This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json) Hash identifier: X5lFuP+DzBdR2/CMydnALN0NE44GmOIE2vQrBFz5BaA= Subject key identifier: 7B:BC:A7:52:3E:A9:97:B0:99:F8:B7:A8:31:C0:90:11:AA:AC:61:87 Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e Certificate serial: 019B364543F033EA4C84B7BB644D37B5E4EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft Manifest number: 1086 Signing time: Fri 19 Dec 2025 11:01:07 +0000 Manifest this update: Fri 19 Dec 2025 11:01:07 +0000 Manifest next update: Sat 20 Dec 2025 11:01:07 +0000 Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: huET801UZ3OT0txfRrGdcE8DrJSePVMfwloVx6SyHO8=) 2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=) 3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:43:f0:33:ea:4c:84:b7:bb:64:4d:37:b5:e4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e Validity Not Before: Dec 19 11:01:07 2025 GMT Not After : Dec 20 11:01:07 2025 GMT Subject: CN=7bbca7523ea997b099f8b7a831c09011aaac6187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:df:e0:5e:dd:8e:36:f1:48:42:01:d7:ac: 1c:5e:04:03:1b:30:58:f7:b6:63:81:78:62:d9:ab: 8d:09:0c:6e:02:dd:88:01:8c:60:09:65:bf:40:3a: 19:2a:8a:1c:1f:6d:0a:c4:32:c6:b2:89:be:7f:6a: c3:94:db:8c:5a:1b:d4:46:76:9f:cd:b4:e3:79:03: 50:a9:32:61:18:4d:72:0e:16:63:ee:53:83:fd:d0: 60:ff:3c:fb:17:9b:91:e3:4b:c6:f4:ee:a3:33:8b: 7f:4b:0b:ee:31:fc:6f:68:ec:79:38:3d:6a:d0:78: e2:47:55:b2:73:8b:92:17:9c:60:14:39:6f:1e:67: 42:5a:53:f7:59:d6:02:2f:9d:7f:92:cd:46:f3:2a: 0a:c0:1a:4a:24:b7:4f:fe:f3:e1:5b:9a:5e:78:1d: 92:6c:77:e1:8d:13:5a:ec:3b:22:53:da:a3:5d:fd: 8e:64:cd:52:aa:00:eb:f2:1b:88:0d:dd:9f:66:0b: a9:aa:7f:16:1d:64:2f:18:27:74:f2:61:a0:43:e5: fc:bd:aa:52:da:94:c3:46:86:e6:91:a2:56:3a:07: b9:21:be:1e:77:52:4f:ad:90:63:09:3c:38:43:3f: b7:61:45:f9:ac:b6:b9:ac:7e:bc:25:f8:13:fb:94: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BC:A7:52:3E:A9:97:B0:99:F8:B7:A8:31:C0:90:11:AA:AC:61:87 X509v3 Authority Key Identifier: keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:be:f1:38:92:a1:79:5a:b9:cc:f8:f1:fa:f1:09:30:5d:e7: 13:97:c2:a1:0d:66:17:01:80:0a:4b:62:c0:06:a7:51:e2:b4: fd:a0:70:d5:83:93:49:15:f9:4f:82:6e:fb:9b:93:96:de:fd: 52:7f:3b:0b:34:ea:db:a3:89:1a:30:2b:c8:75:92:92:17:da: 8b:b0:99:58:99:2d:ec:fb:28:e2:bb:44:41:ad:de:3e:df:c0: b1:e9:bb:15:a0:2c:8a:e2:a1:82:0f:03:45:51:a3:66:90:06: 33:76:b8:2f:1a:73:bd:b2:66:d4:c3:4c:e0:36:b6:bf:92:89: fc:90:ab:15:c6:92:00:89:ea:2f:e1:ef:d4:33:88:f0:fc:b4: 0b:0a:01:d3:7b:3a:3b:70:d7:46:e0:76:19:fd:55:3b:da:17: 98:a2:f2:47:3e:d7:c6:ef:b2:bb:6b:82:2c:1b:29:53:43:8a: ee:fd:0d:e8:1b:fe:d7:71:6d:36:b2:cb:73:20:46:c4:e1:22: a6:c9:f3:e9:33:29:82:8c:a0:f2:4f:4b:f1:79:af:b8:58:e5: 96:25:40:37:cd:31:a0:27:b3:13:1f:fd:8f:cf:4a:6d:40:39: cf:02:f3:06:2b:40:18:02:f6:58:82:0b:84:2f:7e:21:04:9e: 3e:c9:16:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RUPwM+pMhLe7ZE03teTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj NTY5NGUwHhcNMjUxMjE5MTEwMTA3WhcNMjUxMjIwMTEwMTA3WjAzMTEwLwYDVQQD Eyg3YmJjYTc1MjNlYTk5N2IwOTlmOGI3YTgzMWMwOTAxMWFhYWM2MTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0jf4F7djjbxSEIB16wcXgQDGzBY 97ZjgXhi2auNCQxuAt2IAYxgCWW/QDoZKoocH20KxDLGsom+f2rDlNuMWhvURnaf zbTjeQNQqTJhGE1yDhZj7lOD/dBg/zz7F5uR40vG9O6jM4t/SwvuMfxvaOx5OD1q 0HjiR1Wyc4uSF5xgFDlvHmdCWlP3WdYCL51/ks1G8yoKwBpKJLdP/vPhW5peeB2S bHfhjRNa7DsiU9qjXf2OZM1SqgDr8huIDd2fZgupqn8WHWQvGCd08mGgQ+X8vapS 2pTDRobmkaJWOge5Ib4ed1JPrZBjCTw4Qz+3YUX5rLa5rH68JfgT+5TUOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu8p1I+qZewmfi3qDHAkBGqrGGHMB8GA1UdIwQY MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAb7xOJKh eVq5zPjx+vEJMF3nE5fCoQ1mFwGACktiwAanUeK0/aBw1YOTSRX5T4Ju+5uTlt79 Un87CzTq26OJGjAryHWSkhfai7CZWJkt7Pso4rtEQa3ePt/Asem7FaAsiuKhgg8D RVGjZpAGM3a4LxpzvbJm1MNM4Da2v5KJ/JCrFcaSAInqL+Hv1DOI8Py0CwoB03s6 O3DXRuB2Gf1VO9oXmKLyRz7Xxu+yu2uCLBspU0OK7v0N6Bv+13FtNrLLcyBGxOEi psnz6TMpgoyg8k9L8XmvuFjlliVAN80xoCezEx/9j89KbUA5zwLzBitAGAL2WIIL hC9+IQSePskWOA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:24:29 2025 by rpki-client