This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json) Hash identifier: QrFR3bHjcS31j+xMJeGVgYWQu7ZLE3IfbvwF/vsypWw= Subject key identifier: 7D:52:83:C3:24:5D:2E:8F:E6:E0:4E:E4:85:37:2B:4B:E8:32:E8:DB Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82 Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82 Certificate serial: 019B2176A051A000A46193D07CAE267B7472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft Manifest number: 0CEF Signing time: Mon 15 Dec 2025 10:03:00 +0000 Manifest this update: Mon 15 Dec 2025 10:03:00 +0000 Manifest next update: Tue 16 Dec 2025 10:03:00 +0000 Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=) 2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: vJiMxlosdKwZTvgpp2yF6sil3ZdYbMfede9weIHTUrs=) 3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:a0:51:a0:00:a4:61:93:d0:7c:ae:26:7b:74:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82 Validity Not Before: Dec 15 10:03:00 2025 GMT Not After : Dec 16 10:03:00 2025 GMT Subject: CN=7d5283c3245d2e8fe6e04ee485372b4be832e8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:7b:c3:03:2d:93:2a:e0:b1:69:ac:37:90: 4b:68:4b:8e:ec:e5:80:f9:f6:bd:8f:d1:fe:0e:58: 6a:ac:fb:c3:f8:8b:40:a9:42:6f:7b:c3:2e:bb:1b: 3f:81:45:18:32:dd:9a:cf:2f:f0:c2:6e:38:bb:b1: d8:39:b8:d8:ae:ed:78:5f:08:dc:12:00:8e:40:50: c5:4b:79:3d:0d:7b:e6:e9:ee:f3:8a:2e:98:d9:ba: f1:b4:b6:79:a1:c9:b2:4d:e2:13:7c:3a:05:8a:21: 38:6b:05:58:c1:8f:15:72:ec:63:07:6c:c0:54:69: 88:78:5b:16:33:2b:52:f0:19:95:54:d3:69:9a:c9: 70:4c:85:7b:b3:13:18:c2:a9:65:f7:cd:06:52:4d: 3c:9a:7f:bd:cd:43:d6:39:e6:18:de:0b:a9:8b:46: 30:83:18:dc:cc:29:2c:02:51:5f:59:16:c7:c9:1c: f5:ba:26:b7:d0:42:52:13:87:18:87:f3:fa:e9:26: c5:b8:67:67:93:0f:4a:d2:40:a4:0d:bb:e6:43:6f: 5e:c4:0c:7d:1d:99:8d:cc:ff:27:04:cd:9c:40:64: 30:d1:49:39:e1:a1:c3:b7:73:d2:f4:a6:84:51:e1: 1d:a6:9e:48:f9:e4:d3:d2:71:4b:e7:3b:e3:2e:e7: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:52:83:C3:24:5D:2E:8F:E6:E0:4E:E4:85:37:2B:4B:E8:32:E8:DB X509v3 Authority Key Identifier: keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:35:65:b2:63:f9:49:26:0e:47:f4:07:fd:3a:85:76:1f:53: 5b:b3:49:3e:92:c1:96:0d:cc:73:32:e3:cf:ab:c9:d2:60:1b: 63:d8:4b:9f:ed:90:a3:03:b6:24:d7:a4:7c:2d:69:23:97:53: b3:90:f2:3a:09:9a:6d:e2:de:45:85:df:3e:8c:81:fa:8c:e1: 7c:c7:c0:68:f5:68:1b:ba:1b:41:6d:d6:ba:e9:e5:e8:66:5a: 35:fc:69:fb:43:9c:f3:58:02:06:dd:ce:35:a9:78:6b:2e:3b: 54:e7:90:1e:ef:6e:88:c8:ad:f2:0d:c9:04:4d:7b:a3:cd:e3: 76:b4:f5:b5:27:06:da:7a:22:cf:55:a7:80:37:45:af:81:d2: 08:42:d1:96:0d:ca:f2:80:c6:ed:ea:9a:6c:56:21:da:46:59: 99:fe:41:a6:ed:c4:f1:97:61:82:56:d0:82:0e:29:ea:5b:0a: 49:63:bf:4c:39:2d:6b:2e:72:6c:e1:91:39:0b:54:11:33:12: 3d:24:53:8a:6a:84:f9:62:b8:e2:17:66:14:35:3e:65:f4:4c: 68:fb:7c:e4:a5:bc:7a:9c:de:2f:8d:3c:7f:67:1c:18:1b:36: 5b:84:d6:d4:c0:15:98:da:dd:0d:d7:42:fe:87:04:97:64:84: d9:3e:f0:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdqBRoACkYZPQfK4me3RyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl YWRhODIwHhcNMjUxMjE1MTAwMzAwWhcNMjUxMjE2MTAwMzAwWjAzMTEwLwYDVQQD Eyg3ZDUyODNjMzI0NWQyZThmZTZlMDRlZTQ4NTM3MmI0YmU4MzJlOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNZ7wwMtkyrgsWmsN5BLaEuO7OWA +fa9j9H+DlhqrPvD+ItAqUJve8Muuxs/gUUYMt2azy/wwm44u7HYObjYru14Xwjc EgCOQFDFS3k9DXvm6e7zii6Y2brxtLZ5ocmyTeITfDoFiiE4awVYwY8VcuxjB2zA VGmIeFsWMytS8BmVVNNpmslwTIV7sxMYwqll980GUk08mn+9zUPWOeYY3gupi0Yw gxjczCksAlFfWRbHyRz1uia30EJSE4cYh/P66SbFuGdnkw9K0kCkDbvmQ29exAx9 HZmNzP8nBM2cQGQw0Uk54aHDt3PS9KaEUeEdpp5I+eTT0nFL5zvjLucjNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1Sg8MkXS6P5uBO5IU3K0voMujbMB8GA1UdIwQY MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt ZGJmNzZlZDM5MzlmLzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDVlsmP5 SSYOR/QH/TqFdh9TW7NJPpLBlg3MczLjz6vJ0mAbY9hLn+2QowO2JNekfC1pI5dT s5DyOgmabeLeRYXfPoyB+ozhfMfAaPVoG7obQW3Wuunl6GZaNfxp+0Oc81gCBt3O Nal4ay47VOeQHu9uiMit8g3JBE17o83jdrT1tScG2noiz1WngDdFr4HSCELRlg3K 8oDG7eqabFYh2kZZmf5Bpu3E8ZdhglbQgg4p6lsKSWO/TDktay5ybOGROQtUETMS PSRTimqE+WK44hdmFDU+ZfRMaPt85KW8epzeL408f2ccGBs2W4TW1MAVmNrdDddC /ocEl2SE2T7wgg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:54:33 2025 by rpki-client