This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json) Hash identifier: i6Sc7daSIhFSwmn9i+lpPoR/R4AU4aCxfZ1naPbTXa0= Subject key identifier: 5F:F8:00:3B:F4:90:26:85:82:8B:D1:AA:E9:D0:BC:37:DF:3A:06:42 Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0 Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0 Certificate serial: 019B22F570EE5E2A8327A8E47EFB88088AEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft Manifest number: 03D6 Signing time: Mon 15 Dec 2025 17:01:08 +0000 Manifest this update: Mon 15 Dec 2025 17:01:08 +0000 Manifest next update: Tue 16 Dec 2025 17:01:08 +0000 Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=) 2: kIgDZb1mJNxoy-31G2UkNHRwWx0.roa (hash: zPGGaXstMh703tXkFi/JyzFhGqACNCTHmmN1tjIc6M0=) 3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: 1E69CzP3Iz722rghyjoDkwmkmbfkrTrkaS35sZCtvYM=) 4: yDLDs_9-xCJNS7Lq59X6rTIHpaM.roa (hash: mZAephRDHWr1NJfSrOQS8hE88/V7vwaKpzI1ny1rx80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:70:ee:5e:2a:83:27:a8:e4:7e:fb:88:08:8a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0 Validity Not Before: Dec 15 17:01:08 2025 GMT Not After : Dec 16 17:01:08 2025 GMT Subject: CN=5ff8003bf4902685828bd1aae9d0bc37df3a0642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cc:df:e2:6a:ae:cd:06:7b:73:87:1e:35:16: c6:5c:d7:71:99:be:e8:69:a5:f5:36:2f:12:3e:0b: ff:73:44:aa:d5:1b:0d:43:cb:c0:ee:3a:e9:2c:21: b0:cc:e6:90:55:c2:06:28:db:dc:87:64:fd:99:27: 20:76:68:64:1e:03:4c:d4:9c:bc:e0:cc:d8:67:27: f2:c6:90:db:36:04:a7:1a:5c:04:d4:86:e2:78:d5: 65:93:f8:53:6d:81:f7:dc:ab:9f:fb:61:3b:76:0c: f7:96:a6:8a:29:4d:41:fd:cd:57:89:1c:4d:20:f5: cd:97:99:59:3a:c0:39:b0:5f:78:cf:60:50:cf:2c: d3:16:17:a0:9d:73:f7:20:a3:ed:8e:9a:09:6b:bc: 7c:87:4e:b4:1f:85:fa:b5:e5:0c:e1:24:12:cd:94: 21:06:32:ee:d6:b1:44:71:d9:c6:3d:21:38:1e:e5: 89:ad:a6:fe:7d:72:af:12:2d:ca:97:55:57:55:96: c6:40:5a:e4:58:21:3b:4b:b1:16:09:2f:41:f5:75: 8b:05:e0:8f:cd:44:bc:24:95:7d:c9:97:40:66:44: 6b:f4:a7:b7:1a:03:70:eb:e6:52:17:ab:b9:60:8c: 2f:ea:14:ff:fa:f7:48:ae:35:8c:f2:d5:c4:fa:75: 91:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F8:00:3B:F4:90:26:85:82:8B:D1:AA:E9:D0:BC:37:DF:3A:06:42 X509v3 Authority Key Identifier: keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9f:56:b8:cb:49:a2:55:c3:73:bf:39:e0:b3:2d:e4:4f:20: 80:4c:67:be:f3:69:70:c2:98:cf:99:17:65:63:64:c5:68:82: 12:b0:43:e7:b2:4f:81:bb:16:21:83:ae:7e:44:6f:59:70:f6: ea:0c:c8:c7:c1:da:6a:c0:f0:8e:ca:bc:0c:60:6e:30:54:b0: be:b6:de:05:18:19:43:bd:00:31:99:fd:77:6d:d0:33:42:0b: 06:22:8e:89:0f:a6:97:49:1c:85:22:80:c5:03:22:74:ec:56: 5c:c3:d5:d8:0a:cf:f0:82:ed:d3:57:ff:6b:40:a5:40:cc:9a: f3:e2:c8:61:64:38:8e:5a:fc:c8:0d:91:67:42:66:bd:48:d7: 85:92:b6:04:3b:3a:b1:b6:1b:94:04:e9:1a:c0:20:dc:87:c5: 63:9b:b4:d1:e6:11:bf:6b:99:dd:08:e4:4a:58:62:b9:55:47: 41:4f:71:ac:33:66:7f:ba:29:56:fa:4e:96:45:b9:00:a9:2e: 82:0c:98:82:ca:c3:79:d0:00:70:47:7e:d7:b2:1a:23:84:47: ee:b1:8c:50:4a:ef:00:9a:9d:21:f1:3b:d3:7c:5b:61:f6:0b: 9e:15:87:f6:d6:74:15:ae:79:2c:9a:e6:bf:4e:ea:34:e5:96: 17:dc:15:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9XDuXiqDJ6jkfvuICIrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZGQyYTgxNTA2MGFhN2U2MjFhMjA5NDM0OTc1OGIyMDM2 ODk2ZjAwHhcNMjUxMjE1MTcwMTA4WhcNMjUxMjE2MTcwMTA4WjAzMTEwLwYDVQQD Eyg1ZmY4MDAzYmY0OTAyNjg1ODI4YmQxYWFlOWQwYmMzN2RmM2EwNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8zf4mquzQZ7c4ceNRbGXNdxmb7o aaX1Ni8SPgv/c0Sq1RsNQ8vA7jrpLCGwzOaQVcIGKNvch2T9mScgdmhkHgNM1Jy8 4MzYZyfyxpDbNgSnGlwE1IbieNVlk/hTbYH33Kuf+2E7dgz3lqaKKU1B/c1XiRxN IPXNl5lZOsA5sF94z2BQzyzTFhegnXP3IKPtjpoJa7x8h060H4X6teUM4SQSzZQh BjLu1rFEcdnGPSE4HuWJrab+fXKvEi3Kl1VXVZbGQFrkWCE7S7EWCS9B9XWLBeCP zUS8JJV9yZdAZkRr9Ke3GgNw6+ZSF6u5YIwv6hT/+vdIrjWM8tXE+nWR+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/4ADv0kCaFgovRqunQvDffOgZCMB8GA1UdIwQY MBaAFK3dKoFQYKp+YhoglDSXWLIDaJbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYt OGEwZDBiZjBiNTc3LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lNGZhNDgtM2JlOC00ZmEzLWE0MzYtOGEwZDBiZjBiNTc3 LzEvcmQwcWdWQmdxbjVpR2lDVU5KZFlzZ05vbHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX59WuMtJ olXDc7854LMt5E8ggExnvvNpcMKYz5kXZWNkxWiCErBD57JPgbsWIYOufkRvWXD2 6gzIx8HaasDwjsq8DGBuMFSwvrbeBRgZQ70AMZn9d23QM0ILBiKOiQ+ml0kchSKA xQMidOxWXMPV2ArP8ILt01f/a0ClQMya8+LIYWQ4jlr8yA2RZ0JmvUjXhZK2BDs6 sbYblATpGsAg3IfFY5u00eYRv2uZ3QjkSlhiuVVHQU9xrDNmf7opVvpOlkW5AKku ggyYgsrDedAAcEd+17IaI4RH7rGMUErvAJqdIfE703xbYfYLnhWH9tZ0Fa55LJrm v07qNOWWF9wVjg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:55:27 2025 by rpki-client