This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json) Hash identifier: XXOdTWXU3q17YDEMof4t7KDJiXb3lzczX2SXXJrzNBk= Subject key identifier: 0B:5C:BF:B0:70:04:7A:01:26:79:D7:45:4F:E8:EA:CE:7C:7C:78:42 Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902 Certificate serial: 019B2B8B0F8D2050F54C77C5D2067D190252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 09:01:32 +0000 Manifest this update: Wed 17 Dec 2025 09:01:32 +0000 Manifest next update: Thu 18 Dec 2025 09:01:32 +0000 Files and hashes: 1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=) 2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: +U6LS/jZWnHEsmvM3+gd4s5uPUjCU/HWCu+1+aySLd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:0f:8d:20:50:f5:4c:77:c5:d2:06:7d:19:02:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902 Validity Not Before: Dec 17 09:01:32 2025 GMT Not After : Dec 18 09:01:32 2025 GMT Subject: CN=0b5cbfb070047a012679d7454fe8eace7c7c7842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:40:30:fa:85:8b:a5:cc:0a:eb:6b:d4:a1: bf:9f:b2:d7:52:e3:70:9f:83:62:c6:5c:c8:cc:65: 25:07:3b:48:4a:60:24:79:af:ec:b2:c3:0b:a2:a7: 4f:4d:df:7b:b9:ba:5f:b9:f3:03:43:c8:27:0e:4a: 61:1b:e9:96:5a:08:36:6f:1e:d2:fc:af:b6:d6:c7: a7:e8:90:63:39:75:2f:d4:f7:cb:61:3e:84:0e:cb: 6e:d3:f9:96:be:32:e0:78:99:5f:d1:07:70:22:ed: 92:e3:39:85:b7:7c:22:8e:ad:53:3d:8a:a1:0a:d2: b5:06:f6:b5:0f:a8:76:da:11:72:75:7a:ac:7c:05: 77:74:cc:ac:82:d8:31:36:f1:8a:eb:1b:3e:60:dd: 40:e6:b4:bf:ae:9f:58:96:be:86:a9:47:70:a7:d2: af:96:2f:68:b2:d5:ea:bf:02:d7:d9:78:43:39:c1: 61:64:8e:20:03:99:1b:ec:5c:10:d8:37:4f:04:e1: 99:c9:5b:0d:99:3a:59:a6:b0:c5:2a:ec:14:1c:f7: c3:f1:b7:68:f2:46:c0:29:a5:ae:75:3d:7f:1d:59: 3c:9b:22:08:a1:e5:c8:64:25:46:23:28:9f:24:da: dc:76:0e:bd:52:e3:70:e7:2f:31:68:42:4a:92:2f: 31:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5C:BF:B0:70:04:7A:01:26:79:D7:45:4F:E8:EA:CE:7C:7C:78:42 X509v3 Authority Key Identifier: keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:61:11:70:06:56:d0:d3:0a:db:3e:1f:ac:6f:97:da:65:ca: 57:16:37:63:d1:15:c9:8e:10:8d:b7:74:80:fb:60:8a:5d:9b: cd:0f:0a:53:b1:0d:42:58:c9:30:af:49:b0:d5:79:ea:37:65: ed:fe:eb:ac:07:f3:7e:3b:9e:66:0e:17:91:b1:75:09:ef:29: 33:60:c0:a1:42:a7:de:45:28:38:d6:6a:76:99:22:fc:6b:c3: cb:cf:c6:1d:47:1d:93:87:e8:2a:3f:91:9c:2a:44:1e:27:3c: 7a:83:2f:09:2e:aa:ba:d9:79:66:91:ed:f3:77:d6:9e:ce:a9: d3:ce:40:b0:f4:31:2c:72:8d:ee:49:64:cb:83:bb:e6:3d:2c: 67:b9:b4:2f:cd:f8:ef:30:8c:12:dd:3e:d7:92:a9:8e:ef:e7: d9:cb:5f:4f:d2:6d:6f:bf:70:5f:40:12:0c:85:e4:43:e7:10: e3:99:49:4f:65:3d:e5:c9:7e:d3:8d:55:c9:c6:3d:4a:b0:94: 6b:13:df:24:b1:17:59:a2:6c:18:37:68:6d:fc:cb:dd:ae:ce: 4c:7a:3f:63:f2:62:4c:f7:98:fd:53:bd:fc:e1:e9:66:16:15: de:80:b1:18:57:c6:2d:8f:ab:15:5a:7d:9f:99:69:8c:77:8a: 82:0d:53:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriw+NIFD1THfF0gZ9GQJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTBjZGQwYjhiNzMzMDRjOTg1ZmRlMWIxMGU0MDE4MmJm MTM5MDIwHhcNMjUxMjE3MDkwMTMyWhcNMjUxMjE4MDkwMTMyWjAzMTEwLwYDVQQD EygwYjVjYmZiMDcwMDQ3YTAxMjY3OWQ3NDU0ZmU4ZWFjZTdjN2M3ODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtepAMPqFi6XMCutr1KG/n7LXUuNw n4NixlzIzGUlBztISmAkea/sssMLoqdPTd97ubpfufMDQ8gnDkphG+mWWgg2bx7S /K+21sen6JBjOXUv1PfLYT6EDstu0/mWvjLgeJlf0QdwIu2S4zmFt3wijq1TPYqh CtK1Bva1D6h22hFydXqsfAV3dMysgtgxNvGK6xs+YN1A5rS/rp9Ylr6GqUdwp9Kv li9ostXqvwLX2XhDOcFhZI4gA5kb7FwQ2DdPBOGZyVsNmTpZprDFKuwUHPfD8bdo 8kbAKaWudT1/HVk8myIIoeXIZCVGIyifJNrcdg69UuNw5y8xaEJKki8x0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtcv7BwBHoBJnnXRU/o6s58fHhCMB8GA1UdIwQY MBaAFK0QzdC4tzMEyYX94bEOQBgr8TkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDIt NDdiYmYyMWVhYzlmLzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDItNDdiYmYyMWVhYzlm LzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImERcAZW 0NMK2z4frG+X2mXKVxY3Y9EVyY4Qjbd0gPtgil2bzQ8KU7ENQljJMK9JsNV56jdl 7f7rrAfzfjueZg4XkbF1Ce8pM2DAoUKn3kUoONZqdpki/GvDy8/GHUcdk4foKj+R nCpEHic8eoMvCS6qutl5ZpHt83fWns6p085AsPQxLHKN7klky4O75j0sZ7m0L834 7zCMEt0+15Kpju/n2ctfT9Jtb79wX0ASDIXkQ+cQ45lJT2U95cl+041VycY9SrCU axPfJLEXWaJsGDdobfzL3a7OTHo/Y/JiTPeY/VO9/OHpZhYV3oCxGFfGLY+rFVp9 n5lpjHeKgg1Tlg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:08:55 2025 by rpki-client