This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft File: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft (raw, json) Hash identifier: iKdE5bOKOCfOKGimSKrDvvIlI5o2vma2rsa/gv3d0cc= Subject key identifier: D8:70:5C:45:48:E3:1D:08:01:89:2F:CC:48:27:BD:B1:7B:8A:B2:B6 Authority key identifier: 20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4 Certificate issuer: /CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4 Certificate serial: 019B38D87B5AC1C467C3C073AE5CF76F5CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft Manifest number: 07DB Signing time: Fri 19 Dec 2025 23:01:09 +0000 Manifest this update: Fri 19 Dec 2025 23:01:09 +0000 Manifest next update: Sat 20 Dec 2025 23:01:09 +0000 Files and hashes: 1: 1-7BUvW0DqpGIoHRUThEcreOn85U.roa (hash: 1h+BwanAoTba+J1D0yPZhO85Nea+fKXXhs9HYI66nl0=) 2: IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl (hash: KzUbr1sTwu0gkJIsMiOgxD6mI9vuN6T7DTCpa35pF4I=) 3: bAacBV2Nw5dlSOAXdJOoA7HEvjE.roa (hash: fR7tFabVPNstEHxx+U9K/CBKuKf4T3tR3OGzVsaSh0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:7b:5a:c1:c4:67:c3:c0:73:ae:5c:f7:6f:5c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203b3ab8d9011439d4ba84dfd4afe616d4196cc4 Validity Not Before: Dec 19 23:01:09 2025 GMT Not After : Dec 20 23:01:09 2025 GMT Subject: CN=d8705c4548e31d0801892fcc4827bdb17b8ab2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:15:96:86:77:37:78:93:fc:70:d4:19:9b: cb:ed:8f:b1:e1:3c:cf:36:a9:e0:1f:14:52:b5:d0: 24:37:89:4d:25:25:91:9b:ed:52:25:0b:0d:5a:f0: ad:ed:ec:23:be:13:6f:4a:7c:a4:fd:8a:75:f2:02: 5d:0c:b8:61:42:26:89:d5:87:94:98:98:85:82:7e: 07:7d:97:51:7b:d3:5d:01:1b:df:3c:58:17:f5:64: c9:13:a0:02:33:fd:1a:60:34:62:ef:95:fa:0a:0c: c5:9c:2c:84:27:66:86:25:81:dc:5b:6d:ee:00:fb: f6:0c:86:44:a4:7c:a3:66:97:10:ce:91:bb:fe:45: 40:09:63:07:46:ff:45:7b:66:c8:6e:f9:bd:5f:3a: c1:16:d8:13:81:1f:73:63:cf:28:b0:54:16:35:15: 62:84:31:2f:1d:b6:ea:77:49:0b:36:92:ad:84:78: 90:e0:d6:cc:bb:34:f4:96:3e:97:ef:0d:cf:ec:36: 62:8d:e7:05:50:0a:3b:da:7b:9f:93:91:be:c3:72: a5:74:61:bd:6d:63:cc:ed:5b:b1:1f:e6:b0:21:d6: 04:2d:7c:ec:45:45:69:68:37:a9:08:e1:04:03:37: df:02:2c:74:ab:16:4d:7c:a2:02:9c:c4:5e:8e:33: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:70:5C:45:48:E3:1D:08:01:89:2F:CC:48:27:BD:B1:7B:8A:B2:B6 X509v3 Authority Key Identifier: keyid:20:3B:3A:B8:D9:01:14:39:D4:BA:84:DF:D4:AF:E6:16:D4:19:6C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8f2777-1899-4a35-b284-a62af286f9b3/1/IDs6uNkBFDnUuoTf1K_mFtQZbMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1e:db:a7:fd:fc:02:99:f0:3a:a2:7e:ee:3e:d6:95:a6:39: d5:f2:63:b3:c7:1d:18:11:82:3a:ef:29:c1:05:8c:de:14:ae: d3:c5:83:f9:eb:47:a4:9e:5e:42:25:8c:2e:21:1a:78:0b:f7: 0a:b5:20:cf:9c:ee:32:09:59:73:43:08:99:f2:cc:ff:da:49: e0:ec:0d:d0:53:82:62:a4:bc:d7:01:73:95:12:8e:85:6b:b5: 8d:cb:d3:10:21:0c:df:99:06:df:77:53:74:e0:74:39:bd:2a: 97:24:2c:4c:c8:06:3b:e8:8a:c3:f3:0d:b5:8e:0a:a1:b6:5b: 54:09:e3:cb:d2:c6:d9:ab:4d:ac:37:ff:58:1b:ea:6f:83:2e: 3c:ed:13:a6:e0:fd:00:6e:69:37:c1:25:6f:cf:0a:e2:64:dd: d7:a2:f6:56:e8:1a:ea:73:4b:3b:c6:54:99:25:bd:30:7c:28: 25:6b:6d:af:4f:b2:50:3c:aa:92:e8:6e:43:8f:12:75:58:0c: 84:ee:59:f8:f7:27:98:15:75:f6:da:0f:9f:ac:8a:f8:f8:a5: 44:4e:b1:87:80:22:c5:a3:98:cc:8f:8c:fc:4c:13:11:4c:8b: 03:8d:b3:0c:a3:ef:80:e5:43:47:58:2b:a2:18:d1:00:62:c7: bc:55:4c:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42HtawcRnw8Bzrlz3b1zMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwM2IzYWI4ZDkwMTE0MzlkNGJhODRkZmQ0YWZlNjE2ZDQx OTZjYzQwHhcNMjUxMjE5MjMwMTA5WhcNMjUxMjIwMjMwMTA5WjAzMTEwLwYDVQQD EyhkODcwNWM0NTQ4ZTMxZDA4MDE4OTJmY2M0ODI3YmRiMTdiOGFiMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntAVloZ3N3iT/HDUGZvL7Y+x4TzP NqngHxRStdAkN4lNJSWRm+1SJQsNWvCt7ewjvhNvSnyk/Yp18gJdDLhhQiaJ1YeU mJiFgn4HfZdRe9NdARvfPFgX9WTJE6ACM/0aYDRi75X6CgzFnCyEJ2aGJYHcW23u APv2DIZEpHyjZpcQzpG7/kVACWMHRv9Fe2bIbvm9XzrBFtgTgR9zY88osFQWNRVi hDEvHbbqd0kLNpKthHiQ4NbMuzT0lj6X7w3P7DZijecFUAo72nufk5G+w3KldGG9 bWPM7VuxH+awIdYELXzsRUVpaDepCOEEAzffAix0qxZNfKICnMRejjNiYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhwXEVI4x0IAYkvzEgnvbF7irK2MB8GA1UdIwQY MBaAFCA7OrjZARQ51LqE39Sv5hbUGWzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURzNnVOa0JGRG5VdW9UZjFLX21GdFFaYk1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZjI3NzctMTg5OS00YTM1LWIyODQt YTYyYWYyODZmOWIzLzEvSURzNnVOa0JGRG5VdW9UZjFLX21GdFFaYk1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84ZjI3NzctMTg5OS00YTM1LWIyODQtYTYyYWYyODZmOWIz LzEvSURzNnVOa0JGRG5VdW9UZjFLX21GdFFaYk1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPR7bp/38 ApnwOqJ+7j7WlaY51fJjs8cdGBGCOu8pwQWM3hSu08WD+etHpJ5eQiWMLiEaeAv3 CrUgz5zuMglZc0MImfLM/9pJ4OwN0FOCYqS81wFzlRKOhWu1jcvTECEM35kG33dT dOB0Ob0qlyQsTMgGO+iKw/MNtY4KobZbVAnjy9LG2atNrDf/WBvqb4MuPO0TpuD9 AG5pN8Elb88K4mTd16L2Vuga6nNLO8ZUmSW9MHwoJWttr0+yUDyqkuhuQ48SdVgM hO5Z+PcnmBV19toPn6yK+PilRE6xh4AixaOYzI+M/EwTEUyLA42zDKPvgOVDR1gr ohjRAGLHvFVMpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:19:31 2025 by rpki-client