This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft File: r22p1WtCwrgWsa5rGFElq_IVk-8.mft (raw, json) Hash identifier: vFXHHfGprLN0edE5bCpgJmSsRthpIHChUVTUCoePgas= Subject key identifier: BD:03:15:96:7A:88:A0:F1:B3:E8:C3:D3:C8:B1:59:8D:EC:94:B2:46 Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF Certificate issuer: /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Certificate serial: 019B0F00EDBF291F57A33260E8FC18CB6A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft Manifest number: 0227 Signing time: Thu 11 Dec 2025 20:01:17 +0000 Manifest this update: Thu 11 Dec 2025 20:01:17 +0000 Manifest next update: Fri 12 Dec 2025 20:01:17 +0000 Files and hashes: 1: HIQgSnhii2MmaCB9iCEZZjQs0es.roa (hash: ZmTRYjwIZuazrIV6CyDdqn6baHfY786spUlKnzCEtrI=) 2: bBGQxULUfgQ-36zlMXfyfxhMgv0.roa (hash: gb5ulfRe2yG9hXwqyCkBkrrYHVbdMbZmAMmYnD1gFm0=) 3: mqFsim5-hi0MZTcLot58PVfSTYM.roa (hash: eHkkkj65fxN14PVyu/eH+6Rea5ciEBRsLvLo2M2czPQ=) 4: r22p1WtCwrgWsa5rGFElq_IVk-8.crl (hash: 7hixeduyx5eA417GnhcMrSswMrpzlc8YXZVU5plbHGo=) 5: vQgvBo8k7hDdrGs4_E-mcIsRvTo.roa (hash: nruWecuV93Z70AnDAf7d93G7uLJn4YXCw7HPwllFV6Q=) 6: zL5-bAaGKrg00nXa4Fn138IIxZ4.roa (hash: M0v0JdyOR6B67NfHINIqXbYt7Qf8KStgSSSkak8wlls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:ed:bf:29:1f:57:a3:32:60:e8:fc:18:cb:6a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef Validity Not Before: Dec 11 20:01:17 2025 GMT Not After : Dec 12 20:01:17 2025 GMT Subject: CN=bd0315967a88a0f1b3e8c3d3c8b1598dec94b246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:85:ba:bb:e5:29:1b:e8:ad:1d:a9:21:c5: 44:e3:7a:e5:99:8f:8d:97:06:fd:64:10:9d:a5:99: d2:72:36:f2:24:2b:cc:4f:ee:2a:66:7b:67:f9:6e: ed:d5:f7:25:7f:24:ca:49:81:59:be:85:0c:06:be: 99:03:23:b7:d6:1b:aa:cf:f7:75:85:d0:0a:51:55: 18:3a:8a:6f:e6:bc:54:7c:b1:dc:9c:db:02:bf:af: 88:13:1f:85:2e:43:83:7d:08:27:83:30:98:8d:e8: e6:61:e1:c4:83:40:cc:d4:69:8e:c5:ec:d4:54:b2: 59:40:cf:66:62:04:50:3f:44:d4:e2:c7:4a:02:c3: d7:da:a0:24:23:43:00:d5:8e:cf:cd:e2:e3:54:df: fe:02:06:b9:7f:42:0e:30:42:f7:06:02:5f:81:e3: 00:81:19:4b:d0:1f:05:52:8d:5f:e1:bb:0b:a4:bc: 96:a7:f7:b3:98:5a:4e:24:59:76:8a:b8:90:53:f2: 21:43:51:dc:7e:8a:d7:52:65:8f:3d:09:6a:38:62: cc:0f:ba:99:6a:97:b0:7e:8b:04:6d:5c:38:ca:60: fa:40:01:f2:b5:0b:74:49:91:96:28:de:c9:48:01: 94:ff:c4:d7:c3:80:bf:8c:20:22:09:6d:7f:74:97: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:03:15:96:7A:88:A0:F1:B3:E8:C3:D3:C8:B1:59:8D:EC:94:B2:46 X509v3 Authority Key Identifier: keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4b:e9:22:e4:26:20:79:45:d9:df:8c:a3:06:fd:47:ab:93: 49:44:e0:42:d1:ef:d9:95:fb:5f:7b:42:4d:56:a0:52:0b:16: bc:34:92:9e:a8:4d:26:02:1f:ed:c4:37:2a:3a:0a:b4:7f:24: bf:ff:af:79:98:e8:9f:a7:4f:34:9f:6b:af:fb:60:bc:f1:90: f9:87:d3:6f:65:dd:8d:76:3a:81:f2:21:73:4a:7f:a2:df:e2: d7:6d:f9:cf:dd:4f:b7:db:0d:41:2d:11:08:21:32:11:4b:89: aa:79:7a:ef:ef:3d:93:91:30:5a:83:4b:9b:68:e1:b7:12:9a: a1:02:56:12:58:81:ba:42:e2:5b:84:e1:ba:69:1b:91:2c:65: b4:80:f7:23:39:3a:e0:93:ab:ee:a6:55:1e:06:42:92:85:ba: 26:b1:99:22:5b:0f:d0:30:9f:d0:cb:c8:62:6b:26:fc:04:01: a7:f2:f4:8d:98:8a:a2:2e:a4:16:6d:cb:85:c9:09:98:7a:5d: de:fe:4f:a6:0c:d2:84:24:bb:cc:4d:da:e7:ee:f1:ff:fa:78: 1b:3f:bb:de:9e:7c:0f:de:0d:8d:87:16:91:0f:ce:8a:91:a2: bf:dd:81:e4:05:a2:15:ae:c2:89:6a:fb:83:0c:b5:f8:7c:22: bf:80:ab:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAO2/KR9XozJg6PwYy2pNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx NTkzZWYwHhcNMjUxMjExMjAwMTE3WhcNMjUxMjEyMjAwMTE3WjAzMTEwLwYDVQQD EyhiZDAzMTU5NjdhODhhMGYxYjNlOGMzZDNjOGIxNTk4ZGVjOTRiMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxCFurvlKRvorR2pIcVE43rlmY+N lwb9ZBCdpZnScjbyJCvMT+4qZntn+W7t1fclfyTKSYFZvoUMBr6ZAyO31huqz/d1 hdAKUVUYOopv5rxUfLHcnNsCv6+IEx+FLkODfQgngzCYjejmYeHEg0DM1GmOxezU VLJZQM9mYgRQP0TU4sdKAsPX2qAkI0MA1Y7PzeLjVN/+Aga5f0IOMEL3BgJfgeMA gRlL0B8FUo1f4bsLpLyWp/ezmFpOJFl2iriQU/IhQ1HcforXUmWPPQlqOGLMD7qZ apewfosEbVw4ymD6QAHytQt0SZGWKN7JSAGU/8TXw4C/jCAiCW1/dJfNVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0DFZZ6iKDxs+jD08ixWY3slLJGMB8GA1UdIwQY MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt YjEwYTgzMmJjYTQzLzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkvpIuQm IHlF2d+Mowb9R6uTSUTgQtHv2ZX7X3tCTVagUgsWvDSSnqhNJgIf7cQ3KjoKtH8k v/+veZjon6dPNJ9rr/tgvPGQ+YfTb2XdjXY6gfIhc0p/ot/i1235z91Pt9sNQS0R CCEyEUuJqnl67+89k5EwWoNLm2jhtxKaoQJWEliBukLiW4ThumkbkSxltID3Izk6 4JOr7qZVHgZCkoW6JrGZIlsP0DCf0MvIYmsm/AQBp/L0jZiKoi6kFm3LhckJmHpd 3v5PpgzShCS7zE3a5+7x//p4Gz+73p58D94NjYcWkQ/OipGiv92B5AWiFa7CiWr7 gwy1+Hwiv4CriQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:25:02 2025 by rpki-client