This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft File: rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json) Hash identifier: UKf0tNOgUosLXPYJ6ysChz5B0hL+Osg/X2Z7bN07Apg= Subject key identifier: 10:53:77:E7:DC:4F:24:C0:92:11:C6:8D:A4:76:EE:64:5D:AB:D4:84 Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41 Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41 Certificate serial: 019B5CE4EFC9B2B7CEE6CFF5364658024974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 23:01:05 +0000 Manifest this update: Fri 26 Dec 2025 23:01:05 +0000 Manifest next update: Sat 27 Dec 2025 23:01:05 +0000 Files and hashes: 1: 2r5V-jLaZB51UHtAh-bFMsh9deI.roa (hash: MKCPJpuTtJZg9qISSN6i7GBsMIxb/Qe56YUG3zY4d1Q=) 2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: bLdbEegk+YYi2fsrrjAQP77WLToTBAczKb1lQiqS+IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:ef:c9:b2:b7:ce:e6:cf:f5:36:46:58:02:49:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41 Validity Not Before: Dec 26 23:01:05 2025 GMT Not After : Dec 27 23:01:05 2025 GMT Subject: CN=105377e7dc4f24c09211c68da476ee645dabd484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:28:af:41:12:7d:1f:18:05:4a:db:4e:97: ca:bf:b6:f1:71:f2:31:48:68:4b:cb:7e:2a:f9:a1: 41:bf:0a:ec:3c:56:0e:e1:c3:72:50:d3:13:c4:bf: f2:ba:cf:b7:70:43:75:d9:b4:5c:b0:3f:1c:26:fa: 8e:36:ce:3c:78:d2:24:43:d0:d6:69:4c:d5:ab:4f: fc:e3:4e:1c:4c:5d:bc:00:45:d0:db:b7:34:4c:91: a4:f4:12:aa:83:e3:3b:12:68:b1:13:9a:50:85:8c: 33:89:41:cd:b1:c9:50:1f:4c:8a:24:78:e2:7e:19: 11:02:1c:46:aa:47:2e:d3:0d:68:a8:71:86:89:69: a4:88:45:1c:1a:c7:da:82:fb:c5:26:21:7f:d2:7d: c2:04:dc:ad:b1:91:c3:5a:c5:89:90:16:22:0e:f7: 17:3a:d3:0c:b8:11:7f:3f:7d:8d:a1:cb:78:f8:d5: 3e:93:0e:15:b1:ef:c1:1d:3b:10:93:4a:4b:36:12: fc:65:ce:00:bb:79:49:e5:75:d4:e9:d6:0f:22:09: d1:e7:00:ef:cf:17:95:2a:6d:6c:04:50:66:cf:0f: bd:88:48:14:c8:ac:61:cb:28:eb:c7:45:bf:76:fe: 22:81:e8:80:86:89:84:98:c2:28:cd:8e:14:ec:15: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:53:77:E7:DC:4F:24:C0:92:11:C6:8D:A4:76:EE:64:5D:AB:D4:84 X509v3 Authority Key Identifier: keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:79:07:7b:d0:fc:e9:d3:a5:19:57:ff:17:2a:6a:e8:9b:bc: c8:74:09:5e:77:d8:19:c3:1a:cd:65:c1:4e:09:3f:cf:cf:1a: ab:25:6e:d8:f3:20:e4:cc:ea:be:eb:81:2a:4c:9c:48:9b:9a: 30:5c:64:90:90:a5:c7:ef:c8:31:01:cf:bb:5a:ae:e4:12:b7: e8:8c:72:5d:35:a1:a8:62:1a:c0:18:ce:0c:78:13:fd:bc:de: f2:47:ab:c6:3c:36:68:19:da:11:cd:b9:b5:50:85:49:bf:61: c4:5c:d4:fa:7c:b6:8d:6e:7d:db:fd:cf:96:9a:3a:bd:92:8d: 9c:18:27:a5:36:d6:c7:06:6f:fe:d6:75:ea:f4:42:21:86:a6: 45:e8:96:c5:bb:b3:c7:aa:de:1b:be:fa:3a:4c:54:ab:42:74: f9:e8:6c:4f:3b:ab:6d:67:f4:64:4d:06:ce:30:98:57:29:b9: ec:0d:bf:47:47:1b:ff:df:b9:a6:2b:1a:6a:f8:27:f0:5a:9a: 3d:95:cd:b8:1b:73:12:e7:e0:53:26:bb:b5:ad:bb:da:dd:02: 5d:e9:85:7f:02:5e:50:ac:b3:2f:d3:ef:c8:45:2d:7b:51:f1: ff:45:84:c5:1e:72:53:a9:11:25:08:6a:31:f8:e3:08:98:d0: 4f:d2:b2:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5O/JsrfO5s/1NkZYAkl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGM4ZjMyN2E0NjE5NjRjMGE4N2E5Yzc4MDk0MDFjNTdj ODZkNDEwHhcNMjUxMjI2MjMwMTA1WhcNMjUxMjI3MjMwMTA1WjAzMTEwLwYDVQQD EygxMDUzNzdlN2RjNGYyNGMwOTIxMWM2OGRhNDc2ZWU2NDVkYWJkNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w8or0ESfR8YBUrbTpfKv7bxcfIx SGhLy34q+aFBvwrsPFYO4cNyUNMTxL/yus+3cEN12bRcsD8cJvqONs48eNIkQ9DW aUzVq0/8404cTF28AEXQ27c0TJGk9BKqg+M7EmixE5pQhYwziUHNsclQH0yKJHji fhkRAhxGqkcu0w1oqHGGiWmkiEUcGsfagvvFJiF/0n3CBNytsZHDWsWJkBYiDvcX OtMMuBF/P32Noct4+NU+kw4Vse/BHTsQk0pLNhL8Zc4Au3lJ5XXU6dYPIgnR5wDv zxeVKm1sBFBmzw+9iEgUyKxhyyjrx0W/dv4igeiAhomEmMIozY4U7BWVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBTd+fcTyTAkhHGjaR27mRdq9SEMB8GA1UdIwQY MBaAFK7cjzJ6RhlkwKh6nHgJQBxXyG1BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMGRjNTItNDE2ZS00YTAyLTg5OTMt ZmJjNWExZTM4MmM1LzEvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iMGRjNTItNDE2ZS00YTAyLTg5OTMtZmJjNWExZTM4MmM1 LzEvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXkHe9D8 6dOlGVf/Fypq6Ju8yHQJXnfYGcMazWXBTgk/z88aqyVu2PMg5MzqvuuBKkycSJua MFxkkJClx+/IMQHPu1qu5BK36IxyXTWhqGIawBjODHgT/bze8kerxjw2aBnaEc25 tVCFSb9hxFzU+ny2jW592/3Plpo6vZKNnBgnpTbWxwZv/tZ16vRCIYamReiWxbuz x6reG776OkxUq0J0+ehsTzurbWf0ZE0GzjCYVym57A2/R0cb/9+5pisaavgn8Fqa PZXNuBtzEufgUya7ta272t0CXemFfwJeUKyzL9PvyEUte1Hx/0WExR5yU6kRJQhq MfjjCJjQT9Kylw== -----END CERTIFICATE-----Generated at Sat Dec 27 08:09:03 2025 by rpki-client