This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json) Hash identifier: Vn3r6blmyOLrT+w6NdTQ+o7BXaih3d+J/oDfatE+g6c= Subject key identifier: 73:F5:6E:08:FB:82:AE:64:07:63:5F:40:CB:AB:F4:AE:70:56:2C:8B Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Certificate serial: 019B48155248510C8AB1C4F993DCA243325A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft Manifest number: 179A Signing time: Mon 22 Dec 2025 22:01:55 +0000 Manifest this update: Mon 22 Dec 2025 22:01:55 +0000 Manifest next update: Tue 23 Dec 2025 22:01:55 +0000 Files and hashes: 1: 8Zj24jfn9S8WI4ttBUHVoIAXMMo.roa (hash: cTf4aMsPBbGTihgOeG5/giseUSW7pXyGx7wJeH1Zs1U=) 2: H0ohXS9X5CuNmdABAZo7QVngevg.roa (hash: AyyjXDae21dR+HrIf+wOHMkNqlVzHUDtXhdzOaCJinw=) 3: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: DudtqNHwpMeJ2S0Pt+geaL5sDIOYtPQ4cRmlmi02/FM=) 4: SkAOEDeuA2PQ-A10S9FavkFhiAE.roa (hash: kVOuXVUzFINGvVbrPdqSgnfvVUvQgBv0NhdbBuvyTSo=) 5: TrNuqWdgLhGTxn5VxoYeyfzOKkg.roa (hash: Rqi2Sn0fAAAxy2y3ILi9hXub3082liYhSLIo32eP1Fg=) 6: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=) 7: mSAOwTsVaHd8118WnS4cvGYvNUE.roa (hash: M5exegiwCD9wq+6OVWAn+L9v8TUuNlEDvaTanUNJsnw=) 8: zsAzizQNzq-nU7DBqjyFfFYYJlY.roa (hash: lPKM4UQ81kuyk83v9B3QSeG105m6Qhy3mK0i/rPSzW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:52:48:51:0c:8a:b1:c4:f9:93:dc:a2:43:32:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Validity Not Before: Dec 22 22:01:55 2025 GMT Not After : Dec 23 22:01:55 2025 GMT Subject: CN=73f56e08fb82ae6407635f40cbabf4ae70562c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:02:88:a5:eb:ea:e7:a3:00:bc:b2:a9:49:54: 60:97:73:d7:78:bf:55:1e:46:0d:5c:9c:22:ec:c4: 91:d3:67:dd:07:de:43:5d:50:82:c2:38:34:58:e2: 9d:7c:05:d8:93:eb:6b:fc:32:bd:51:96:54:18:4a: 77:36:b0:3e:25:5f:ea:5a:3c:b3:fb:b2:43:84:16: d4:e5:9e:91:50:16:5a:72:7d:09:b3:37:b2:3b:53: 73:67:ae:ac:8b:6d:c6:fe:7d:b4:cb:7d:b7:b6:e6: e0:a0:35:83:c9:31:aa:5d:6e:a9:dc:f2:9c:44:33: 74:27:8b:82:da:2f:7e:35:5f:cd:33:e2:16:b1:0f: 94:ae:65:42:00:89:3b:84:99:0c:95:4c:5e:91:1b: 34:31:23:42:db:c6:2c:f2:59:5a:70:d6:da:98:e1: 9c:cd:3b:93:8e:1d:20:2d:ee:91:d8:08:8a:a6:0d: a8:1a:cf:65:fd:33:ac:46:c4:c2:34:73:fa:f9:17: db:e2:7f:4c:04:85:41:7b:bb:01:f6:f6:f4:0f:c8: db:ef:49:9b:5e:13:d8:ba:4e:45:2a:46:59:0d:d5: a0:37:ad:f9:a3:7c:f0:d8:d0:3f:41:5e:4a:e6:ff: e3:01:e3:35:b6:06:8a:67:b5:ed:96:9a:2b:99:82: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:6E:08:FB:82:AE:64:07:63:5F:40:CB:AB:F4:AE:70:56:2C:8B X509v3 Authority Key Identifier: keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:98:05:e5:5e:f6:09:e6:9a:86:48:b2:d6:62:6a:7b:de:8c: 8a:54:73:0d:23:eb:0b:0b:6f:05:12:28:48:57:fc:e1:86:86: e5:f8:f6:06:09:24:15:46:68:4f:40:78:51:9f:dd:e0:25:52: ac:d8:ba:82:c6:92:89:ad:c8:d4:dd:9f:bb:70:e9:70:0b:5a: ad:43:9a:2a:0d:33:f0:5b:ad:37:ad:c2:d3:bd:2a:80:bb:6a: 20:9f:7d:dc:b9:03:24:d1:9e:96:fb:79:2a:23:63:2b:13:3d: 60:a8:60:bf:0b:ab:02:d5:3e:77:6d:d6:3a:d1:fc:39:77:5c: 28:c4:e1:7e:8a:a7:54:8e:bc:11:ad:37:f7:d4:c1:f6:02:76: c1:4f:8a:e7:8b:f8:f3:f0:23:60:af:13:ef:1e:88:f7:72:aa: 53:68:eb:97:f3:d4:f4:24:dd:10:f5:3b:58:9e:c0:83:4e:e7: d4:35:b8:b3:e9:32:07:27:3f:cc:bc:be:9f:d4:0b:6c:21:37: 41:a9:bc:4a:e8:46:70:e1:d7:b8:55:a8:bc:cb:4a:d8:9b:7a: 3a:e5:a3:cd:ea:c8:19:02:6f:30:97:38:58:f6:1a:22:da:71: 41:c0:24:86:1e:4c:a6:43:61:11:ea:55:be:4d:b8:44:6b:68: 49:44:3a:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFVJIUQyKscT5k9yiQzJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5 MDBhNzYwHhcNMjUxMjIyMjIwMTU1WhcNMjUxMjIzMjIwMTU1WjAzMTEwLwYDVQQD Eyg3M2Y1NmUwOGZiODJhZTY0MDc2MzVmNDBjYmFiZjRhZTcwNTYyYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQKIpevq56MAvLKpSVRgl3PXeL9V HkYNXJwi7MSR02fdB95DXVCCwjg0WOKdfAXYk+tr/DK9UZZUGEp3NrA+JV/qWjyz +7JDhBbU5Z6RUBZacn0JszeyO1NzZ66si23G/n20y323tubgoDWDyTGqXW6p3PKc RDN0J4uC2i9+NV/NM+IWsQ+UrmVCAIk7hJkMlUxekRs0MSNC28Ys8llacNbamOGc zTuTjh0gLe6R2AiKpg2oGs9l/TOsRsTCNHP6+Rfb4n9MBIVBe7sB9vb0D8jb70mb XhPYuk5FKkZZDdWgN635o3zw2NA/QV5K5v/jAeM1tgaKZ7XtlpormYLNpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHP1bgj7gq5kB2NfQMur9K5wViyLMB8GA1UdIwQY MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt ODlhY2UzODIyMGZiLzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJgF5V72 Ceaahkiy1mJqe96MilRzDSPrCwtvBRIoSFf84YaG5fj2BgkkFUZoT0B4UZ/d4CVS rNi6gsaSia3I1N2fu3DpcAtarUOaKg0z8FutN63C070qgLtqIJ993LkDJNGelvt5 KiNjKxM9YKhgvwurAtU+d23WOtH8OXdcKMThfoqnVI68Ea0399TB9gJ2wU+K54v4 8/AjYK8T7x6I93KqU2jrl/PU9CTdEPU7WJ7Ag07n1DW4s+kyByc/zLy+n9QLbCE3 Qam8SuhGcOHXuFWovMtK2Jt6OuWjzerIGQJvMJc4WPYaItpxQcAkhh5MpkNhEepV vk24RGtoSUQ6+g== -----END CERTIFICATE-----Generated at Tue Dec 23 06:10:34 2025 by rpki-client