This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft File: rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json) Hash identifier: JE6sI/jIZ/EoYhJfbUe3mxlaDCR/aPUDCZ8sibnnmDg= Subject key identifier: 92:96:29:FA:9B:85:C5:CD:D5:E0:BD:2F:96:A3:93:CB:C4:DC:5A:41 Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E Certificate issuer: /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e Certificate serial: 019B2F304492EB963CA66385AA72E16513A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft Manifest number: 0C2C Signing time: Thu 18 Dec 2025 02:00:50 +0000 Manifest this update: Thu 18 Dec 2025 02:00:50 +0000 Manifest next update: Fri 19 Dec 2025 02:00:50 +0000 Files and hashes: 1: Qh3mzL9VUkWkolAH9jB_GpWhLg0.roa (hash: LSjP0eVYXjK72XpL0ynKNA9slIHH17di2BQFA3XHSqk=) 2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: vvKBzmZA/2NfJasagU6z8FGkMM706fW9aKo0N8kckeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:44:92:eb:96:3c:a6:63:85:aa:72:e1:65:13:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e Validity Not Before: Dec 18 02:00:50 2025 GMT Not After : Dec 19 02:00:50 2025 GMT Subject: CN=929629fa9b85c5cdd5e0bd2f96a393cbc4dc5a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:49:60:01:af:a9:3b:56:bd:c1:09:78:26: ee:6e:e2:78:24:db:07:d0:73:0b:9c:33:8b:24:5e: 2f:0a:89:9b:ee:15:21:16:9e:13:43:df:64:1b:c9: 71:e7:11:8f:14:53:c2:27:0a:28:8d:98:f4:4e:a4: 21:56:6b:9c:07:f1:3c:52:85:ee:d9:d2:2f:d3:f2: e4:f7:69:10:c9:a8:f5:22:77:0c:c0:68:72:f0:83: 1e:95:11:ca:94:a6:c4:4f:a5:76:d8:f7:c4:17:7d: 59:fb:fd:b6:a1:e8:ce:e9:13:49:5b:aa:fa:b9:f8: 18:9b:05:f0:25:b7:c9:70:8d:76:e0:93:6c:d5:a1: 9c:1f:4b:3e:60:c9:3b:5c:4a:4b:54:41:43:2c:a2: 3d:00:2d:a6:a2:f5:a4:87:ed:d7:0c:e2:e9:b4:2c: 34:44:e5:2a:39:c5:80:1b:0d:2b:58:96:bc:a6:e6: e5:26:29:31:ec:c8:1e:b4:9a:d1:61:0a:65:55:10: 08:a5:d6:bc:24:f3:a8:74:e5:91:25:96:d0:47:97: bb:38:16:7f:70:63:d3:84:0b:cc:14:47:2c:64:ff: 7a:6b:f7:d4:34:61:6b:d2:a2:d6:e6:46:95:d2:a0: e0:2c:b8:64:25:5a:64:d6:99:4d:29:65:4a:d1:c6: 9a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:96:29:FA:9B:85:C5:CD:D5:E0:BD:2F:96:A3:93:CB:C4:DC:5A:41 X509v3 Authority Key Identifier: keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fb:5c:5e:80:c4:ff:b6:a7:7f:27:a3:88:75:bd:8c:c2:6d: e7:89:4d:85:90:e8:40:cb:b2:40:4a:58:3d:ec:b3:e5:6a:8c: 87:a9:b7:70:75:f7:85:51:36:db:ad:42:77:be:6d:c7:e0:8f: 53:23:7f:a6:e8:76:91:16:c0:e9:10:87:25:12:f6:bb:00:ca: 45:96:7d:33:d2:9d:e4:43:9c:8a:3e:4e:08:ce:0c:61:91:ce: bb:39:bd:28:bd:50:61:f5:fe:b0:cf:33:d8:7d:a7:0d:2f:2a: dc:f7:67:c5:17:43:da:d5:9b:f7:d0:37:39:d8:2f:e5:6a:44: 72:5d:f3:57:e0:3f:02:96:4c:1f:82:a6:6a:72:45:4b:bc:98: 7a:3a:2f:c0:01:65:cb:60:ce:e3:cb:90:e5:6e:9c:45:83:8e: 58:ae:8b:4c:79:52:b5:8a:99:a2:00:d7:cf:ed:d8:90:44:20: a9:f3:e3:8e:83:16:37:ec:2d:fc:9b:a9:68:17:b9:2e:02:67: 4f:ae:7b:ae:24:31:8e:57:62:59:d5:d8:dd:fc:96:8f:9e:c1: 11:6a:93:8a:47:be:72:4d:e1:26:40:72:04:3b:2c:66:40:dc: b0:f5:b6:91:6d:92:10:23:68:79:87:fe:78:7b:bf:ac:85:2b: 7e:e9:ac:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMESS65Y8pmOFqnLhZROkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNGJkZDllOTdmMjEwMzcwY2MzMDEyNTdhYzE1ZmFlYjhm YTUyNGUwHhcNMjUxMjE4MDIwMDUwWhcNMjUxMjE5MDIwMDUwWjAzMTEwLwYDVQQD Eyg5Mjk2MjlmYTliODVjNWNkZDVlMGJkMmY5NmEzOTNjYmM0ZGM1YTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35RJYAGvqTtWvcEJeCbubuJ4JNsH 0HMLnDOLJF4vComb7hUhFp4TQ99kG8lx5xGPFFPCJwoojZj0TqQhVmucB/E8UoXu 2dIv0/Lk92kQyaj1IncMwGhy8IMelRHKlKbET6V22PfEF31Z+/22oejO6RNJW6r6 ufgYmwXwJbfJcI124JNs1aGcH0s+YMk7XEpLVEFDLKI9AC2movWkh+3XDOLptCw0 ROUqOcWAGw0rWJa8publJikx7MgetJrRYQplVRAIpda8JPOodOWRJZbQR5e7OBZ/ cGPThAvMFEcsZP96a/fUNGFr0qLW5kaV0qDgLLhkJVpk1plNKWVK0caaUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKWKfqbhcXN1eC9L5ajk8vE3FpBMB8GA1UdIwQY MBaAFKxL3Z6X8hA3DMMBJXrBX664+lJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xNzQ5MGItMDlhNi00ZTM4LWIwODQt MTRiMGU4YzRlOGU3LzEvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8xNzQ5MGItMDlhNi00ZTM4LWIwODQtMTRiMGU4YzRlOGU3 LzEvckV2ZG5wZnlFRGNNd3dFbGVzRmZycmo2VWs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALftcXoDE /7anfyejiHW9jMJt54lNhZDoQMuyQEpYPeyz5WqMh6m3cHX3hVE2261Cd75tx+CP UyN/puh2kRbA6RCHJRL2uwDKRZZ9M9Kd5EOcij5OCM4MYZHOuzm9KL1QYfX+sM8z 2H2nDS8q3PdnxRdD2tWb99A3Odgv5WpEcl3zV+A/ApZMH4KmanJFS7yYejovwAFl y2DO48uQ5W6cRYOOWK6LTHlStYqZogDXz+3YkEQgqfPjjoMWN+wt/JupaBe5LgJn T657riQxjldiWdXY3fyWj57BEWqTike+ck3hJkByBDssZkDcsPW2kW2SECNoeYf+ eHu/rIUrfumsnQ== -----END CERTIFICATE-----Generated at Thu Dec 18 06:59:45 2025 by rpki-client