This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json) Hash identifier: HraGjn7UBSPXbxolmbJQB4u6bd2Se6bySCMdezKJSKQ= Subject key identifier: 30:22:55:3F:10:56:43:C9:9D:EB:83:FB:D2:D8:4E:F3:10:BD:CA:37 Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57 Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857 Certificate serial: 019B0EC9890AECC72E4F1D2CEABBB16893A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft Manifest number: 0C83 Signing time: Thu 11 Dec 2025 19:00:47 +0000 Manifest this update: Thu 11 Dec 2025 19:00:47 +0000 Manifest next update: Fri 12 Dec 2025 19:00:47 +0000 Files and hashes: 1: 2ANtTxYhC9doii2ZUg03hm4sdbA.roa (hash: z+xDfuoi1M8PZfat7ClShgNzShy9imRSBA53FNp3Yi4=) 2: fkWlT9PgiHrt21vPWUF4x1XaOLY.roa (hash: x7UGdmB+xVRIAlEZvuthxI7D4dWajJ53Iu1moiHZnkA=) 3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: U+KghnCh2KLmQgl+J9dINGm4w6PFBIA4QB7WI1yMyw4=) 4: wF0b1KUXe0U_bON_pBEoysY2T6k.roa (hash: DPse6U512sX0ONNuBoLLi/K8A5hqXSZVhiW/ds6GDr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:89:0a:ec:c7:2e:4f:1d:2c:ea:bb:b1:68:93:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857 Validity Not Before: Dec 11 19:00:47 2025 GMT Not After : Dec 12 19:00:47 2025 GMT Subject: CN=3022553f105643c99deb83fbd2d84ef310bdca37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:98:bf:76:0f:b6:75:2c:8a:e5:64:f0:c4:4a: 25:a3:17:65:9e:2e:88:76:4e:1b:98:2a:29:6e:6b: 51:b2:05:f9:1d:7f:93:7a:f9:48:d1:5f:38:ca:c2: 0d:48:f6:1f:05:a5:c3:33:04:e7:0d:4a:99:15:38: a1:3d:2b:14:02:77:b6:78:0b:29:1d:40:28:11:1f: 30:17:53:51:02:b5:e8:fc:31:c4:cd:cf:c8:63:2f: 72:4f:53:fc:5b:ff:59:b5:59:6a:22:d4:56:b9:55: e4:67:cc:e9:56:91:07:2f:53:6a:98:36:f6:8e:aa: 75:f9:9d:3a:0e:50:07:4d:d7:33:14:14:fc:df:b3: ad:89:9f:e5:5a:d0:ee:32:f8:c5:7c:e7:49:fb:a3: a4:4c:71:e1:15:8a:57:50:13:e1:35:ac:84:e8:dd: 35:83:de:39:88:d9:65:3b:2b:7d:22:e4:4e:b6:86: d1:1f:84:f0:3c:d6:78:c1:be:65:46:77:b9:ca:1e: bd:ce:99:e0:75:7b:8d:5a:33:5d:e0:b3:54:3f:10: 9b:c3:14:5e:2b:b2:f2:74:53:b4:30:ac:9c:1b:38: e4:95:67:99:9f:f3:1f:ff:62:d6:5b:1e:ec:33:d9: 9a:e6:a5:51:ce:98:26:e7:08:41:bb:a4:df:26:f0: 4d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:22:55:3F:10:56:43:C9:9D:EB:83:FB:D2:D8:4E:F3:10:BD:CA:37 X509v3 Authority Key Identifier: keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:22:bf:54:35:f9:82:17:84:68:ac:46:e9:b3:39:a5:22:8f: a4:d7:53:cb:fb:85:7f:74:2a:f3:40:ec:94:05:50:14:c5:18: 64:14:d2:ea:49:c5:2b:e6:02:64:8d:f7:2f:c5:42:7b:ba:0d: 29:5e:56:af:24:70:80:b6:79:0e:9e:c2:ee:60:a7:e9:a8:3c: 23:e6:b7:91:d9:e5:20:5e:d3:e4:1a:46:55:7a:97:57:31:9d: dd:1f:b1:d6:3e:9a:3b:f9:1f:a7:bf:f4:4b:cc:86:d9:50:97: b8:e3:87:55:43:b2:89:33:8b:97:75:86:4c:00:c8:2d:9d:fd: 6a:c8:ec:ad:22:99:cf:3e:da:7e:a5:f0:ce:3a:f6:0d:2f:0e: 78:7f:0c:43:b1:61:15:4f:42:b1:e5:66:f9:34:42:6b:7e:01: 11:20:98:9c:20:94:98:91:97:ee:ba:2e:19:4e:07:e0:87:1e: 98:fd:43:83:5d:0f:8a:ea:be:7b:44:84:00:12:e8:87:be:8c: d0:89:42:28:0a:41:04:de:ab:8d:58:71:36:eb:6d:74:7f:88: 9b:8d:3a:d0:d2:1c:b1:4e:ee:e4:be:fe:a7:43:9e:52:f1:b6: d7:91:38:c1:02:75:90:40:f2:b5:40:ed:c3:36:f7:ed:43:74: 4d:30:82:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyYkK7McuTx0s6ruxaJOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMWQyYTU2MmM3ZGIyMTE1MWI0YTA5MjZiOGQ2ZmVlYWNl Zjg4NTcwHhcNMjUxMjExMTkwMDQ3WhcNMjUxMjEyMTkwMDQ3WjAzMTEwLwYDVQQD EygzMDIyNTUzZjEwNTY0M2M5OWRlYjgzZmJkMmQ4NGVmMzEwYmRjYTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pi/dg+2dSyK5WTwxEoloxdlni6I dk4bmCopbmtRsgX5HX+TevlI0V84ysINSPYfBaXDMwTnDUqZFTihPSsUAne2eAsp HUAoER8wF1NRArXo/DHEzc/IYy9yT1P8W/9ZtVlqItRWuVXkZ8zpVpEHL1NqmDb2 jqp1+Z06DlAHTdczFBT837OtiZ/lWtDuMvjFfOdJ+6OkTHHhFYpXUBPhNayE6N01 g945iNllOyt9IuROtobRH4TwPNZ4wb5lRne5yh69zpngdXuNWjNd4LNUPxCbwxRe K7LydFO0MKycGzjklWeZn/Mf/2LWWx7sM9ma5qVRzpgm5whBu6TfJvBN6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAiVT8QVkPJneuD+9LYTvMQvco3MB8GA1UdIwQY MBaAFK0dKlYsfbIRUbSgkmuNb+6s74hXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDkt MzI5MzZjM2E0YTlkLzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDktMzI5MzZjM2E0YTlk LzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSK/VDX5 gheEaKxG6bM5pSKPpNdTy/uFf3Qq80DslAVQFMUYZBTS6knFK+YCZI33L8VCe7oN KV5WryRwgLZ5Dp7C7mCn6ag8I+a3kdnlIF7T5BpGVXqXVzGd3R+x1j6aO/kfp7/0 S8yG2VCXuOOHVUOyiTOLl3WGTADILZ39asjsrSKZzz7afqXwzjr2DS8OeH8MQ7Fh FU9CseVm+TRCa34BESCYnCCUmJGX7rouGU4H4IcemP1Dg10Piuq+e0SEABLoh76M 0IlCKApBBN6rjVhxNuttdH+Im4060NIcsU7u5L7+p0OeUvG215E4wQJ1kEDytUDt wzb37UN0TTCCXw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:37 2025 by rpki-client