This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json) Hash identifier: 4qRz15yXjrj8nMCcVnAlUB8jhmONQanWjT8iUmc9tP8= Subject key identifier: 8A:CF:B3:30:55:87:11:A8:DC:5D:F3:C1:70:BA:FA:14:E7:BB:F7:82 Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4 Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4 Certificate serial: 019B4B4CCD40AA934AA951F1BFC14046C353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft Manifest number: 0A5D Signing time: Tue 23 Dec 2025 13:01:22 +0000 Manifest this update: Tue 23 Dec 2025 13:01:22 +0000 Manifest next update: Wed 24 Dec 2025 13:01:22 +0000 Files and hashes: 1: IhFmVxbE3gn_IPAxvOuH1Dxlo9o.roa (hash: oKXrmB0pSBgjznKzRYUFbiw4D9My9SBHtgqoNaUCBKA=) 2: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: K6TnDC5mVlYHnKCzux0DydRPODBxs0jOHWv5j8KdSjo=) 3: wbXeB63VhLi_7WMIhOdMpk0lCW4.roa (hash: d7dOr+7PutspTBpcReyCrf+E8CzcxyNVV7Zc8qzo3dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:cd:40:aa:93:4a:a9:51:f1:bf:c1:40:46:c3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4 Validity Not Before: Dec 23 13:01:22 2025 GMT Not After : Dec 24 13:01:22 2025 GMT Subject: CN=8acfb330558711a8dc5df3c170bafa14e7bbf782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:0f:d1:0d:45:fc:e3:be:81:3e:cc:57:d8: d1:af:50:bf:bf:fb:ca:b2:f9:07:25:5a:61:06:13: 39:3a:1b:c1:71:c3:a8:98:ed:fa:5e:2a:2a:01:33: e4:e5:97:7e:dd:ba:9d:0b:ed:35:cd:ae:8c:e8:c0: 39:9e:ff:10:da:d9:a3:a1:1d:a0:51:19:95:b8:02: 75:a7:ca:88:86:4d:4d:9f:43:14:fb:bb:38:39:cf: 5b:f0:84:06:b1:d7:33:d1:99:9e:57:07:01:a8:c7: 38:21:bd:65:f9:8e:6c:b5:76:10:f9:76:9d:c6:28: a1:be:a3:af:70:5c:13:51:ab:ff:26:51:66:d9:ef: 03:60:ee:e6:01:21:05:60:62:cf:75:24:00:6b:3b: 76:41:92:18:9b:9c:6b:48:f6:69:a1:42:88:2b:b6: ff:b0:33:9a:6e:e9:e8:64:d5:1f:90:a7:7a:4a:cc: 0f:48:f4:11:7a:92:5b:4f:d6:8a:bb:42:c9:91:b2: e7:08:d1:d3:00:c2:a2:cc:91:53:63:f9:84:8c:e3: bc:51:a6:e2:57:fd:8c:5f:a9:ce:34:3a:fd:e1:dd: ac:bc:05:8d:a4:59:19:df:ef:06:ee:9b:ed:b7:d6: 88:95:fd:77:80:6d:4f:67:d1:3d:09:d9:b7:68:52: 4a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CF:B3:30:55:87:11:A8:DC:5D:F3:C1:70:BA:FA:14:E7:BB:F7:82 X509v3 Authority Key Identifier: keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:15:30:39:b4:72:c8:89:fe:a3:18:3c:dc:2a:79:95:48:6e: 61:ee:14:ae:2a:e5:67:55:d6:2a:1d:1d:88:e6:47:01:0f:69: 91:a6:eb:3f:33:f6:b4:4c:c5:3c:3a:4e:37:3f:db:39:9a:5a: aa:75:fa:06:a1:8f:27:0d:a9:f3:39:b5:a6:e9:98:f3:14:6b: fe:9a:65:7f:12:50:ed:83:92:f5:44:f4:32:c7:ea:d3:d1:32: c8:93:bb:0b:6c:e0:e9:ea:81:a4:02:f8:95:d1:90:c1:ad:8c: 4a:36:cc:17:c9:e6:86:90:8a:84:71:c4:8f:3d:ae:83:da:83: d8:bd:3d:83:36:9e:93:59:c5:e5:c7:0e:28:95:c1:1d:d0:06: ba:31:59:d6:39:14:9d:30:cd:d1:cc:23:f6:da:ca:ca:06:19: 08:c7:d8:3d:4a:9a:b5:7b:03:25:7d:ac:a1:73:8e:8f:8c:00: 08:3b:85:2d:fc:ce:37:72:2f:06:21:5c:b5:54:66:41:3e:9a: 38:e2:89:98:97:1e:2f:48:f5:04:bc:da:2a:e8:17:d1:9c:26: c7:0a:c0:17:91:9d:df:13:b9:24:58:5a:55:ac:5d:de:99:d9: 64:5c:a3:57:e3:18:62:85:21:0a:84:c9:ac:4f:23:f4:33:c3: 93:ce:08:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTM1AqpNKqVHxv8FARsNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmQzOGUyMGYyNGQwZTMwYjg2Y2NkODI2MWFjMDAxN2Yx N2E1YTQwHhcNMjUxMjIzMTMwMTIyWhcNMjUxMjI0MTMwMTIyWjAzMTEwLwYDVQQD Eyg4YWNmYjMzMDU1ODcxMWE4ZGM1ZGYzYzE3MGJhZmExNGU3YmJmNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRMP0Q1F/OO+gT7MV9jRr1C/v/vK svkHJVphBhM5OhvBccOomO36XioqATPk5Zd+3bqdC+01za6M6MA5nv8Q2tmjoR2g URmVuAJ1p8qIhk1Nn0MU+7s4Oc9b8IQGsdcz0ZmeVwcBqMc4Ib1l+Y5stXYQ+Xad xiihvqOvcFwTUav/JlFm2e8DYO7mASEFYGLPdSQAazt2QZIYm5xrSPZpoUKIK7b/ sDOabunoZNUfkKd6SswPSPQRepJbT9aKu0LJkbLnCNHTAMKizJFTY/mEjOO8Uabi V/2MX6nONDr94d2svAWNpFkZ3+8G7pvtt9aIlf13gG1PZ9E9Cdm3aFJKawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrPszBVhxGo3F3zwXC6+hTnu/eCMB8GA1UdIwQY MBaAFK0tOOIPJNDjC4bM2CYawAF/F6WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEt NDI5OTUzMjNjMDNkLzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEtNDI5OTUzMjNjMDNk LzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhUwObRy yIn+oxg83Cp5lUhuYe4UrirlZ1XWKh0diOZHAQ9pkabrPzP2tEzFPDpONz/bOZpa qnX6BqGPJw2p8zm1pumY8xRr/pplfxJQ7YOS9UT0Msfq09EyyJO7C2zg6eqBpAL4 ldGQwa2MSjbMF8nmhpCKhHHEjz2ug9qD2L09gzaek1nF5ccOKJXBHdAGujFZ1jkU nTDN0cwj9trKygYZCMfYPUqatXsDJX2soXOOj4wACDuFLfzON3IvBiFctVRmQT6a OOKJmJceL0j1BLzaKugX0ZwmxwrAF5Gd3xO5JFhaVaxd3pnZZFyjV+MYYoUhCoTJ rE8j9DPDk84IVg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:54:42 2025 by rpki-client