This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json) Hash identifier: 3unB/w+k2WvEKk6OslpkK5nhhVwU2TAMDe8e83qC6gE= Subject key identifier: AC:86:B0:8C:1C:DC:0E:04:A0:89:D7:E5:A9:CB:A3:E5:4B:B2:5F:CE Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf Certificate serial: 019B53E196DF7860A7E514A8353129F91E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft Manifest number: 1795 Signing time: Thu 25 Dec 2025 05:00:51 +0000 Manifest this update: Thu 25 Dec 2025 05:00:51 +0000 Manifest next update: Fri 26 Dec 2025 05:00:51 +0000 Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=) 2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: I7tfBQMtHtOHJyxOhByrbhQS/xr/eh1dk17xDPRKZLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:96:df:78:60:a7:e5:14:a8:35:31:29:f9:1e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf Validity Not Before: Dec 25 05:00:51 2025 GMT Not After : Dec 26 05:00:51 2025 GMT Subject: CN=ac86b08c1cdc0e04a089d7e5a9cba3e54bb25fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:3c:49:f0:2e:4c:93:bf:08:08:e6:c4:7c: 4c:d1:7c:79:a8:e9:9c:64:52:09:f8:ec:70:72:5a: 53:79:18:09:36:d9:18:15:8d:7c:7a:ef:6e:b7:d4: 29:2b:a3:b2:5b:26:b0:ff:da:13:ae:e3:b4:8a:35: d6:43:a7:d7:cd:61:b5:7a:56:5c:66:b5:27:d4:b1: 7f:7a:34:a8:96:ab:e0:7b:64:45:04:6c:2b:29:70: db:b3:33:91:77:9a:82:b8:0e:7b:ed:1a:8d:66:77: 7d:b0:ab:29:ee:7a:97:37:d1:c2:8b:b9:f6:68:df: 3b:18:78:52:f6:b4:8d:8a:36:d0:be:fb:78:7e:aa: 55:de:71:9a:2d:9b:a6:ec:96:d8:49:5b:9d:50:5c: 54:58:d6:d2:aa:ba:77:06:03:e1:82:2d:cd:01:b8: 00:f4:ad:52:86:77:39:95:66:c6:e1:49:d2:d1:71: 95:17:b3:af:79:55:58:ab:f3:be:25:72:63:6d:18: 05:cc:c4:f7:b5:3c:00:e4:b4:a3:17:da:a6:05:87: 5b:bb:59:5b:11:43:17:1f:17:8c:fd:ee:fd:ed:a4: 01:92:33:e9:0f:1b:1a:30:0a:64:ab:03:1d:19:d5: 4b:e1:4e:b8:75:9c:13:b7:c7:ee:3c:dd:c8:a4:18: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:86:B0:8C:1C:DC:0E:04:A0:89:D7:E5:A9:CB:A3:E5:4B:B2:5F:CE X509v3 Authority Key Identifier: keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:31:41:35:d8:f7:9d:d8:b5:83:d9:3c:83:a2:9a:d1:2f:11: f0:2f:1d:a7:98:17:f5:10:fd:a9:42:f3:f0:8d:59:e5:3e:de: 3a:85:be:6a:70:50:72:70:1c:9e:1e:71:cb:ad:87:04:8c:b2: 2d:04:02:e1:3c:d8:27:69:1e:e9:9e:75:87:d9:bb:df:a1:88: b5:79:4c:37:4b:16:ef:b9:ba:41:a3:e9:03:60:60:01:ec:46: 90:54:a9:40:b3:7d:6e:67:43:d3:71:c4:be:67:cb:1c:2f:b0: f7:9f:c6:f0:0c:9f:47:d1:d8:fa:88:1f:74:7f:14:a9:99:f5: ae:55:94:f6:21:ca:ab:46:01:b0:4c:e6:5e:1c:65:a6:63:54: 30:6a:9e:18:ac:73:45:05:4f:47:5e:9c:a1:57:17:89:38:59: da:9e:58:bc:41:13:b0:96:4e:a9:f9:aa:47:eb:36:91:a2:e1: a8:91:a2:75:0c:1d:bd:dc:b9:40:fe:09:45:3a:8a:b6:9c:59: a5:30:4c:df:20:be:17:ca:30:80:92:88:32:a5:fa:25:ae:5c: e7:5f:b4:82:9b:89:65:2d:df:b5:24:91:92:28:cf:f9:51:85: 30:0a:01:51:4e:c2:22:18:db:ed:32:3e:e5:15:04:37:0b:5a: df:3e:79:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4ZbfeGCn5RSoNTEp+R4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNmNjODYwMzM1M2Q3MzJlNGIxY2NiYTdlYWNhMGI2Y2Vl NGM0Y2YwHhcNMjUxMjI1MDUwMDUxWhcNMjUxMjI2MDUwMDUxWjAzMTEwLwYDVQQD EyhhYzg2YjA4YzFjZGMwZTA0YTA4OWQ3ZTVhOWNiYTNlNTRiYjI1ZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq48SfAuTJO/CAjmxHxM0Xx5qOmc ZFIJ+OxwclpTeRgJNtkYFY18eu9ut9QpK6OyWyaw/9oTruO0ijXWQ6fXzWG1elZc ZrUn1LF/ejSolqvge2RFBGwrKXDbszORd5qCuA577RqNZnd9sKsp7nqXN9HCi7n2 aN87GHhS9rSNijbQvvt4fqpV3nGaLZum7JbYSVudUFxUWNbSqrp3BgPhgi3NAbgA 9K1Shnc5lWbG4UnS0XGVF7OveVVYq/O+JXJjbRgFzMT3tTwA5LSjF9qmBYdbu1lb EUMXHxeM/e797aQBkjPpDxsaMApkqwMdGdVL4U64dZwTt8fuPN3IpBiLrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyGsIwc3A4EoInX5anLo+VLsl/OMB8GA1UdIwQY MBaAFKxsyGAzU9cy5LHMun6soLbO5MTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYt MjcxYTE1NWVlYjkyLzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYtMjcxYTE1NWVlYjky LzEvckd6SVlETlQxekxrc2N5NmZxeWd0czdreE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzFBNdj3 ndi1g9k8g6Ka0S8R8C8dp5gX9RD9qULz8I1Z5T7eOoW+anBQcnAcnh5xy62HBIyy LQQC4TzYJ2ke6Z51h9m736GItXlMN0sW77m6QaPpA2BgAexGkFSpQLN9bmdD03HE vmfLHC+w95/G8AyfR9HY+ogfdH8UqZn1rlWU9iHKq0YBsEzmXhxlpmNUMGqeGKxz RQVPR16coVcXiThZ2p5YvEETsJZOqfmqR+s2kaLhqJGidQwdvdy5QP4JRTqKtpxZ pTBM3yC+F8owgJKIMqX6Ja5c51+0gpuJZS3ftSSRkijP+VGFMAoBUU7CIhjb7TI+ 5RUENwta3z55ug== -----END CERTIFICATE-----Generated at Thu Dec 25 11:15:47 2025 by rpki-client