This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft File: rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json) Hash identifier: XOWWYLYRDASM+YI1bMsELvX4J3lprEfF7djJL8ehtTc= Subject key identifier: 5B:B0:A3:C3:C4:0E:58:DC:31:67:39:E3:ED:1F:87:DF:45:D2:BF:6F Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e Certificate serial: 019B35A0B84B915CFA17AD0FA11980F43B3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft Manifest number: 06E4 Signing time: Fri 19 Dec 2025 08:01:23 +0000 Manifest this update: Fri 19 Dec 2025 08:01:23 +0000 Manifest next update: Sat 20 Dec 2025 08:01:23 +0000 Files and hashes: 1: 32XJfOuajaXKWFXToBNlGxtkW6Q.roa (hash: dKLGEpCpRymK3fL0g+5BlFVGvIZeLfMhwXmSO0Ljm9k=) 2: JNkggvQx74p1btfiu-ncCk_cuvY.roa (hash: 3PlXzxEghXwRv2XVfxrZveNHTFUHK5O1XcLko9Bh3BM=) 3: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (hash: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=) 4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: 1d5Cy6fWFfPCsw40mzDwzu8JuZLXmx3xS+YMvcBBQbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:b8:4b:91:5c:fa:17:ad:0f:a1:19:80:f4:3b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e Validity Not Before: Dec 19 08:01:23 2025 GMT Not After : Dec 20 08:01:23 2025 GMT Subject: CN=5bb0a3c3c40e58dc316739e3ed1f87df45d2bf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:6b:26:22:52:c7:e0:44:93:24:3d:b8:ab: 81:66:26:25:f3:9f:d3:c0:86:ec:8c:e0:53:db:85: ea:0e:cc:f9:11:d5:ce:62:f1:76:06:48:32:b3:47: 35:6a:68:5c:85:5d:e8:7b:f5:00:bd:bc:e6:38:54: 4e:fc:f4:ab:d6:ac:24:ff:e4:ba:a7:28:75:be:5d: e3:f1:02:f5:de:69:91:a3:c6:06:7c:a3:30:c3:c5: b7:53:d8:98:a5:85:84:ed:26:08:f9:67:34:44:01: f5:f5:a4:75:05:b3:0e:8d:f4:84:f2:e1:6d:85:da: 8e:29:46:73:3c:c1:2c:65:56:29:96:df:de:a7:7c: f8:c5:94:dc:b7:5e:65:76:83:1d:48:e8:d9:ee:d7: fd:e9:3d:91:25:6f:cf:f2:10:07:5d:9c:a2:5f:53: 30:88:11:23:0f:3a:b2:b5:9a:1e:58:f4:c9:5b:a1: 97:72:92:4a:22:7c:48:55:ab:21:95:cd:83:f9:65: e1:d4:66:7b:2d:30:46:52:21:d1:64:40:18:85:df: d4:06:0b:9a:31:aa:1f:08:e9:77:11:e8:9b:c2:60: cd:16:89:cd:9d:e2:d3:aa:5b:55:0c:d1:c4:85:81: 87:92:21:05:4e:78:55:c7:9e:b4:7e:03:ad:00:29: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B0:A3:C3:C4:0E:58:DC:31:67:39:E3:ED:1F:87:DF:45:D2:BF:6F X509v3 Authority Key Identifier: keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d1:5b:b2:ba:35:2d:47:cf:f0:69:04:2f:b2:aa:52:60:a4: d7:47:1b:c4:97:b8:5b:e0:aa:fa:ee:46:33:93:2d:c9:b7:2f: f7:d1:5d:35:27:88:44:f5:79:d0:7a:1e:fa:67:3e:6f:28:d9: 92:05:8c:b2:45:c6:8e:83:2d:b6:fe:5e:05:5e:da:d7:df:89: 00:bf:78:40:b1:f9:af:79:60:c9:98:a7:e3:05:37:a3:bc:27: a5:4a:84:d5:e4:0c:b5:26:6d:4d:3e:d0:31:aa:67:6e:b4:c5: 08:07:dd:7c:c0:f2:b8:91:d6:f7:89:2d:59:45:ac:4e:32:3c: b1:c6:a1:b9:bc:ab:18:a1:54:22:df:9c:22:b5:67:dd:aa:11: 1c:95:87:a9:7b:a4:f9:06:0d:91:e3:fd:e5:36:e2:2a:de:65: 20:c0:21:04:75:fb:ff:f2:59:3f:3f:37:c2:d1:fb:55:a2:d5: a1:1e:07:3a:76:d1:8f:08:77:a1:a6:97:81:0e:60:e1:f2:ba: 99:7e:bb:e9:12:e7:cc:2e:51:be:9d:b2:c3:af:18:d1:7c:85: dd:f2:8d:e0:fe:dd:19:cd:42:18:17:32:bb:12:55:a9:bb:54: 2c:b0:a0:dd:dd:23:6f:72:cc:9d:8e:44:9a:09:37:a8:91:c5: 67:b0:64:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oLhLkVz6F60PoRmA9Ds9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl ZTgyOGUwHhcNMjUxMjE5MDgwMTIzWhcNMjUxMjIwMDgwMTIzWjAzMTEwLwYDVQQD Eyg1YmIwYTNjM2M0MGU1OGRjMzE2NzM5ZTNlZDFmODdkZjQ1ZDJiZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgdrJiJSx+BEkyQ9uKuBZiYl85/T wIbsjOBT24XqDsz5EdXOYvF2Bkgys0c1amhchV3oe/UAvbzmOFRO/PSr1qwk/+S6 pyh1vl3j8QL13mmRo8YGfKMww8W3U9iYpYWE7SYI+Wc0RAH19aR1BbMOjfSE8uFt hdqOKUZzPMEsZVYplt/ep3z4xZTct15ldoMdSOjZ7tf96T2RJW/P8hAHXZyiX1Mw iBEjDzqytZoeWPTJW6GXcpJKInxIVashlc2D+WXh1GZ7LTBGUiHRZEAYhd/UBgua MaofCOl3EeibwmDNFonNneLTqltVDNHEhYGHkiEFTnhVx560fgOtACl2qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuwo8PEDljcMWc54+0fh99F0r9vMB8GA1UdIwQY MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt OTI2YzRhMzI2ZTA4LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4 LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNFbsro1 LUfP8GkEL7KqUmCk10cbxJe4W+Cq+u5GM5Mtybcv99FdNSeIRPV50Hoe+mc+byjZ kgWMskXGjoMttv5eBV7a19+JAL94QLH5r3lgyZin4wU3o7wnpUqE1eQMtSZtTT7Q MapnbrTFCAfdfMDyuJHW94ktWUWsTjI8scahubyrGKFUIt+cIrVn3aoRHJWHqXuk +QYNkeP95TbiKt5lIMAhBHX7//JZPz83wtH7VaLVoR4HOnbRjwh3oaaXgQ5g4fK6 mX676RLnzC5Rvp2yw68Y0XyF3fKN4P7dGc1CGBcyuxJVqbtULLCg3d0jb3LMnY5E mgk3qJHFZ7Bkcw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:54:15 2025 by rpki-client