This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json) Hash identifier: Je5uEZ+g3ap/cLvMUdXk641MMjzkF1qQmteFXw3UbUg= Subject key identifier: 2D:DA:B3:C6:26:F9:B9:1B:4D:B3:13:62:B5:58:B8:8A:E3:B6:93:71 Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4 Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4 Certificate serial: 019B5CADC5C4576A7852421FC48F0526BBD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft Manifest number: 0A66 Signing time: Fri 26 Dec 2025 22:00:50 +0000 Manifest this update: Fri 26 Dec 2025 22:00:50 +0000 Manifest next update: Sat 27 Dec 2025 22:00:50 +0000 Files and hashes: 1: IhFmVxbE3gn_IPAxvOuH1Dxlo9o.roa (hash: oKXrmB0pSBgjznKzRYUFbiw4D9My9SBHtgqoNaUCBKA=) 2: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: XrwWLCJBaSZuIwRqhc+XJ4+0n9Y9nz9YLMAYk5caFvc=) 3: wbXeB63VhLi_7WMIhOdMpk0lCW4.roa (hash: d7dOr+7PutspTBpcReyCrf+E8CzcxyNVV7Zc8qzo3dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:c5:c4:57:6a:78:52:42:1f:c4:8f:05:26:bb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4 Validity Not Before: Dec 26 22:00:50 2025 GMT Not After : Dec 27 22:00:50 2025 GMT Subject: CN=2ddab3c626f9b91b4db31362b558b88ae3b69371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:34:9c:b7:34:c3:99:91:0b:9f:49:87:dd: bd:55:be:e7:cc:7b:35:cd:af:8b:38:d8:d2:72:03: ec:f2:b5:61:a2:fd:c5:0f:da:8e:e2:9d:63:34:34: ca:f0:75:2e:76:e1:14:08:88:1e:8c:91:66:22:ef: 91:ee:df:0a:c0:84:ed:24:73:ea:08:1e:fb:ab:94: ad:02:07:33:08:9c:fb:85:aa:3b:1e:26:9a:f9:ab: 85:23:20:f5:5a:c0:12:83:e7:19:ed:da:e3:eb:d0: 07:35:53:ce:86:1b:c2:5f:98:be:a0:7a:bf:ab:1c: 16:41:6b:db:17:61:2d:f1:86:63:95:5a:3f:87:d9: 40:9d:54:af:6f:a0:ad:ce:8c:51:60:c1:a0:5c:ee: d7:2d:71:44:19:23:61:a6:c4:de:00:d8:65:8b:11: 05:92:3e:3e:9a:eb:98:83:bc:9f:a1:b3:ab:be:23: 4b:6e:d6:00:cb:1b:3a:81:8b:a1:07:24:03:57:7e: 6f:b5:a4:da:05:12:79:81:e8:2f:7b:c7:bc:1b:7c: 29:08:44:ed:86:a7:be:5b:f4:b9:30:18:1b:a0:77: 80:d9:33:98:b0:f9:41:75:cc:1e:d6:19:e2:bb:aa: 33:1c:eb:8c:42:bf:39:9f:17:da:47:4b:d7:ba:d8: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DA:B3:C6:26:F9:B9:1B:4D:B3:13:62:B5:58:B8:8A:E3:B6:93:71 X509v3 Authority Key Identifier: keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5b:c8:39:7e:f5:07:63:da:47:a9:7c:74:8a:8e:bd:b3:ac: 53:82:a0:74:1c:68:1c:70:ab:f6:02:e3:2d:e4:3b:fc:cb:f7: ac:78:ec:45:08:a7:00:8c:80:62:16:e4:1e:c4:47:7b:3b:26: 48:79:12:c9:05:d5:97:93:a5:2d:da:42:17:b2:de:69:ed:fa: 31:a5:c2:24:ad:77:af:85:6c:47:f5:15:f4:7f:8b:ff:2d:a4: ee:dc:37:7b:87:b8:24:77:61:2c:90:1e:b5:a2:77:fc:8a:b2: 6b:2e:db:58:39:ea:a7:f3:a2:18:fc:be:3c:ba:38:b1:13:d2: c6:18:37:71:22:69:34:f5:0e:fa:e6:e9:4b:52:c2:cb:a3:a2: a8:52:fa:51:46:74:4e:57:6c:40:d5:e4:11:7a:1a:5e:43:fc: d1:9d:6d:57:68:06:27:bb:d8:37:d0:4d:92:9c:9d:95:e9:a3: 62:12:11:c8:08:df:95:1d:a8:03:c0:a0:b8:55:5e:1c:b1:5c: 73:22:d1:d3:ab:81:32:4d:83:80:ad:59:aa:39:2f:c7:0e:90: 72:15:19:80:c8:0f:ca:a1:1c:50:a3:99:4c:dc:85:86:84:3d: 8e:15:a8:9a:c9:39:0f:23:1b:e8:16:7a:84:b0:74:39:e6:d8: 58:f9:01:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrcXEV2p4UkIfxI8FJrvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmQzOGUyMGYyNGQwZTMwYjg2Y2NkODI2MWFjMDAxN2Yx N2E1YTQwHhcNMjUxMjI2MjIwMDUwWhcNMjUxMjI3MjIwMDUwWjAzMTEwLwYDVQQD EygyZGRhYjNjNjI2ZjliOTFiNGRiMzEzNjJiNTU4Yjg4YWUzYjY5MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBs0nLc0w5mRC59Jh929Vb7nzHs1 za+LONjScgPs8rVhov3FD9qO4p1jNDTK8HUuduEUCIgejJFmIu+R7t8KwITtJHPq CB77q5StAgczCJz7hao7Hiaa+auFIyD1WsASg+cZ7drj69AHNVPOhhvCX5i+oHq/ qxwWQWvbF2Et8YZjlVo/h9lAnVSvb6CtzoxRYMGgXO7XLXFEGSNhpsTeANhlixEF kj4+muuYg7yfobOrviNLbtYAyxs6gYuhByQDV35vtaTaBRJ5gegve8e8G3wpCETt hqe+W/S5MBgboHeA2TOYsPlBdcwe1hniu6ozHOuMQr85nxfaR0vXutj5+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3as8Ym+bkbTbMTYrVYuIrjtpNxMB8GA1UdIwQY MBaAFK0tOOIPJNDjC4bM2CYawAF/F6WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEt NDI5OTUzMjNjMDNkLzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEtNDI5OTUzMjNjMDNk LzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVvIOX71 B2PaR6l8dIqOvbOsU4KgdBxoHHCr9gLjLeQ7/Mv3rHjsRQinAIyAYhbkHsRHezsm SHkSyQXVl5OlLdpCF7Leae36MaXCJK13r4VsR/UV9H+L/y2k7tw3e4e4JHdhLJAe taJ3/Iqyay7bWDnqp/OiGPy+PLo4sRPSxhg3cSJpNPUO+ubpS1LCy6OiqFL6UUZ0 TldsQNXkEXoaXkP80Z1tV2gGJ7vYN9BNkpydlemjYhIRyAjflR2oA8CguFVeHLFc cyLR06uBMk2DgK1Zqjkvxw6QchUZgMgPyqEcUKOZTNyFhoQ9jhWomsk5DyMb6BZ6 hLB0OebYWPkB5Q== -----END CERTIFICATE-----Generated at Sat Dec 27 02:50:25 2025 by rpki-client