This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft File: RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft (raw, json) Hash identifier: v98dW6eHAQRXl11SayQcJumxkktB/AcA7f8VT3CSNLM= Subject key identifier: 57:D5:BD:95:BA:A1:23:14:85:49:0B:D3:35:EE:F3:0B:29:67:AD:28 Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D Certificate issuer: /CN=462767a7375f1ac546691aaf2a511fbb6277031d Certificate serial: 019B35695E0F75AED7777FA7FE8470C5342D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft Manifest number: 04 Signing time: Fri 19 Dec 2025 07:00:56 +0000 Manifest this update: Fri 19 Dec 2025 07:00:56 +0000 Manifest next update: Sat 20 Dec 2025 07:00:56 +0000 Files and hashes: 1: RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl (hash: cn63a9ryUxwjJe7I6/GyReMcvbLBdVm46Ehq/B5VSdI=) 2: nBVxBxAQCTHY9HJGuq237vJY3qc.roa (hash: iqaH2ChCnN7Gztf8VFce6sGPpBA84nfHjXBYzCJmC7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:5e:0f:75:ae:d7:77:7f:a7:fe:84:70:c5:34:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d Validity Not Before: Dec 19 07:00:56 2025 GMT Not After : Dec 20 07:00:56 2025 GMT Subject: CN=57d5bd95baa1231485490bd335eef30b2967ad28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:42:7e:35:dc:29:69:03:86:2d:60:7a:18: ec:b9:88:85:53:3d:ad:ec:08:da:53:00:d2:f7:9b: d5:67:7d:e0:bc:32:5e:93:16:38:d6:09:e9:68:93: 53:77:ff:4f:4a:91:ce:57:e6:8e:12:97:93:2c:84: 01:9c:6f:41:50:ee:fc:30:00:a4:dd:b9:11:c4:d9: d4:a6:e1:1b:b0:a3:7e:e3:41:38:ea:24:b7:c2:ec: 6f:a3:50:84:d2:77:2e:a1:ac:78:05:28:25:9d:dd: f9:7e:30:13:d5:ce:da:d4:09:bb:55:74:01:fe:27: 2e:cc:3a:7c:24:d3:56:d4:e4:f6:cf:12:b0:84:4a: be:68:26:db:b2:81:54:78:dd:4a:f8:13:02:d7:26: 65:91:a7:1f:e8:88:1d:fe:87:2c:41:ca:c0:b6:17: 04:94:fa:2b:9b:15:83:ff:ee:49:58:09:17:44:08: 9b:70:34:07:57:9b:4d:64:3c:a8:b9:79:4e:f6:d0: 34:5d:f7:e9:82:cf:fa:8d:1f:d0:e3:81:00:c0:ba: d4:d5:f6:34:b1:8c:4b:c8:60:4e:7f:9b:9d:54:a6: 02:6c:51:93:78:d2:c3:f2:9c:c9:b8:cc:4f:b3:9e: d4:8f:bd:ad:3a:95:42:97:a9:14:35:3b:b5:56:ba: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D5:BD:95:BA:A1:23:14:85:49:0B:D3:35:EE:F3:0B:29:67:AD:28 X509v3 Authority Key Identifier: keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:9c:61:44:98:70:7f:bf:e8:c5:6a:55:10:0c:ed:cf:d8:c9: 9b:fb:98:65:86:54:9d:c4:57:20:8c:a9:20:d1:f4:64:d0:95: fb:25:37:1b:6f:a1:79:5a:18:8c:06:f5:a8:53:61:1e:b6:b3: 1a:de:d9:e6:2c:26:97:4c:2e:53:fd:e4:9f:28:59:7f:b6:b9: ab:d5:b2:17:bb:8a:66:b4:02:d9:c0:a9:60:86:27:cc:88:f4: 7f:72:b8:3d:8b:c9:6b:87:89:2e:57:29:b2:a9:8b:e8:38:92: 92:40:de:87:9d:0f:9c:8d:9c:db:19:43:77:56:53:a0:20:65: ed:72:7b:48:b7:21:42:41:1f:73:74:14:ad:ce:78:f4:d0:a7: f7:ec:d3:70:8a:0e:93:31:9a:75:7b:ec:77:f3:28:3b:ae:4f: a3:a9:78:a3:88:e7:1f:e1:f0:e0:a5:9c:7c:93:ec:90:87:22: e9:e9:5e:53:30:ff:2d:7c:30:bf:ae:14:ca:e6:cf:69:86:2a: 05:e7:32:d4:46:06:62:e4:c6:e3:6b:0a:04:a4:ae:0c:76:13: 5f:a1:a0:d0:e7:90:c9:b6:50:15:f8:ed:af:56:b0:82:75:99: 75:76:59:db:ed:b2:e1:88:f7:ee:b3:7d:42:0f:52:18:8b:68: 5b:07:0a:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aV4Pda7Xd3+n/oRwxTQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Mjc2N2E3Mzc1ZjFhYzU0NjY5MWFhZjJhNTExZmJiNjI3 NzAzMWQwHhcNMjUxMjE5MDcwMDU2WhcNMjUxMjIwMDcwMDU2WjAzMTEwLwYDVQQD Eyg1N2Q1YmQ5NWJhYTEyMzE0ODU0OTBiZDMzNWVlZjMwYjI5NjdhZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj1CfjXcKWkDhi1gehjsuYiFUz2t 7AjaUwDS95vVZ33gvDJekxY41gnpaJNTd/9PSpHOV+aOEpeTLIQBnG9BUO78MACk 3bkRxNnUpuEbsKN+40E46iS3wuxvo1CE0ncuoax4BSglnd35fjAT1c7a1Am7VXQB /icuzDp8JNNW1OT2zxKwhEq+aCbbsoFUeN1K+BMC1yZlkacf6Igd/ocsQcrAthcE lPormxWD/+5JWAkXRAibcDQHV5tNZDyouXlO9tA0Xffpgs/6jR/Q44EAwLrU1fY0 sYxLyGBOf5udVKYCbFGTeNLD8pzJuMxPs57Uj72tOpVCl6kUNTu1VrrTWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfVvZW6oSMUhUkL0zXu8wspZ60oMB8GA1UdIwQY MBaAFEYnZ6c3XxrFRmkarypRH7tidwMdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmlkbnB6ZGZHc1ZHYVJxdktsRWZ1MkozQXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hOTAyNGQtYmJkOC00ZGVlLWEzMjMt MDA1MGVhMzZjMjk2LzEvUmlkbnB6ZGZHc1ZHYVJxdktsRWZ1MkozQXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9hOTAyNGQtYmJkOC00ZGVlLWEzMjMtMDA1MGVhMzZjMjk2 LzEvUmlkbnB6ZGZHc1ZHYVJxdktsRWZ1MkozQXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpxhRJhw f7/oxWpVEAztz9jJm/uYZYZUncRXIIypINH0ZNCV+yU3G2+heVoYjAb1qFNhHraz Gt7Z5iwml0wuU/3knyhZf7a5q9WyF7uKZrQC2cCpYIYnzIj0f3K4PYvJa4eJLlcp sqmL6DiSkkDeh50PnI2c2xlDd1ZToCBl7XJ7SLchQkEfc3QUrc549NCn9+zTcIoO kzGadXvsd/MoO65Po6l4o4jnH+Hw4KWcfJPskIci6eleUzD/LXwwv64UyubPaYYq Becy1EYGYuTG42sKBKSuDHYTX6Gg0OeQybZQFfjtr1awgnWZdXZZ2+2y4Yj37rN9 Qg9SGItoWwcKjw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:48:57 2025 by rpki-client