This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json) Hash identifier: ypKRlvOkX0NzmYn1Df2d0IM9OQxSt9mw1AFYKTzjR6I= Subject key identifier: FD:94:05:2F:97:E0:05:C9:86:B0:7F:54:F4:24:91:A6:94:9C:14:BC Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e Certificate serial: 019B18715CC83407B95133F17129A8AC3208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft Manifest number: 177D Signing time: Sat 13 Dec 2025 16:00:40 +0000 Manifest this update: Sat 13 Dec 2025 16:00:40 +0000 Manifest next update: Sun 14 Dec 2025 16:00:40 +0000 Files and hashes: 1: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=) 2: kNjtAZnBIdDs69zL_sxo5b2kvsE.roa (hash: ZvUWHB49abkoN+508ycB2Kcm14s8kB/R0ioTMdmzGbc=) 3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: gHsELr3YNOMsitFimU8WkwGDwAcWlZOvNNQU0X1fZBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:5c:c8:34:07:b9:51:33:f1:71:29:a8:ac:32:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e Validity Not Before: Dec 13 16:00:40 2025 GMT Not After : Dec 14 16:00:40 2025 GMT Subject: CN=fd94052f97e005c986b07f54f42491a6949c14bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:07:80:6f:b2:12:8b:7a:2f:d9:10:3f:10:a6: 69:f9:9a:40:ce:fc:bc:a9:4c:3d:cf:26:1a:97:d0: 57:25:8b:8c:0b:e0:08:ee:8a:43:6c:33:7b:38:3c: fd:94:86:89:2b:3e:66:84:36:f8:23:5c:b5:21:24: f4:cb:5a:17:90:34:c1:03:27:12:12:85:d3:c6:38: 9b:f2:86:58:fc:6e:10:95:33:f8:9d:bc:36:b8:08: 09:e3:4e:8c:c6:a1:2d:b8:90:b5:7f:38:d8:34:41: 21:d5:23:70:50:ee:75:87:d1:cf:05:3e:d7:26:e4: 26:26:9d:d1:f1:03:06:98:7f:46:78:5c:fa:e5:38: 87:66:1b:b8:d4:9b:45:62:4b:15:f9:d8:1b:09:6f: 50:38:23:56:6d:f5:12:b5:7e:79:85:f6:a3:0b:10: ce:c3:e0:7a:4d:37:a4:76:7b:00:a2:7f:e8:42:c5: 3e:da:df:b1:2a:8a:ab:68:d1:22:78:43:53:bb:33: 3d:b6:48:4f:a4:83:a5:37:9f:89:98:a4:38:a8:71: 0f:f0:a5:63:d5:bf:2c:69:31:c5:d6:4e:58:dc:10: 58:63:bc:36:86:23:e2:3c:c3:cb:0b:db:95:a6:a9: 24:fb:05:a6:da:82:57:09:4f:18:57:ef:6a:85:9d: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:94:05:2F:97:E0:05:C9:86:B0:7F:54:F4:24:91:A6:94:9C:14:BC X509v3 Authority Key Identifier: keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9f:d5:08:77:bf:78:0b:a2:73:04:a4:8d:2e:78:61:1c:ff: 6b:6d:bc:d1:dd:f9:fa:a7:31:61:72:a6:3c:d0:8a:5f:5c:11: 6d:3f:ec:96:8e:5d:2e:01:6d:f6:ea:e7:cd:0d:a0:11:c4:4d: c2:e3:72:52:78:85:31:0a:50:70:bb:ca:06:20:27:a9:2c:5f: 7b:6b:5b:a0:04:02:45:d8:62:af:2d:ca:4c:28:28:7c:e5:57: e1:60:c2:58:e0:95:5b:85:bb:27:ee:27:59:0b:84:a4:71:ec: 46:8a:07:d3:6b:f8:06:21:5b:d8:f5:cc:3a:1f:72:5d:d7:18: fa:bb:c4:db:b0:43:12:cd:1c:5d:37:ae:16:c9:71:3f:8b:48: da:9c:d0:cd:a0:c9:d2:69:08:6a:57:69:47:ba:5d:c9:6e:d9: 1c:36:92:d1:c3:0b:a8:b0:d9:7c:05:65:fe:41:ea:a2:5b:ec: e1:ab:46:aa:55:a1:6a:01:94:3c:3b:f3:70:6a:63:9d:4c:7c: 22:3d:59:86:66:90:d5:8b:4b:e4:39:2f:4f:bf:a4:38:b3:e0: 16:02:bd:f2:4a:7c:a5:e8:a1:c0:62:ad:82:3c:0d:9b:6f:1f: e2:2d:58:df:53:4d:a9:86:4f:4a:56:74:f2:f9:46:57:d3:a4: 2a:88:89:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcVzINAe5UTPxcSmorDIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMjAwZDBlN2FkM2NlZjcyMjM4YjUxNjRjNGIyY2RkZTIz YTZhMWUwHhcNMjUxMjEzMTYwMDQwWhcNMjUxMjE0MTYwMDQwWjAzMTEwLwYDVQQD EyhmZDk0MDUyZjk3ZTAwNWM5ODZiMDdmNTRmNDI0OTFhNjk0OWMxNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AeAb7ISi3ov2RA/EKZp+ZpAzvy8 qUw9zyYal9BXJYuMC+AI7opDbDN7ODz9lIaJKz5mhDb4I1y1IST0y1oXkDTBAycS EoXTxjib8oZY/G4QlTP4nbw2uAgJ406MxqEtuJC1fzjYNEEh1SNwUO51h9HPBT7X JuQmJp3R8QMGmH9GeFz65TiHZhu41JtFYksV+dgbCW9QOCNWbfUStX55hfajCxDO w+B6TTekdnsAon/oQsU+2t+xKoqraNEieENTuzM9tkhPpIOlN5+JmKQ4qHEP8KVj 1b8saTHF1k5Y3BBYY7w2hiPiPMPLC9uVpqkk+wWm2oJXCU8YV+9qhZ3mYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2UBS+X4AXJhrB/VPQkkaaUnBS8MB8GA1UdIwQY MBaAFJsgDQ560873Iji1FkxLLN3iOmoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2Mt YTRmMDhkYmI4NWE1LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2MtYTRmMDhkYmI4NWE1 LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFp/VCHe/ eAuicwSkjS54YRz/a2280d35+qcxYXKmPNCKX1wRbT/slo5dLgFt9urnzQ2gEcRN wuNyUniFMQpQcLvKBiAnqSxfe2tboAQCRdhiry3KTCgofOVX4WDCWOCVW4W7J+4n WQuEpHHsRooH02v4BiFb2PXMOh9yXdcY+rvE27BDEs0cXTeuFslxP4tI2pzQzaDJ 0mkIaldpR7pdyW7ZHDaS0cMLqLDZfAVl/kHqolvs4atGqlWhagGUPDvzcGpjnUx8 Ij1ZhmaQ1YtL5DkvT7+kOLPgFgK98kp8peihwGKtgjwNm28f4i1Y31NNqYZPSlZ0 8vlGV9OkKoiJ1w== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:04 2025 by rpki-client