This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json) Hash identifier: Ai5YlOP0g1HCNZY0Wv0LvJHnIzg9P1zZMxi3462EghI= Subject key identifier: 86:56:F7:14:97:59:23:E9:30:FB:99:96:10:9B:0C:27:03:67:1B:EA Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Certificate serial: 019B0E5B9B9EBDE1C0EC414B90B06A945771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 17:00:43 +0000 Manifest this update: Thu 11 Dec 2025 17:00:43 +0000 Manifest next update: Fri 12 Dec 2025 17:00:43 +0000 Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: mpZqyhHLHf3qGpjJoL+zKytijtL1coljdXciiIH5gXQ=) 2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:9b:9e:bd:e1:c0:ec:41:4b:90:b0:6a:94:57:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Validity Not Before: Dec 11 17:00:43 2025 GMT Not After : Dec 12 17:00:43 2025 GMT Subject: CN=8656f714975923e930fb9996109b0c2703671bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:e3:5c:4f:75:d7:b9:90:f7:a5:f3:49:8a: dd:4b:ec:d8:56:a2:04:b5:65:1e:aa:4a:37:c9:a9: da:93:29:69:59:59:6c:a0:eb:56:be:82:09:e9:fc: 6b:f2:7a:45:19:2d:9d:c4:90:a7:01:44:ab:42:95: 23:01:a6:98:fb:9e:99:be:45:08:fe:79:7c:4d:46: 5d:52:5d:95:58:c6:7a:43:d5:0d:03:cd:ee:45:c4: 6f:d7:2d:2d:6e:92:0a:4e:5b:b3:c1:30:e1:b1:b1: 60:d6:8a:58:f4:ba:c9:17:c1:1d:61:e2:25:b6:ef: 4c:af:9e:43:72:51:6e:c0:75:8a:4c:1f:9c:db:58: 11:59:4d:a1:7c:a8:bc:db:b1:06:ca:7b:4a:47:42: cd:33:0f:d2:e6:40:08:33:5e:1d:1f:3f:20:1c:9d: 7a:1e:83:2f:8c:da:62:1e:07:09:e7:42:04:02:d2: aa:0f:f9:db:b8:98:ed:c3:79:a9:22:52:a8:11:3e: aa:03:91:26:0b:51:f5:00:c9:d4:ae:6c:4f:a4:a0: 8a:fe:93:a4:25:90:d8:26:52:9a:21:53:1b:29:8a: e9:64:15:ed:35:fb:bb:7f:ec:5a:64:87:bc:f8:ea: b1:1f:bb:70:09:e8:01:9b:ab:cd:d1:91:a3:c2:8d: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:F7:14:97:59:23:E9:30:FB:99:96:10:9B:0C:27:03:67:1B:EA X509v3 Authority Key Identifier: keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6b:b1:6d:4a:89:a1:26:60:14:1e:fc:58:99:e0:5f:8b:f7: db:87:4e:3f:75:a2:da:ec:2b:09:3c:3f:e3:e1:ae:c7:ab:f3: 93:33:7f:c2:ab:a6:1d:de:c7:8e:a4:35:ac:79:76:9d:d9:0d: 94:29:a1:1a:6f:66:eb:dd:0e:44:22:30:a3:fb:fa:d5:b0:ca: 09:0c:fb:85:e1:89:dc:8a:72:df:d0:6e:24:eb:31:4a:e5:3b: 16:c7:0a:f0:8b:31:40:cd:6a:a5:38:b7:48:9a:d0:c7:1c:43: 9b:bb:96:3a:e1:52:90:45:a4:7d:95:8c:a2:0a:44:b7:25:63: b6:68:81:18:de:53:84:ad:6b:26:2b:ac:18:c1:9d:44:e5:ab: 3e:7a:b3:aa:87:ae:d5:5f:66:1b:ef:1a:bf:fb:28:38:16:67: bd:14:03:67:ef:b5:f4:cb:a1:4f:fd:ea:4c:a4:02:cd:55:55: 25:a7:71:6a:99:24:e0:f9:20:95:43:83:05:b9:98:e8:0d:74: 23:34:64:4c:c6:29:54:46:dc:fd:b2:43:07:5d:c8:5b:3b:17: 4f:7a:3c:60:1c:55:1b:e4:f7:52:3c:00:db:44:cb:f1:34:8a: 2a:fa:1b:de:fa:d6:dc:8b:98:fe:52:0a:5c:0b:cd:46:17:62: 33:e4:c7:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW5ueveHA7EFLkLBqlFdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTBjNjliZWQwMzQ2NWJmZjhhZjlkNzFhNmFlOWIxODNi N2MyNGQwHhcNMjUxMjExMTcwMDQzWhcNMjUxMjEyMTcwMDQzWjAzMTEwLwYDVQQD Eyg4NjU2ZjcxNDk3NTkyM2U5MzBmYjk5OTYxMDliMGMyNzAzNjcxYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveHjXE9117mQ96XzSYrdS+zYVqIE tWUeqko3yanakylpWVlsoOtWvoIJ6fxr8npFGS2dxJCnAUSrQpUjAaaY+56ZvkUI /nl8TUZdUl2VWMZ6Q9UNA83uRcRv1y0tbpIKTluzwTDhsbFg1opY9LrJF8EdYeIl tu9Mr55DclFuwHWKTB+c21gRWU2hfKi827EGyntKR0LNMw/S5kAIM14dHz8gHJ16 HoMvjNpiHgcJ50IEAtKqD/nbuJjtw3mpIlKoET6qA5EmC1H1AMnUrmxPpKCK/pOk JZDYJlKaIVMbKYrpZBXtNfu7f+xaZIe8+OqxH7twCegBm6vN0ZGjwo2vmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZW9xSXWSPpMPuZlhCbDCcDZxvqMB8GA1UdIwQY MBaAFEUQxpvtA0Zb/4r51xpq6bGDt8JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2Ut ZTFmZDBiMWYwZWZkLzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2UtZTFmZDBiMWYwZWZk LzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWuxbUqJ oSZgFB78WJngX4v324dOP3Wi2uwrCTw/4+Gux6vzkzN/wqumHd7HjqQ1rHl2ndkN lCmhGm9m690ORCIwo/v61bDKCQz7heGJ3Ipy39BuJOsxSuU7FscK8IsxQM1qpTi3 SJrQxxxDm7uWOuFSkEWkfZWMogpEtyVjtmiBGN5ThK1rJiusGMGdROWrPnqzqoeu 1V9mG+8av/soOBZnvRQDZ++19MuhT/3qTKQCzVVVJadxapkk4PkglUODBbmY6A10 IzRkTMYpVEbc/bJDB13IWzsXT3o8YBxVG+T3UjwA20TL8TSKKvob3vrW3IuY/lIK XAvNRhdiM+THXA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:42 2025 by rpki-client