This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json) Hash identifier: WkxfR4gpjbaY0QM48+PzpRQ6B6AycUwge2kTT4m1I30= Subject key identifier: 02:61:6D:FD:34:A9:80:1C:E9:DE:93:3C:DA:DA:D8:69:BE:F8:0D:FC Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df Certificate serial: 019B3AC649E0B26355481651C7FDABF5CDE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 08:00:31 +0000 Manifest this update: Sat 20 Dec 2025 08:00:31 +0000 Manifest next update: Sun 21 Dec 2025 08:00:31 +0000 Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=) 2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=) 3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: 5eEXgdFuA+9OA7E3uRkbP9TrkqMaNk7pbmpLxFyotSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:49:e0:b2:63:55:48:16:51:c7:fd:ab:f5:cd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df Validity Not Before: Dec 20 08:00:31 2025 GMT Not After : Dec 21 08:00:31 2025 GMT Subject: CN=02616dfd34a9801ce9de933cdadad869bef80dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:ab:13:ed:cf:63:56:6c:1b:5b:7d:88:fa: b6:0e:dd:20:6f:21:f2:eb:2e:7b:e5:4c:62:e7:9f: 11:e3:3c:19:aa:a0:73:f6:d1:8f:df:55:80:da:b3: 0d:b7:1c:28:b7:f7:30:fe:ca:02:45:38:31:87:e7: 91:65:69:8c:65:c9:35:85:69:25:2d:a2:da:e9:96: 9c:b3:c8:ad:7c:e5:3c:3c:96:13:85:b1:02:4a:bd: f1:b6:2c:cf:02:65:b2:44:1e:72:2e:8c:60:46:7b: 46:bf:57:ed:ff:c1:f0:d1:d0:85:a8:ea:8a:e1:83: 71:df:fd:5c:2c:53:bb:9e:31:af:3b:35:6f:77:96: 0e:3a:b0:78:5a:d3:9e:5b:6e:4c:4c:6f:1a:57:b1: 80:3e:80:2e:c4:e4:19:45:5e:2e:15:3f:47:13:b5: eb:f7:dd:cb:8f:e6:90:ec:ce:dc:36:e3:e0:1f:e8: 65:66:1c:61:da:10:d3:52:03:4f:8d:64:7f:46:e6: a2:50:8b:fd:a3:08:c9:53:3f:ab:75:57:39:34:59: 04:f4:ea:e0:25:84:7f:26:82:0d:cc:5a:2c:97:ab: d0:e7:15:04:72:fb:63:11:cd:0a:20:b7:22:5f:e3: 7a:57:12:9f:2f:8d:26:96:81:a1:5c:f0:0b:1c:9c: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:61:6D:FD:34:A9:80:1C:E9:DE:93:3C:DA:DA:D8:69:BE:F8:0D:FC X509v3 Authority Key Identifier: keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c0:20:08:03:2a:72:6c:3b:5b:da:02:28:b8:fa:ea:49:d0: aa:df:b4:5c:10:4d:4c:dc:ef:e8:d8:15:3b:9d:b6:04:15:c6: 14:85:26:7c:fb:8b:f6:1f:89:2e:e5:e5:0c:29:ee:73:6a:ca: 92:51:eb:bd:a0:8f:d7:58:26:3f:6c:0b:68:7f:cd:40:33:ec: e4:0b:19:b3:cd:a7:c0:8a:bb:76:df:a4:43:be:f6:55:1e:d3: ed:f5:6c:64:9d:67:68:46:5c:27:d7:c2:e3:95:f2:3f:d0:66: e1:c9:2b:d1:d0:9e:75:ac:6d:4f:33:9c:ec:6c:ce:1b:a5:80: 3f:0d:da:07:79:28:12:1d:38:99:0c:dd:2f:18:02:2d:c9:95: ca:54:09:22:6b:c2:a0:81:3d:47:32:60:21:2f:56:cc:fa:47: fe:e1:fd:b5:d3:ec:d4:99:51:ea:6f:ad:98:2e:d5:42:db:f1: 7f:59:29:f4:82:92:d3:99:b1:a9:a6:96:e4:ae:c7:1f:59:f8: aa:10:2c:18:21:d6:52:90:71:e5:2a:34:f1:5b:f4:57:01:4f: 67:da:f4:28:c1:1b:62:56:ab:8c:00:df:8c:b0:44:ed:ee:d4: 87:b7:9e:b1:db:54:a6:e9:7f:93:d5:25:a0:79:a6:74:95:28: 54:1e:8d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xkngsmNVSBZRx/2r9c3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOGE2OWVjYjc4N2NjZTk4OTJkYzY1NDgwNDYzZmIwODhi NjEzZGYwHhcNMjUxMjIwMDgwMDMxWhcNMjUxMjIxMDgwMDMxWjAzMTEwLwYDVQQD EygwMjYxNmRmZDM0YTk4MDFjZTlkZTkzM2NkYWRhZDg2OWJlZjgwZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxCrE+3PY1ZsG1t9iPq2Dt0gbyHy 6y575Uxi558R4zwZqqBz9tGP31WA2rMNtxwot/cw/soCRTgxh+eRZWmMZck1hWkl LaLa6Zacs8itfOU8PJYThbECSr3xtizPAmWyRB5yLoxgRntGv1ft/8Hw0dCFqOqK 4YNx3/1cLFO7njGvOzVvd5YOOrB4WtOeW25MTG8aV7GAPoAuxOQZRV4uFT9HE7Xr 993Lj+aQ7M7cNuPgH+hlZhxh2hDTUgNPjWR/RuaiUIv9owjJUz+rdVc5NFkE9Org JYR/JoINzFosl6vQ5xUEcvtjEc0KILciX+N6VxKfL40mloGhXPALHJwR3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJhbf00qYAc6d6TPNra2Gm++A38MB8GA1UdIwQY MBaAFKyKaey3h8zpiS3GVIBGP7CIthPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt NGNjNDBmZmQ3OTZkLzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk LzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8AgCAMq cmw7W9oCKLj66knQqt+0XBBNTNzv6NgVO522BBXGFIUmfPuL9h+JLuXlDCnuc2rK klHrvaCP11gmP2wLaH/NQDPs5AsZs82nwIq7dt+kQ772VR7T7fVsZJ1naEZcJ9fC 45XyP9Bm4ckr0dCedaxtTzOc7GzOG6WAPw3aB3koEh04mQzdLxgCLcmVylQJImvC oIE9RzJgIS9WzPpH/uH9tdPs1JlR6m+tmC7VQtvxf1kp9IKS05mxqaaW5K7HH1n4 qhAsGCHWUpBx5So08Vv0VwFPZ9r0KMEbYlarjADfjLBE7e7Uh7eesdtUpul/k9Ul oHmmdJUoVB6NRA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:46:54 2025 by rpki-client