This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft File: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json) Hash identifier: Q4LgGmDeaV/QstQl35qxLKnbEUVXGQeJjSgWgKrbmvw= Subject key identifier: 2F:DA:CD:FF:58:4B:AA:36:9D:F4:DA:F7:C4:EC:98:58:A5:29:52:D0 Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84 Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084 Certificate serial: 019B2965060B03858A1D62F4B2EBC0B19D06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft Manifest number: 09E8 Signing time: Tue 16 Dec 2025 23:00:45 +0000 Manifest this update: Tue 16 Dec 2025 23:00:45 +0000 Manifest next update: Wed 17 Dec 2025 23:00:45 +0000 Files and hashes: 1: 5yM7l9glO5Y_kZZbeV1PY4oF4AI.roa (hash: Zrq7WRCOd9AEwWRm5k4u/56c3wqE+RlRfF9EKNORqJM=) 2: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: 6MKJjSdadu+vZYsVQ7jZT1emWrtDD1lV2M9PmiqHTi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:65:06:0b:03:85:8a:1d:62:f4:b2:eb:c0:b1:9d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084 Validity Not Before: Dec 16 23:00:45 2025 GMT Not After : Dec 17 23:00:45 2025 GMT Subject: CN=2fdacdff584baa369df4daf7c4ec9858a52952d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:12:03:b7:99:38:39:f6:5d:14:d6:b2:db: 90:a4:20:1a:d4:f5:d7:26:e2:93:f1:93:c6:22:da: 5c:c4:4b:2c:32:08:a6:40:c7:6d:ab:49:7e:01:46: 27:41:66:8a:06:af:e3:09:b1:e7:a9:1b:1c:44:3c: 5c:cd:03:0e:ff:22:c7:33:1b:e2:bc:bb:a9:1c:8c: fe:4b:96:42:31:5e:a5:dd:1d:bc:ec:8c:cb:b1:af: 5d:44:aa:9b:79:6a:3d:41:29:f9:6c:df:03:89:36: 26:f9:a1:9a:e2:de:5f:bf:14:1e:c3:2a:25:25:a1: b9:71:eb:92:4b:94:f8:6a:c6:74:31:1a:77:39:ca: bc:84:53:23:d1:20:cb:0c:a2:48:6f:0b:fe:7f:ba: 1e:7c:bc:26:03:98:89:ed:08:07:6b:65:5e:50:63: ae:4c:72:83:9f:81:6c:98:76:0f:1a:66:40:43:d3: b6:00:df:72:e0:17:23:51:a8:bf:33:98:25:65:6d: 8e:03:50:a3:fb:60:cc:62:d8:6b:dd:e4:d2:a2:36: c6:87:80:f9:0b:4c:0a:1f:68:c1:f5:73:ec:ac:55: 25:c3:d8:c8:22:52:6a:c0:e2:ad:73:af:f6:4e:93: 3c:66:f9:c9:bf:2c:50:91:4b:c3:af:c2:4b:96:9d: a4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DA:CD:FF:58:4B:AA:36:9D:F4:DA:F7:C4:EC:98:58:A5:29:52:D0 X509v3 Authority Key Identifier: keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:21:af:a3:ea:ec:93:7f:56:af:9e:61:2f:8a:1b:52:5d:16: c6:d2:61:d5:cd:3d:fa:e5:91:c4:6f:f6:37:67:ca:fe:6a:f2: 38:0b:ea:5d:6e:34:3a:eb:fa:ec:e6:6d:76:47:61:8d:7a:7a: df:00:93:8f:69:cb:c0:08:58:cc:29:fd:7f:6c:4e:6d:ad:98: 2e:d1:55:a3:ac:a7:74:d5:be:01:f7:ad:fc:87:39:95:d1:7c: 08:76:e8:c5:45:d3:5c:ca:e8:a1:74:0e:f2:47:70:8d:84:d9: 19:62:bc:f6:fb:fb:1e:d2:5f:2d:0d:ed:66:51:de:94:c2:b9: 02:62:0e:3c:3b:21:55:eb:a7:8d:56:da:10:43:9b:83:8c:73: 03:3c:3f:7b:ee:da:c5:bb:31:de:b9:46:95:3f:c2:15:da:01: 42:0c:39:bd:89:53:18:cc:10:04:4e:52:3b:5b:c3:5b:8f:8b: d8:8d:6c:ef:a3:99:01:50:7b:4c:86:b7:2e:70:ea:7e:a6:cb: 21:d6:cb:47:78:8a:08:18:e6:80:3f:01:4c:3d:26:2a:c0:39: f8:90:58:51:14:7d:14:d2:43:0f:1c:ff:d0:e2:d0:2c:40:f0: b5:0a:3a:50:09:a5:44:42:cd:5a:21:6e:83:f4:fd:6b:a5:51: 84:80:62:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspZQYLA4WKHWL0suvAsZ0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWVkM2QxYTFhMWUyODMwZDQxNmFmYTA0N2I5NTIyMGU4 MTQwODQwHhcNMjUxMjE2MjMwMDQ1WhcNMjUxMjE3MjMwMDQ1WjAzMTEwLwYDVQQD EygyZmRhY2RmZjU4NGJhYTM2OWRmNGRhZjdjNGVjOTg1OGE1Mjk1MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qcSA7eZODn2XRTWstuQpCAa1PXX JuKT8ZPGItpcxEssMgimQMdtq0l+AUYnQWaKBq/jCbHnqRscRDxczQMO/yLHMxvi vLupHIz+S5ZCMV6l3R287IzLsa9dRKqbeWo9QSn5bN8DiTYm+aGa4t5fvxQewyol JaG5ceuSS5T4asZ0MRp3Ocq8hFMj0SDLDKJIbwv+f7oefLwmA5iJ7QgHa2VeUGOu THKDn4FsmHYPGmZAQ9O2AN9y4BcjUai/M5glZW2OA1Cj+2DMYthr3eTSojbGh4D5 C0wKH2jB9XPsrFUlw9jIIlJqwOKtc6/2TpM8ZvnJvyxQkUvDr8JLlp2kKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/azf9YS6o2nfTa98TsmFilKVLQMB8GA1UdIwQY MBaAFEWu09GhoeKDDUFq+gR7lSIOgUCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYt MmM2OTk4NTM1OWMwLzEvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYtMmM2OTk4NTM1OWMw LzEvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSGvo+rs k39Wr55hL4obUl0WxtJh1c09+uWRxG/2N2fK/mryOAvqXW40Ouv67OZtdkdhjXp6 3wCTj2nLwAhYzCn9f2xOba2YLtFVo6yndNW+Afet/Ic5ldF8CHboxUXTXMrooXQO 8kdwjYTZGWK89vv7HtJfLQ3tZlHelMK5AmIOPDshVeunjVbaEEObg4xzAzw/e+7a xbsx3rlGlT/CFdoBQgw5vYlTGMwQBE5SO1vDW4+L2I1s76OZAVB7TIa3LnDqfqbL IdbLR3iKCBjmgD8BTD0mKsA5+JBYURR9FNJDDxz/0OLQLEDwtQo6UAmlRELNWiFu g/T9a6VRhIBiwQ== -----END CERTIFICATE-----Generated at Wed Dec 17 06:17:56 2025 by rpki-client