This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft File: rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json) Hash identifier: Q/uZHGzM7sh51zuUmkS1y0RJRYVQSRfpW5hdTuKCFVQ= Subject key identifier: 6C:7C:78:72:C9:D0:B5:B1:5D:3A:D3:D0:C7:C7:F8:C2:D8:BF:0C:CA Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Certificate serial: 019B70A20F8E0C7CD58583BC35D663BC6E2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft Manifest number: 17A8 Signing time: Tue 30 Dec 2025 19:00:27 +0000 Manifest this update: Tue 30 Dec 2025 19:00:27 +0000 Manifest next update: Wed 31 Dec 2025 19:00:27 +0000 Files and hashes: 1: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (hash: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=) 2: VwUk7y0zO5Mx4dqI1nqU1mCPomA.roa (hash: 3ETxsuTriFcqg8JNihvATf+SJzxphG0A2lHFWKrQspQ=) 3: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (hash: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=) 4: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: 6C8a4BwB//0dmf813FM/3jHb2ldjExNJ/R0XCrexAT4=) 5: sIxfC6vb_F45uySffIKtVbXqOYs.roa (hash: ++32p2bkxPyvz4Hx8QLxSpYxKyhb3oHx1J6fv7+P8ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:0f:8e:0c:7c:d5:85:83:bc:35:d6:63:bc:6e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Validity Not Before: Dec 30 19:00:27 2025 GMT Not After : Dec 31 19:00:27 2025 GMT Subject: CN=6c7c7872c9d0b5b15d3ad3d0c7c7f8c2d8bf0cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:41:2e:e5:eb:98:d4:f0:c9:d7:d1:1e:89: 70:e9:87:67:2c:b0:75:f1:5d:6a:cb:84:d5:8e:8c: ba:fa:1a:18:e0:04:59:e4:91:e0:4a:65:f4:68:41: c1:6f:4a:2d:6b:55:4b:7c:b8:a2:52:d1:b8:04:93: 87:40:b7:6e:df:ae:d9:5e:eb:0d:03:fa:bb:d6:12: 2c:df:25:27:a9:1d:e6:4d:a0:74:51:06:73:d4:04: 86:cb:b4:56:73:b8:38:71:8c:7a:63:df:44:d9:83: c0:bd:dd:f7:17:62:09:1f:db:7d:ff:91:a3:71:e6: 3a:6a:11:3e:a9:64:28:ec:78:a2:b0:e4:fa:b3:d5: 4f:c8:c3:90:d7:4c:f5:7a:5e:c2:e6:f2:fd:08:66: 47:59:cb:95:3d:66:cb:8b:22:20:b8:2f:a2:dc:a6: 05:be:57:82:6c:90:81:88:ef:48:fd:f8:16:eb:48: 99:5e:03:ab:3f:94:9a:5e:38:2b:13:21:32:07:43: 8b:04:c4:13:fa:16:1b:83:10:e0:8a:fc:67:5a:78: 3a:30:78:29:74:8f:38:ca:01:90:3d:f9:22:8d:b4: 49:f2:24:4e:ea:a3:e4:44:b1:b1:84:c0:c6:d0:14: 2a:98:cf:15:98:e5:d7:bd:da:f0:7f:38:2e:b2:6a: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7C:78:72:C9:D0:B5:B1:5D:3A:D3:D0:C7:C7:F8:C2:D8:BF:0C:CA X509v3 Authority Key Identifier: keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:53:37:53:fb:a5:05:ec:f6:40:bf:09:5c:15:62:fe:bc:0b: 5d:b4:92:9b:0e:d0:0b:52:48:d9:3b:85:74:ac:be:8f:49:f9: 7b:d3:3c:2e:2b:c7:ec:6d:d3:5a:b6:b6:20:0d:0c:66:fb:41: d4:ee:bb:28:31:e8:4d:54:52:c1:e9:6b:f3:82:56:58:62:2d: bb:56:ad:6b:b9:3f:03:bf:8b:7b:76:70:b4:af:6c:9c:e5:9d: e0:66:2f:42:40:a2:eb:7a:d2:1c:38:5b:f7:72:f6:39:df:3c: 0c:3d:6e:5b:31:9c:d7:84:b1:9b:d4:04:d1:e6:6c:67:1c:5a: 5e:c5:72:ac:9f:13:9c:2d:34:ae:70:f3:b5:0c:a0:7b:f3:ab: 5a:fc:d1:29:b7:73:74:2d:a6:52:4f:95:a7:bf:0e:a3:91:f2: d1:ba:ec:b2:3e:8d:ed:d8:82:b1:bf:4a:e6:71:ec:4c:ad:ef: aa:6c:18:ec:40:32:ca:69:5b:8d:16:cd:f3:ed:b3:7f:d9:f1: f4:c0:00:63:a5:bc:16:49:f1:f5:a4:4a:64:d0:57:f9:0c:26: 60:07:7d:c6:90:6c:a0:32:7b:92:60:ce:ad:5b:4b:67:5f:51: ea:ce:31:95:6b:cc:0d:22:66:87:09:96:84:ad:e1:25:42:7c: 9e:51:0b:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwog+ODHzVhYO8NdZjvG4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh OGZmOGIwHhcNMjUxMjMwMTkwMDI3WhcNMjUxMjMxMTkwMDI3WjAzMTEwLwYDVQQD Eyg2YzdjNzg3MmM5ZDBiNWIxNWQzYWQzZDBjN2M3ZjhjMmQ4YmYwY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqRBLuXrmNTwydfRHolw6YdnLLB1 8V1qy4TVjoy6+hoY4ARZ5JHgSmX0aEHBb0ota1VLfLiiUtG4BJOHQLdu367ZXusN A/q71hIs3yUnqR3mTaB0UQZz1ASGy7RWc7g4cYx6Y99E2YPAvd33F2IJH9t9/5Gj ceY6ahE+qWQo7HiisOT6s9VPyMOQ10z1el7C5vL9CGZHWcuVPWbLiyIguC+i3KYF vleCbJCBiO9I/fgW60iZXgOrP5SaXjgrEyEyB0OLBMQT+hYbgxDgivxnWng6MHgp dI84ygGQPfkijbRJ8iRO6qPkRLGxhMDG0BQqmM8VmOXXvdrwfzgusmrG4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGx8eHLJ0LWxXTrT0MfH+MLYvwzKMB8GA1UdIwQY MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt ZjY2MjZiNjMzODNlLzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVM3U/ul Bez2QL8JXBVi/rwLXbSSmw7QC1JI2TuFdKy+j0n5e9M8LivH7G3TWra2IA0MZvtB 1O67KDHoTVRSwelr84JWWGItu1ata7k/A7+Le3ZwtK9snOWd4GYvQkCi63rSHDhb 93L2Od88DD1uWzGc14Sxm9QE0eZsZxxaXsVyrJ8TnC00rnDztQyge/OrWvzRKbdz dC2mUk+Vp78Oo5Hy0brssj6N7diCsb9K5nHsTK3vqmwY7EAyymlbjRbN8+2zf9nx 9MAAY6W8Fknx9aRKZNBX+QwmYAd9xpBsoDJ7kmDOrVtLZ19R6s4xlWvMDSJmhwmW hK3hJUJ8nlELlA== -----END CERTIFICATE-----Generated at Wed Dec 31 00:09:35 2025 by rpki-client