This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json) Hash identifier: s5C/UnZyRw4l4UwGepiGGDpPmEPJ7gG+5k2U/S6kx9w= Subject key identifier: 0A:02:9D:05:D3:89:98:08:6B:04:36:CD:05:B9:F6:D8:38:31:1D:1D Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Certificate serial: 019B495DEC127BBB27A8B07575534000CAB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft Manifest number: 068E Signing time: Tue 23 Dec 2025 04:00:50 +0000 Manifest this update: Tue 23 Dec 2025 04:00:50 +0000 Manifest next update: Wed 24 Dec 2025 04:00:50 +0000 Files and hashes: 1: 3MSuooCKHgIIUe741NoPew7fM6U.roa (hash: XKzD8YwrOGRcbqdlpu8IePXtpBqyVK3W7mHC5tD4SHY=) 2: D0IiHp-JRFUBLBIMco4yz6rCtC8.roa (hash: RH04SIPsMKZVw07b+Tt+/enaXnFcPsETZoWJ4h4XK54=) 3: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: vuYzKuLubOuaYzVPjHMsfn2toZQYVJtktflySF6470g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:ec:12:7b:bb:27:a8:b0:75:75:53:40:00:ca:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Validity Not Before: Dec 23 04:00:50 2025 GMT Not After : Dec 24 04:00:50 2025 GMT Subject: CN=0a029d05d38998086b0436cd05b9f6d838311d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:35:14:32:b1:5c:72:14:73:15:4e:16:27: e7:79:a9:7e:85:3c:d5:44:cb:ee:4f:27:3d:06:ec: bd:d2:a4:cd:5e:50:b2:ea:cc:b0:c0:55:6a:a4:b3: 10:3d:31:51:5e:65:29:b8:13:93:72:9a:46:c9:fc: 37:15:88:18:31:1f:15:0d:02:0d:fd:b3:ea:fe:f9: 55:cb:8b:23:de:2f:dd:25:a8:bf:e8:a6:15:83:92: c0:81:d4:1e:5a:32:c2:99:38:e6:c4:09:d7:01:1f: 82:f8:23:cd:c9:29:a5:79:cc:1c:98:e1:4d:58:b0: ec:c8:35:78:05:ae:59:96:fb:2f:5c:cf:98:b5:08: 0f:49:06:17:ca:c5:49:37:2e:69:83:5a:ac:86:39: 5d:57:3f:2d:b9:c4:cb:45:eb:a3:60:de:39:3b:9b: 03:67:24:a9:30:1e:97:a5:5b:02:68:9e:c9:87:f4: a2:98:5c:8d:d6:0c:be:70:b0:7b:ad:82:62:3b:73: 82:07:ae:4e:b4:b6:e6:43:b4:6c:75:ac:eb:0f:cc: db:4d:e3:68:42:8c:26:c1:16:71:6d:67:dc:c7:62: 73:d5:bb:3f:4d:0d:5a:23:25:da:60:c2:7b:bd:bc: cb:f0:64:41:7c:41:98:a0:32:6f:ed:6b:43:ab:33: 29:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:02:9D:05:D3:89:98:08:6B:04:36:CD:05:B9:F6:D8:38:31:1D:1D X509v3 Authority Key Identifier: keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0e:59:dd:01:8f:88:00:8b:41:2c:62:67:fd:7d:e9:c7:18: 62:7f:a0:94:aa:53:a7:c8:af:ff:e7:08:b1:ea:70:1c:ea:76: e2:cb:19:0e:a0:89:bb:b4:e5:35:74:26:8e:07:df:eb:f6:af: 38:a4:c2:88:37:dc:22:a4:20:48:51:9b:fa:b1:2e:47:f8:07: c6:1a:e7:3d:77:a4:53:d4:71:78:85:92:a5:7c:1d:89:c7:71: c8:32:81:28:dc:a1:f3:8c:68:a3:08:36:85:87:2f:a1:24:a9: 6c:a4:13:ad:fe:ac:41:c1:4e:92:05:79:c0:19:4e:7f:63:ad: 5e:80:48:b7:0d:15:c0:3d:ae:74:51:0d:55:1f:9f:ff:51:20: 86:71:35:8a:02:96:af:85:de:ed:03:17:3d:fc:25:37:17:d0: 73:ce:21:ec:88:ce:84:da:e3:0b:9b:48:56:11:d2:0e:a7:1e: 14:62:f5:5d:8c:8b:7f:35:6d:39:15:65:a3:f9:d8:67:10:3d: 76:c6:ed:83:69:d9:20:77:99:83:17:b1:31:93:d4:48:64:90: 02:09:88:21:dc:6a:21:62:b5:6d:3d:f9:2f:a8:2f:e6:34:89: 6b:dc:3c:84:be:cd:d7:b5:d4:18:b3:cd:d3:27:c1:73:ee:db: 02:88:e1:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXewSe7snqLB1dVNAAMq4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi ZDNjNmUwHhcNMjUxMjIzMDQwMDUwWhcNMjUxMjI0MDQwMDUwWjAzMTEwLwYDVQQD EygwYTAyOWQwNWQzODk5ODA4NmIwNDM2Y2QwNWI5ZjZkODM4MzExZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJE1FDKxXHIUcxVOFifneal+hTzV RMvuTyc9Buy90qTNXlCy6sywwFVqpLMQPTFRXmUpuBOTcppGyfw3FYgYMR8VDQIN /bPq/vlVy4sj3i/dJai/6KYVg5LAgdQeWjLCmTjmxAnXAR+C+CPNySmlecwcmOFN WLDsyDV4Ba5ZlvsvXM+YtQgPSQYXysVJNy5pg1qshjldVz8tucTLReujYN45O5sD ZySpMB6XpVsCaJ7Jh/SimFyN1gy+cLB7rYJiO3OCB65OtLbmQ7RsdazrD8zbTeNo QowmwRZxbWfcx2Jz1bs/TQ1aIyXaYMJ7vbzL8GRBfEGYoDJv7WtDqzMpIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoCnQXTiZgIawQ2zQW59tg4MR0dMB8GA1UdIwQY MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt NTBkNzA5YmZmZWI1LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1 LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA5Z3QGP iACLQSxiZ/196ccYYn+glKpTp8iv/+cIsepwHOp24ssZDqCJu7TlNXQmjgff6/av OKTCiDfcIqQgSFGb+rEuR/gHxhrnPXekU9RxeIWSpXwdicdxyDKBKNyh84xoowg2 hYcvoSSpbKQTrf6sQcFOkgV5wBlOf2OtXoBItw0VwD2udFENVR+f/1EghnE1igKW r4Xe7QMXPfwlNxfQc84h7IjOhNrjC5tIVhHSDqceFGL1XYyLfzVtORVlo/nYZxA9 dsbtg2nZIHeZgxexMZPUSGSQAgmIIdxqIWK1bT35L6gv5jSJa9w8hL7N17XUGLPN 0yfBc+7bAojhjQ== -----END CERTIFICATE-----Generated at Tue Dec 23 13:02:42 2025 by rpki-client