This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft File: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft (raw, json) Hash identifier: Es4toCyd1nC0FjvrGjBPEVGQ1FwjMhVNepsbYBy2XWA= Subject key identifier: 6E:8D:CE:8A:26:29:44:6A:7D:FB:B0:88:A3:48:93:81:AD:D3:ED:57 Authority key identifier: D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 Certificate issuer: /CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Certificate serial: 019B59ACF8742B2F7B22D02B0555897C2078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft Manifest number: 91 Signing time: Fri 26 Dec 2025 08:01:06 +0000 Manifest this update: Fri 26 Dec 2025 08:01:06 +0000 Manifest next update: Sat 27 Dec 2025 08:01:06 +0000 Files and hashes: 1: 0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl (hash: Jsuu93eX4u9fTaO4XJwfwXv0bJBtDso9fwl+n8MfjOg=) 2: C47lvglUJPUc1uI67gUUufPEDSs.roa (hash: E+7Tw0jGhEeXyLDUBjLwrw3FkNQ1C9Bm1zuyOyb3PzQ=) 3: nJ0AhkIAYhs6kgmeWNk0eh88IlU.roa (hash: cH4HPEM9cZKNpHMHjaKhXAEvP0Kxctiu8x8yjGmy1pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:f8:74:2b:2f:7b:22:d0:2b:05:55:89:7c:20:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0040765e474600e1bc7622a43663dd8d9fadc87 Validity Not Before: Dec 26 08:01:06 2025 GMT Not After : Dec 27 08:01:06 2025 GMT Subject: CN=6e8dce8a2629446a7dfbb088a3489381add3ed57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:43:c7:4b:3c:ba:bf:71:0c:50:4a:a9:3f:8c: 45:91:8d:0c:e5:84:88:7a:fc:d5:35:b6:3e:70:05: 6e:4a:6f:4e:2b:d7:81:06:df:1b:3a:30:90:5a:26: 56:3e:ab:d0:64:48:f4:93:23:ea:f6:32:07:15:4e: 11:42:96:67:bf:2d:d4:fb:3d:9c:c8:ba:61:c9:1c: 09:45:ee:76:de:6a:93:7c:23:af:43:59:90:24:cc: 76:7b:1f:f8:95:fd:11:3b:22:24:dc:76:e4:88:94: 92:e4:c7:6b:6c:48:18:1e:fe:38:4c:1c:46:cf:27: c2:a3:9e:2e:80:71:32:f0:1d:49:3f:fe:1b:66:83: b3:bd:3e:93:ff:12:b8:77:51:82:db:1d:fd:01:91: 4b:83:5a:60:15:09:27:9a:f0:ef:d7:ec:01:ca:a0: 42:eb:e1:99:88:84:63:74:82:45:ad:29:3a:c2:41: 33:73:b8:59:2c:b3:c3:14:2d:41:96:59:fa:90:2b: f3:5c:04:d2:9a:1c:36:b9:89:ef:44:2d:05:10:a2: 42:5d:fb:f3:cc:55:63:c7:e9:2d:49:a7:ee:93:7b: de:0d:a4:1b:9d:f4:ca:c9:3f:65:43:94:ec:d3:91: c7:44:3e:ea:e1:85:cc:46:ef:b0:cd:9b:b3:93:74: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8D:CE:8A:26:29:44:6A:7D:FB:B0:88:A3:48:93:81:AD:D3:ED:57 X509v3 Authority Key Identifier: keyid:D0:04:07:65:E4:74:60:0E:1B:C7:62:2A:43:66:3D:D8:D9:FA:DC:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22fcde-720b-4f63-9c02-47d3087137f4/1/0AQHZeR0YA4bx2IqQ2Y92Nn63Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:12:50:ff:fa:b5:51:03:6e:57:ad:e5:05:b3:4c:6e:cc:fa: 86:20:3f:5a:8d:83:8b:78:72:46:9b:5f:bb:7a:91:b9:ea:fd: f7:12:8c:02:e7:9e:fa:6f:c3:b2:7e:bd:e0:07:99:55:8c:7a: fb:4f:04:f1:8a:9b:ee:0b:1b:66:5d:ca:7f:81:4a:99:65:d3: 58:dc:9d:a4:f2:cc:45:36:b5:4f:15:a0:39:9f:52:f3:b8:ba: dd:19:cd:a2:f6:91:49:d7:5d:c3:9a:e1:dc:96:b3:96:65:35: 9d:9e:8c:a4:d8:95:67:b9:24:83:5b:dc:f1:de:23:6a:04:11: cc:1e:46:df:f1:ed:92:ef:59:63:ee:5a:11:14:03:a9:b1:8a: d7:2c:f2:e5:78:2f:3f:49:5e:81:89:fe:39:25:35:d3:86:f7: 65:b1:13:e9:b1:ab:fd:f3:2c:44:35:cf:a5:59:a3:44:54:f8: 7c:1c:e7:8b:61:22:d4:7e:52:26:54:8d:25:9b:d3:a5:53:31: ba:b1:a1:0f:22:a0:9e:ae:81:1a:37:f2:9a:fa:b8:66:3f:ff: cf:3f:b1:1a:f0:43:e4:96:e4:3a:90:2a:b2:88:51:1d:54:fb: bb:86:f7:eb:17:54:26:1d:fd:f2:8c:13:6c:1d:b7:17:ce:6d: c1:8c:6e:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrPh0Ky97ItArBVWJfCB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDQwNzY1ZTQ3NDYwMGUxYmM3NjIyYTQzNjYzZGQ4ZDlm YWRjODcwHhcNMjUxMjI2MDgwMTA2WhcNMjUxMjI3MDgwMTA2WjAzMTEwLwYDVQQD Eyg2ZThkY2U4YTI2Mjk0NDZhN2RmYmIwODhhMzQ4OTM4MWFkZDNlZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEPHSzy6v3EMUEqpP4xFkY0M5YSI evzVNbY+cAVuSm9OK9eBBt8bOjCQWiZWPqvQZEj0kyPq9jIHFU4RQpZnvy3U+z2c yLphyRwJRe523mqTfCOvQ1mQJMx2ex/4lf0ROyIk3HbkiJSS5MdrbEgYHv44TBxG zyfCo54ugHEy8B1JP/4bZoOzvT6T/xK4d1GC2x39AZFLg1pgFQknmvDv1+wByqBC 6+GZiIRjdIJFrSk6wkEzc7hZLLPDFC1Blln6kCvzXATSmhw2uYnvRC0FEKJCXfvz zFVjx+ktSafuk3veDaQbnfTKyT9lQ5Ts05HHRD7q4YXMRu+wzZuzk3QDNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6NzoomKURqffuwiKNIk4Gt0+1XMB8GA1UdIwQY MBaAFNAEB2XkdGAOG8diKkNmPdjZ+tyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDIt NDdkMzA4NzEzN2Y0LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yMmZjZGUtNzIwYi00ZjYzLTljMDItNDdkMzA4NzEzN2Y0 LzEvMEFRSFplUjBZQTRieDJJcVEyWTkyTm42M0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBJQ//q1 UQNuV63lBbNMbsz6hiA/Wo2Di3hyRptfu3qRuer99xKMAuee+m/Dsn694AeZVYx6 +08E8Yqb7gsbZl3Kf4FKmWXTWNydpPLMRTa1TxWgOZ9S87i63RnNovaRSdddw5rh 3JazlmU1nZ6MpNiVZ7kkg1vc8d4jagQRzB5G3/Htku9ZY+5aERQDqbGK1yzy5Xgv P0legYn+OSU104b3ZbET6bGr/fMsRDXPpVmjRFT4fBzni2Ei1H5SJlSNJZvTpVMx urGhDyKgnq6BGjfymvq4Zj//zz+xGvBD5JbkOpAqsohRHVT7u4b36xdUJh398owT bB23F85twYxuGQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:18 2025 by rpki-client