3:52:1e: f5:35:7f:61:84:d6:bf:be:59:3c:55:91:27:61:b1: b5:e0:46:8f:1f:5a:0f:6d:8e:fe:73:3d:22:10:b9: 90:15:b9:ad:fe:52:80:cd:8d:b9:4f:6c:8a:41:9e: e3:e4:a5:d0:42:1d:be:4e:9a:2e:2f:92:9a:27:d1: be:93:dc:c1:7d:31:6c:a4:65:8e:ce:ca:c4:64:84: 7c:53:b5:66:c8:6e:54:49:c5:c9:19:9c:05:10:87: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:2D:D4:51:28:3D:69:4D:71:65:97:5D:8A:CF:F8:BB:54:7A:6D X509v3 Authority Key Identifier: keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7a:72:ab:49:13:0a:25:48:8e:aa:95:ec:84:34:31:5e:76: 4d:55:62:f0:54:54:89:f5:b9:27:4e:b0:41:7d:cb:eb:d3:8e: cd:12:87:4a:39:48:d0:a1:fa:f6:59:4b:e6:d4:78:b0:cb:12: ed:26:a0:43:55:7d:ac:02:de:ed:ca:62:c1:be:8d:e0:f1:23: f6:ec:f5:65:74:e4:c2:1d:4b:d4:10:1e:2d:c4:41:3a:1a:5f: e0:94:02:d3:64:41:ce:ba:49:a1:21:f4:99:fe:0d:79:86:3a: 88:ff:02:2d:5a:f5:34:c5:56:84:44:e6:a3:af:65:32:21:38: ec:02:0a:bc:69:b0:7b:59:5b:42:f3:41:d3:da:59:d0:b3:74: 21:72:c4:1e:86:8f:f5:e1:75:84:65:d9:f4:d4:a0:d9:ed:b7: e9:5a:e6:8e:3e:f1:7a:a8:63:c3:8f:91:5a:01:3f:3d:22:c1: 10:cb:c5:19:6f:b0:66:b1:22:d1:db:a7:13:87:c6:f4:77:1c: 50:f9:50:b2:5a:a1:c1:a8:dd:99:34:4b:ad:97:63:06:d7:e9: 8f:76:51:c7:ce:bd:69:ca:69:2e:79:5b:80:31:3e:24:12:2e: 47:01:5e:0a:0e:ac:21:38:56:54:83:e9:d5:e8:53:a2:8c:0c: 2b:66:19:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzV4UI5ZnXrkBfS4tQvcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl ZTgyOGUwHhcNMjUxMjIzMjAwMTI1WhcNMjUxMjI0MjAwMTI1WjAzMTEwLwYDVQQD EygwYTBjMmRkNDUxMjgzZDY5NGQ3MTY1OTc1ZDhhY2ZmOGJiNTQ3YTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wW//fHR8bF8muGyBlSNhcfySE1X 33i6Jrv3EITOiv1TZ1fPHaXi8QqIiV0pAOCzapTKfyM1MqKFNTrunIofdD+RBcD6 otZZvr7IbcQaeMtG9r41CBHwqtoWcPFDMCjeNsYrNyeMIovRPHwn6X3pcvQw5z3L Sw9Wnl32/H9qpeOZFSClhic2RWH2Seb4RFkdrZx8vl2Viayq7f/ipwPsKZ6zUh71 NX9hhNa/vlk8VZEnYbG14EaPH1oPbY7+cz0iELmQFbmt/lKAzY25T2yKQZ7j5KXQ Qh2+TpouL5KaJ9G+k9zBfTFspGWOzsrEZIR8U7VmyG5UScXJGZwFEIc2ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoMLdRRKD1pTXFll12Kz/i7VHptMB8GA1UdIwQY MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt OTI2YzRhMzI2ZTA4LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4 LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnpyq0kT CiVIjqqV7IQ0MV52TVVi8FRUifW5J06wQX3L69OOzRKHSjlI0KH69llL5tR4sMsS 7SagQ1V9rALe7cpiwb6N4PEj9uz1ZXTkwh1L1BAeLcRBOhpf4JQC02RBzrpJoSH0 mf4NeYY6iP8CLVr1NMVWhETmo69lMiE47AIKvGmwe1lbQvNB09pZ0LN0IXLEHoaP 9eF1hGXZ9NSg2e236Vrmjj7xeqhjw4+RWgE/PSLBEMvFGW+wZrEi0dunE4fG9Hcc UPlQslqhwajdmTRLrZdjBtfpj3ZRx869acppLnlbgDE+JBIuRwFeCg6sIThWVIPp 1ehToowMK2YZnQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:32 2025 by rpki-client