This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json) Hash identifier: et9dJoIi7x+es+rvMJzEmT0GHnmtZlV01NgR9hBd6Hc= Subject key identifier: 35:5D:A2:44:DE:04:75:EC:74:99:34:CB:3C:5F:46:E3:B6:03:F4:DD Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4 Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4 Certificate serial: 019B44A57CE254F2375BF390626689A5639C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft Manifest number: 06AA Signing time: Mon 22 Dec 2025 06:00:54 +0000 Manifest this update: Mon 22 Dec 2025 06:00:54 +0000 Manifest next update: Tue 23 Dec 2025 06:00:54 +0000 Files and hashes: 1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=) 2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: hIU5dQ1oBUa9aNS1x+68WIO5p+svYR8iCcIOz/mX7Vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:7c:e2:54:f2:37:5b:f3:90:62:66:89:a5:63:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4 Validity Not Before: Dec 22 06:00:54 2025 GMT Not After : Dec 23 06:00:54 2025 GMT Subject: CN=355da244de0475ec749934cb3c5f46e3b603f4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:c0:c1:ea:ab:e6:b1:e3:36:f1:bd:b0:d1: 4b:b4:26:4a:11:fa:5e:2e:b0:21:83:35:03:3d:c5: 2b:e5:64:03:ab:7c:69:96:18:24:74:d8:69:3d:2e: 18:59:fa:b8:3c:03:7c:bd:83:91:ad:b4:c7:5b:0a: ff:66:d1:c9:b0:4c:60:22:ff:4b:7e:2b:24:0f:63: fe:57:6f:be:d3:16:15:79:20:42:de:ad:e0:ae:0f: f2:10:ec:54:64:29:29:3d:a4:b0:1c:c4:e4:cd:60: 3d:b5:1d:09:6c:3d:d8:c7:3c:b4:9b:94:85:8e:bf: df:4b:96:3b:9b:e3:29:fe:76:41:d2:b3:17:2f:af: 42:1e:cc:cf:71:54:1c:15:42:c4:b7:9f:64:4d:e2: 11:0f:dd:06:a9:15:2e:6e:76:86:0c:c3:50:5c:9f: a2:65:a0:fd:62:53:bd:36:f4:9e:d9:57:58:3f:88: 79:11:01:d6:5c:57:f8:74:48:4a:93:eb:23:5f:93: 49:2b:b1:56:2b:3b:1e:88:b1:21:66:88:3e:20:9d: 71:11:b8:59:bf:cc:60:a9:19:b6:cb:29:a4:71:69: 83:5f:a4:63:a6:9a:fb:cd:6a:17:5e:b7:de:dc:10: 1d:e7:2e:52:3b:55:24:ae:15:6c:cc:00:45:24:27: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5D:A2:44:DE:04:75:EC:74:99:34:CB:3C:5F:46:E3:B6:03:F4:DD X509v3 Authority Key Identifier: keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0c:2d:2c:ed:df:c9:43:e2:ee:b0:fe:1c:c7:03:aa:0c:85: 19:4d:2d:65:c2:87:61:9c:ca:fe:96:c2:a2:b1:ae:72:3d:d8: d9:c9:e8:10:46:c1:59:3c:c8:53:3a:76:94:53:6d:ca:66:ff: db:e7:a5:1b:3a:bf:a3:8d:7f:af:31:fb:40:6b:74:7b:1e:c7: 21:fa:dc:78:01:f0:fd:a7:40:f0:c7:11:73:55:b0:8f:f1:0e: 4f:34:d0:cf:a9:bd:b8:a1:bb:60:79:83:85:53:74:9f:90:b0: d8:3e:1e:5f:36:e0:5a:2f:22:32:19:a7:07:73:78:88:c2:ac: 4d:89:c3:b2:30:e5:83:94:75:ae:58:48:2c:41:2f:09:1c:7e: f6:f0:9c:c0:64:71:17:62:38:13:9a:9a:d9:74:1c:ba:e8:64: d0:66:5d:92:06:8b:82:2a:8f:09:3b:60:8b:e9:c8:de:af:08: 77:1d:ab:36:e5:74:fb:75:9d:33:a6:2f:5f:9a:a7:3d:cb:78: 3e:d7:bf:e3:70:c5:44:68:a1:bf:df:f5:8f:16:c0:50:d8:bb: 0f:df:11:6d:21:a8:33:b1:26:9d:ff:1a:57:10:cb:5f:b6:e8: 18:76:b4:34:b2:97:aa:e3:52:b6:29:5c:99:9e:87:9e:9d:59: 80:cf:9e:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpXziVPI3W/OQYmaJpWOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYzY0N2JhMDE3YzhhNDU5OWMwMDliZTA0ZDgxYjI2OGVj YTYyZjQwHhcNMjUxMjIyMDYwMDU0WhcNMjUxMjIzMDYwMDU0WjAzMTEwLwYDVQQD EygzNTVkYTI0NGRlMDQ3NWVjNzQ5OTM0Y2IzYzVmNDZlM2I2MDNmNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgnAweqr5rHjNvG9sNFLtCZKEfpe LrAhgzUDPcUr5WQDq3xplhgkdNhpPS4YWfq4PAN8vYORrbTHWwr/ZtHJsExgIv9L fiskD2P+V2++0xYVeSBC3q3grg/yEOxUZCkpPaSwHMTkzWA9tR0JbD3Yxzy0m5SF jr/fS5Y7m+Mp/nZB0rMXL69CHszPcVQcFULEt59kTeIRD90GqRUubnaGDMNQXJ+i ZaD9YlO9NvSe2VdYP4h5EQHWXFf4dEhKk+sjX5NJK7FWKzseiLEhZog+IJ1xEbhZ v8xgqRm2yymkcWmDX6Rjppr7zWoXXrfe3BAd5y5SO1UkrhVszABFJCe+WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVdokTeBHXsdJk0yzxfRuO2A/TdMB8GA1UdIwQY MBaAFK3GR7oBfIpFmcAJvgTYGyaOymL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUt ZGQ1ZjU1MDEwYTA2LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUtZGQ1ZjU1MDEwYTA2 LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQwtLO3f yUPi7rD+HMcDqgyFGU0tZcKHYZzK/pbCorGucj3Y2cnoEEbBWTzIUzp2lFNtymb/ 2+elGzq/o41/rzH7QGt0ex7HIfrceAHw/adA8McRc1Wwj/EOTzTQz6m9uKG7YHmD hVN0n5Cw2D4eXzbgWi8iMhmnB3N4iMKsTYnDsjDlg5R1rlhILEEvCRx+9vCcwGRx F2I4E5qa2XQcuuhk0GZdkgaLgiqPCTtgi+nI3q8Idx2rNuV0+3WdM6YvX5qnPct4 Pte/43DFRGihv9/1jxbAUNi7D98RbSGoM7Emnf8aVxDLX7boGHa0NLKXquNStilc mZ6Hnp1ZgM+e+Q== -----END CERTIFICATE-----Generated at Mon Dec 22 13:18:55 2025 by rpki-client