This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: dzNzudXatgc8YZ324yH+DJdirEUo1jLJomPBDMAroqU= Subject key identifier: 62:FF:DE:5F:AB:8F:B9:2D:DF:D8:EE:8C:73:ED:EE:D2:7A:6E:A8:FA Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019B2C2F5796A74329E2B975B18CF99714E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 1643 Signing time: Wed 17 Dec 2025 12:00:58 +0000 Manifest this update: Wed 17 Dec 2025 12:00:58 +0000 Manifest next update: Thu 18 Dec 2025 12:00:58 +0000 Files and hashes: 1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=) 2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=) 3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=) 4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=) 5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=) 6: PZIj01LldFateFu3od4_Vnbh84Q.roa (hash: ecoXbiPRWhHOY6nEuRa20dSVzR4wCTgLp8nw9UHReAg=) 7: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=) 8: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=) 9: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: YVBI129xVxXCBe5G+4xTLEl1StuA0vvntRS2XGH/dKM=) 10: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:57:96:a7:43:29:e2:b9:75:b1:8c:f9:97:14:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Dec 17 12:00:58 2025 GMT Not After : Dec 18 12:00:58 2025 GMT Subject: CN=62ffde5fab8fb92ddfd8ee8c73edeed27a6ea8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:ac:a7:77:ec:b3:3c:fa:a4:cc:28:7e:fd: 02:52:33:e4:b0:ad:ad:e1:82:90:45:31:aa:e1:ab: 6b:01:d0:b3:ac:e4:d8:37:7b:65:34:a8:d9:29:19: de:41:55:b8:6a:0f:f0:16:f6:7e:3a:7a:09:cc:68: 4e:42:d9:31:ee:40:1e:47:b7:3c:38:c1:dd:2e:6a: 2e:ae:93:a5:e1:e9:d1:63:a1:62:44:d2:84:30:c6: e4:a8:52:a6:c8:ce:ed:22:2f:8f:b1:06:8b:40:09: d4:51:f5:3c:54:e1:12:95:b8:27:7e:e5:a9:de:87: 8f:00:89:b1:47:88:95:06:d0:1f:d1:fa:43:58:ea: 4b:72:e5:26:07:79:17:1a:09:af:ae:ea:9e:47:d2: ea:98:ad:43:c4:59:b2:05:f0:ff:e7:b6:b6:22:dc: a8:7f:3c:52:e3:01:93:91:5f:82:81:53:63:cc:34: 33:9b:a1:df:e4:0e:0a:81:09:1a:66:01:6f:bc:6f: ec:c6:b1:95:9c:35:b2:19:7c:86:ed:1a:df:6a:b0: 4d:12:5a:33:ec:2f:08:69:29:3a:48:f4:8d:3f:78: be:8b:72:7d:de:64:05:cf:30:b6:d5:f7:a5:dd:3e: c7:34:d7:4f:d3:db:e4:da:87:24:3f:44:3e:25:bd: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FF:DE:5F:AB:8F:B9:2D:DF:D8:EE:8C:73:ED:EE:D2:7A:6E:A8:FA X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5e:81:c4:7e:74:83:71:85:f3:66:01:18:ad:b3:7f:00:16: d4:00:ad:ac:2b:dd:44:39:3b:80:0a:21:b2:15:23:46:2a:82: 9d:0c:4b:d3:fb:ae:95:5c:5c:1e:eb:af:30:c9:3b:e9:3a:26: b0:5f:f0:68:6f:e0:8f:d2:ff:a4:94:0b:11:3f:d5:67:77:40: 6c:3c:c5:44:c8:db:a8:c0:4b:8b:51:ff:06:94:a0:ac:02:bc: fa:96:ec:bd:80:ae:26:9a:c1:44:3a:67:0c:13:fc:57:ff:e8: 87:62:52:23:48:58:1c:b8:4d:5a:99:81:58:59:78:de:ed:b1: ab:5b:96:0f:d8:e7:b9:dd:12:db:9d:16:87:02:57:9d:30:60: 31:c2:ab:78:83:54:4c:5a:e3:7f:44:b7:41:1d:1c:d4:a7:67: d4:e2:47:fc:ac:96:b9:dd:cb:d2:bd:44:8e:1e:f2:b1:2c:65: bf:18:dc:31:2f:65:b6:84:41:88:ca:28:24:14:74:3c:8a:e5: f4:1e:a4:64:c6:af:2c:53:73:62:0b:64:4b:b7:f0:3e:a9:58: eb:c8:88:7e:24:8d:b8:f6:41:59:24:8e:46:fd:cd:5e:6d:21: 42:9c:c5:2d:c7:da:99:87:76:1d:01:12:eb:8f:2d:fa:f0:83: f6:fd:3a:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL1eWp0Mp4rl1sYz5lxTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjUxMjE3MTIwMDU4WhcNMjUxMjE4MTIwMDU4WjAzMTEwLwYDVQQD Eyg2MmZmZGU1ZmFiOGZiOTJkZGZkOGVlOGM3M2VkZWVkMjdhNmVhOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG2sp3fsszz6pMwofv0CUjPksK2t 4YKQRTGq4atrAdCzrOTYN3tlNKjZKRneQVW4ag/wFvZ+OnoJzGhOQtkx7kAeR7c8 OMHdLmourpOl4enRY6FiRNKEMMbkqFKmyM7tIi+PsQaLQAnUUfU8VOESlbgnfuWp 3oePAImxR4iVBtAf0fpDWOpLcuUmB3kXGgmvruqeR9LqmK1DxFmyBfD/57a2Ityo fzxS4wGTkV+CgVNjzDQzm6Hf5A4KgQkaZgFvvG/sxrGVnDWyGXyG7RrfarBNEloz 7C8IaSk6SPSNP3i+i3J93mQFzzC21fel3T7HNNdP09vk2ockP0Q+Jb2AHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL/3l+rj7kt39jujHPt7tJ6bqj6MB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACl6BxH50 g3GF82YBGK2zfwAW1ACtrCvdRDk7gAohshUjRiqCnQxL0/uulVxcHuuvMMk76Tom sF/waG/gj9L/pJQLET/VZ3dAbDzFRMjbqMBLi1H/BpSgrAK8+pbsvYCuJprBRDpn DBP8V//oh2JSI0hYHLhNWpmBWFl43u2xq1uWD9jnud0S250WhwJXnTBgMcKreINU TFrjf0S3QR0c1Kdn1OJH/KyWud3L0r1Ejh7ysSxlvxjcMS9ltoRBiMooJBR0PIrl 9B6kZMavLFNzYgtkS7fwPqlY68iIfiSNuPZBWSSORv3NXm0hQpzFLcfamYd2HQES 648t+vCD9v06jA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:09:02 2025 by rpki-client