This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json) Hash identifier: 4w3XgQCLtPedHwLesASUlzu0ere4qk6mm9Ljz7pwe3c= Subject key identifier: 68:7B:CD:98:9F:4D:D7:98:E6:37:0D:9B:5F:4E:BC:15:CF:DA:56:C9 Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Certificate serial: 019B40C92C1FC9D1311AA9476C424B7F742C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft Manifest number: 16DE Signing time: Sun 21 Dec 2025 12:01:24 +0000 Manifest this update: Sun 21 Dec 2025 12:01:24 +0000 Manifest next update: Mon 22 Dec 2025 12:01:24 +0000 Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=) 2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: mjxjRdqYET8WCuDv2d2tPprpU1iCUvaqt0teqyy16KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:2c:1f:c9:d1:31:1a:a9:47:6c:42:4b:7f:74:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Validity Not Before: Dec 21 12:01:24 2025 GMT Not After : Dec 22 12:01:24 2025 GMT Subject: CN=687bcd989f4dd798e6370d9b5f4ebc15cfda56c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:1d:b1:fd:da:e1:bf:5a:ad:70:5c:0b:a2: e9:fe:71:4f:1b:8e:1b:31:62:d3:9c:d5:16:6a:b8: 64:c5:1f:ad:c6:07:8f:19:8e:f8:72:3f:4c:08:37: a5:4a:a6:f7:2f:82:d2:a4:4b:be:48:89:1c:b4:53: a3:38:a9:27:fb:ba:48:47:8a:52:60:33:7d:50:da: ca:66:22:54:f9:c4:36:bd:0c:76:42:7c:22:f8:05: 09:41:a8:5f:58:31:78:56:24:7b:d0:2e:d4:34:8d: 53:0d:55:fa:cc:2b:79:a6:9d:63:4e:04:7f:17:d4: b2:44:a2:33:2d:f8:a1:c4:fc:c8:94:9f:fc:29:cb: 23:cb:fb:8a:89:ba:b9:94:6e:ac:97:c7:72:6e:3c: 6a:be:45:e8:80:5c:05:86:38:e0:c6:d2:bb:80:9f: af:ad:3c:f9:84:f5:45:24:af:3b:4c:06:33:76:ec: 9a:c8:ac:91:72:0e:35:a2:a9:42:e1:a1:29:5f:c4: c5:7c:76:c0:1e:40:7f:fa:89:05:bb:44:c3:96:ec: bf:2f:1f:df:dc:f6:25:7f:8d:97:77:4c:7f:11:89: 4b:f2:70:f0:dc:e0:9c:97:b1:6f:57:bb:39:5e:80: ef:cb:26:e8:7c:ad:16:dc:35:03:57:5f:5c:ad:71: ce:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:CD:98:9F:4D:D7:98:E6:37:0D:9B:5F:4E:BC:15:CF:DA:56:C9 X509v3 Authority Key Identifier: keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:dd:aa:02:14:fc:b1:83:3e:14:50:29:65:ac:26:59:a5:a6: b7:3a:41:c4:a7:89:e6:68:67:2a:0a:9c:11:ee:54:81:5b:0f: e2:e1:09:a8:b9:f0:aa:2b:ca:31:7e:ac:24:d2:d5:f3:ed:d7: 2f:f0:08:29:be:a1:45:8d:a0:28:01:87:26:27:af:25:17:d6: 50:da:2b:8f:06:3b:6c:e1:3a:f3:c0:9e:2b:93:ff:e5:32:87: 70:3a:25:55:9b:c2:d4:0d:1e:f4:ed:8e:53:f4:10:68:53:bf: c6:58:a6:a4:46:4e:a3:7c:73:82:28:e2:e8:91:86:f3:6a:38: 0d:83:bc:ab:30:7b:35:ab:21:eb:24:f5:0b:93:87:3c:5e:91: 69:da:6d:b1:66:1f:a0:96:e2:ca:05:d2:ca:47:06:1f:5b:03: ab:9d:22:e5:8d:cf:98:4b:e7:b9:ff:e1:38:98:d2:61:f0:50: 01:25:f8:96:a1:26:e7:76:7d:47:90:91:86:a2:c5:3d:7e:69: 52:87:11:e8:9f:f1:1f:fd:fd:6a:6e:b4:48:58:dc:81:07:35: 79:81:c7:eb:0c:82:aa:a4:1b:0f:4f:b7:7e:16:b8:be:e6:5d: 8e:77:cb:e3:60:52:00:f9:a2:96:12:e9:c7:08:cf:d4:b8:f3: 59:e6:5b:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySwfydExGqlHbEJLf3QsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzFhZDQ2ZTBiOWMwMTBjZDI4ODVlNjAwMmMxYTViOTNj ZDUxMTIwHhcNMjUxMjIxMTIwMTI0WhcNMjUxMjIyMTIwMTI0WjAzMTEwLwYDVQQD Eyg2ODdiY2Q5ODlmNGRkNzk4ZTYzNzBkOWI1ZjRlYmMxNWNmZGE1NmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZIdsf3a4b9arXBcC6Lp/nFPG44b MWLTnNUWarhkxR+txgePGY74cj9MCDelSqb3L4LSpEu+SIkctFOjOKkn+7pIR4pS YDN9UNrKZiJU+cQ2vQx2Qnwi+AUJQahfWDF4ViR70C7UNI1TDVX6zCt5pp1jTgR/ F9SyRKIzLfihxPzIlJ/8Kcsjy/uKibq5lG6sl8dybjxqvkXogFwFhjjgxtK7gJ+v rTz5hPVFJK87TAYzduyayKyRcg41oqlC4aEpX8TFfHbAHkB/+okFu0TDluy/Lx/f 3PYlf42Xd0x/EYlL8nDw3OCcl7FvV7s5XoDvyybofK0W3DUDV19crXHO/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh7zZifTdeY5jcNm19OvBXP2lbJMB8GA1UdIwQY MBaAFEUxrUbgucAQzSiF5gAsGluTzVESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAt MzJkZTU4NThiYTZjLzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAtMzJkZTU4NThiYTZj LzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZd2qAhT8 sYM+FFApZawmWaWmtzpBxKeJ5mhnKgqcEe5UgVsP4uEJqLnwqivKMX6sJNLV8+3X L/AIKb6hRY2gKAGHJievJRfWUNorjwY7bOE688CeK5P/5TKHcDolVZvC1A0e9O2O U/QQaFO/xlimpEZOo3xzgiji6JGG82o4DYO8qzB7Nash6yT1C5OHPF6RadptsWYf oJbiygXSykcGH1sDq50i5Y3PmEvnuf/hOJjSYfBQASX4lqEm53Z9R5CRhqLFPX5p UocR6J/xH/39am60SFjcgQc1eYHH6wyCqqQbD0+3fha4vuZdjnfL42BSAPmilhLp xwjP1LjzWeZb7g== -----END CERTIFICATE-----Generated at Sun Dec 21 19:28:01 2025 by rpki-client