This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft File: rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json) Hash identifier: e8jo+ClMfapoME7jxTun3/9kZxodgZBk0v+RnbkBXfk= Subject key identifier: C7:5F:CD:02:FC:2D:81:0D:7B:69:34:50:DE:EA:87:88:EC:77:B3:A8 Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Certificate serial: 019B4625BCC429D90B5FE6EA8F9EBC04524D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft Manifest number: 1792 Signing time: Mon 22 Dec 2025 13:00:36 +0000 Manifest this update: Mon 22 Dec 2025 13:00:36 +0000 Manifest next update: Tue 23 Dec 2025 13:00:36 +0000 Files and hashes: 1: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (hash: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=) 2: VwUk7y0zO5Mx4dqI1nqU1mCPomA.roa (hash: 3ETxsuTriFcqg8JNihvATf+SJzxphG0A2lHFWKrQspQ=) 3: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (hash: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=) 4: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: MG0tlTrZ0UewWemwd0QM1Lz3lAcBwkKCdN/4eWPIsBo=) 5: sIxfC6vb_F45uySffIKtVbXqOYs.roa (hash: ++32p2bkxPyvz4Hx8QLxSpYxKyhb3oHx1J6fv7+P8ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:bc:c4:29:d9:0b:5f:e6:ea:8f:9e:bc:04:52:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b Validity Not Before: Dec 22 13:00:36 2025 GMT Not After : Dec 23 13:00:36 2025 GMT Subject: CN=c75fcd02fc2d810d7b693450deea8788ec77b3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:3a:f1:95:59:57:13:2a:0a:46:68:72:92: 2f:d4:fa:d8:01:c2:20:28:42:3f:8a:53:ae:c7:ca: 23:c7:cd:9a:c6:e2:55:dc:05:b7:b5:af:83:ab:f9: 27:f5:fa:fd:e1:40:13:22:80:77:e6:01:20:5e:18: 20:db:f4:7c:1e:01:ae:f6:2e:f5:d0:e7:cb:7d:b8: a1:e3:24:43:49:81:f8:cd:22:0a:a7:a9:00:a2:ed: e2:f8:98:d6:7d:4c:f1:24:8f:29:5d:61:77:71:02: ff:d9:89:c0:bc:30:17:1a:1c:20:20:60:f3:74:8f: e0:0b:da:c8:d5:5d:99:50:73:b8:df:d6:a2:c5:0d: 48:4c:39:6f:81:28:11:8b:9a:47:5c:4a:ed:2a:d4: 35:d8:a6:e5:2d:9a:cc:99:c8:91:a9:59:a5:34:c6: 1d:f9:07:9a:71:7f:3f:a8:33:f6:60:0c:d8:f3:e4: 4e:2e:1f:58:c1:27:01:2c:c0:e6:85:a9:45:b2:5f: 86:52:e5:dc:26:d5:88:dc:12:9f:a7:a5:53:7d:4f: b7:9e:23:cd:b4:b0:f6:8e:0e:68:38:da:d9:d7:23: f0:49:4f:ed:b1:80:f6:22:1d:20:b0:fe:d7:43:f9: 22:cb:66:9a:0f:b6:fe:1f:8e:e3:50:86:60:6d:5a: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5F:CD:02:FC:2D:81:0D:7B:69:34:50:DE:EA:87:88:EC:77:B3:A8 X509v3 Authority Key Identifier: keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c8:26:14:f6:e0:f9:b3:60:1d:d5:fd:4c:94:c6:e7:0c:c3: fe:38:69:d9:ef:49:08:56:20:5c:bc:2b:86:01:fd:1a:a6:3e: 50:48:b6:79:8e:11:55:90:ad:61:51:7e:3e:d3:51:2b:b5:dd: 88:e9:0d:ab:40:3b:a1:6a:bd:73:52:f8:cb:89:55:88:38:44: 75:51:3c:b8:33:17:fc:b3:a9:8a:9f:25:c8:c8:dc:42:d7:a9: d8:c6:1d:ca:4d:0e:da:01:09:15:89:de:5d:05:34:99:70:b1: 38:70:75:ad:35:98:61:61:11:3d:d4:78:4e:64:01:e6:2c:f4: 82:06:e8:01:04:6b:4d:be:15:5f:11:5d:01:d8:a3:af:53:be: 18:d4:79:1d:a1:aa:44:42:a8:05:b1:b4:c5:92:70:e1:bd:5d: 4a:56:ac:6a:15:d5:aa:13:24:f1:e9:0b:00:f1:ed:92:10:74: bd:14:31:0d:e6:e4:05:b7:33:5c:1d:bc:8f:f0:9c:70:83:77: 46:56:3c:5a:55:b6:e9:e0:b0:18:00:01:5b:8e:dc:62:b2:0b: 66:64:37:b1:91:55:b2:7f:ae:bc:67:61:e2:d3:90:7a:67:98: 48:14:e2:cc:55:49:d0:e9:ae:b4:49:09:73:c7:4d:c6:13:be: f3:a9:87:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJbzEKdkLX+bqj568BFJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh OGZmOGIwHhcNMjUxMjIyMTMwMDM2WhcNMjUxMjIzMTMwMDM2WjAzMTEwLwYDVQQD EyhjNzVmY2QwMmZjMmQ4MTBkN2I2OTM0NTBkZWVhODc4OGVjNzdiM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouQ68ZVZVxMqCkZocpIv1PrYAcIg KEI/ilOux8ojx82axuJV3AW3ta+Dq/kn9fr94UATIoB35gEgXhgg2/R8HgGu9i71 0OfLfbih4yRDSYH4zSIKp6kAou3i+JjWfUzxJI8pXWF3cQL/2YnAvDAXGhwgIGDz dI/gC9rI1V2ZUHO439aixQ1ITDlvgSgRi5pHXErtKtQ12KblLZrMmciRqVmlNMYd +QeacX8/qDP2YAzY8+ROLh9YwScBLMDmhalFsl+GUuXcJtWI3BKfp6VTfU+3niPN tLD2jg5oONrZ1yPwSU/tsYD2Ih0gsP7XQ/kiy2aaD7b+H47jUIZgbVpXjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdfzQL8LYENe2k0UN7qh4jsd7OoMB8GA1UdIwQY MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt ZjY2MjZiNjMzODNlLzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsgmFPbg +bNgHdX9TJTG5wzD/jhp2e9JCFYgXLwrhgH9GqY+UEi2eY4RVZCtYVF+PtNRK7Xd iOkNq0A7oWq9c1L4y4lViDhEdVE8uDMX/LOpip8lyMjcQtep2MYdyk0O2gEJFYne XQU0mXCxOHB1rTWYYWERPdR4TmQB5iz0ggboAQRrTb4VXxFdAdijr1O+GNR5HaGq REKoBbG0xZJw4b1dSlasahXVqhMk8ekLAPHtkhB0vRQxDebkBbczXB28j/CccIN3 RlY8WlW26eCwGAABW47cYrILZmQ3sZFVsn+uvGdh4tOQemeYSBTizFVJ0OmutEkJ c8dNxhO+86mHAA== -----END CERTIFICATE-----Generated at Mon Dec 22 19:01:06 2025 by rpki-client