This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft File: rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft (raw, json) Hash identifier: a1pgsn5BtE0OYUi6fUnl+DBBfW8lotdf9XQwd6uQkPI= Subject key identifier: E3:FC:2D:4E:73:62:B9:A8:59:41:80:16:43:C5:47:97:72:15:21:05 Authority key identifier: AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04 Certificate issuer: /CN=ad3cc1a7870b610c355c6ec299b166edaba3df04 Certificate serial: 019B481427F96A662C9C6DB6D20DA96AD315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft Manifest number: 09D3 Signing time: Mon 22 Dec 2025 22:00:39 +0000 Manifest this update: Mon 22 Dec 2025 22:00:39 +0000 Manifest next update: Tue 23 Dec 2025 22:00:39 +0000 Files and hashes: 1: rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl (hash: VlZd7wuGhL5Bc17ZC8M3EmVVxfB+3/0kLb3JusKYpUU=) 2: tFQcfPCSB6BXqTTZvhFAhl-OS0Y.roa (hash: gDfDS8wP6pJ9Ytao7oOOdrquqvAnErNK/1uv1jTII9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:27:f9:6a:66:2c:9c:6d:b6:d2:0d:a9:6a:d3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3cc1a7870b610c355c6ec299b166edaba3df04 Validity Not Before: Dec 22 22:00:39 2025 GMT Not After : Dec 23 22:00:39 2025 GMT Subject: CN=e3fc2d4e7362b9a85941801643c5479772152105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9e:fc:43:b9:b1:33:49:e5:6a:9c:67:f2:0c: c4:3c:20:2f:c4:0b:fc:2a:90:71:01:fa:68:07:cf: f1:10:99:01:d2:a5:c0:41:35:dc:50:9c:80:b4:40: cd:84:af:b9:c9:71:42:8e:17:a9:bc:bf:f0:96:69: 88:da:83:de:9a:17:9c:a8:60:11:ce:94:cd:04:d8: bb:ed:72:5c:35:fc:9f:fa:33:ec:aa:77:57:6b:f9: 77:be:f5:1e:80:c2:34:04:24:0c:2a:b4:5f:6c:68: 73:ab:7c:96:09:98:42:bd:8e:d2:42:07:a6:5a:9f: de:4c:10:60:23:54:17:1a:44:1d:46:d0:e0:f0:25: 5e:3d:cf:33:68:31:48:b7:d0:08:6c:4d:ea:20:2f: 52:9a:2b:9f:21:43:d9:ce:15:eb:51:aa:9a:7c:0e: 66:a2:da:2f:d3:a5:9d:e4:51:45:f9:fe:2f:66:95: f5:2b:4d:f4:bb:b8:0e:50:1d:82:29:f7:df:1f:4b: bd:e7:1f:ab:9c:c0:0b:ea:b3:d5:5b:9f:39:a5:a6: 83:ee:78:94:b2:84:0a:20:fd:15:6a:e0:0a:0b:8e: 5a:e2:7e:c7:32:0c:f6:74:91:02:ae:c7:5c:f4:68: c3:3b:20:31:37:31:54:94:58:30:b4:ac:bd:f2:11: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FC:2D:4E:73:62:B9:A8:59:41:80:16:43:C5:47:97:72:15:21:05 X509v3 Authority Key Identifier: keyid:AD:3C:C1:A7:87:0B:61:0C:35:5C:6E:C2:99:B1:66:ED:AB:A3:DF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTzBp4cLYQw1XG7CmbFm7auj3wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3d046c-1178-46a3-82e0-74d56c441dc1/1/rTzBp4cLYQw1XG7CmbFm7auj3wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6b:2d:77:d1:4f:71:ac:d7:dc:72:ed:06:97:f6:ce:5d:2b: b7:e1:ea:2e:8b:52:cb:7e:e9:b0:66:24:67:e5:46:6b:48:f1: 5f:fa:23:11:3d:6a:09:2c:28:c3:88:fd:30:1e:ce:cf:8d:20: 1b:3e:cf:ba:49:5c:74:47:f4:4a:36:5a:0a:c0:48:2d:0c:f5: 05:7f:a0:bc:d6:70:7f:d1:a8:ab:c7:71:99:35:4d:cc:b4:cf: 10:a5:f0:39:f7:00:1e:b7:ed:49:91:58:b8:6d:6c:ce:80:e1: 8f:22:12:56:ad:6e:ca:f0:82:2a:72:54:04:0d:55:6d:da:64: 55:37:72:dc:e4:bf:f5:c8:11:e3:69:b3:c1:2d:51:1f:2e:91: 70:c3:77:62:8a:a2:ff:97:ef:3f:f1:68:f1:8f:37:32:86:f0: 71:7b:09:8f:ce:72:d6:fd:a9:9c:1b:02:e2:43:89:97:b5:b5: 9f:e2:2a:91:11:d1:96:eb:4f:e2:a1:41:23:7a:85:95:d4:e9: 5e:45:7c:16:c6:df:38:38:a2:c4:04:54:d6:52:eb:55:58:dd: dd:53:0b:08:fc:1c:10:00:ce:2b:03:c4:41:2c:3a:d3:7e:45: 81:16:1b:f7:42:6e:b8:6f:16:77:0b:78:80:3d:2f:13:7b:fd: 33:6c:8e:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFCf5amYsnG220g2patMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2NjMWE3ODcwYjYxMGMzNTVjNmVjMjk5YjE2NmVkYWJh M2RmMDQwHhcNMjUxMjIyMjIwMDM5WhcNMjUxMjIzMjIwMDM5WjAzMTEwLwYDVQQD EyhlM2ZjMmQ0ZTczNjJiOWE4NTk0MTgwMTY0M2M1NDc5NzcyMTUyMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z78Q7mxM0nlapxn8gzEPCAvxAv8 KpBxAfpoB8/xEJkB0qXAQTXcUJyAtEDNhK+5yXFCjhepvL/wlmmI2oPemhecqGAR zpTNBNi77XJcNfyf+jPsqndXa/l3vvUegMI0BCQMKrRfbGhzq3yWCZhCvY7SQgem Wp/eTBBgI1QXGkQdRtDg8CVePc8zaDFIt9AIbE3qIC9SmiufIUPZzhXrUaqafA5m otov06Wd5FFF+f4vZpX1K030u7gOUB2CKfffH0u95x+rnMAL6rPVW585paaD7niU soQKIP0VauAKC45a4n7HMgz2dJECrsdc9GjDOyAxNzFUlFgwtKy98hFVmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOP8LU5zYrmoWUGAFkPFR5dyFSEFMB8GA1UdIwQY MBaAFK08waeHC2EMNVxuwpmxZu2ro98EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zZDA0NmMtMTE3OC00NmEzLTgyZTAt NzRkNTZjNDQxZGMxLzEvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8zZDA0NmMtMTE3OC00NmEzLTgyZTAtNzRkNTZjNDQxZGMx LzEvclR6QnA0Y0xZUXcxWEc3Q21iRm03YXVqM3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWstd9FP cazX3HLtBpf2zl0rt+HqLotSy37psGYkZ+VGa0jxX/ojET1qCSwow4j9MB7Oz40g Gz7PuklcdEf0SjZaCsBILQz1BX+gvNZwf9Goq8dxmTVNzLTPEKXwOfcAHrftSZFY uG1szoDhjyISVq1uyvCCKnJUBA1VbdpkVTdy3OS/9cgR42mzwS1RHy6RcMN3Yoqi /5fvP/Fo8Y83MobwcXsJj85y1v2pnBsC4kOJl7W1n+IqkRHRlutP4qFBI3qFldTp XkV8FsbfODiixARU1lLrVVjd3VMLCPwcEADOKwPEQSw6035FgRYb90JuuG8Wdwt4 gD0vE3v9M2yOGw== -----END CERTIFICATE-----Generated at Tue Dec 23 00:31:46 2025 by rpki-client