This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json) Hash identifier: x45DDi8QRX4s7yXLnfE7QUt9r2TFIdXGPDkPg5QK9J0= Subject key identifier: 55:5A:43:44:3A:53:48:19:EE:76:D6:6E:EE:48:99:57:B5:A8:7A:64 Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f Certificate serial: 019B46CA7053AF50AF23088D468E75F00C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft Manifest number: 0931 Signing time: Mon 22 Dec 2025 16:00:30 +0000 Manifest this update: Mon 22 Dec 2025 16:00:30 +0000 Manifest next update: Tue 23 Dec 2025 16:00:30 +0000 Files and hashes: 1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=) 2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: BOIZ934n/XIFalVwwKJRbswdW+JAWp431pH/IbwBB+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:70:53:af:50:af:23:08:8d:46:8e:75:f0:0c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f Validity Not Before: Dec 22 16:00:30 2025 GMT Not After : Dec 23 16:00:30 2025 GMT Subject: CN=555a43443a534819ee76d66eee489957b5a87a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:8d:51:2b:d9:a5:68:e7:c3:de:25:30:13: e4:7d:67:bc:a4:f6:ec:a6:ce:21:60:f6:85:3e:a3: d9:18:d1:98:15:ed:aa:0b:81:9c:1c:ca:e0:cf:cf: f4:65:fa:52:b4:ab:de:60:84:95:d9:fa:ef:44:70: 04:72:dd:9d:7d:cb:fb:0d:1f:5d:e1:b3:55:73:af: eb:c9:96:6b:80:19:e3:50:e6:f0:d6:92:fa:02:3a: 0e:8d:0f:55:53:36:0f:93:c1:d5:b0:df:8e:05:46: 4b:fe:50:3c:99:e7:ae:45:a4:51:f4:a7:58:f4:ca: f1:3b:96:f3:f8:a0:c0:ea:f4:37:d3:f0:27:da:60: 1b:d0:77:b3:f7:5d:5e:73:da:fa:71:37:ee:ab:61: b2:1e:70:3b:ec:d9:54:61:c2:54:7c:79:94:40:02: 65:48:74:ee:1a:f8:3d:55:31:c3:c0:7e:8e:e5:ad: 8b:9e:52:8e:67:11:1a:3a:d0:44:26:44:64:dc:9e: 6c:a4:bb:ca:b1:5b:98:84:c6:81:d8:c5:79:bc:a3: 30:98:5f:cf:fd:9a:2d:a1:d3:7e:3b:be:67:05:48: f9:77:6c:40:cb:3e:2e:75:c6:59:36:c1:f8:c8:bc: c1:ef:53:13:52:4a:3f:9e:7b:9e:56:16:3a:7d:dd: a5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5A:43:44:3A:53:48:19:EE:76:D6:6E:EE:48:99:57:B5:A8:7A:64 X509v3 Authority Key Identifier: keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:87:8b:78:eb:46:3d:c9:54:02:41:07:5f:a1:b1:b0:b5:44: ac:17:8d:d0:83:7f:4b:87:31:96:21:5a:6a:b9:46:62:96:3b: 00:db:ff:9b:c6:5c:a9:5b:59:44:a0:94:3f:54:ae:d5:a8:98: 3d:c0:2f:22:0a:91:cb:7d:e7:ae:7f:c4:d9:fc:c0:a9:24:3a: 0b:e0:af:e1:0b:13:73:ab:3b:25:96:ec:5b:b2:55:16:6b:1b: 83:30:af:bf:74:29:5f:e1:60:09:11:4f:65:89:f4:b5:51:74: 19:40:b9:a1:27:ec:07:b5:02:18:75:59:01:20:da:51:7e:b4: a8:cf:c8:aa:18:d4:41:c1:36:13:7a:d1:e6:91:f3:88:74:2b: d8:56:a6:f9:60:5b:fc:b6:66:9c:7d:62:79:36:c0:65:08:06: 80:43:da:73:8f:4e:7f:5a:3f:56:a7:52:dc:e8:04:67:5f:26: a2:0c:9f:e0:d8:82:68:40:31:04:74:51:e6:5d:2b:6f:1c:6a: ed:d9:32:58:56:f2:53:b4:32:27:1c:2a:fd:8d:c1:e8:78:37: d6:c7:92:6b:0d:c5:e9:16:b4:7f:a3:57:15:70:0f:8c:08:bf: 88:af:93:33:cd:70:dd:20:65:80:31:b1:83:e5:b8:c2:df:a0: 85:51:92:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGynBTr1CvIwiNRo518AyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjc2MzIxYzhkNDY5ZWUzYmEwMjM5MjBiMzcyY2NkYTVk ZTllMGYwHhcNMjUxMjIyMTYwMDMwWhcNMjUxMjIzMTYwMDMwWjAzMTEwLwYDVQQD Eyg1NTVhNDM0NDNhNTM0ODE5ZWU3NmQ2NmVlZTQ4OTk1N2I1YTg3YTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6CNUSvZpWjnw94lMBPkfWe8pPbs ps4hYPaFPqPZGNGYFe2qC4GcHMrgz8/0ZfpStKveYISV2frvRHAEct2dfcv7DR9d 4bNVc6/ryZZrgBnjUObw1pL6AjoOjQ9VUzYPk8HVsN+OBUZL/lA8meeuRaRR9KdY 9MrxO5bz+KDA6vQ30/An2mAb0Hez911ec9r6cTfuq2GyHnA77NlUYcJUfHmUQAJl SHTuGvg9VTHDwH6O5a2LnlKOZxEaOtBEJkRk3J5spLvKsVuYhMaB2MV5vKMwmF/P /ZotodN+O75nBUj5d2xAyz4udcZZNsH4yLzB71MTUko/nnueVhY6fd2lKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVaQ0Q6U0gZ7nbWbu5ImVe1qHpkMB8GA1UdIwQY MBaAFK63YyHI1GnuO6Ajkgs3LM2l3p4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAt YzdkY2MyMzkxY2M5LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAtYzdkY2MyMzkxY2M5 LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4eLeOtG PclUAkEHX6GxsLVErBeN0IN/S4cxliFaarlGYpY7ANv/m8ZcqVtZRKCUP1Su1aiY PcAvIgqRy33nrn/E2fzAqSQ6C+Cv4QsTc6s7JZbsW7JVFmsbgzCvv3QpX+FgCRFP ZYn0tVF0GUC5oSfsB7UCGHVZASDaUX60qM/IqhjUQcE2E3rR5pHziHQr2Fam+WBb /LZmnH1ieTbAZQgGgEPac49Of1o/VqdS3OgEZ18mogyf4NiCaEAxBHRR5l0rbxxq 7dkyWFbyU7QyJxwq/Y3B6Hg31seSaw3F6Ra0f6NXFXAPjAi/iK+TM81w3SBlgDGx g+W4wt+ghVGSBw== -----END CERTIFICATE-----Generated at Mon Dec 22 18:56:34 2025 by rpki-client