This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft File: preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json) Hash identifier: MzOUeteVPbBsO91TtwW+rHl4/v/x19dx17dYhrbwxD8= Subject key identifier: 40:38:B0:AA:FF:8F:FB:3B:31:3F:D0:10:D4:8F:12:7D:8C:1C:EB:54 Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Certificate serial: 019B10B80653BF0CCD80D4699E300A506799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft Manifest number: 15F8 Signing time: Fri 12 Dec 2025 04:00:53 +0000 Manifest this update: Fri 12 Dec 2025 04:00:53 +0000 Manifest next update: Sat 13 Dec 2025 04:00:53 +0000 Files and hashes: 1: 6R635Ptd67sQbUozDAHL15KwAZ8.roa (hash: FeJLdgD5f1a4PRbLvL4XZUcT1XCVqYv8DaI7m1HKYu4=) 2: BGlv0Nq1aORhjho_eomErpdENqs.roa (hash: tJlt0s+DB+Wx1B02lbAuTeaAFj/Rwy4EK+7+WopLHuY=) 3: EcvOEckBpGv8WcgKGLbyF5bYsw8.roa (hash: iM/JhqVxaPI3RLw6TbcIGYCT5pzlMW9q0BUKqfAvA2s=) 4: PHALUzcgKSrWpp9PLu5bWuqYals.roa (hash: ipz2KfdlfbDQbWsB2hP2+lgmuhx6HeNDSZnM+uKEXUI=) 5: k94_YS0wqPGUh9Li10sS34dlvmM.roa (hash: BUjj7NfQhPbheGokvO6j0wOKq8xKD5UoEM8obUQTSDg=) 6: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: Oxp19TDK/Fo56gNUmWB5wysxdvhzw6Pz7Fxyi4ScJS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:06:53:bf:0c:cd:80:d4:69:9e:30:0a:50:67:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Validity Not Before: Dec 12 04:00:53 2025 GMT Not After : Dec 13 04:00:53 2025 GMT Subject: CN=4038b0aaff8ffb3b313fd010d48f127d8c1ceb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:89:de:62:c2:71:95:e0:5d:32:8e:8b:cc:e9: 90:47:05:5d:cf:09:9a:ac:a5:42:f8:d0:b9:2c:8e: 00:bb:09:24:46:b6:fd:c5:fc:44:4b:8d:b5:65:3a: b4:dc:2a:23:c1:70:23:6b:1a:43:79:17:6b:f4:1e: 5f:3e:23:b0:3d:dc:49:ae:eb:69:ee:f8:33:32:5f: 45:91:7e:eb:3d:69:4d:1f:c7:fb:d8:16:e3:a7:17: 8d:4f:2a:86:e4:e1:0a:c5:f0:bb:fb:7c:88:05:83: 10:fa:9a:18:cb:be:e5:7b:78:c0:be:55:59:37:66: 2c:a8:e1:3f:0f:a3:02:c0:a5:47:41:a9:20:dd:27: dc:55:74:4a:bd:9e:db:b3:40:e2:e3:12:52:1e:3d: 9f:bc:7b:62:db:25:57:c5:5c:03:7a:dc:c6:20:db: 98:e8:bd:b4:a0:9e:86:4a:e8:f0:e9:b2:7e:df:81: 21:c5:06:bf:3e:07:a3:94:54:c0:4c:77:61:dd:40: 5c:15:79:67:2f:6f:6a:21:b8:f6:47:94:1c:5a:90: e6:c3:7d:bc:0f:f7:81:e6:d5:72:eb:5b:6a:09:d0: 47:0b:7e:b2:a2:c1:e5:13:40:f1:de:ef:95:73:41: c1:57:83:1b:7c:a1:a9:b7:6a:ca:35:ce:a1:8a:1b: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:38:B0:AA:FF:8F:FB:3B:31:3F:D0:10:D4:8F:12:7D:8C:1C:EB:54 X509v3 Authority Key Identifier: keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:08:50:47:e6:5d:9c:a9:4b:98:27:a7:16:9b:76:08:7e:de: e3:e6:79:b4:fc:14:9d:9c:dd:da:0c:46:bb:c9:6a:d7:e8:9f: c6:ea:57:f6:09:ad:92:45:6a:3f:a8:62:47:c4:63:c0:46:e9: f3:ed:e3:13:a1:c6:b0:11:5a:b6:7a:29:14:c3:24:25:fa:be: d6:57:18:84:59:5d:01:be:6d:bc:fc:65:de:b4:f9:10:4c:00: 94:70:63:df:4e:c2:cd:30:6f:09:b9:d5:96:4c:8c:f0:b7:3d: b3:17:05:08:f5:f4:7f:09:de:b3:a2:4b:aa:ad:47:97:ee:16: ff:07:4e:ea:cc:9c:f3:6e:b2:87:01:28:53:be:2a:63:73:38: 16:d8:27:42:62:9f:cc:46:17:28:28:0a:c1:96:b5:b9:2f:e5: ad:aa:3b:fb:2f:d3:49:07:6b:a9:58:2b:2e:d9:fc:41:4e:76: 38:da:6f:e8:f8:17:72:fb:ee:94:6c:cb:c5:30:4b:aa:f5:31: ec:77:a5:74:8a:61:25:7a:02:bf:35:a7:35:7e:e6:c2:66:85: 3d:8b:27:29:ff:df:89:e5:9b:f5:5c:f0:cd:d2:d5:25:df:bf: c3:62:31:05:da:1b:55:59:57:f7:e3:5b:a5:19:17:85:e1:fd: b1:39:d2:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuAZTvwzNgNRpnjAKUGeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm ZjFlMDkwHhcNMjUxMjEyMDQwMDUzWhcNMjUxMjEzMDQwMDUzWjAzMTEwLwYDVQQD Eyg0MDM4YjBhYWZmOGZmYjNiMzEzZmQwMTBkNDhmMTI3ZDhjMWNlYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoneYsJxleBdMo6LzOmQRwVdzwma rKVC+NC5LI4AuwkkRrb9xfxES421ZTq03CojwXAjaxpDeRdr9B5fPiOwPdxJrutp 7vgzMl9FkX7rPWlNH8f72BbjpxeNTyqG5OEKxfC7+3yIBYMQ+poYy77le3jAvlVZ N2YsqOE/D6MCwKVHQakg3SfcVXRKvZ7bs0Di4xJSHj2fvHti2yVXxVwDetzGINuY 6L20oJ6GSujw6bJ+34EhxQa/PgejlFTATHdh3UBcFXlnL29qIbj2R5QcWpDmw328 D/eB5tVy61tqCdBHC36yosHlE0Dx3u+Vc0HBV4MbfKGpt2rKNc6hihszXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA4sKr/j/s7MT/QENSPEn2MHOtUMB8GA1UdIwQY MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt MDZjOTI5NmYwOGEyLzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQhQR+Zd nKlLmCenFpt2CH7e4+Z5tPwUnZzd2gxGu8lq1+ifxupX9gmtkkVqP6hiR8RjwEbp 8+3jE6HGsBFatnopFMMkJfq+1lcYhFldAb5tvPxl3rT5EEwAlHBj307CzTBvCbnV lkyM8Lc9sxcFCPX0fwnes6JLqq1Hl+4W/wdO6syc826yhwEoU74qY3M4FtgnQmKf zEYXKCgKwZa1uS/lrao7+y/TSQdrqVgrLtn8QU52ONpv6PgXcvvulGzLxTBLqvUx 7HeldIphJXoCvzWnNX7mwmaFPYsnKf/fieWb9VzwzdLVJd+/w2IxBdobVVlX9+Nb pRkXheH9sTnSXA== -----END CERTIFICATE-----Generated at Fri Dec 12 14:41:23 2025 by rpki-client