This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json) Hash identifier: Sol44iqfmhOsrxTAV8mQqLJLldSXrnVgr/aawcwy1RE= Subject key identifier: F2:B3:52:F5:55:FB:BF:44:9A:25:AF:8B:B6:3D:D0:33:E9:95:3B:DD Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7 Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7 Certificate serial: 019B2107437AA5F27C13473B492A029D8143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 08:01:22 +0000 Manifest this update: Mon 15 Dec 2025 08:01:22 +0000 Manifest next update: Tue 16 Dec 2025 08:01:22 +0000 Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=) 2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: s4AwJV1QLfRwa6nZKhOCBcvulp5YzXtV5imQR1qlOZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:43:7a:a5:f2:7c:13:47:3b:49:2a:02:9d:81:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7 Validity Not Before: Dec 15 08:01:22 2025 GMT Not After : Dec 16 08:01:22 2025 GMT Subject: CN=f2b352f555fbbf449a25af8bb63dd033e9953bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:15:c5:d7:77:2f:fe:85:9f:ca:93:3e:e1: 5f:c2:69:f5:2c:26:73:e8:cf:f0:a4:e8:c9:5a:12: 66:fc:92:99:56:a6:74:d0:b7:44:16:72:c7:bf:41: ec:0e:0d:41:5d:62:76:8f:9a:43:83:60:ef:c6:81: 58:54:41:d5:96:df:8f:ca:00:33:29:96:6b:32:9d: f7:67:1c:99:6c:34:22:f3:ed:9a:91:b1:2d:9d:6b: 3b:8e:ff:04:a9:67:49:5f:cf:83:82:03:c1:26:7c: 9d:af:ed:23:11:33:31:64:fd:89:b8:ac:f2:4e:99: af:fe:0b:51:88:d0:1f:48:0f:4a:68:7a:18:9c:e7: 73:e1:32:1d:5c:62:ce:cf:7c:42:84:42:eb:f3:08: 7f:97:7d:83:e1:c5:d1:a8:47:db:e8:7c:42:e2:d8: 17:3c:d9:1c:e5:ca:01:9a:e4:06:d7:ed:e6:15:47: 71:56:ab:4e:8d:a3:0b:e6:4b:c2:36:ea:11:97:7c: 41:a5:d1:31:c3:8f:46:db:3f:51:b2:28:c6:39:24: 7b:b7:31:6d:8d:7d:79:03:55:da:78:f4:ad:56:a0: 84:a7:90:c5:fa:f9:c1:d2:5c:13:49:e9:15:19:d6: 13:26:1a:10:6e:c2:c7:4b:a4:72:de:8e:39:5f:f6: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B3:52:F5:55:FB:BF:44:9A:25:AF:8B:B6:3D:D0:33:E9:95:3B:DD X509v3 Authority Key Identifier: keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:40:b4:52:82:33:ad:c5:5c:c9:c7:29:10:a2:1b:7f:40:61: e1:89:fd:64:a4:14:79:71:ed:f7:01:c0:23:f9:9b:ce:0e:03: 15:d9:c9:d6:71:83:68:88:34:d9:76:18:5a:a8:61:a1:5f:22: c6:b7:89:42:40:ac:03:19:a4:a3:4a:7e:7b:7f:63:90:93:15: 91:be:80:f9:fa:91:f8:89:d7:55:21:5e:4b:02:cf:88:45:b2: 5c:60:e3:e8:e5:5e:9f:3d:ea:62:4d:10:c3:be:e9:4d:ca:3a: 91:47:fb:ad:30:88:6a:3d:ff:fc:b7:bd:3d:a6:da:63:ca:b0: 90:03:78:8e:38:e4:28:00:8e:02:59:bf:35:52:f4:e1:e8:89: f3:75:78:10:73:e4:8b:8a:7b:0f:6e:13:4d:e6:1b:18:1e:83: 83:cb:d7:09:0b:ea:95:9c:fc:26:9d:ba:12:db:55:98:9a:81: 61:c1:88:2d:f4:db:fb:76:e3:ee:91:55:0d:04:2c:4b:8d:b6: 32:32:27:f2:7f:52:ea:cf:35:f8:9a:c7:96:2c:b8:87:75:bd: f0:67:f2:25:52:0d:57:09:27:4f:28:18:22:eb:bd:0f:4c:aa: 8c:69:90:9f:f6:05:8a:81:e5:0a:3e:e2:66:7f:5d:56:aa:17: e5:16:7d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshB0N6pfJ8E0c7SSoCnYFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MzQ4MTQxZmM0NmRjMDE4NzA4N2NiYzg2NTU2ZTlhNDQ5 ZWUxZTcwHhcNMjUxMjE1MDgwMTIyWhcNMjUxMjE2MDgwMTIyWjAzMTEwLwYDVQQD EyhmMmIzNTJmNTU1ZmJiZjQ0OWEyNWFmOGJiNjNkZDAzM2U5OTUzYmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KkVxdd3L/6Fn8qTPuFfwmn1LCZz 6M/wpOjJWhJm/JKZVqZ00LdEFnLHv0HsDg1BXWJ2j5pDg2DvxoFYVEHVlt+PygAz KZZrMp33ZxyZbDQi8+2akbEtnWs7jv8EqWdJX8+DggPBJnydr+0jETMxZP2JuKzy Tpmv/gtRiNAfSA9KaHoYnOdz4TIdXGLOz3xChELr8wh/l32D4cXRqEfb6HxC4tgX PNkc5coBmuQG1+3mFUdxVqtOjaML5kvCNuoRl3xBpdExw49G2z9RsijGOSR7tzFt jX15A1XaePStVqCEp5DF+vnB0lwTSekVGdYTJhoQbsLHS6Ry3o45X/a7pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKzUvVV+79EmiWvi7Y90DPplTvdMB8GA1UdIwQY MBaAFEQ0gUH8RtwBhwh8vIZVbppEnuHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yMmZhNDItYjAyZi00MzExLTkwZmIt NDVhMTEyYTFlN2FjLzEvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yMmZhNDItYjAyZi00MzExLTkwZmItNDVhMTEyYTFlN2Fj LzEvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEC0UoIz rcVcyccpEKIbf0Bh4Yn9ZKQUeXHt9wHAI/mbzg4DFdnJ1nGDaIg02XYYWqhhoV8i xreJQkCsAxmko0p+e39jkJMVkb6A+fqR+InXVSFeSwLPiEWyXGDj6OVenz3qYk0Q w77pTco6kUf7rTCIaj3//Le9PabaY8qwkAN4jjjkKACOAlm/NVL04eiJ83V4EHPk i4p7D24TTeYbGB6Dg8vXCQvqlZz8Jp26EttVmJqBYcGILfTb+3bj7pFVDQQsS422 MjIn8n9S6s81+JrHliy4h3W98GfyJVINVwknTygYIuu9D0yqjGmQn/YFioHlCj7i Zn9dVqoX5RZ9bA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:32:23 2025 by rpki-client