This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: k9EXh9gsQnx1gIct/ihIkab5ptJ9aZ1mzaW5iFVGzOQ= Subject key identifier: 40:9F:8E:0D:AD:06:78:21:88:9D:11:95:82:57:3B:82:17:09:90:DA Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019B3720F4B60FD0D4C6350E3519D5E4AD35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 1545 Signing time: Fri 19 Dec 2025 15:01:05 +0000 Manifest this update: Fri 19 Dec 2025 15:01:05 +0000 Manifest next update: Sat 20 Dec 2025 15:01:05 +0000 Files and hashes: 1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=) 2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=) 3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=) 4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: fODGp2AlXbKZhwCWwsYSLMvtDZLebSKCjHxAr8cTqwM=) 5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=) 6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=) 7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=) 8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=) 9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=) 10: pqM1u8SkS4zcFQvrBhQWpXPMYCA.roa (hash: ZvRrYdTYDz9FJEg1Ikh5qg9AfwzK1a1b92vZCCUcbys=) 11: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=) 12: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=) 13: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=) 14: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:f4:b6:0f:d0:d4:c6:35:0e:35:19:d5:e4:ad:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Dec 19 15:01:05 2025 GMT Not After : Dec 20 15:01:05 2025 GMT Subject: CN=409f8e0dad067821889d119582573b82170990da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:bd:5f:ff:66:77:d8:fb:47:15:83:a9:1b: 3f:a8:71:f0:59:3f:74:bd:08:79:a3:3e:ea:5d:20: a5:99:b9:c5:cf:bf:02:1d:cb:7f:88:f4:68:fa:bc: d9:2c:62:94:a9:9e:7d:e5:12:67:d1:de:c3:43:50: b5:ed:25:fa:51:a0:51:7b:e1:b9:fb:eb:42:8d:6c: 20:c7:1a:81:d3:88:a6:54:39:45:e8:1f:16:09:3d: ca:25:cd:47:7b:82:e6:bd:2e:f5:70:48:2b:ae:28: 38:2c:cb:51:4d:d7:b8:50:86:8a:52:5a:89:0b:57: c6:b0:33:68:c1:04:58:4f:cf:30:5b:4f:b2:f4:6e: 98:30:4a:a7:1b:eb:bf:e6:3c:30:ce:79:70:3e:5d: 87:53:5d:61:99:f0:46:3c:4f:eb:02:90:68:62:a6: 6a:f2:ba:80:60:19:ec:0f:8c:1d:61:46:8c:8e:54: 1d:89:7e:a7:fc:70:ef:bc:3d:9f:cf:a4:68:b6:bc: ea:7a:1e:41:05:03:a7:34:d7:07:58:2c:7c:31:27: 85:60:28:c1:6c:03:16:e6:fa:16:3c:72:5b:f1:37: 84:64:f0:4d:7d:a4:e2:df:42:6d:d5:2f:3d:14:4b: 07:11:c1:9d:6e:e2:4a:0e:6d:a8:c7:9f:e5:a9:8c: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9F:8E:0D:AD:06:78:21:88:9D:11:95:82:57:3B:82:17:09:90:DA X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:92:1d:e9:84:e2:99:0d:5c:f1:7a:e5:39:63:24:05:1e:d9: 71:21:76:2a:e3:e4:ac:27:6a:8a:e3:4a:a6:72:b4:ef:ae:2c: 41:80:88:c2:26:83:8f:e6:cb:3d:4f:f3:bd:97:e3:4d:dd:ea: 30:16:9c:f2:b2:04:e1:89:ed:c1:ab:28:18:e5:47:64:87:b7: 66:1d:09:a6:f4:0a:a6:ee:12:ba:4c:e8:ae:fe:c0:7a:4c:13: 55:81:79:c5:f8:83:54:30:a2:b6:38:c9:56:73:bb:05:8c:51: 48:26:4d:da:69:5f:d4:5d:bb:35:38:1d:75:07:56:bf:90:e5: 85:9c:82:c7:5e:0c:73:b3:fd:eb:ac:db:f7:49:66:dd:72:fa: 7a:cb:30:98:d3:dc:0c:4b:04:28:f1:cc:2b:f5:19:f1:34:f9: ea:4f:56:8c:57:8f:49:7d:a4:4a:69:4b:aa:10:4b:1c:0a:aa: 79:bc:ad:de:cb:2c:f8:b5:71:f6:59:38:97:dc:92:2d:af:af: d8:e9:83:9e:d0:13:73:6e:66:46:0e:ea:5c:63:3a:08:05:08: 5f:14:ea:22:75:74:c8:d4:d2:88:02:6e:60:82:f0:bb:47:50: c5:fe:02:75:c8:9e:6b:d1:21:df:42:3b:11:bf:b2:98:ce:42: 59:36:f9:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IPS2D9DUxjUONRnV5K01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjUxMjE5MTUwMTA1WhcNMjUxMjIwMTUwMTA1WjAzMTEwLwYDVQQD Eyg0MDlmOGUwZGFkMDY3ODIxODg5ZDExOTU4MjU3M2I4MjE3MDk5MGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhO9X/9md9j7RxWDqRs/qHHwWT90 vQh5oz7qXSClmbnFz78CHct/iPRo+rzZLGKUqZ595RJn0d7DQ1C17SX6UaBRe+G5 ++tCjWwgxxqB04imVDlF6B8WCT3KJc1He4LmvS71cEgrrig4LMtRTde4UIaKUlqJ C1fGsDNowQRYT88wW0+y9G6YMEqnG+u/5jwwznlwPl2HU11hmfBGPE/rApBoYqZq 8rqAYBnsD4wdYUaMjlQdiX6n/HDvvD2fz6Rotrzqeh5BBQOnNNcHWCx8MSeFYCjB bAMW5voWPHJb8TeEZPBNfaTi30Jt1S89FEsHEcGdbuJKDm2ox5/lqYygNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECfjg2tBnghiJ0RlYJXO4IXCZDaMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupId6YTi mQ1c8XrlOWMkBR7ZcSF2KuPkrCdqiuNKpnK0764sQYCIwiaDj+bLPU/zvZfjTd3q MBac8rIE4YntwasoGOVHZIe3Zh0JpvQKpu4Sukzorv7AekwTVYF5xfiDVDCitjjJ VnO7BYxRSCZN2mlf1F27NTgddQdWv5DlhZyCx14Mc7P966zb90lm3XL6esswmNPc DEsEKPHMK/UZ8TT56k9WjFePSX2kSmlLqhBLHAqqebyt3sss+LVx9lk4l9ySLa+v 2OmDntATc25mRg7qXGM6CAUIXxTqInV0yNTSiAJuYILwu0dQxf4Cdciea9Eh30I7 Eb+ymM5CWTb5aw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:42:54 2025 by rpki-client