This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json) Hash identifier: RWNjcH8E3zmwtvcfAia+fGWnTXMKOKJSAWUpSPlwlT0= Subject key identifier: 96:37:D2:3C:44:02:04:EE:10:0D:C4:4D:FF:62:43:E4:BA:CF:9A:17 Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd Certificate serial: 019B10B88848F19EA2E16F46FA643152E1BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft Manifest number: 06A4 Signing time: Fri 12 Dec 2025 04:01:27 +0000 Manifest this update: Fri 12 Dec 2025 04:01:27 +0000 Manifest next update: Sat 13 Dec 2025 04:01:27 +0000 Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=) 2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: k/MGJpMVPooenC8NzEFjIg61lJRZrpHgCFfr3qlHjr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:88:48:f1:9e:a2:e1:6f:46:fa:64:31:52:e1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd Validity Not Before: Dec 12 04:01:27 2025 GMT Not After : Dec 13 04:01:27 2025 GMT Subject: CN=9637d23c440204ee100dc44dff6243e4bacf9a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:b8:14:11:08:35:f7:34:9a:90:c4:e5:34: de:8f:11:3f:8a:ed:60:36:9c:c3:71:5c:28:1e:cd: 2a:c4:1e:4a:da:dc:ac:77:ea:d5:37:64:d8:f2:57: bc:64:06:31:34:ce:9a:b3:ba:d8:62:19:7a:7d:d5: 69:4c:9d:74:ec:4d:cc:a5:89:ff:db:86:f8:62:42: 70:90:6e:0c:50:6b:04:ee:5a:7e:f3:9a:56:41:14: af:9d:4d:ae:cc:1e:32:3e:fe:96:cd:0e:9d:90:cd: 91:86:aa:95:32:16:df:24:66:c8:ae:e1:89:a8:83: 16:f5:93:72:47:13:64:55:bb:30:30:d3:ee:d4:fc: 32:d0:e0:cc:67:61:93:5d:58:13:cd:1f:51:0b:27: 36:3f:a8:ea:16:a8:59:12:6c:00:97:2a:67:7f:0d: 5b:3e:dc:e0:8a:04:df:68:d2:f7:bb:fb:92:fa:b8: 98:69:67:de:ca:1b:50:6f:ef:9a:57:32:54:be:ce: 13:5f:35:1d:c1:9c:50:90:e7:da:89:4e:9e:ee:88: 74:81:9e:2d:62:97:ae:b9:e8:10:5f:6f:14:fd:ea: 70:f5:5f:7f:5c:5f:c4:af:a9:2c:83:4b:59:5c:32: 9c:90:3d:4e:90:ac:c4:65:02:4a:20:b9:1b:cf:43: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:37:D2:3C:44:02:04:EE:10:0D:C4:4D:FF:62:43:E4:BA:CF:9A:17 X509v3 Authority Key Identifier: keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:9f:68:08:38:c0:80:5e:ac:39:c5:6d:51:86:ee:a5:7a:af: 72:53:e3:79:49:78:3b:fe:91:30:df:e1:01:c6:73:e9:07:aa: 5c:0d:0f:62:86:7d:5c:b0:fe:b1:37:fd:21:64:9b:ad:70:db: eb:63:10:fb:3a:bb:1a:ed:00:5c:0d:6d:2d:76:13:df:2a:a0: 9e:f7:7b:b5:55:93:1e:2d:af:b1:a3:8a:11:64:89:9e:0e:e1: 5c:5c:0e:b2:ed:9f:46:2f:13:56:fb:f8:b5:7e:51:b0:04:c9: cb:b0:07:91:c0:eb:51:56:a5:43:40:58:d8:3f:20:8a:17:5b: 94:a8:a4:4a:d4:f6:0a:ed:fc:6d:9c:1f:97:fe:80:8c:b2:40: f3:b5:92:90:cd:42:d5:7f:53:23:3c:45:fa:e3:ff:a9:84:59: 79:21:45:ed:19:5e:28:2b:89:58:e3:1f:60:58:7f:76:6b:99: b7:37:12:96:55:8d:ed:0d:45:6b:71:a0:8d:8e:bf:6f:89:1c: 45:99:25:fd:7f:e9:9a:7e:2e:c0:0a:0b:4e:7e:02:07:18:f7: 46:fc:f5:5f:36:2f:bd:12:7a:5e:3b:aa:f2:d6:b7:18:1f:a1: 6e:78:84:fc:58:e5:98:3a:c3:e0:9b:d0:78:25:a4:c9:5c:fd: f1:88:c4:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuIhI8Z6i4W9G+mQxUuG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMDQxMDZmMzAyYzAwNzdlOTBiNjY3NjJlYmIyMjJlNjEx YjMzZGQwHhcNMjUxMjEyMDQwMTI3WhcNMjUxMjEzMDQwMTI3WjAzMTEwLwYDVQQD Eyg5NjM3ZDIzYzQ0MDIwNGVlMTAwZGM0NGRmZjYyNDNlNGJhY2Y5YTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9y4FBEINfc0mpDE5TTejxE/iu1g NpzDcVwoHs0qxB5K2tysd+rVN2TY8le8ZAYxNM6as7rYYhl6fdVpTJ107E3MpYn/ 24b4YkJwkG4MUGsE7lp+85pWQRSvnU2uzB4yPv6WzQ6dkM2RhqqVMhbfJGbIruGJ qIMW9ZNyRxNkVbswMNPu1Pwy0ODMZ2GTXVgTzR9RCyc2P6jqFqhZEmwAlypnfw1b PtzgigTfaNL3u/uS+riYaWfeyhtQb++aVzJUvs4TXzUdwZxQkOfaiU6e7oh0gZ4t YpeuuegQX28U/epw9V9/XF/Er6ksg0tZXDKckD1OkKzEZQJKILkbz0OjtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJY30jxEAgTuEA3ETf9iQ+S6z5oXMB8GA1UdIwQY MBaAFK4EEG8wLAB36Qtmdi67Ii5hGzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdRUWJ6QXNBSGZwQzJaMkxyc2lMbUViTTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iOTA3MjktODNkMi00YzE4LTgwNjMt MTFmZTI3ZDhlMTcwLzEvcmdRUWJ6QXNBSGZwQzJaMkxyc2lMbUViTTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iOTA3MjktODNkMi00YzE4LTgwNjMtMTFmZTI3ZDhlMTcw LzEvcmdRUWJ6QXNBSGZwQzJaMkxyc2lMbUViTTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyp9oCDjA gF6sOcVtUYbupXqvclPjeUl4O/6RMN/hAcZz6QeqXA0PYoZ9XLD+sTf9IWSbrXDb 62MQ+zq7Gu0AXA1tLXYT3yqgnvd7tVWTHi2vsaOKEWSJng7hXFwOsu2fRi8TVvv4 tX5RsATJy7AHkcDrUValQ0BY2D8gihdblKikStT2Cu38bZwfl/6AjLJA87WSkM1C 1X9TIzxF+uP/qYRZeSFF7RleKCuJWOMfYFh/dmuZtzcSllWN7Q1Fa3GgjY6/b4kc RZkl/X/pmn4uwAoLTn4CBxj3Rvz1XzYvvRJ6Xjuq8ta3GB+hbniE/FjlmDrD4JvQ eCWkyVz98YjESQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:11:20 2025 by rpki-client