This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft File: rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json) Hash identifier: rGSYoOgUdD/PdQXquoZnU1mvGfLlxFmVxI6mIkaWz34= Subject key identifier: E6:A4:4D:54:DB:96:25:2F:19:AD:EA:93:2E:35:FF:C3:11:12:23:4C Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B Certificate issuer: /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b Certificate serial: 019B59760CFE7E8AE2A3BB7695DD0BE1A030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:01:07 +0000 Manifest this update: Fri 26 Dec 2025 07:01:07 +0000 Manifest next update: Sat 27 Dec 2025 07:01:07 +0000 Files and hashes: 1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=) 2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: PEzGs1Mb3Iazo6fEIkjDC4R/UaOKHfK9Tj2AN0IiKBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:0c:fe:7e:8a:e2:a3:bb:76:95:dd:0b:e1:a0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b Validity Not Before: Dec 26 07:01:07 2025 GMT Not After : Dec 27 07:01:07 2025 GMT Subject: CN=e6a44d54db96252f19adea932e35ffc31112234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:7b:fc:b2:c9:5b:9f:b4:60:cc:34:2c:be: b4:6c:c4:45:2f:8a:4e:79:6c:74:2a:34:1f:bd:28: 1a:02:4d:3a:9c:d0:89:0b:e3:39:39:42:39:ef:de: 49:05:ab:6c:0a:9c:fc:7f:77:24:b4:f3:39:cd:2f: 17:cc:ec:4c:76:75:4a:08:81:de:63:ac:d9:9f:6b: fa:0a:96:1e:8c:d4:68:e3:72:86:02:4a:79:1c:6f: 4b:4b:68:e1:0d:90:46:9c:03:eb:e1:39:7c:ce:b0: 11:f5:77:10:11:9e:5e:dc:ac:6f:4b:48:2b:3d:49: 45:21:5c:57:58:cd:e7:96:a2:50:1c:c0:de:ae:3f: bf:4f:73:ea:e7:b2:04:76:b1:b2:99:08:5d:00:55: d4:f6:20:4e:37:0a:0f:13:cc:4c:e4:cc:ee:3b:cb: 01:44:83:73:e1:97:46:92:02:bc:15:5d:08:2d:dc: 70:b3:9b:07:45:cc:ef:0a:a1:00:bb:2f:9a:0a:01: a5:9a:2d:6e:95:ba:bf:e0:3d:13:0c:2a:e9:a3:75: 22:2e:e6:3d:33:6b:55:1a:cc:2d:58:91:d3:7a:bf: fd:cd:3c:0d:c9:0f:57:be:8a:89:61:47:39:21:5b: 93:90:69:fe:ea:a4:6c:53:d6:69:d7:ce:6c:ee:b6: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:4D:54:DB:96:25:2F:19:AD:EA:93:2E:35:FF:C3:11:12:23:4C X509v3 Authority Key Identifier: keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a7:c2:16:ea:54:e7:73:34:71:d3:a6:d8:cc:e3:a3:3f:10: a4:de:ec:87:dd:7f:76:ad:c8:64:2a:36:c8:7d:72:0f:6e:46: 4b:8d:6d:91:74:e1:a1:20:20:4a:64:b2:8c:58:68:90:e0:84: f8:db:10:4c:e0:f2:5e:bc:96:19:0c:24:8a:4f:98:91:38:51: f7:5d:6f:0d:6c:a3:ce:f6:4e:f6:cf:74:16:b5:fb:30:a1:52: c9:74:60:ee:ca:9b:ad:7c:4b:63:f0:30:d6:a9:e3:10:fd:85: 4d:bd:38:65:40:c0:11:9b:19:97:e2:ef:8f:f8:13:fc:d8:8a: c5:fe:33:8b:9c:e3:df:0e:d6:20:89:37:f2:2f:c2:8d:c7:db: da:f2:9c:26:af:4e:15:a3:14:e5:7b:3e:55:74:2e:38:64:45: 76:65:04:83:d1:48:d3:13:a8:b7:a5:f9:a4:5d:c2:83:74:49: 6b:32:f0:0b:28:2b:f1:9f:a7:c0:d9:3b:e8:3a:80:bf:7d:ec: ea:8a:c4:65:75:cb:72:17:3d:a3:58:be:9d:53:3e:4d:78:12: de:d5:b4:90:56:d0:08:6b:60:e4:76:c6:77:42:a7:0b:44:67: 9c:b8:d8:31:3b:ef:f8:c6:2a:70:d9:9e:6c:ae:f5:a6:ad:99: cd:54:49:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdgz+forio7t2ld0L4aAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZDZlZjE3ZTZmOTUxODE4OTBlNTRkMDAwYTJhYzhmZjJk MjQ5OWIwHhcNMjUxMjI2MDcwMTA3WhcNMjUxMjI3MDcwMTA3WjAzMTEwLwYDVQQD EyhlNmE0NGQ1NGRiOTYyNTJmMTlhZGVhOTMyZTM1ZmZjMzExMTIyMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEF7/LLJW5+0YMw0LL60bMRFL4pO eWx0KjQfvSgaAk06nNCJC+M5OUI5795JBatsCpz8f3cktPM5zS8XzOxMdnVKCIHe Y6zZn2v6CpYejNRo43KGAkp5HG9LS2jhDZBGnAPr4Tl8zrAR9XcQEZ5e3KxvS0gr PUlFIVxXWM3nlqJQHMDerj+/T3Pq57IEdrGymQhdAFXU9iBONwoPE8xM5MzuO8sB RINz4ZdGkgK8FV0ILdxws5sHRczvCqEAuy+aCgGlmi1ulbq/4D0TDCrpo3UiLuY9 M2tVGswtWJHTer/9zTwNyQ9XvoqJYUc5IVuTkGn+6qRsU9Zp185s7rYfoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOakTVTbliUvGa3qky41/8MREiNMMB8GA1UdIwQY MBaAFK7W7xfm+VGBiQ5U0ACirI/y0kmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTct MGFlMGYxYWNjZGE0LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jN2VhMWYtYWEyNy00YWM4LThjYTctMGFlMGYxYWNjZGE0 LzEvcnRidkYtYjVVWUdKRGxUUUFLS3NqX0xTU1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqfCFupU 53M0cdOm2Mzjoz8QpN7sh91/dq3IZCo2yH1yD25GS41tkXThoSAgSmSyjFhokOCE +NsQTODyXryWGQwkik+YkThR911vDWyjzvZO9s90FrX7MKFSyXRg7sqbrXxLY/Aw 1qnjEP2FTb04ZUDAEZsZl+Lvj/gT/NiKxf4zi5zj3w7WIIk38i/Cjcfb2vKcJq9O FaMU5Xs+VXQuOGRFdmUEg9FI0xOot6X5pF3Cg3RJazLwCygr8Z+nwNk76DqAv33s 6orEZXXLchc9o1i+nVM+TXgS3tW0kFbQCGtg5HbGd0KnC0RnnLjYMTvv+MYqcNme bK71pq2ZzVRJOQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:42 2025 by rpki-client