This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json) Hash identifier: zHqna6KpM70TuHO9+MwLemfB3GI6mc5nkjeQU2BkAXw= Subject key identifier: 1E:87:BC:94:A0:CE:AE:18:B8:71:9A:8D:81:72:85:FB:BB:C0:4F:11 Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e Certificate serial: 019B4A714C62F48A3D1521C16E74F63E0F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft Manifest number: 1024 Signing time: Tue 23 Dec 2025 09:01:37 +0000 Manifest this update: Tue 23 Dec 2025 09:01:37 +0000 Manifest next update: Wed 24 Dec 2025 09:01:37 +0000 Files and hashes: 1: RGqdJBDPEJ4NHCF91EROwq2LZhE.roa (hash: Hlulf3Fm39IzIDGq4R3bEURkvT1bInO2vsqwAXSwJiE=) 2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: rx/sq15AopAKNcUC2DL8rvHySFY04BQ/n4TvlqEFqH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:4c:62:f4:8a:3d:15:21:c1:6e:74:f6:3e:0f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e Validity Not Before: Dec 23 09:01:37 2025 GMT Not After : Dec 24 09:01:37 2025 GMT Subject: CN=1e87bc94a0ceae18b8719a8d817285fbbbc04f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ac:92:67:d1:93:b8:c3:b1:4b:da:78:e4:aa: 8b:91:dd:e7:66:3a:d3:9d:05:3d:6e:06:24:fd:38: b8:41:58:b9:cd:cd:3f:d6:13:52:21:2c:a8:f4:31: 0d:e4:8c:a1:0e:d2:38:d9:2a:9c:d3:34:e2:38:f6: f9:ed:7b:e0:3f:e1:e9:ef:5b:6d:4f:04:c7:c7:f5: 17:22:e7:f9:ac:80:ec:1e:ae:6e:9e:68:49:29:89: 75:2f:b8:a8:07:77:30:15:8f:d8:8e:c5:f8:f7:8d: dc:e7:63:77:fe:8f:c9:20:30:8e:31:f4:60:d1:28: 59:e9:a4:0e:df:47:30:96:44:0a:4d:00:2f:d2:16: 1e:08:fa:ca:06:18:be:be:e3:9f:c4:e2:e0:a7:d1: 22:46:07:8b:a3:77:c5:48:b9:db:37:48:4c:78:f9: 07:41:ce:f7:cc:a6:fd:e6:a5:4f:f4:88:5b:00:bf: d9:c0:2c:aa:fd:b7:6b:84:57:41:75:bf:17:d4:a1: af:99:15:be:af:f7:a8:33:89:0e:ef:64:d3:ce:9c: 41:ec:0a:17:7d:a2:1b:7e:56:12:8f:86:f2:73:39: 51:d5:22:2d:eb:c7:3e:18:df:be:ac:18:ae:c4:1b: e6:07:1e:d2:71:1c:d6:d4:54:6a:65:5c:4e:fe:45: 2e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:87:BC:94:A0:CE:AE:18:B8:71:9A:8D:81:72:85:FB:BB:C0:4F:11 X509v3 Authority Key Identifier: keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cd:7f:16:1f:55:1d:46:93:74:27:e8:c6:35:4b:29:d6:32: 24:5a:da:59:b7:15:e7:70:3b:4c:da:7c:c5:80:71:51:be:0b: 2e:67:27:86:9f:42:09:62:97:96:10:54:7c:47:f5:ed:c8:62: 4d:bc:eb:03:57:45:6f:35:06:f1:8b:81:45:77:a7:3f:4c:ed: ce:33:06:8d:e8:95:e4:b6:08:17:98:c1:d2:b6:61:15:97:59: 85:15:16:8d:b4:52:a7:68:23:17:a3:75:fa:6e:53:6f:66:0f: e5:fb:c4:6e:aa:e6:6c:35:66:db:1d:b4:6a:40:35:57:a1:d6: 8f:8e:2b:03:7e:6f:78:26:df:ae:95:0f:bb:27:ac:d0:8c:2f: 79:4a:e9:ae:fb:61:c0:a8:3b:7f:39:c4:76:bb:4b:b8:7e:9f: b7:72:ff:f9:e1:5a:b3:bd:46:39:f6:bb:bd:aa:f6:cc:a1:fa: 18:cf:03:39:f9:25:a3:99:f4:59:f5:46:34:c1:51:b3:39:a2: a6:f2:71:d4:aa:3c:6e:4a:6b:af:a9:1c:56:a7:45:4f:06:db: 08:61:e2:28:84:3d:21:a7:ff:b7:74:a5:ee:cc:b4:38:7b:d3: 80:80:97:01:40:1b:87:34:a4:e6:54:1b:aa:aa:09:47:ac:01: 4e:84:23:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcUxi9Io9FSHBbnT2Pg97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk MmNkMGUwHhcNMjUxMjIzMDkwMTM3WhcNMjUxMjI0MDkwMTM3WjAzMTEwLwYDVQQD EygxZTg3YmM5NGEwY2VhZTE4Yjg3MTlhOGQ4MTcyODVmYmJiYzA0ZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKySZ9GTuMOxS9p45KqLkd3nZjrT nQU9bgYk/Ti4QVi5zc0/1hNSISyo9DEN5IyhDtI42Sqc0zTiOPb57XvgP+Hp71tt TwTHx/UXIuf5rIDsHq5unmhJKYl1L7ioB3cwFY/YjsX4943c52N3/o/JIDCOMfRg 0ShZ6aQO30cwlkQKTQAv0hYeCPrKBhi+vuOfxOLgp9EiRgeLo3fFSLnbN0hMePkH Qc73zKb95qVP9IhbAL/ZwCyq/bdrhFdBdb8X1KGvmRW+r/eoM4kO72TTzpxB7AoX faIbflYSj4byczlR1SIt68c+GN++rBiuxBvmBx7ScRzW1FRqZVxO/kUuMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6HvJSgzq4YuHGajYFyhfu7wE8RMB8GA1UdIwQY MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0 LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS81/Fh9V HUaTdCfoxjVLKdYyJFraWbcV53A7TNp8xYBxUb4LLmcnhp9CCWKXlhBUfEf17chi TbzrA1dFbzUG8YuBRXenP0ztzjMGjeiV5LYIF5jB0rZhFZdZhRUWjbRSp2gjF6N1 +m5Tb2YP5fvEbqrmbDVm2x20akA1V6HWj44rA35veCbfrpUPuyes0IwveUrprvth wKg7fznEdrtLuH6ft3L/+eFas71GOfa7var2zKH6GM8DOfklo5n0WfVGNMFRszmi pvJx1Ko8bkprr6kcVqdFTwbbCGHiKIQ9Iaf/t3Sl7sy0OHvTgICXAUAbhzSk5lQb qqoJR6wBToQjSg== -----END CERTIFICATE-----Generated at Tue Dec 23 14:15:42 2025 by rpki-client