This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json) Hash identifier: gMbCQrifl7vBiE7r/IE3yoDlYvrLnwdKQ5lFScIUFhs= Subject key identifier: 1B:7B:D5:EA:CA:D7:BF:C2:BA:D8:F4:82:FD:90:F4:5A:39:1C:1D:1E Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Certificate serial: 019B258845AAED5C72BE1B75F8F5EBE332FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 05:00:46 +0000 Manifest this update: Tue 16 Dec 2025 05:00:46 +0000 Manifest next update: Wed 17 Dec 2025 05:00:46 +0000 Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: PY6+sLnHQfd+nLYm8WCmU2z0X+FzLeu/8JccfztoZKU=) 2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:45:aa:ed:5c:72:be:1b:75:f8:f5:eb:e3:32:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Validity Not Before: Dec 16 05:00:46 2025 GMT Not After : Dec 17 05:00:46 2025 GMT Subject: CN=1b7bd5eacad7bfc2bad8f482fd90f45a391c1d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:2b:05:7a:75:b7:a5:50:89:fb:2e:4d:f4: 26:1d:22:89:09:53:ca:97:d0:42:7b:16:8d:8f:be: 69:e2:d9:83:91:79:6f:b6:8f:00:3c:87:a7:77:20: ce:db:43:4a:91:54:e0:71:d7:85:59:6f:6a:90:63: 84:33:d4:47:c4:80:5d:dc:95:26:96:fd:6e:e5:71: 0e:9d:ea:fc:4d:91:7c:f9:b3:76:0b:41:51:69:b5: 7d:f6:8b:fc:c9:5c:3f:f5:ed:92:7a:d3:6e:f3:fd: 15:8a:b7:eb:cb:02:97:e4:43:bd:e0:c5:28:f3:e6: 1a:d8:6b:3a:e0:73:81:46:73:bb:4e:b2:c7:98:ce: 4d:cf:bc:66:24:ca:ab:b1:84:4d:72:21:82:2e:58: 88:d4:66:96:1b:1c:9a:32:34:52:00:7f:ba:62:2c: ac:5d:0c:2c:53:cd:e0:c8:37:12:05:08:10:5a:ca: 85:1c:7f:76:72:cf:89:d6:3b:0a:b3:d3:b7:84:60: 96:d7:a7:d0:0e:02:01:aa:88:04:10:70:73:e4:65: 8c:21:4e:f8:8c:25:d2:f5:27:ee:2e:dd:9c:dd:33: 12:88:06:7b:5e:e0:9c:a8:74:4e:a9:b9:88:ba:86: 76:12:b2:62:69:de:75:53:7a:a9:eb:a2:32:f9:dd: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7B:D5:EA:CA:D7:BF:C2:BA:D8:F4:82:FD:90:F4:5A:39:1C:1D:1E X509v3 Authority Key Identifier: keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f1:11:77:f0:bf:b8:7a:e9:c2:cd:9e:84:99:e0:c3:6b:a6: b9:f6:22:f6:16:49:2e:9d:d2:25:e9:9f:5c:55:13:02:c7:35: af:08:6f:ed:fe:f7:23:0c:2d:96:95:94:f5:98:b0:99:52:79: bf:2b:07:34:a2:34:69:91:1e:35:98:63:54:c2:ec:89:f7:6d: 72:c9:57:70:e3:68:63:d0:1e:a9:d3:99:36:fe:6f:e2:eb:77: 40:ec:d9:74:0e:04:8b:ce:df:9e:fb:2c:94:0a:d0:e5:b7:fe: a9:f0:27:02:44:ac:52:08:3f:77:72:b3:ee:cc:36:cd:ed:4e: b5:53:21:6a:2a:4e:f3:e2:04:46:be:f5:67:c6:57:a8:0e:ab: 92:1d:06:2e:d1:72:77:a5:94:b5:3a:49:a7:2a:e5:ad:80:ad: 5d:f8:c8:1d:9a:b3:a3:7d:86:c5:16:7c:8b:96:07:62:5e:fc: 25:8d:03:48:cc:a3:e8:66:c8:fd:f1:bb:63:c4:99:86:69:9a: f3:04:3f:99:8c:9f:a7:b9:2b:4b:2c:c7:25:19:69:13:6d:bd: 44:6f:3b:b2:9c:2e:22:93:f7:a5:f7:2a:59:c2:85:3b:d4:74: 9b:eb:c2:e0:82:49:fa:53:38:3e:f4:3e:27:f4:7f:d0:01:aa: c8:b3:50:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliEWq7Vxyvht1+PXr4zL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTBjNjliZWQwMzQ2NWJmZjhhZjlkNzFhNmFlOWIxODNi N2MyNGQwHhcNMjUxMjE2MDUwMDQ2WhcNMjUxMjE3MDUwMDQ2WjAzMTEwLwYDVQQD EygxYjdiZDVlYWNhZDdiZmMyYmFkOGY0ODJmZDkwZjQ1YTM5MWMxZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppYrBXp1t6VQifsuTfQmHSKJCVPK l9BCexaNj75p4tmDkXlvto8APIendyDO20NKkVTgcdeFWW9qkGOEM9RHxIBd3JUm lv1u5XEOner8TZF8+bN2C0FRabV99ov8yVw/9e2SetNu8/0VirfrywKX5EO94MUo 8+Ya2Gs64HOBRnO7TrLHmM5Nz7xmJMqrsYRNciGCLliI1GaWGxyaMjRSAH+6Yiys XQwsU83gyDcSBQgQWsqFHH92cs+J1jsKs9O3hGCW16fQDgIBqogEEHBz5GWMIU74 jCXS9SfuLt2c3TMSiAZ7XuCcqHROqbmIuoZ2ErJiad51U3qp66Iy+d0wvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt71erK17/Cutj0gv2Q9Fo5HB0eMB8GA1UdIwQY MBaAFEUQxpvtA0Zb/4r51xpq6bGDt8JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2Ut ZTFmZDBiMWYwZWZkLzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2UtZTFmZDBiMWYwZWZk LzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPERd/C/ uHrpws2ehJngw2umufYi9hZJLp3SJemfXFUTAsc1rwhv7f73IwwtlpWU9ZiwmVJ5 vysHNKI0aZEeNZhjVMLsifdtcslXcONoY9AeqdOZNv5v4ut3QOzZdA4Ei87fnvss lArQ5bf+qfAnAkSsUgg/d3Kz7sw2ze1OtVMhaipO8+IERr71Z8ZXqA6rkh0GLtFy d6WUtTpJpyrlrYCtXfjIHZqzo32GxRZ8i5YHYl78JY0DSMyj6GbI/fG7Y8SZhmma 8wQ/mYyfp7krSyzHJRlpE229RG87spwuIpP3pfcqWcKFO9R0m+vC4IJJ+lM4PvQ+ J/R/0AGqyLNQKQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:36:24 2025 by rpki-client