This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft File: r22p1WtCwrgWsa5rGFElq_IVk-8.mft (raw, json) Hash identifier: xozUseOtED+c4rIQf0U0clmUHfdeMDPvq/58P9KadQg= Subject key identifier: 9D:AD:F8:AB:58:5C:EA:FD:17:83:F2:28:F4:45:C3:D7:74:C2:C0:8B Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Certificate serial: 019B3F48AD7F41EF9AB7A55F89946ABEBB2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft Manifest number: 0240 Signing time: Sun 21 Dec 2025 05:01:26 +0000 Manifest this update: Sun 21 Dec 2025 05:01:26 +0000 Manifest next update: Mon 22 Dec 2025 05:01:26 +0000 Files and hashes: 1: HIQgSnhii2MmaCB9iCEZZjQs0es.roa (hash: ZmTRYjwIZuazrIV6CyDdqn6baHfY786spUlKnzCEtrI=) 2: bBGQxULUfgQ-36zlMXfyfxhMgv0.roa (hash: gb5ulfRe2yG9hXwqyCkBkrrYHVbdMbZmAMmYnD1gFm0=) 3: mqFsim5-hi0MZTcLot58PVfSTYM.roa (hash: eHkkkj65fxN14PVyu/eH+6Rea5ciEBRsLvLo2M2czPQ=) 4: r22p1WtCwrgWsa5rGFElq_IVk-8.crl (hash: rJ1eWxNAz363nrz4/EuPvort0xgAekWOhwAiyPJNUh0=) 5: vQgvBo8k7hDdrGs4_E-mcIsRvTo.roa (hash: nruWecuV93Z70AnDAf7d93G7uLJn4YXCw7HPwllFV6Q=) 6: zL5-bAaGKrg00nXa4Fn138IIxZ4.roa (hash: M0v0JdyOR6B67NfHINIqXbYt7Qf8KStgSSSkak8wlls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:ad:7f:41:ef:9a:b7:a5:5f:89:94:6a:be:bb:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Validity Not Before: Dec 21 05:01:26 2025 GMT Not After : Dec 22 05:01:26 2025 GMT Subject: CN=9dadf8ab585ceafd1783f228f445c3d774c2c08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:d9:aa:61:cd:86:4e:41:ab:9a:b1:b1:b0: b5:bf:77:25:be:8d:a7:fb:11:ae:25:69:bf:09:09: f3:01:7d:ef:6d:97:5b:83:e0:dd:2d:d1:7f:82:40: ee:55:ae:02:cc:42:9f:e9:93:3c:04:6b:eb:92:e0: 26:8e:0f:d1:53:7c:66:06:16:78:6d:de:5f:07:f8: 13:41:d8:78:23:1b:92:a5:89:11:ec:a6:ca:81:cf: d0:ec:7b:a3:57:9b:03:6f:88:9b:c7:fb:64:2d:97: af:d5:3b:e1:d1:b0:9f:03:c0:ec:17:a3:f9:7b:98: a5:b3:37:dd:20:34:94:3c:e6:66:1f:1b:07:42:66: fe:8a:94:83:79:05:2f:89:6a:ee:2c:a2:89:56:70: 9d:78:04:b3:83:5f:ba:a9:90:a3:da:f0:92:3a:38: 5a:88:9c:e7:b7:e3:00:df:34:aa:bb:4a:eb:aa:3e: 6c:1f:30:46:02:0c:b6:93:40:a9:a1:af:b2:70:7c: eb:4c:b3:6c:4a:bf:e7:63:a5:4c:e4:95:cb:55:49: 37:42:5f:67:36:5f:7a:3e:9b:ef:32:ca:bc:5f:01: 70:39:be:c4:ed:a7:9b:23:51:14:a8:f6:f2:4d:bf: 36:c5:2a:92:73:08:86:07:31:da:1f:a2:79:55:50: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AD:F8:AB:58:5C:EA:FD:17:83:F2:28:F4:45:C3:D7:74:C2:C0:8B X509v3 Authority Key Identifier: keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e1:a6:45:c9:2e:01:ff:ce:be:e8:c7:f8:b6:b7:77:56:17: 9f:9b:ec:c3:87:e4:5a:0d:a3:20:66:83:17:cb:e8:cc:bf:72: 2c:64:eb:22:0b:1b:47:06:52:08:c8:c3:43:23:79:24:68:f7: f7:cb:7f:27:83:fe:90:ee:04:c5:8f:46:e3:e2:10:29:f6:b7: 7e:2d:47:1d:be:10:fd:f7:fe:55:e1:0e:3d:a8:4e:2d:e5:f0: 1b:45:2d:87:66:63:21:14:b4:a6:00:64:89:be:97:39:4c:56: 9a:f5:5f:bc:6c:4c:73:60:31:ca:b2:aa:fa:33:fc:cf:10:03: f9:10:69:8b:cf:b9:42:66:79:3e:ef:13:88:d3:24:a2:a9:18: 2d:90:83:ee:47:b7:6c:01:b0:d7:2c:e9:8c:87:52:e3:0a:c5: 99:74:1c:05:c8:77:94:22:3a:c8:e6:0e:9f:f4:82:f0:b8:37: 66:f0:83:05:a5:2d:b0:21:8b:4a:8b:71:ab:11:47:d4:36:b3: 2d:0b:fc:0f:23:a2:21:3e:76:45:6d:58:44:cc:6d:ba:89:85: 13:83:c6:40:62:5c:4f:cd:bd:8e:8f:1b:d2:5e:f8:61:f5:ed: e4:57:28:eb:f2:c7:54:62:72:35:cf:4d:be:ae:a9:65:e4:79: 95:6e:0c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SK1/Qe+at6VfiZRqvrsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx NTkzZWYwHhcNMjUxMjIxMDUwMTI2WhcNMjUxMjIyMDUwMTI2WjAzMTEwLwYDVQQD Eyg5ZGFkZjhhYjU4NWNlYWZkMTc4M2YyMjhmNDQ1YzNkNzc0YzJjMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMnZqmHNhk5Bq5qxsbC1v3clvo2n +xGuJWm/CQnzAX3vbZdbg+DdLdF/gkDuVa4CzEKf6ZM8BGvrkuAmjg/RU3xmBhZ4 bd5fB/gTQdh4IxuSpYkR7KbKgc/Q7HujV5sDb4ibx/tkLZev1Tvh0bCfA8DsF6P5 e5ilszfdIDSUPOZmHxsHQmb+ipSDeQUviWruLKKJVnCdeASzg1+6qZCj2vCSOjha iJznt+MA3zSqu0rrqj5sHzBGAgy2k0Cpoa+ycHzrTLNsSr/nY6VM5JXLVUk3Ql9n Nl96PpvvMsq8XwFwOb7E7aebI1EUqPbyTb82xSqScwiGBzHaH6J5VVDmtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2t+KtYXOr9F4PyKPRFw9d0wsCLMB8GA1UdIwQY MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt YjEwYTgzMmJjYTQzLzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneGmRcku Af/OvujH+La3d1YXn5vsw4fkWg2jIGaDF8vozL9yLGTrIgsbRwZSCMjDQyN5JGj3 98t/J4P+kO4ExY9G4+IQKfa3fi1HHb4Q/ff+VeEOPahOLeXwG0Uth2ZjIRS0pgBk ib6XOUxWmvVfvGxMc2AxyrKq+jP8zxAD+RBpi8+5QmZ5Pu8TiNMkoqkYLZCD7ke3 bAGw1yzpjIdS4wrFmXQcBch3lCI6yOYOn/SC8Lg3ZvCDBaUtsCGLSotxqxFH1Daz LQv8DyOiIT52RW1YRMxtuomFE4PGQGJcT829jo8b0l74YfXt5Fco6/LHVGJyNc9N vq6pZeR5lW4MEg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:23 2025 by rpki-client