This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json) Hash identifier: 1FvkVobJyn6bwY1vWIqxpJxjcbLvZ3Zva+b1ZicT0OQ= Subject key identifier: 3B:B8:47:E9:81:D4:6F:76:51:D6:47:9A:82:03:A0:8C:4A:5A:36:BB Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02 Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002 Certificate serial: 019B3F48A11C4F6A1134CFC93CF1AF60E8C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft Manifest number: 167B Signing time: Sun 21 Dec 2025 05:01:22 +0000 Manifest this update: Sun 21 Dec 2025 05:01:22 +0000 Manifest next update: Mon 22 Dec 2025 05:01:22 +0000 Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=) 2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=) 3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: WXc8YAypvec99DhMAl+NI47edNeI97NMLWxQop2/hTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:a1:1c:4f:6a:11:34:cf:c9:3c:f1:af:60:e8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002 Validity Not Before: Dec 21 05:01:22 2025 GMT Not After : Dec 22 05:01:22 2025 GMT Subject: CN=3bb847e981d46f7651d6479a8203a08c4a5a36bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:43:06:aa:0c:f4:03:e5:a8:a1:34:a8:bc:d4: 6c:62:3b:82:06:a2:ae:ad:ab:84:71:75:38:a6:13: 5a:19:df:93:16:9b:2f:3f:95:61:a1:b0:d1:38:19: a3:86:c0:e8:6a:ba:3b:7d:5c:6b:68:57:83:5f:39: af:cc:10:eb:c7:a8:4b:b2:de:d9:74:cd:49:32:65: d6:c6:71:f9:09:9c:51:06:57:c7:aa:b6:a9:ea:3a: df:9f:a3:75:04:5e:c7:39:36:ea:45:33:85:2e:23: ce:f1:69:78:b2:ee:b3:27:83:6f:3d:01:06:3e:e8: 2a:96:97:d4:54:8e:4e:e8:1e:53:01:09:c1:f6:77: bf:6b:57:6a:06:39:24:86:3d:a4:0a:a5:b6:c6:28: ea:38:83:0c:55:fc:10:34:56:8b:d6:2c:fa:5d:3a: 42:e2:ac:53:65:45:d2:64:84:c5:2a:59:45:eb:5f: da:07:36:0b:d7:03:0d:e6:4b:0f:1f:7e:ea:39:ca: 47:35:30:0b:fa:fb:13:c0:10:7c:56:7d:f6:3f:8e: a7:7c:14:35:17:c6:67:b4:a3:f5:be:e6:33:df:ad: fc:fe:c0:63:3e:53:2b:bc:b8:49:a5:28:9b:94:fe: e0:66:fa:ca:af:d4:a1:9f:8b:39:3a:3c:75:d8:f3: 86:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B8:47:E9:81:D4:6F:76:51:D6:47:9A:82:03:A0:8C:4A:5A:36:BB X509v3 Authority Key Identifier: keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e0:f7:a6:b8:78:c8:be:82:2e:a7:0d:4c:2e:53:09:9f:ef: e8:80:da:a2:a2:a3:22:2b:16:46:49:23:15:38:2b:9d:1c:96: 3b:a7:2c:ac:d8:46:32:b9:50:ca:54:0b:7d:ba:4d:76:c1:3c: 7e:93:6e:b8:eb:b8:a3:48:82:3c:3e:bd:dd:12:7a:be:80:a5: ea:70:92:f1:e2:00:3c:fd:e0:93:5f:e4:ef:de:e7:fb:93:6a: 37:75:f3:f6:e6:c8:74:8f:3c:25:21:76:bf:a2:5e:ec:57:c2: 38:55:d2:8b:09:42:d5:9d:03:04:5f:ab:11:72:0d:12:2f:15: f6:f0:81:dd:23:5f:79:68:1e:2e:61:4c:5c:22:cb:21:1a:07: 65:f4:25:f0:1a:ca:3b:74:1e:42:46:3d:bd:bd:c7:05:f6:7b: c8:e1:be:8f:76:3b:1b:4f:e4:b4:6d:36:05:07:85:ea:80:9c: fb:a3:39:ab:78:a5:e4:a3:bc:a7:eb:4e:47:55:6a:14:af:95: 5f:1f:92:d7:49:dd:a1:31:b7:70:71:08:ff:3f:de:fd:b6:dc: d8:34:8a:0f:0d:48:cd:d8:55:da:96:a8:27:4b:1f:36:33:24: 58:96:da:df:85:29:41:4c:03:ab:0c:71:93:8c:93:cc:63:8d: 59:c5:c1:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SKEcT2oRNM/JPPGvYOjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTJmOGU1MzYyN2FkYzI3Njc4MDYzYjkzZDNkOWZkNmVj ZTkwMDIwHhcNMjUxMjIxMDUwMTIyWhcNMjUxMjIyMDUwMTIyWjAzMTEwLwYDVQQD EygzYmI4NDdlOTgxZDQ2Zjc2NTFkNjQ3OWE4MjAzYTA4YzRhNWEzNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUMGqgz0A+WooTSovNRsYjuCBqKu rauEcXU4phNaGd+TFpsvP5VhobDROBmjhsDoaro7fVxraFeDXzmvzBDrx6hLst7Z dM1JMmXWxnH5CZxRBlfHqrap6jrfn6N1BF7HOTbqRTOFLiPO8Wl4su6zJ4NvPQEG PugqlpfUVI5O6B5TAQnB9ne/a1dqBjkkhj2kCqW2xijqOIMMVfwQNFaL1iz6XTpC 4qxTZUXSZITFKllF61/aBzYL1wMN5ksPH37qOcpHNTAL+vsTwBB8Vn32P46nfBQ1 F8ZntKP1vuYz3638/sBjPlMrvLhJpSiblP7gZvrKr9Shn4s5Ojx12POGXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu4R+mB1G92UdZHmoIDoIxKWja7MB8GA1UdIwQY MBaAFK7i+OU2J63CdngGO5PT2f1uzpACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2Yt YTQ2NTY0MWE0OGZhLzEvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2YtYTQ2NTY0MWE0OGZh LzEvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuD3prh4 yL6CLqcNTC5TCZ/v6IDaoqKjIisWRkkjFTgrnRyWO6csrNhGMrlQylQLfbpNdsE8 fpNuuOu4o0iCPD693RJ6voCl6nCS8eIAPP3gk1/k797n+5NqN3Xz9ubIdI88JSF2 v6Je7FfCOFXSiwlC1Z0DBF+rEXINEi8V9vCB3SNfeWgeLmFMXCLLIRoHZfQl8BrK O3QeQkY9vb3HBfZ7yOG+j3Y7G0/ktG02BQeF6oCc+6M5q3il5KO8p+tOR1VqFK+V Xx+S10ndoTG3cHEI/z/e/bbc2DSKDw1IzdhV2paoJ0sfNjMkWJba34UpQUwDqwxx k4yTzGONWcXBzQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:09:43 2025 by rpki-client