This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json) Hash identifier: opjxbm43WeuRGjwQ+jo/vSpTheEh2j7a5iWS5xujzf0= Subject key identifier: 79:12:D0:2F:7B:9E:59:72:16:DC:A8:F8:3C:4F:F1:DE:93:24:BE:A4 Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70 Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70 Certificate serial: 019B3DFE49B810F6E65D9847886F975A61CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 23:00:33 +0000 Manifest this update: Sat 20 Dec 2025 23:00:33 +0000 Manifest next update: Sun 21 Dec 2025 23:00:33 +0000 Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=) 2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: Cnd6DChZDGJz5pTKo1CwVI2dic8ZfJ/Ua4Ke6JbU+jU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:49:b8:10:f6:e6:5d:98:47:88:6f:97:5a:61:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70 Validity Not Before: Dec 20 23:00:33 2025 GMT Not After : Dec 21 23:00:33 2025 GMT Subject: CN=7912d02f7b9e597216dca8f83c4ff1de9324bea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f9:9e:80:75:3f:05:56:cb:54:4e:7d:a9:cd: c6:2d:f9:3c:7f:68:14:96:89:5a:ee:5f:52:48:f8: e5:b5:bc:40:79:45:0d:9d:bf:ae:06:2f:ff:eb:06: 57:f8:d6:c9:0e:be:3c:f7:05:5a:a0:8e:d2:04:ce: 6d:d6:1c:c9:8d:46:c0:1d:26:f1:8e:18:6c:3a:3d: b6:8c:1f:ac:b4:d5:d2:16:ea:74:ec:1d:31:65:82: a3:cd:d4:35:e6:6d:df:b6:74:b7:3b:ec:bc:38:71: a1:cf:5d:98:11:0c:29:37:e2:c1:46:7a:2a:78:80: 82:6b:37:0d:6b:7b:06:61:7a:b5:4a:05:3f:87:57: 73:c5:5b:13:b3:03:1b:56:a9:f4:ca:e5:bd:14:7d: b7:bb:59:bc:de:65:ef:ab:84:4c:2d:a1:6e:d3:26: 64:1b:4a:bb:09:6a:f9:be:70:b1:5f:a6:57:89:9c: 0f:f8:39:4a:0e:57:1e:1a:e4:48:f9:be:fc:b1:7b: 25:3a:5a:98:27:8a:eb:82:4c:87:db:66:69:2e:50: 0d:7a:03:66:4b:24:f7:e4:f3:29:a6:30:8a:60:ab: 72:46:d1:b2:d9:33:f1:0f:56:48:9e:69:2e:2d:50: cb:87:30:ca:d7:58:15:9f:52:87:15:94:8d:4b:7a: 1c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:12:D0:2F:7B:9E:59:72:16:DC:A8:F8:3C:4F:F1:DE:93:24:BE:A4 X509v3 Authority Key Identifier: keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ef:31:eb:d1:c7:67:11:1e:50:cb:f7:f7:3d:0d:c2:90:68: d7:d8:67:35:0d:28:8f:7a:1f:69:c6:fb:15:dc:ec:51:56:dc: 66:f7:7b:c0:79:4e:c2:37:ea:50:cf:aa:01:3f:3a:49:49:b2: 75:25:99:bb:4a:15:8f:0a:fa:a1:37:9f:c0:2e:7e:5e:49:2e: 70:ca:64:1b:00:5b:02:f1:1b:a0:d8:46:3f:7d:37:85:c0:97: e7:de:7f:ce:56:f3:26:ec:0d:8a:3e:60:33:32:01:77:17:40: 09:80:f3:08:8d:29:30:a9:06:bb:3e:e9:48:76:aa:66:e1:52: 0a:c7:7f:2a:e1:38:50:84:92:d3:7b:ba:c0:40:8d:3b:97:6c: 5f:27:54:cf:d8:08:7f:de:13:a8:e3:60:9e:42:4b:33:66:20: e1:43:9c:49:53:04:b5:14:91:d2:6e:de:82:ef:96:c1:6c:7d: 52:08:ab:b4:0c:4c:dd:d4:0d:13:67:13:d5:4c:03:91:76:84: bf:a1:08:42:16:4d:c4:7b:39:a5:d6:b1:bc:62:6b:63:a4:74: 92:be:ff:d3:8e:2a:3a:95:b9:f2:c1:4a:6b:11:9c:94:9a:e6: 36:65:d6:83:3a:82:7b:47:c8:ea:fd:ab:e9:3c:7f:9b:cc:c0: c3:2d:ac:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/km4EPbmXZhHiG+XWmHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmNmMDNlNDRkYTI4YjczMTllYTdiN2I1YjExMGI5Yjhj YjdhNzAwHhcNMjUxMjIwMjMwMDMzWhcNMjUxMjIxMjMwMDMzWjAzMTEwLwYDVQQD Eyg3OTEyZDAyZjdiOWU1OTcyMTZkY2E4ZjgzYzRmZjFkZTkzMjRiZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fmegHU/BVbLVE59qc3GLfk8f2gU lola7l9SSPjltbxAeUUNnb+uBi//6wZX+NbJDr489wVaoI7SBM5t1hzJjUbAHSbx jhhsOj22jB+stNXSFup07B0xZYKjzdQ15m3ftnS3O+y8OHGhz12YEQwpN+LBRnoq eICCazcNa3sGYXq1SgU/h1dzxVsTswMbVqn0yuW9FH23u1m83mXvq4RMLaFu0yZk G0q7CWr5vnCxX6ZXiZwP+DlKDlceGuRI+b78sXslOlqYJ4rrgkyH22ZpLlANegNm SyT35PMppjCKYKtyRtGy2TPxD1ZInmkuLVDLhzDK11gVn1KHFZSNS3ocMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkS0C97nllyFtyo+DxP8d6TJL6kMB8GA1UdIwQY MBaAFK0s8D5E2ii3MZ6nt7WxELm4y3pwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt YmUwNjVlMWFjMDY3LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3 LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQu8x69HH ZxEeUMv39z0NwpBo19hnNQ0oj3ofacb7FdzsUVbcZvd7wHlOwjfqUM+qAT86SUmy dSWZu0oVjwr6oTefwC5+XkkucMpkGwBbAvEboNhGP303hcCX595/zlbzJuwNij5g MzIBdxdACYDzCI0pMKkGuz7pSHaqZuFSCsd/KuE4UISS03u6wECNO5dsXydUz9gI f94TqONgnkJLM2Yg4UOcSVMEtRSR0m7egu+WwWx9UgirtAxM3dQNE2cT1UwDkXaE v6EIQhZNxHs5pdaxvGJrY6R0kr7/044qOpW58sFKaxGclJrmNmXWgzqCe0fI6v2r 6Tx/m8zAwy2s3w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:27:08 2025 by rpki-client