This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json) Hash identifier: K8G+SjW4scs8d7Xc6Ap1cFR1JDZp7jalWXHs1GKYeFY= Subject key identifier: FA:F2:32:0D:AE:65:E0:C4:8E:88:84:8A:DD:68:CF:76:91:D3:85:03 Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf Certificate serial: 019B3CB4F0E7718C2FE58F144CEA8F3CCBC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 17:00:49 +0000 Manifest this update: Sat 20 Dec 2025 17:00:49 +0000 Manifest next update: Sun 21 Dec 2025 17:00:49 +0000 Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=) 2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: QsgUCFHGntN4TtlF2krl2hxIyfpMFS8I0/ij/m0rArk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f0:e7:71:8c:2f:e5:8f:14:4c:ea:8f:3c:cb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf Validity Not Before: Dec 20 17:00:49 2025 GMT Not After : Dec 21 17:00:49 2025 GMT Subject: CN=faf2320dae65e0c48e88848add68cf7691d38503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ea:ca:6a:9a:01:28:ec:ea:b7:21:a3:3f:be: da:1e:3e:55:73:7b:5d:54:ef:0a:85:b6:0b:5a:9d: 44:9a:21:19:78:85:55:52:24:58:41:f1:f9:92:3b: d2:57:37:d5:5a:a3:d6:fc:92:e8:a1:3e:19:05:83: 90:05:c1:c4:6d:25:ca:e2:50:4d:5d:d8:19:c5:21: 50:85:5d:6d:7f:eb:5f:83:25:8f:ee:b3:8f:62:2e: d4:5e:26:53:97:24:05:b4:8b:79:d6:58:01:de:40: a6:e2:dd:43:19:8d:b6:1b:7f:24:dd:fb:01:58:74: bc:80:1b:a0:19:9f:5e:04:83:87:3e:36:be:0b:88: 7a:eb:2f:ef:21:61:3f:47:c3:d2:69:7d:75:60:be: e7:7f:e1:95:44:87:91:4f:98:c5:88:04:c8:bd:a9: 86:ca:08:27:a2:9c:8f:5f:55:90:7c:d6:50:62:c1: f7:22:e0:13:21:7d:17:f3:be:48:46:66:7a:38:8d: 22:54:03:6e:3f:6a:48:a0:84:e8:7d:88:81:69:d8: 87:67:73:ea:c3:ea:b5:4b:64:d6:5d:6d:ae:aa:2a: 09:23:2c:35:fc:4f:a5:39:9c:fe:0e:62:56:51:14: 71:3c:75:58:82:75:e6:be:00:4e:60:3d:96:6b:73: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F2:32:0D:AE:65:E0:C4:8E:88:84:8A:DD:68:CF:76:91:D3:85:03 X509v3 Authority Key Identifier: keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:30:bd:dc:8f:33:94:8b:8d:49:a4:5e:a0:4f:d1:ac:78:4c: bd:12:8f:e5:b2:93:eb:d3:41:ac:bf:e4:dc:23:ee:d9:a7:de: 51:d2:13:86:7b:0e:b7:0f:71:0b:72:5a:db:07:27:73:e7:08: aa:25:aa:16:26:c8:d1:d2:f5:b4:4f:7b:d7:45:8d:ce:52:2b: 00:f4:89:b5:54:84:0e:9c:60:5a:9d:20:8b:8c:ff:69:0e:54: e3:e4:d0:b5:10:91:d4:f8:f6:6b:11:6f:fe:20:df:a7:aa:78: a9:5d:58:1c:a9:bb:24:73:a7:0b:b5:cf:8f:b6:82:29:9c:87: cf:68:cd:f8:b3:0e:7b:10:ea:2f:bd:87:22:e5:cd:37:fa:13: b8:54:3d:21:7e:89:16:0f:54:8f:da:2c:0a:c5:74:a1:59:e5: 80:e8:57:6f:b7:9b:cc:84:6d:63:20:3a:88:32:be:c6:e9:e9: 88:b2:51:53:24:d1:f0:50:76:39:70:f0:92:0e:83:cb:61:a1: aa:ca:e6:3e:31:41:91:18:8d:7a:6f:28:21:ce:68:65:8c:b1: c9:41:d5:ed:86:fd:50:86:f0:2a:7e:94:04:54:37:ca:9d:66: 1c:8f:27:57:65:7f:50:a2:85:eb:c0:73:9a:9a:91:e1:3d:27: d2:e1:21:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPDncYwv5Y8UTOqPPMvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNmNjODYwMzM1M2Q3MzJlNGIxY2NiYTdlYWNhMGI2Y2Vl NGM0Y2YwHhcNMjUxMjIwMTcwMDQ5WhcNMjUxMjIxMTcwMDQ5WjAzMTEwLwYDVQQD EyhmYWYyMzIwZGFlNjVlMGM0OGU4ODg0OGFkZDY4Y2Y3NjkxZDM4NTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+rKapoBKOzqtyGjP77aHj5Vc3td VO8KhbYLWp1EmiEZeIVVUiRYQfH5kjvSVzfVWqPW/JLooT4ZBYOQBcHEbSXK4lBN XdgZxSFQhV1tf+tfgyWP7rOPYi7UXiZTlyQFtIt51lgB3kCm4t1DGY22G38k3fsB WHS8gBugGZ9eBIOHPja+C4h66y/vIWE/R8PSaX11YL7nf+GVRIeRT5jFiATIvamG yggnopyPX1WQfNZQYsH3IuATIX0X875IRmZ6OI0iVANuP2pIoITofYiBadiHZ3Pq w+q1S2TWXW2uqioJIyw1/E+lOZz+DmJWURRxPHVYgnXmvgBOYD2Wa3PrKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPryMg2uZeDEjoiEit1oz3aR04UDMB8GA1UdIwQY MBaAFKxsyGAzU9cy5LHMun6soLbO5MTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYt MjcxYTE1NWVlYjkyLzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYtMjcxYTE1NWVlYjky LzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjC93I8z lIuNSaReoE/RrHhMvRKP5bKT69NBrL/k3CPu2afeUdIThnsOtw9xC3Ja2wcnc+cI qiWqFibI0dL1tE9710WNzlIrAPSJtVSEDpxgWp0gi4z/aQ5U4+TQtRCR1Pj2axFv /iDfp6p4qV1YHKm7JHOnC7XPj7aCKZyHz2jN+LMOexDqL72HIuXNN/oTuFQ9IX6J Fg9Uj9osCsV0oVnlgOhXb7ebzIRtYyA6iDK+xunpiLJRUyTR8FB2OXDwkg6Dy2Gh qsrmPjFBkRiNem8oIc5oZYyxyUHV7Yb9UIbwKn6UBFQ3yp1mHI8nV2V/UKKF68Bz mpqR4T0n0uEhKg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:36 2025 by rpki-client