This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json) Hash identifier: kGvjvA60t63Ryd78lA2H5e+4uW/+9gaPQsMSS7XISVY= Subject key identifier: EF:A5:0E:13:32:5B:D9:F5:2F:9B:BB:BA:DF:57:6B:49:68:BF:2C:C3 Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Certificate serial: 019B0E25DC427CAFFC6FBD43437D3083FAFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 16:02:00 +0000 Manifest this update: Thu 11 Dec 2025 16:02:00 +0000 Manifest next update: Fri 12 Dec 2025 16:02:00 +0000 Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: RwxmLwNqZidrWmbdvSyWPtlSeOFMW7sIA0cfpQkTn8Q=) 2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=) 3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:dc:42:7c:af:fc:6f:bd:43:43:7d:30:83:fa:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Validity Not Before: Dec 11 16:02:00 2025 GMT Not After : Dec 12 16:02:00 2025 GMT Subject: CN=efa50e13325bd9f52f9bbbbadf576b4968bf2cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:26:cf:92:44:03:ca:e3:d8:09:33:8b:5a: 49:36:9b:35:c3:b1:e7:b2:c2:75:70:57:86:27:9b: 11:07:11:9e:5e:7f:c7:ff:d4:d9:73:3d:e9:48:03: 35:2a:24:92:b4:1c:ce:b1:f8:d9:8a:ab:fa:12:72: bd:c2:86:f4:b2:4d:90:2b:f4:37:f1:c9:a8:39:5d: 73:e1:79:88:7d:f2:b2:6c:eb:6e:c6:ef:c5:06:7c: da:17:04:9e:f1:f7:20:79:a8:f3:1a:f2:03:8d:4f: 0a:19:d0:be:ee:a5:8d:fd:48:ef:b1:86:94:aa:24: 72:b3:9a:e1:b6:f2:68:fd:e6:45:30:54:d6:e3:34: c5:f9:0f:ad:f0:f7:9d:e0:24:c8:a7:87:5e:f8:56: 9e:ff:93:34:10:74:10:4a:8f:57:f5:b7:eb:71:75: 72:26:f3:30:05:38:a5:45:fb:f5:f4:45:98:71:60: 24:c6:c8:52:3b:38:3b:d1:c0:cb:41:35:0d:d5:cc: 0b:f6:10:16:bd:81:8c:29:73:9a:80:a6:70:e6:37: f5:bf:0c:9e:a9:ed:df:ab:45:7d:1e:2b:f1:cc:fc: f5:98:4c:b3:f4:61:f6:b4:16:1f:c0:4e:50:6b:bf: 4e:85:35:46:00:93:2f:a9:73:54:fc:93:87:fc:b9: 85:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A5:0E:13:32:5B:D9:F5:2F:9B:BB:BA:DF:57:6B:49:68:BF:2C:C3 X509v3 Authority Key Identifier: keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:13:61:7e:e2:e1:b5:d3:3b:f3:5e:14:14:d5:ac:1a:db:2e: 01:f9:36:c1:b3:63:9e:86:ee:22:ae:14:e1:61:05:cd:5b:42: 9d:f6:30:04:10:25:db:e2:67:76:ab:8c:dc:54:66:c4:f2:34: 45:2d:b3:40:64:7d:21:49:9d:30:cb:96:49:e6:e9:4d:ee:29: 6c:eb:7d:5e:3c:a6:e8:2e:3d:d3:f8:d9:75:2c:8b:d4:54:03: 9e:df:63:30:49:52:b0:03:b4:8f:31:e6:1e:3e:e9:81:4a:d6: cc:79:39:8d:59:9b:ce:ed:f6:4d:3c:58:7a:15:ac:03:5a:58: 88:0c:b7:aa:c8:95:27:3a:4d:d0:c7:59:9e:f1:f3:c4:57:85: 4f:17:e1:80:5d:15:44:5b:fc:4e:82:ea:a7:5e:71:2b:8d:23: 9f:12:b9:1e:f8:a7:d7:d6:1c:ac:3a:4a:48:47:a3:10:71:55: e4:77:82:76:36:ff:c7:ca:49:af:91:1e:4f:61:8f:4a:15:d4: b3:a0:34:4d:51:4d:58:5f:4b:a4:7d:59:90:23:dc:52:22:ff: e4:d9:71:43:89:76:cd:f0:12:93:ee:95:c4:ec:9c:cc:e8:db: 4d:04:3c:97:cb:b8:13:48:61:7c:ba:fb:a3:20:9e:e0:57:47: c4:c1:e9:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJdxCfK/8b71DQ30wg/r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2NhYjc0NzlhNGUwZDhhNDE3NzM1MGEwMGE2OWJkODgz YjA0OGQwHhcNMjUxMjExMTYwMjAwWhcNMjUxMjEyMTYwMjAwWjAzMTEwLwYDVQQD EyhlZmE1MGUxMzMyNWJkOWY1MmY5YmJiYmFkZjU3NmI0OTY4YmYyY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurcmz5JEA8rj2Akzi1pJNps1w7Hn ssJ1cFeGJ5sRBxGeXn/H/9TZcz3pSAM1KiSStBzOsfjZiqv6EnK9wob0sk2QK/Q3 8cmoOV1z4XmIffKybOtuxu/FBnzaFwSe8fcgeajzGvIDjU8KGdC+7qWN/UjvsYaU qiRys5rhtvJo/eZFMFTW4zTF+Q+t8Ped4CTIp4de+Fae/5M0EHQQSo9X9bfrcXVy JvMwBTilRfv19EWYcWAkxshSOzg70cDLQTUN1cwL9hAWvYGMKXOagKZw5jf1vwye qe3fq0V9HivxzPz1mEyz9GH2tBYfwE5Qa79OhTVGAJMvqXNU/JOH/LmFVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+lDhMyW9n1L5u7ut9Xa0lovyzDMB8GA1UdIwQY MBaAFEbMq3R5pODYpBdzUKAKab2IOwSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgt MmYzMDI1MmViNDQyLzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgtMmYzMDI1MmViNDQy LzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxNhfuLh tdM7814UFNWsGtsuAfk2wbNjnobuIq4U4WEFzVtCnfYwBBAl2+JndquM3FRmxPI0 RS2zQGR9IUmdMMuWSebpTe4pbOt9Xjym6C490/jZdSyL1FQDnt9jMElSsAO0jzHm Hj7pgUrWzHk5jVmbzu32TTxYehWsA1pYiAy3qsiVJzpN0MdZnvHzxFeFTxfhgF0V RFv8ToLqp15xK40jnxK5Hvin19YcrDpKSEejEHFV5HeCdjb/x8pJr5EeT2GPShXU s6A0TVFNWF9LpH1ZkCPcUiL/5NlxQ4l2zfASk+6VxOyczOjbTQQ8l8u4E0hhfLr7 oyCe4FdHxMHpNA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:11:45 2025 by rpki-client