This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft File: _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json) Hash identifier: P1/89FpcwL6IPEASJOi3h4tPM/I9LK62BWEbVjKU+iQ= Subject key identifier: 0B:5D:68:88:65:38:B2:BE:A3:B0:B7:AD:22:39:84:36:C5:60:71:75 Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Certificate serial: 019B24E36BE7511CB4B26B43A152A9D03E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft Manifest number: 1140 Signing time: Tue 16 Dec 2025 02:00:42 +0000 Manifest this update: Tue 16 Dec 2025 02:00:42 +0000 Manifest next update: Wed 17 Dec 2025 02:00:42 +0000 Files and hashes: 1: MWUNq-ftYkXKNHhiuPmUDR8aNAY.roa (hash: sRHJK0hHdEHRSKSboElSRlINRVoo+ylHVvGY64QPq+U=) 2: XWI8UOsSBKLk-uPWG5IIm7lO5T0.roa (hash: wdsMuB8ozKSUOKmJcSdKQImpm/V8CgY5mxXeyIgvzhE=) 3: XZNvs4P6cEV3kqSeAChYJB2sLl8.roa (hash: g9CiDmAcRp9vEbDCpFa+vtYpHitX7GCMzN75HJigDyc=) 4: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: K3ZhthER6PdXCPHlzwddBrHc8MJUrST/5QzHTTp5Pmo=) 5: i7s_rOXOS6kYX0sDFEqFGZad-XM.roa (hash: /n5dO1dlOLjxt3g9xlSAiuAp1pYED4+r3AwngO41LLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:6b:e7:51:1c:b4:b2:6b:43:a1:52:a9:d0:3e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Validity Not Before: Dec 16 02:00:42 2025 GMT Not After : Dec 17 02:00:42 2025 GMT Subject: CN=0b5d68886538b2bea3b0b7ad22398436c5607175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:66:d6:26:f7:19:c6:b1:ba:72:1d:1b:1c: b3:61:87:d2:e3:b9:3e:2a:28:80:5b:77:ee:b6:88: f7:32:a6:8c:82:0b:33:c4:35:0a:13:c9:90:3b:ea: d5:7e:87:39:8c:57:07:84:be:c7:a0:b9:ae:83:63: c2:cd:97:df:da:62:96:b0:15:23:f8:61:fc:a6:03: 64:14:75:12:bc:3f:e5:73:22:b2:d2:2c:13:fc:9c: f3:f5:b5:8b:5f:eb:d3:39:7a:35:b6:18:9d:eb:d8: 48:73:b3:a3:ac:0f:77:77:cf:66:63:a3:13:e9:92: c3:61:09:3c:20:5d:44:58:4a:9f:dc:34:f7:1c:3e: b0:74:6d:6f:48:b2:1f:39:4b:79:32:d0:74:67:d7: 33:88:ac:28:1a:c4:e4:54:7a:61:79:38:c2:77:b4: 0d:40:47:cc:ae:92:d8:cd:a8:1d:80:c3:95:46:5d: b9:ff:be:d0:03:01:bc:22:b1:37:d0:08:0c:5f:ce: 7b:06:b0:dd:6a:a8:36:cf:4a:32:fb:3d:ab:d2:e3: 86:cd:d4:09:2d:29:35:c3:9d:9a:79:b1:c9:f5:e3: de:20:f1:56:9c:81:82:e9:a7:ed:d2:a4:45:67:f8: dc:06:a0:c1:38:13:fd:67:3a:ea:64:34:37:69:0e: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5D:68:88:65:38:B2:BE:A3:B0:B7:AD:22:39:84:36:C5:60:71:75 X509v3 Authority Key Identifier: keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:90:2e:27:05:dd:aa:09:04:45:5a:d0:96:e7:c4:bf:1a:c8: 84:20:f1:11:5a:5d:04:61:f9:8f:e1:50:da:bc:b9:ca:5f:2d: 3c:f2:40:2d:01:c7:99:80:18:c9:66:9c:ec:0c:3a:bf:4f:06: a8:28:26:8d:70:e2:37:f3:8a:ee:79:aa:a6:1b:1a:7b:26:9a: 85:7d:bf:41:b5:be:41:3a:2e:af:9e:ad:32:34:d7:f3:c6:bd: 1e:5c:51:96:d7:88:dc:ec:34:e1:3d:a1:6c:a5:7f:d4:85:8c: 55:dc:99:b9:0e:e6:80:54:e6:16:7e:3b:97:c3:70:b0:0f:5f: 1b:7c:b7:a6:be:78:5e:3f:26:c8:df:6b:a8:e2:81:07:3d:74: 8e:9f:7b:68:a5:e0:81:3c:f6:c3:50:7d:b0:d4:51:4d:a5:3a: e2:12:d4:31:b0:fb:13:42:c1:a9:82:b3:86:7e:8c:6f:12:86: 8f:76:0e:3c:b2:4e:ff:2a:53:74:5e:54:f2:d6:ed:16:c1:52: 2e:42:de:11:85:99:19:05:b1:53:49:c2:5d:f3:18:f7:b9:83: 5e:53:b4:a6:4c:aa:36:45:a8:43:db:2e:6f:94:03:02:7b:02: 6c:ff:a6:c1:eb:01:fd:23:d9:36:27:f1:e6:8b:35:be:5f:c5: 6b:27:05:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk42vnURy0smtDoVKp0D5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5 ZTBhNTEwHhcNMjUxMjE2MDIwMDQyWhcNMjUxMjE3MDIwMDQyWjAzMTEwLwYDVQQD EygwYjVkNjg4ODY1MzhiMmJlYTNiMGI3YWQyMjM5ODQzNmM1NjA3MTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcxm1ib3GcaxunIdGxyzYYfS47k+ KiiAW3futoj3MqaMggszxDUKE8mQO+rVfoc5jFcHhL7HoLmug2PCzZff2mKWsBUj +GH8pgNkFHUSvD/lcyKy0iwT/Jzz9bWLX+vTOXo1thid69hIc7OjrA93d89mY6MT 6ZLDYQk8IF1EWEqf3DT3HD6wdG1vSLIfOUt5MtB0Z9cziKwoGsTkVHpheTjCd7QN QEfMrpLYzagdgMOVRl25/77QAwG8IrE30AgMX857BrDdaqg2z0oy+z2r0uOGzdQJ LSk1w52aebHJ9ePeIPFWnIGC6aft0qRFZ/jcBqDBOBP9ZzrqZDQ3aQ4nhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtdaIhlOLK+o7C3rSI5hDbFYHF1MB8GA1UdIwQY MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt YWYxY2MyMzE3ZTM5LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5 LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5AuJwXd qgkERVrQlufEvxrIhCDxEVpdBGH5j+FQ2ry5yl8tPPJALQHHmYAYyWac7Aw6v08G qCgmjXDiN/OK7nmqphsaeyaahX2/QbW+QTour56tMjTX88a9HlxRlteI3Ow04T2h bKV/1IWMVdyZuQ7mgFTmFn47l8NwsA9fG3y3pr54Xj8myN9rqOKBBz10jp97aKXg gTz2w1B9sNRRTaU64hLUMbD7E0LBqYKzhn6MbxKGj3YOPLJO/ypTdF5U8tbtFsFS LkLeEYWZGQWxU0nCXfMY97mDXlO0pkyqNkWoQ9sub5QDAnsCbP+mwesB/SPZNifx 5os1vl/FaycF5A== -----END CERTIFICATE-----Generated at Tue Dec 16 06:44:06 2025 by rpki-client