This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json) Hash identifier: Wc4L901fXtbEW8ZUwlZ8YqXxyrtWo00Ba7TNRm18ttU= Subject key identifier: 5B:5D:EA:6D:8E:0D:33:DD:0C:A0:1D:17:49:7B:71:BA:F8:2D:9C:AE Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db Certificate serial: 019B353332FCF83339E48D13B73B1FEEB47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft Manifest number: 1356 Signing time: Fri 19 Dec 2025 06:01:46 +0000 Manifest this update: Fri 19 Dec 2025 06:01:46 +0000 Manifest next update: Sat 20 Dec 2025 06:01:46 +0000 Files and hashes: 1: 3PKCULxC54YfqV3U-g_OsLMdG4I.roa (hash: WuO+o37MC5UTrmL5BlbVaqBH7Yb1+XaFfMlfVLFjofw=) 2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=) 3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: vt0Q9EMZ3bTHmv3whpJ6eTqQIi0BpHojqobfnchXW5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:32:fc:f8:33:39:e4:8d:13:b7:3b:1f:ee:b4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db Validity Not Before: Dec 19 06:01:46 2025 GMT Not After : Dec 20 06:01:46 2025 GMT Subject: CN=5b5dea6d8e0d33dd0ca01d17497b71baf82d9cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d5:1f:a1:71:6e:74:53:fd:0e:14:90:04:78: 2e:71:67:73:18:5a:98:cc:21:85:42:35:2f:2f:de: 88:81:01:22:70:d8:db:88:2c:76:0e:c8:be:8c:ad: ee:70:69:e2:39:f1:56:7f:dc:50:70:e7:63:0e:d2: 62:f8:30:28:d2:f6:de:76:48:56:ee:27:e2:69:8c: c4:ef:86:52:77:12:85:ef:7b:2d:56:df:9b:06:4a: 73:86:88:e9:99:7c:53:c7:e7:7f:5c:f8:28:a1:0d: 24:d5:46:00:f9:94:c5:42:b0:6f:fb:ad:7b:3b:20: 83:c6:81:11:de:e1:78:bc:b5:b9:a3:bc:be:3d:a6: e8:8f:16:6e:ac:84:bd:e9:5e:e0:e0:d4:4f:d5:d0: 21:03:22:ce:f0:99:73:6d:cd:73:52:a8:51:6a:ea: d4:66:93:2e:63:9b:29:df:64:59:36:5a:9e:16:31: a0:45:c8:55:ec:4b:14:69:e8:cc:ec:c6:22:39:6f: 6f:33:92:ff:be:cb:dd:0a:de:47:52:4b:e8:53:14: 27:52:27:80:54:33:7c:f2:4e:54:88:46:03:f6:4c: f3:4c:eb:ed:fe:94:ac:96:c8:97:0a:2c:35:3a:8a: 15:d2:ce:6b:32:4d:7c:0c:34:1f:3e:96:b8:f6:5a: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5D:EA:6D:8E:0D:33:DD:0C:A0:1D:17:49:7B:71:BA:F8:2D:9C:AE X509v3 Authority Key Identifier: keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:64:11:ab:9e:71:b8:81:cd:2b:d4:6a:e3:29:12:a7:27:8a: d7:69:2f:0f:3e:e3:15:6d:79:70:e0:24:ec:2b:77:4f:f5:59: ea:1a:cf:b5:20:92:81:84:a5:48:46:57:d4:30:95:bc:cf:6f: 09:d8:7b:d4:c8:54:72:30:bf:de:38:ca:02:a6:68:55:7e:d8: 41:dd:5e:ab:06:b5:ad:ab:3c:6e:da:e8:c9:a4:01:a0:75:75: d6:b4:30:6c:c7:72:41:8b:f6:47:88:d8:aa:d3:93:17:00:f3: 32:c7:28:09:b8:1f:ed:b9:a4:5e:b0:27:14:cf:74:11:9a:a0: 37:45:19:57:97:95:84:a6:b3:df:62:be:63:1d:93:2e:9b:60: ba:91:45:cd:79:39:59:a7:ee:36:cd:fc:3b:82:d4:4f:df:e1: 26:7f:4e:98:ee:37:61:c3:31:b5:a2:e5:0a:7f:14:77:e6:29: 55:52:13:97:e2:e5:d2:35:28:7a:3a:0a:09:f1:5c:6c:d5:da: f4:c2:11:f0:c4:81:80:c5:5f:ea:93:2d:6a:15:31:42:76:93: a7:fc:f6:07:aa:d6:64:c9:9f:d2:8e:26:25:b8:49:9e:a4:ea: 6e:7f:a2:e0:6b:af:2d:12:54:09:f3:e9:9a:75:05:93:52:12: 1c:44:c0:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MzL8+DM55I0Ttzsf7rR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYzhhOWJiYzJiYzNhNGM4YmI4NzZjY2RkOTVmZDg2NTI1 MGI2ZGIwHhcNMjUxMjE5MDYwMTQ2WhcNMjUxMjIwMDYwMTQ2WjAzMTEwLwYDVQQD Eyg1YjVkZWE2ZDhlMGQzM2RkMGNhMDFkMTc0OTdiNzFiYWY4MmQ5Y2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69UfoXFudFP9DhSQBHgucWdzGFqY zCGFQjUvL96IgQEicNjbiCx2Dsi+jK3ucGniOfFWf9xQcOdjDtJi+DAo0vbedkhW 7ifiaYzE74ZSdxKF73stVt+bBkpzhojpmXxTx+d/XPgooQ0k1UYA+ZTFQrBv+617 OyCDxoER3uF4vLW5o7y+PabojxZurIS96V7g4NRP1dAhAyLO8Jlzbc1zUqhRaurU ZpMuY5sp32RZNlqeFjGgRchV7EsUaejM7MYiOW9vM5L/vsvdCt5HUkvoUxQnUieA VDN88k5UiEYD9kzzTOvt/pSslsiXCiw1OooV0s5rMk18DDQfPpa49lr+twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtd6m2ODTPdDKAdF0l7cbr4LZyuMB8GA1UdIwQY MBaAFK3IqbvCvDpMi7h2zN2V/YZSULbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUt MTY1NGE4MGRiYzM2LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUtMTY1NGE4MGRiYzM2 LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWQRq55x uIHNK9Rq4ykSpyeK12kvDz7jFW15cOAk7Ct3T/VZ6hrPtSCSgYSlSEZX1DCVvM9v Cdh71MhUcjC/3jjKAqZoVX7YQd1eqwa1ras8btroyaQBoHV11rQwbMdyQYv2R4jY qtOTFwDzMscoCbgf7bmkXrAnFM90EZqgN0UZV5eVhKaz32K+Yx2TLptgupFFzXk5 WafuNs38O4LUT9/hJn9OmO43YcMxtaLlCn8Ud+YpVVITl+Ll0jUoejoKCfFcbNXa 9MIR8MSBgMVf6pMtahUxQnaTp/z2B6rWZMmf0o4mJbhJnqTqbn+i4GuvLRJUCfPp mnUFk1ISHETA0A== -----END CERTIFICATE-----Generated at Fri Dec 19 09:31:19 2025 by rpki-client