This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json) Hash identifier: WQM/UrMlUhl69FcGEdcTJ/2SmZ9SJjMPy0RVBuGyXg8= Subject key identifier: FA:C7:82:07:22:92:A6:90:AF:F5:CC:D8:A2:7C:66:CB:0C:F5:D8:3B Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Certificate serial: 019B0F011E171AC333A16FDC584EB742F821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft Manifest number: 0BAD Signing time: Thu 11 Dec 2025 20:01:29 +0000 Manifest this update: Thu 11 Dec 2025 20:01:29 +0000 Manifest next update: Fri 12 Dec 2025 20:01:29 +0000 Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=) 2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=) 3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: G0cs2RNtVCm3b5bIhhuFTGkccmKc72EtwN3cX48sNtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:1e:17:1a:c3:33:a1:6f:dc:58:4e:b7:42:f8:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Validity Not Before: Dec 11 20:01:29 2025 GMT Not After : Dec 12 20:01:29 2025 GMT Subject: CN=fac782072292a690aff5ccd8a27c66cb0cf5d83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:6f:4b:39:43:ab:2e:8d:27:ee:24:0d:3c: 88:0e:5e:cf:9c:e7:82:c7:22:3f:c5:5a:04:c4:e8: b3:21:16:ba:1c:9e:22:75:58:6f:46:23:9a:7c:47: e8:d1:48:06:27:17:8f:d6:e0:bb:ef:d7:14:7d:f7: f3:85:3d:16:d6:7d:cc:74:03:56:40:01:81:2c:da: 32:fa:e6:e7:16:10:e3:b1:de:99:b2:2d:11:34:d0: be:eb:02:4d:60:ba:be:48:d2:40:83:d6:bd:76:d7: b8:e5:93:44:82:dc:7b:fe:18:0c:37:d4:f8:34:e4: 6f:30:d9:df:fa:02:08:13:52:a0:b5:83:10:70:b7: 44:22:f6:b7:f2:f3:e2:a7:7c:a2:e8:2f:4a:d6:0e: 01:dc:f2:5a:1b:00:6e:74:aa:69:9a:b9:21:3f:1e: e2:e9:ba:4e:56:70:2c:c8:73:f7:80:f5:81:2b:4a: 0d:b5:8a:cf:21:7d:93:63:d7:fc:18:92:34:b4:24: 5e:a4:cf:2f:c6:53:20:fc:54:09:50:b5:5f:b5:86: a5:5a:b9:c4:45:2b:26:a7:fd:fd:dc:69:5f:f6:33: c1:57:1c:46:87:da:6c:89:be:0c:9d:95:6d:6d:c4: 7c:8c:8d:ba:f0:c9:d9:c1:91:6b:52:a6:16:81:9f: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C7:82:07:22:92:A6:90:AF:F5:CC:D8:A2:7C:66:CB:0C:F5:D8:3B X509v3 Authority Key Identifier: keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:31:e8:be:81:21:b2:4c:6f:b1:46:76:9b:d7:ac:c7:5e:a6: 05:d8:c3:e8:0b:f2:ad:0e:f3:b0:d2:2f:76:b8:d8:e4:b1:23: f0:a5:c7:f0:b9:4f:34:0d:c0:25:88:7b:3d:4a:07:b8:56:ca: 67:43:04:f3:50:c4:e9:f6:86:70:7f:b7:42:14:26:57:f7:10: f9:33:1b:06:c6:a1:f1:ce:ce:6d:ea:76:84:14:b6:0b:54:4a: f4:47:c7:16:a2:8a:16:65:02:63:4d:77:bf:15:f3:52:1d:b4: a9:07:00:e6:c2:f4:df:cf:23:70:af:28:53:4d:79:64:b5:db: 1e:72:b4:04:f2:f5:fc:59:f4:92:c7:17:c5:83:b9:ef:1d:f8: 82:39:a0:82:8a:87:55:bd:e6:a9:af:88:9e:4b:79:cd:e3:66: 51:8f:73:52:a2:06:5d:3c:a6:ee:a6:c0:2d:08:c8:18:3f:02: 43:ec:98:c8:31:ac:e9:a3:1e:8f:8f:0c:ad:a7:6b:92:7e:ae: 1b:cd:dc:3f:7e:12:59:41:8c:ae:5f:9a:0f:d2:7d:56:b6:64: db:c1:16:11:05:c3:01:cc:6e:22:73:5e:c5:e8:65:97:23:43: 44:86:80:ab:df:f0:85:6f:ca:04:8c:94:b4:c6:30:1b:49:92: 55:93:3c:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAR4XGsMzoW/cWE63QvghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2I1MjljOWRjOTUyNmYwOTliZjE2YWM4OWRjYzhhZGZl MTgyNDAwHhcNMjUxMjExMjAwMTI5WhcNMjUxMjEyMjAwMTI5WjAzMTEwLwYDVQQD EyhmYWM3ODIwNzIyOTJhNjkwYWZmNWNjZDhhMjdjNjZjYjBjZjVkODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6dvSzlDqy6NJ+4kDTyIDl7PnOeC xyI/xVoExOizIRa6HJ4idVhvRiOafEfo0UgGJxeP1uC779cUfffzhT0W1n3MdANW QAGBLNoy+ubnFhDjsd6Zsi0RNNC+6wJNYLq+SNJAg9a9dte45ZNEgtx7/hgMN9T4 NORvMNnf+gIIE1KgtYMQcLdEIva38vPip3yi6C9K1g4B3PJaGwBudKppmrkhPx7i 6bpOVnAsyHP3gPWBK0oNtYrPIX2TY9f8GJI0tCRepM8vxlMg/FQJULVftYalWrnE RSsmp/393Glf9jPBVxxGh9psib4MnZVtbcR8jI268MnZwZFrUqYWgZ9H/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrHggcikqaQr/XM2KJ8ZssM9dg7MB8GA1UdIwQY MBaAFK07UpydyVJvCZvxasidzIrf4YJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTIt YjIwZWJlNTk1NDc1LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTItYjIwZWJlNTk1NDc1 LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTHovoEh skxvsUZ2m9esx16mBdjD6AvyrQ7zsNIvdrjY5LEj8KXH8LlPNA3AJYh7PUoHuFbK Z0ME81DE6faGcH+3QhQmV/cQ+TMbBsah8c7Obep2hBS2C1RK9EfHFqKKFmUCY013 vxXzUh20qQcA5sL0388jcK8oU015ZLXbHnK0BPL1/Fn0kscXxYO57x34gjmggoqH Vb3mqa+Inkt5zeNmUY9zUqIGXTym7qbALQjIGD8CQ+yYyDGs6aMej48Mradrkn6u G83cP34SWUGMrl+aD9J9VrZk28EWEQXDAcxuInNexehllyNDRIaAq9/whW/KBIyU tMYwG0mSVZM8MA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:15 2025 by rpki-client