This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json) Hash identifier: 4I86YwZpBeDQ/4IyD64Jr0DA8LFMjRVtA+e8595gW/E= Subject key identifier: C0:09:2E:9E:DD:8B:46:92:24:A9:45:46:49:D7:5B:7E:CC:F9:3E:E8 Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb Certificate serial: 019B2219CD85D2F07FF1107132185C1847EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 13:01:14 +0000 Manifest this update: Mon 15 Dec 2025 13:01:14 +0000 Manifest next update: Tue 16 Dec 2025 13:01:14 +0000 Files and hashes: 1: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (hash: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=) 2: T5Y8EpkKeGetNi2zzo4rltFiFJA.roa (hash: s9NKmZqIE9A+OEbtw2wi/j7clLv1bNESgqd0VT1/y7w=) 3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: pEMy3fafQLffhBsuMOG+U4x8c46F29O12RX03/u88qY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:cd:85:d2:f0:7f:f1:10:71:32:18:5c:18:47:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb Validity Not Before: Dec 15 13:01:14 2025 GMT Not After : Dec 16 13:01:14 2025 GMT Subject: CN=c0092e9edd8b469224a9454649d75b7eccf93ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:82:f8:57:4b:e9:37:4e:27:4a:76:c4:cb: e6:7f:0d:eb:dc:bb:ab:90:61:eb:00:81:1f:22:f3: 2b:ca:87:ed:a0:17:4a:6b:ab:2a:da:a8:5d:1c:bf: 54:6e:71:d1:75:a0:31:c5:35:e6:1c:8d:b9:75:bc: ca:b9:ed:3d:27:59:f1:20:02:3e:06:42:00:70:02: aa:01:80:f5:a0:1a:6e:34:84:04:64:b2:31:38:ac: a0:c2:c0:47:3d:7a:c2:38:3b:53:21:ee:ff:8b:2f: bd:85:99:66:e0:9a:ec:7a:0a:f6:17:80:a0:f5:20: 2f:71:57:4c:12:3d:d6:6c:5c:0b:3c:82:91:aa:c5: c7:d9:b0:9b:0b:31:bc:d0:8e:50:58:36:7a:8a:00: aa:04:3b:db:e1:e5:46:54:bb:94:26:1b:aa:a6:f7: 13:88:6e:fb:43:08:4a:31:6b:07:9d:69:f8:3a:d9: d9:97:ec:ab:e5:cb:fc:17:a6:3a:e0:53:d2:0f:ec: 17:6f:00:9a:80:f3:22:f6:dd:d9:49:5f:05:8c:16: dc:2c:be:55:b9:ed:27:b8:41:55:79:a3:b5:91:d8: 2c:be:c5:02:9e:48:85:80:5b:14:64:90:2b:13:30: a5:1e:96:a7:9e:47:cd:3c:56:0e:b4:04:16:97:2a: c7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:09:2E:9E:DD:8B:46:92:24:A9:45:46:49:D7:5B:7E:CC:F9:3E:E8 X509v3 Authority Key Identifier: keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:cd:f5:6f:c3:7b:bb:84:b4:91:d2:9e:1d:6f:81:08:44:8e: e4:57:d1:2c:38:84:16:9c:93:b5:ef:cf:b1:e1:f4:27:41:9b: 0b:a1:41:15:11:12:27:8c:b8:bf:60:15:be:10:d4:2e:71:45: c9:f4:d5:65:b8:81:3c:98:77:1f:00:da:d7:f4:a0:49:fa:c6: e5:d8:31:12:b6:c1:2e:92:e2:6b:ec:01:96:cb:f2:9d:6c:53: 02:75:a4:62:1b:c8:9b:ee:9e:c6:ab:7d:cc:3c:b3:40:c1:8b: e8:53:52:50:35:cb:2a:8c:8f:74:42:a8:2a:72:cf:3b:47:7f: ce:7b:23:f8:59:d0:02:0f:9f:a6:99:44:46:b2:dc:d5:ce:13: ad:30:88:d0:07:16:8d:f7:ff:30:0b:65:25:18:18:53:f8:b4: 49:6d:84:4c:13:53:62:4a:1a:57:5b:ac:37:4b:34:0a:af:89: 05:6d:52:e0:b3:57:76:1f:1b:66:a0:0a:12:e9:56:d9:a8:45: 42:e6:fe:f3:b5:76:36:2b:1d:55:2c:4b:35:3e:50:42:08:b2: 24:60:cd:6d:32:ce:a7:d2:07:17:d2:31:31:4c:b8:65:49:23: 13:e6:4c:dd:6a:5f:29:64:43:35:e1:26:0d:85:20:4e:81:d4: 12:1d:43:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGc2F0vB/8RBxMhhcGEfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZGUyMzU4ZjU3NDM5YzQ0ZjZiMTY2MmY1NTYxNWEwYWFi NmJhY2IwHhcNMjUxMjE1MTMwMTE0WhcNMjUxMjE2MTMwMTE0WjAzMTEwLwYDVQQD EyhjMDA5MmU5ZWRkOGI0NjkyMjRhOTQ1NDY0OWQ3NWI3ZWNjZjkzZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYyC+FdL6TdOJ0p2xMvmfw3r3Lur kGHrAIEfIvMryoftoBdKa6sq2qhdHL9UbnHRdaAxxTXmHI25dbzKue09J1nxIAI+ BkIAcAKqAYD1oBpuNIQEZLIxOKygwsBHPXrCODtTIe7/iy+9hZlm4Jrsegr2F4Cg 9SAvcVdMEj3WbFwLPIKRqsXH2bCbCzG80I5QWDZ6igCqBDvb4eVGVLuUJhuqpvcT iG77QwhKMWsHnWn4OtnZl+yr5cv8F6Y64FPSD+wXbwCagPMi9t3ZSV8FjBbcLL5V ue0nuEFVeaO1kdgsvsUCnkiFgFsUZJArEzClHpannkfNPFYOtAQWlyrHDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAJLp7di0aSJKlFRknXW37M+T7oMB8GA1UdIwQY MBaAFKzeI1j1dDnET2sWYvVWFaCqtrrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9iNjVlMzMtZjk0Ny00OTY4LWEyN2Mt ZGQ5OWQzOTdlNGQ2LzEvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9iNjVlMzMtZjk0Ny00OTY4LWEyN2MtZGQ5OWQzOTdlNGQ2 LzEvck40aldQVjBPY1JQYXhaaTlWWVZvS3EydXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACM31b8N7 u4S0kdKeHW+BCESO5FfRLDiEFpyTte/PseH0J0GbC6FBFRESJ4y4v2AVvhDULnFF yfTVZbiBPJh3HwDa1/SgSfrG5dgxErbBLpLia+wBlsvynWxTAnWkYhvIm+6exqt9 zDyzQMGL6FNSUDXLKoyPdEKoKnLPO0d/znsj+FnQAg+fpplERrLc1c4TrTCI0AcW jff/MAtlJRgYU/i0SW2ETBNTYkoaV1usN0s0Cq+JBW1S4LNXdh8bZqAKEulW2ahF Qub+87V2NisdVSxLNT5QQgiyJGDNbTLOp9IHF9IxMUy4ZUkjE+ZM3WpfKWRDNeEm DYUgToHUEh1DGQ== -----END CERTIFICATE-----Generated at Mon Dec 15 16:46:59 2025 by rpki-client