This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft File: R1oGyte9DD25-KOB8euc1sdaqyg.mft (raw, json) Hash identifier: ct/ii4UkT+Oh+D9SJj1o3Dqyj+i6Mnwh/Xv+OqQ+XII= Subject key identifier: CC:61:21:C8:BA:F1:96:45:33:48:5E:99:7E:6B:30:70:D2:A1:77:24 Authority key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28 Certificate issuer: /CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28 Certificate serial: 019B2B1D6BBC6E6849008970D1A61AA2F4BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft Manifest number: 033A Signing time: Wed 17 Dec 2025 07:01:46 +0000 Manifest this update: Wed 17 Dec 2025 07:01:46 +0000 Manifest next update: Thu 18 Dec 2025 07:01:46 +0000 Files and hashes: 1: P26izWnWykundEbYZ5JEBhpU0uU.roa (hash: cWV+pN/zcAshvYcQxK5v+o4IGsyjFJQg91I3ipirKBI=) 2: R1oGyte9DD25-KOB8euc1sdaqyg.crl (hash: 1v8JgFb5KtQdOA7rmoo8JVDwzASslEXe8zCyXCb8904=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:6b:bc:6e:68:49:00:89:70:d1:a6:1a:a2:f4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28 Validity Not Before: Dec 17 07:01:46 2025 GMT Not After : Dec 18 07:01:46 2025 GMT Subject: CN=cc6121c8baf1964533485e997e6b3070d2a17724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:0a:e6:3e:c6:19:fd:16:8a:eb:3d:fb:5e: e8:43:72:01:d1:fa:9f:67:e5:2b:39:a7:2f:b6:71: 28:cd:a2:6f:52:34:0a:46:11:b8:77:63:30:87:16: 1b:ed:ac:cb:2e:8c:13:d3:53:77:83:32:b1:08:05: 8c:53:fb:dd:5f:1d:95:15:e1:af:46:03:c3:f3:1d: 78:a2:13:bb:31:5d:8f:37:4f:e8:fa:21:9b:f0:8b: 3f:3d:3e:83:d8:dc:6e:ae:15:32:70:14:a8:5e:da: 43:01:56:90:02:cd:91:97:1e:62:69:55:01:3b:f6: cd:02:a2:14:f2:ad:44:3c:74:0d:26:37:49:b2:10: 2e:f4:c6:d0:5f:04:34:5e:58:df:bc:cd:b4:dd:73: 95:0d:24:35:9a:85:97:d0:ed:66:19:5c:80:a1:94: 30:39:5f:1e:a1:3e:d8:e2:8b:dc:f2:b3:f0:17:22: 63:5a:04:a1:42:27:08:5a:5d:eb:a9:51:35:12:60: 42:d3:3d:53:da:8a:a7:e9:c1:6a:f2:85:6f:25:f7: 4c:c6:57:2a:3f:79:78:c9:df:29:55:12:76:57:e9: 92:64:27:36:66:42:fe:f9:32:31:2d:c8:ac:e4:96: ca:5f:dd:5b:98:db:d9:9b:ae:02:a2:67:72:cc:b1: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:61:21:C8:BA:F1:96:45:33:48:5E:99:7E:6B:30:70:D2:A1:77:24 X509v3 Authority Key Identifier: keyid:47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:0a:dd:c9:81:0f:06:fb:75:5e:01:da:2d:54:f5:16:ea:ce: 9a:e9:27:90:cf:f3:ee:5b:5a:46:84:46:eb:55:5e:08:21:29: c1:65:3e:f3:63:c9:1d:32:8c:63:f6:43:8e:58:3c:68:b3:6b: e8:65:a0:b3:a3:aa:d4:4c:f3:39:d6:e2:ae:51:ec:9c:af:32: b9:99:02:4e:85:98:bf:94:ed:0f:9a:d5:00:b2:9d:8a:ba:78: cc:89:ea:dc:10:db:b8:ad:d1:c2:6a:ab:0a:c0:db:49:dd:77: 42:20:53:c0:47:72:99:72:42:7b:0a:74:67:8c:9b:ee:a6:6f: 4d:2c:a5:47:9e:a5:77:d6:1a:7e:a4:38:2d:f4:3d:1a:a9:79: a2:69:ef:86:47:7b:e4:5a:cc:14:f8:a5:f3:f7:6e:6e:f7:ac: 0a:ca:0f:9d:3f:df:a4:b2:9e:3d:8c:76:ca:c2:56:3c:f5:da: 7c:48:58:ae:21:06:a1:38:1c:e1:ee:b7:9e:37:7a:23:51:d6: 72:ff:bd:f7:36:8c:b2:8e:6d:2d:a5:85:18:de:a6:b6:f4:95: 2f:c0:55:35:a9:6b:a0:c0:38:a6:70:a1:ba:c2:46:63:24:41: e8:f9:17:22:39:6a:d7:a1:04:ef:af:f3:0b:c8:a8:8a:0c:e6: 05:23:e9:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHWu8bmhJAIlw0aYaovS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NWEwNmNhZDdiZDBjM2RiOWY4YTM4MWYxZWI5Y2Q2Yzc1 YWFiMjgwHhcNMjUxMjE3MDcwMTQ2WhcNMjUxMjE4MDcwMTQ2WjAzMTEwLwYDVQQD EyhjYzYxMjFjOGJhZjE5NjQ1MzM0ODVlOTk3ZTZiMzA3MGQyYTE3NzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd8K5j7GGf0Wius9+17oQ3IB0fqf Z+UrOacvtnEozaJvUjQKRhG4d2MwhxYb7azLLowT01N3gzKxCAWMU/vdXx2VFeGv RgPD8x14ohO7MV2PN0/o+iGb8Is/PT6D2NxurhUycBSoXtpDAVaQAs2Rlx5iaVUB O/bNAqIU8q1EPHQNJjdJshAu9MbQXwQ0XljfvM203XOVDSQ1moWX0O1mGVyAoZQw OV8eoT7Y4ovc8rPwFyJjWgShQicIWl3rqVE1EmBC0z1T2oqn6cFq8oVvJfdMxlcq P3l4yd8pVRJ2V+mSZCc2ZkL++TIxLcis5JbKX91bmNvZm64ComdyzLH0qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxhIci68ZZFM0hemX5rMHDSoXckMB8GA1UdIwQY MBaAFEdaBsrXvQw9ufijgfHrnNbHWqsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjFvR3l0ZTlERDI1LUtPQjhldWMxc2RhcXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZGZkNzAtMzA2Ny00NzNkLThmNjUt YjU1MzIyMDI4YmI4LzEvUjFvR3l0ZTlERDI1LUtPQjhldWMxc2RhcXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iZGZkNzAtMzA2Ny00NzNkLThmNjUtYjU1MzIyMDI4YmI4 LzEvUjFvR3l0ZTlERDI1LUtPQjhldWMxc2RhcXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQrdyYEP Bvt1XgHaLVT1FurOmuknkM/z7ltaRoRG61VeCCEpwWU+82PJHTKMY/ZDjlg8aLNr 6GWgs6Oq1EzzOdbirlHsnK8yuZkCToWYv5TtD5rVALKdirp4zInq3BDbuK3Rwmqr CsDbSd13QiBTwEdymXJCewp0Z4yb7qZvTSylR56ld9YafqQ4LfQ9Gql5omnvhkd7 5FrMFPil8/dubvesCsoPnT/fpLKePYx2ysJWPPXafEhYriEGoTgc4e63njd6I1HW cv+99zaMso5tLaWFGN6mtvSVL8BVNalroMA4pnChusJGYyRB6PkXIjlq16EE76/z C8ioigzmBSPpUA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:09:52 2025 by rpki-client