This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json) Hash identifier: 9fKB4egSM3nWuKOV378s+iCkIl/LRLvCaNwNOkbsXqg= Subject key identifier: BB:3B:CE:9D:60:09:33:87:C9:27:89:DC:63:1C:A0:16:1E:58:87:A3 Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Certificate serial: 019B3FECF78BD1A3D39096572387E8D16AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft Manifest number: 0F8D Signing time: Sun 21 Dec 2025 08:00:52 +0000 Manifest this update: Sun 21 Dec 2025 08:00:52 +0000 Manifest next update: Mon 22 Dec 2025 08:00:52 +0000 Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=) 2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: LcZWv6FVbQt4Tv/tCh0Ls1Oxg3iyOanoSidD1vXaq08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:f7:8b:d1:a3:d3:90:96:57:23:87:e8:d1:6a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Validity Not Before: Dec 21 08:00:52 2025 GMT Not After : Dec 22 08:00:52 2025 GMT Subject: CN=bb3bce9d60093387c92789dc631ca0161e5887a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:0b:fd:d7:54:f6:82:97:24:80:10:ea:48: f3:22:a9:68:25:8a:16:81:1a:7f:b2:f0:e7:58:bf: 2f:c2:cd:40:28:67:1c:91:3c:20:fa:85:09:99:a5: 0e:2c:ee:5b:3d:da:31:52:0d:15:b9:86:e9:f5:41: 5c:44:28:8e:09:65:9e:26:08:46:4e:10:8b:65:a9: 65:cb:8d:10:81:44:41:e6:69:88:e0:1d:bf:81:bf: 83:72:52:8e:39:8c:58:bd:2a:b9:3e:f6:3a:d2:4e: 65:e3:f3:f3:bb:5c:22:73:f9:bb:0e:87:dd:fb:15: ba:be:5b:43:fa:74:bc:7a:d9:ad:da:4f:ed:41:31: 18:2a:00:8e:97:aa:75:7e:fe:42:d8:21:cf:70:5f: 37:1d:ef:0e:86:68:2b:d3:80:81:6d:d7:e6:b3:63: 4e:e4:2e:60:18:16:62:47:dd:12:fb:50:cc:77:bc: f8:41:84:a0:5a:85:1c:7c:19:43:7e:38:25:c3:6e: d0:ac:b7:7a:05:df:aa:dc:66:86:f7:a7:7f:69:c7: 99:80:52:ad:c7:73:24:f9:41:96:24:99:e4:d2:b1: 15:ba:88:c8:e1:33:07:12:7b:26:3c:f1:ed:f2:7d: fd:6f:b0:12:09:43:95:00:cc:f2:93:5f:47:4d:61: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3B:CE:9D:60:09:33:87:C9:27:89:DC:63:1C:A0:16:1E:58:87:A3 X509v3 Authority Key Identifier: keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:22:4e:96:02:06:fb:c8:d3:f3:50:fd:8b:31:fb:7d:06:45: 6f:1a:13:4f:04:64:f7:12:14:1e:09:b1:1a:67:c0:d4:ec:51: 52:8d:1d:05:0e:8e:cc:52:ed:80:2e:68:c3:8a:18:65:40:5a: fd:74:6b:28:0d:72:46:1f:22:92:0c:ab:71:b4:f9:c5:74:9e: 0f:26:a3:4d:c0:cb:a9:0f:ef:67:ba:0b:be:99:aa:c0:e2:35: fb:b2:ed:60:22:47:93:34:26:52:66:7e:0b:65:d9:71:89:ce: 37:26:d3:f0:52:f2:57:2a:52:5b:d5:3e:fc:02:0c:23:34:6c: 12:ba:a8:30:b8:c6:e4:9c:15:3a:0b:7a:9b:69:0e:06:01:21: 3d:82:ff:b3:b8:c7:4b:76:d4:3a:e3:14:43:f7:3a:af:6d:7a: dc:15:bf:4f:4e:9c:d2:6d:ce:29:d3:f4:7b:4a:37:5a:12:84: 16:ba:1b:83:39:3c:64:bd:f3:3f:b4:6c:bc:53:de:1d:84:1c: 14:89:48:c6:a6:0c:01:c7:11:8c:28:cc:5a:67:f3:c0:a6:57: c0:71:b2:d6:eb:3a:df:ff:b8:33:7a:7d:fb:c6:3b:fa:90:8c: dd:a7:b3:c7:8f:bb:f9:8e:b3:97:0e:ff:b4:7e:5a:88:01:0f: 42:4c:14:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7PeL0aPTkJZXI4fo0WqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMjA5YzkyNjQ2YWUzNDJjYWE1ZDQ2ZGMxZDM3MzVhMGQy ZTdiMTQwHhcNMjUxMjIxMDgwMDUyWhcNMjUxMjIyMDgwMDUyWjAzMTEwLwYDVQQD EyhiYjNiY2U5ZDYwMDkzMzg3YzkyNzg5ZGM2MzFjYTAxNjFlNTg4N2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RkL/ddU9oKXJIAQ6kjzIqloJYoW gRp/svDnWL8vws1AKGcckTwg+oUJmaUOLO5bPdoxUg0VuYbp9UFcRCiOCWWeJghG ThCLZally40QgURB5mmI4B2/gb+DclKOOYxYvSq5PvY60k5l4/Pzu1wic/m7Dofd +xW6vltD+nS8etmt2k/tQTEYKgCOl6p1fv5C2CHPcF83He8Ohmgr04CBbdfms2NO 5C5gGBZiR90S+1DMd7z4QYSgWoUcfBlDfjglw27QrLd6Bd+q3GaG96d/aceZgFKt x3Mk+UGWJJnk0rEVuojI4TMHEnsmPPHt8n39b7ASCUOVAMzyk19HTWHVsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLs7zp1gCTOHySeJ3GMcoBYeWIejMB8GA1UdIwQY MBaAFK4gnJJkauNCyqXUbcHTc1oNLnsUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgt ZTBhMjNkYTVlNjI4LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgtZTBhMjNkYTVlNjI4 LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCJOlgIG +8jT81D9izH7fQZFbxoTTwRk9xIUHgmxGmfA1OxRUo0dBQ6OzFLtgC5ow4oYZUBa /XRrKA1yRh8ikgyrcbT5xXSeDyajTcDLqQ/vZ7oLvpmqwOI1+7LtYCJHkzQmUmZ+ C2XZcYnONybT8FLyVypSW9U+/AIMIzRsErqoMLjG5JwVOgt6m2kOBgEhPYL/s7jH S3bUOuMUQ/c6r2163BW/T06c0m3OKdP0e0o3WhKEFrobgzk8ZL3zP7RsvFPeHYQc FIlIxqYMAccRjCjMWmfzwKZXwHGy1us63/+4M3p9+8Y7+pCM3aezx4+7+Y6zlw7/ tH5aiAEPQkwUqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:55:24 2025 by rpki-client