This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json) Hash identifier: srxeC8G6fIrZtIBOKoRYB+S/YMp/GBLIRsgtk12AuSA= Subject key identifier: 2A:C9:0A:23:20:5C:AF:5F:52:D8:61:5A:E5:06:54:6D:FA:B5:06:9B Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f Certificate serial: 019B337ACEE29C739B71598BF9DAC5415674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft Manifest number: 0927 Signing time: Thu 18 Dec 2025 22:00:44 +0000 Manifest this update: Thu 18 Dec 2025 22:00:44 +0000 Manifest next update: Fri 19 Dec 2025 22:00:44 +0000 Files and hashes: 1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=) 2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: Mn21ZGIu7K3cuQRP0ZUjobhbcs/VS0kVcDihG8OTm5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:ce:e2:9c:73:9b:71:59:8b:f9:da:c5:41:56:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f Validity Not Before: Dec 18 22:00:44 2025 GMT Not After : Dec 19 22:00:44 2025 GMT Subject: CN=2ac90a23205caf5f52d8615ae506546dfab5069b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:0c:9a:23:d4:73:62:cb:e5:73:d0:31:ae: ef:81:fd:21:de:ff:2d:9f:5a:35:60:11:7e:36:5a: 63:30:3c:91:a5:63:89:fd:5d:22:aa:7d:02:ec:f4: f2:4d:09:98:c6:76:78:75:6c:07:54:17:a4:e5:e2: 1c:06:44:d4:1f:8a:c3:57:01:a6:a7:61:f4:be:3b: f7:cc:81:9f:6e:af:88:40:ab:c0:02:ce:c7:ea:3b: 1b:23:6b:52:c5:25:a8:61:3c:68:2b:25:d5:08:09: 11:f0:f0:d9:80:b8:57:52:6b:66:27:da:03:95:16: 22:64:ef:32:26:22:d5:78:8a:ab:71:bd:91:4b:6d: ce:31:01:f0:23:d8:ed:2e:5c:74:34:e6:f0:41:88: 11:a9:74:75:04:8d:f1:ce:35:59:76:c0:ad:ef:c9: a3:c8:9e:a0:f3:e5:dc:7e:c8:44:ed:55:cc:06:b0: 36:7f:63:80:d1:d6:1c:9f:df:3e:ce:2e:79:cd:ab: 72:72:a1:7c:43:8c:b8:2e:3b:72:0d:04:f4:99:81: c4:86:6c:c6:9f:f1:a0:e8:8a:36:e8:e8:df:5c:75: 7d:02:ad:10:fe:fe:af:4e:a2:81:74:dd:5a:8b:25: 29:1e:9e:42:ec:ed:a1:5b:5b:a0:58:f4:9c:ba:9b: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C9:0A:23:20:5C:AF:5F:52:D8:61:5A:E5:06:54:6D:FA:B5:06:9B X509v3 Authority Key Identifier: keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7b:ba:ba:d1:ca:91:88:77:a9:7c:53:12:f4:c4:5d:d9:e8: 29:7a:99:8e:d1:f5:ea:09:ee:6e:9a:6e:0b:8e:5d:25:ba:d0: 95:d6:59:c3:c0:60:f1:5b:21:4c:dd:0c:8c:68:52:16:a5:a7: 16:c6:60:a6:6b:90:b7:3d:ee:1b:f5:a2:5b:53:4d:df:49:d5: 7e:4e:58:b4:9d:9e:37:ae:c7:30:65:c7:83:c9:49:3f:9e:6d: e7:91:6f:43:a1:64:b8:78:2b:ea:fd:c7:82:44:ac:c3:99:9c: 2d:ba:e1:6b:c7:c6:03:7f:85:c1:41:db:2e:f1:ed:c3:5f:61: c4:9f:02:e4:fc:38:79:43:6d:3c:d7:90:ab:5e:7d:8b:90:31: 99:87:71:fb:9c:1f:f8:b3:0c:6a:8a:da:77:31:b1:1e:64:79: fd:10:55:d8:c9:9c:d2:77:e6:17:b3:04:62:5d:c1:b6:ea:6b: 6a:8a:8d:14:72:e9:8d:69:fb:b0:b5:cb:65:76:2a:d3:c8:b4: ca:00:12:14:18:1b:65:b3:a1:e9:ca:6f:6a:da:a1:b3:58:a9: 4c:1f:ef:92:66:4c:7f:84:39:20:b7:be:b1:eb:31:1b:ce:fe: 91:36:6b:a6:0e:86:9a:24:1b:ec:80:1e:a9:87:b7:d0:46:e8: ad:7f:1c:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszes7inHObcVmL+drFQVZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjc2MzIxYzhkNDY5ZWUzYmEwMjM5MjBiMzcyY2NkYTVk ZTllMGYwHhcNMjUxMjE4MjIwMDQ0WhcNMjUxMjE5MjIwMDQ0WjAzMTEwLwYDVQQD EygyYWM5MGEyMzIwNWNhZjVmNTJkODYxNWFlNTA2NTQ2ZGZhYjUwNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXcMmiPUc2LL5XPQMa7vgf0h3v8t n1o1YBF+NlpjMDyRpWOJ/V0iqn0C7PTyTQmYxnZ4dWwHVBek5eIcBkTUH4rDVwGm p2H0vjv3zIGfbq+IQKvAAs7H6jsbI2tSxSWoYTxoKyXVCAkR8PDZgLhXUmtmJ9oD lRYiZO8yJiLVeIqrcb2RS23OMQHwI9jtLlx0NObwQYgRqXR1BI3xzjVZdsCt78mj yJ6g8+XcfshE7VXMBrA2f2OA0dYcn98+zi55zatycqF8Q4y4LjtyDQT0mYHEhmzG n/Gg6Io26OjfXHV9Aq0Q/v6vTqKBdN1aiyUpHp5C7O2hW1ugWPScuptQSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrJCiMgXK9fUthhWuUGVG36tQabMB8GA1UdIwQY MBaAFK63YyHI1GnuO6Ajkgs3LM2l3p4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAt YzdkY2MyMzkxY2M5LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84ZDdlODUtMDBjMC00MGUwLWFhODAtYzdkY2MyMzkxY2M5 LzEvcnJkakljalVhZTQ3b0NPU0N6Y3N6YVhlbmc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXu6utHK kYh3qXxTEvTEXdnoKXqZjtH16gnubppuC45dJbrQldZZw8Bg8VshTN0MjGhSFqWn FsZgpmuQtz3uG/WiW1NN30nVfk5YtJ2eN67HMGXHg8lJP55t55FvQ6FkuHgr6v3H gkSsw5mcLbrha8fGA3+FwUHbLvHtw19hxJ8C5Pw4eUNtPNeQq159i5AxmYdx+5wf +LMMaoradzGxHmR5/RBV2Mmc0nfmF7MEYl3BtupraoqNFHLpjWn7sLXLZXYq08i0 ygASFBgbZbOh6cpvatqhs1ipTB/vkmZMf4Q5ILe+sesxG87+kTZrpg6GmiQb7IAe qYe30EborX8cNw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:50:42 2025 by rpki-client