This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: wKivgtJ0xfmv1aWUp2QpRTt4GjlleB8Jt+nYClph1xE= Subject key identifier: E9:2A:A2:D5:74:BE:8E:B3:BE:AF:C7:51:73:55:F9:94:02:B2:92:71 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019B077E05329DE7EA97B203A29CC168A5EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 1630 Signing time: Wed 10 Dec 2025 09:00:57 +0000 Manifest this update: Wed 10 Dec 2025 09:00:57 +0000 Manifest next update: Thu 11 Dec 2025 09:00:57 +0000 Files and hashes: 1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=) 2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=) 3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=) 4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=) 5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=) 6: PZIj01LldFateFu3od4_Vnbh84Q.roa (hash: ecoXbiPRWhHOY6nEuRa20dSVzR4wCTgLp8nw9UHReAg=) 7: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=) 8: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=) 9: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: 0ajNhDnJydp8lFkbBTdWGxzrNjcbPQLKLmHgnHzLl0Y=) 10: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:05:32:9d:e7:ea:97:b2:03:a2:9c:c1:68:a5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Dec 10 09:00:57 2025 GMT Not After : Dec 11 09:00:57 2025 GMT Subject: CN=e92aa2d574be8eb3beafc7517355f99402b29271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:73:70:c0:0f:e1:df:86:60:d3:72:48:fd:ef: d1:ba:8f:44:54:f7:c3:c0:42:02:7f:d0:ed:4c:3a: b2:f5:45:d2:16:b8:9d:bf:f0:5e:9e:e5:6e:59:35: 90:4a:60:bf:63:0c:6c:ab:3a:e0:9e:14:bf:4e:0e: e0:a2:ae:73:41:92:58:5f:1a:d1:c1:4a:e2:69:a2: de:47:15:f5:06:91:9d:b9:9f:02:44:99:92:d4:cc: a4:d6:ea:2e:03:94:08:51:b1:75:28:72:85:4a:8c: 4e:13:b1:22:2f:65:ea:9f:be:d4:af:9b:3f:15:1b: 3b:50:c3:78:4d:ec:04:5e:0e:d8:9a:0f:33:a4:6c: a3:ad:38:15:3f:24:4b:01:75:9f:59:94:c4:9a:df: bf:4c:f4:cc:29:f8:2f:85:25:90:87:6f:a5:03:81: a4:4b:e4:73:fb:f7:8b:48:78:36:f5:4d:f1:6d:29: aa:f7:53:20:d0:72:b5:f2:e4:d6:73:be:92:e3:b8: 2b:14:30:92:bb:df:0c:29:ed:82:6b:30:e8:96:b4: 51:aa:7a:b6:17:25:8d:3c:ff:40:8b:49:1b:61:99: fc:e4:0c:e1:d8:bb:88:1f:25:21:a4:20:04:71:20: e4:a6:c3:c9:a6:53:c9:93:09:cf:ca:01:3e:44:ca: 22:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2A:A2:D5:74:BE:8E:B3:BE:AF:C7:51:73:55:F9:94:02:B2:92:71 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ff:32:97:35:fd:1f:25:bb:d1:d5:74:37:85:de:c8:64:09: f4:54:aa:ab:fc:9c:4e:a9:87:bc:31:e1:a1:f3:81:f4:9a:4c: 01:75:b1:64:4b:ea:1f:0d:00:ec:12:4f:84:46:98:5a:28:cc: 9d:cf:27:c2:a6:eb:cf:96:6f:ce:c8:f7:6c:4b:40:82:ac:5f: 76:dd:56:21:97:94:e0:d6:5b:ee:4d:0a:6b:1e:97:22:23:bd: 11:8f:ba:fc:de:4a:3a:8a:71:20:1f:ec:09:14:1b:82:c0:52: d0:c2:8c:64:04:4c:0c:72:2e:60:39:8b:f1:9c:b6:d8:84:46: 1e:de:60:e2:02:48:68:c3:f2:ce:73:4f:b6:19:6c:0f:94:45: 11:60:ef:2b:fa:c3:5a:35:f8:95:89:44:7b:31:bc:9a:e4:88: ba:24:b3:46:cf:ff:2e:90:53:59:de:1b:8c:bd:71:c4:f7:4b: 8f:97:af:dc:d3:c1:08:bf:a9:03:9c:45:78:37:2f:da:7a:39: 19:6b:81:e4:18:2a:71:b8:14:b5:57:34:56:07:0c:ec:ce:ea: 24:87:1e:d8:0d:3d:23:08:ab:48:ab:59:91:da:9f:e4:e0:05: 61:a3:51:99:eb:bd:54:be:73:37:a8:86:d3:86:cf:f0:da:4b: 42:42:48:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfgUynefql7IDopzBaKXsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjUxMjEwMDkwMDU3WhcNMjUxMjExMDkwMDU3WjAzMTEwLwYDVQQD EyhlOTJhYTJkNTc0YmU4ZWIzYmVhZmM3NTE3MzU1Zjk5NDAyYjI5MjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nNwwA/h34Zg03JI/e/Ruo9EVPfD wEICf9DtTDqy9UXSFridv/BenuVuWTWQSmC/YwxsqzrgnhS/Tg7goq5zQZJYXxrR wUriaaLeRxX1BpGduZ8CRJmS1Myk1uouA5QIUbF1KHKFSoxOE7EiL2Xqn77Ur5s/ FRs7UMN4TewEXg7Ymg8zpGyjrTgVPyRLAXWfWZTEmt+/TPTMKfgvhSWQh2+lA4Gk S+Rz+/eLSHg29U3xbSmq91Mg0HK18uTWc76S47grFDCSu98MKe2CazDolrRRqnq2 FyWNPP9Ai0kbYZn85Azh2LuIHyUhpCAEcSDkpsPJplPJkwnPygE+RMoiKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkqotV0vo6zvq/HUXNV+ZQCspJxMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/8ylzX9 HyW70dV0N4XeyGQJ9FSqq/ycTqmHvDHhofOB9JpMAXWxZEvqHw0A7BJPhEaYWijM nc8nwqbrz5Zvzsj3bEtAgqxfdt1WIZeU4NZb7k0Kax6XIiO9EY+6/N5KOopxIB/s CRQbgsBS0MKMZARMDHIuYDmL8Zy22IRGHt5g4gJIaMPyznNPthlsD5RFEWDvK/rD WjX4lYlEezG8muSIuiSzRs//LpBTWd4bjL1xxPdLj5ev3NPBCL+pA5xFeDcv2no5 GWuB5BgqcbgUtVc0VgcM7M7qJIce2A09IwirSKtZkdqf5OAFYaNRmeu9VL5zN6iG 04bP8NpLQkJIbw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:32:04 2025 by rpki-client