This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json) Hash identifier: nP41wfJv+5RPbZOZazWVrxi6n0M4eg2lEr8gXwWNAnw= Subject key identifier: A6:28:A2:1B:B0:D6:23:48:33:63:71:4A:30:DE:AC:7C:20:D6:2B:78 Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c Certificate serial: 019B243EA4D2CF3C8C7EE6FAA91A9C792E47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft Manifest number: 1782 Signing time: Mon 15 Dec 2025 23:00:43 +0000 Manifest this update: Mon 15 Dec 2025 23:00:43 +0000 Manifest next update: Tue 16 Dec 2025 23:00:43 +0000 Files and hashes: 1: G67im2f6_ZhJBmi9qes0fIWNsWo.roa (hash: rcGVW1BtLRG5wqd17uLZEGASDvopWpXiN4N5Gl4c/9Y=) 2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: XuYgKve6G0ttsONB0OwUYtnnHCwg2XchqZCW18XLtPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:a4:d2:cf:3c:8c:7e:e6:fa:a9:1a:9c:79:2e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c Validity Not Before: Dec 15 23:00:43 2025 GMT Not After : Dec 16 23:00:43 2025 GMT Subject: CN=a628a21bb0d623483363714a30deac7c20d62b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:92:0b:a5:f5:22:10:4d:e1:1c:cd:d3:7b: 0c:3f:65:8b:1f:3e:c9:63:de:52:17:1e:d9:56:92: 31:99:c1:fd:c2:2a:56:05:ea:55:24:0a:14:a3:af: 89:18:84:3e:87:f4:bc:fb:1c:81:f5:01:ef:cd:25: a3:b5:b0:9e:65:ed:60:ea:9b:09:61:e2:f0:ab:96: cc:0d:d4:a6:3c:d7:b3:1a:77:52:3a:7d:b2:d8:75: f7:f2:90:b6:dd:2b:49:79:29:75:9c:2d:05:e2:51: fc:8d:4f:d7:12:82:d3:87:7c:5d:85:32:72:31:02: fd:b6:ac:6b:9d:5d:1e:ff:af:f6:f1:35:27:84:f0: 42:bc:d7:24:ec:ab:93:ff:bb:ed:aa:60:bd:3c:0b: 04:7a:63:3c:44:ff:e4:16:90:2a:51:57:2b:f8:bc: a0:d3:6a:c7:4c:db:6d:4d:8c:51:ae:c7:48:21:40: 9f:d5:84:76:1d:ad:db:5c:e3:aa:25:3a:a1:74:ec: f2:9b:33:02:09:03:d3:8d:5b:d4:a4:57:3e:ea:0b: 75:76:58:c0:f3:24:18:e0:66:70:a9:dc:d3:57:49: bc:64:52:82:b0:29:fa:6f:71:a7:37:60:1c:15:04: 23:17:41:2b:7d:4a:31:3e:bb:f8:43:5b:7a:5e:ab: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:A2:1B:B0:D6:23:48:33:63:71:4A:30:DE:AC:7C:20:D6:2B:78 X509v3 Authority Key Identifier: keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fa:02:73:2c:cf:ac:77:bf:08:85:0a:64:2c:60:b7:00:9b: 00:f0:ac:0d:7a:7c:de:47:ab:1d:2b:02:7a:28:88:56:32:3b: b7:40:f9:a7:7a:95:7b:df:e4:03:d5:0c:cb:99:e1:76:ec:09: 7c:0d:2d:b2:e9:96:31:54:4a:17:28:74:88:2e:7a:0c:a7:5b: 52:aa:dc:04:8b:19:95:01:c8:c5:a1:1f:d7:f9:28:3e:43:c5: bf:e7:5b:19:48:10:34:96:eb:72:30:33:8a:d3:3d:37:13:35: c5:6e:18:4f:bb:8a:7a:9d:0a:37:4b:bc:e9:28:94:65:76:1f: d7:fa:ac:7b:eb:19:23:73:a7:90:44:80:12:1f:dd:bc:ba:17: 3d:01:6b:ae:a6:2e:86:5b:a3:bc:9b:49:be:c1:0f:94:68:2b: 20:e6:5d:1b:23:f6:97:5b:0c:30:a0:f0:eb:b3:b7:40:1b:3b: 6c:eb:ca:ca:86:4f:08:ee:4d:b4:ed:c3:27:ac:69:69:64:36: 88:2f:9b:3c:2e:51:64:96:a8:50:48:7a:82:aa:81:5f:7d:e4: 8b:f1:49:09:49:fd:12:3c:d4:88:9e:73:80:e0:1b:a1:57:83: 0f:76:6b:e6:0d:5d:1c:25:3d:96:20:1e:2d:16:d5:69:d8:81: 9f:a3:5d:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPqTSzzyMfub6qRqceS5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOGY1NDM4MDczYTYyMWFlYTc3MmY1Y2I3YTRlZmQ1OGM2 Yjc3NGMwHhcNMjUxMjE1MjMwMDQzWhcNMjUxMjE2MjMwMDQzWjAzMTEwLwYDVQQD EyhhNjI4YTIxYmIwZDYyMzQ4MzM2MzcxNGEzMGRlYWM3YzIwZDYyYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qaSC6X1IhBN4RzN03sMP2WLHz7J Y95SFx7ZVpIxmcH9wipWBepVJAoUo6+JGIQ+h/S8+xyB9QHvzSWjtbCeZe1g6psJ YeLwq5bMDdSmPNezGndSOn2y2HX38pC23StJeSl1nC0F4lH8jU/XEoLTh3xdhTJy MQL9tqxrnV0e/6/28TUnhPBCvNck7KuT/7vtqmC9PAsEemM8RP/kFpAqUVcr+Lyg 02rHTNttTYxRrsdIIUCf1YR2Ha3bXOOqJTqhdOzymzMCCQPTjVvUpFc+6gt1dljA 8yQY4GZwqdzTV0m8ZFKCsCn6b3GnN2AcFQQjF0ErfUoxPrv4Q1t6XquAfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYoohuw1iNIM2NxSjDerHwg1it4MB8GA1UdIwQY MBaAFK2PVDgHOmIa6ncvXLek79WMa3dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2Yt MTc3OGJhMjVkOGI5LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2YtMTc3OGJhMjVkOGI5 LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPoCcyzP rHe/CIUKZCxgtwCbAPCsDXp83kerHSsCeiiIVjI7t0D5p3qVe9/kA9UMy5nhduwJ fA0tsumWMVRKFyh0iC56DKdbUqrcBIsZlQHIxaEf1/koPkPFv+dbGUgQNJbrcjAz itM9NxM1xW4YT7uKep0KN0u86SiUZXYf1/qse+sZI3OnkESAEh/dvLoXPQFrrqYu hlujvJtJvsEPlGgrIOZdGyP2l1sMMKDw67O3QBs7bOvKyoZPCO5NtO3DJ6xpaWQ2 iC+bPC5RZJaoUEh6gqqBX33ki/FJCUn9EjzUiJ5zgOAboVeDD3Zr5g1dHCU9liAe LRbVadiBn6Nddg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:18:57 2025 by rpki-client