This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft File: AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json) Hash identifier: HERWv2CwJsuiPrV5fRx7dzpXWFKXfGZcaTWbd4bWg9c= Subject key identifier: 8D:DD:BB:0C:E1:28:EA:0A:CD:37:E3:98:17:5F:A1:04:30:FE:D9:39 Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A Certificate issuer: /CN=01d288e54730b1093af4999380342f85d8198d0a Certificate serial: 019B1C1807668FF3E01E85D5BD0E630FD260 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft Manifest number: 09B1 Signing time: Sun 14 Dec 2025 09:01:35 +0000 Manifest this update: Sun 14 Dec 2025 09:01:35 +0000 Manifest next update: Mon 15 Dec 2025 09:01:35 +0000 Files and hashes: 1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: +b44zA53+8+6EeAqxKCtlBECw/N68neeLtLIX4f6gh8=) 2: ZAHBHHaAw7FsCrpLUbPA7Y_af1E.roa (hash: BHI7TthhK/CKdv2M5Vzp/LT9A37tVvweSFfs+BtDAtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:18:07:66:8f:f3:e0:1e:85:d5:bd:0e:63:0f:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a Validity Not Before: Dec 14 09:01:35 2025 GMT Not After : Dec 15 09:01:35 2025 GMT Subject: CN=8dddbb0ce128ea0acd37e398175fa10430fed939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:d2:91:b8:a4:3d:ce:a8:79:d3:b4:24:ed: eb:2d:6d:47:08:de:7c:3c:b2:1e:a2:d8:35:4e:d9: 6d:95:ce:ca:26:0b:f5:69:d2:81:97:39:6d:21:71: f5:50:20:d6:41:9f:40:0c:de:2c:3d:99:a2:01:b9: 06:4a:fe:da:96:80:6c:57:e9:63:49:62:55:86:77: 5a:31:b3:50:0b:2d:d0:92:23:84:70:5a:65:45:d2: 10:7c:4e:20:e0:3e:47:9d:c3:21:d0:ae:45:dc:a7: 24:2f:77:c7:73:e3:b4:f2:34:55:9d:a1:2f:5f:8d: d1:f4:02:12:74:3f:a3:c3:63:d5:c7:d2:d6:f0:a5: b8:74:c8:53:50:1c:66:6c:63:e6:c8:17:b2:a0:1e: 4f:1d:de:20:1c:79:99:4e:f3:e6:e5:4e:30:57:a9: eb:9e:c6:4a:5c:b7:65:6b:aa:92:61:0c:92:1a:ea: c6:97:9a:90:2d:ed:6a:30:94:4b:5a:6f:06:0a:34: a1:a8:55:ca:6e:27:2d:c4:d6:d3:99:f5:88:fa:a9: cd:ef:71:d3:f0:62:82:9f:14:68:4f:5a:c3:54:11: de:bf:ad:23:7b:a9:8b:b4:82:a0:2d:da:be:f0:c8: ff:2a:9c:bc:71:bf:d5:f7:ed:df:88:a8:a9:7e:09: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DD:BB:0C:E1:28:EA:0A:CD:37:E3:98:17:5F:A1:04:30:FE:D9:39 X509v3 Authority Key Identifier: keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:04:ee:44:5f:81:3c:d6:ca:1e:b2:93:8f:fa:8e:5b:19:ee: 2b:9e:bd:91:91:4a:fb:89:05:40:f8:a4:a7:b3:02:19:a1:a1: d0:16:b6:b7:eb:8d:2d:a6:8c:51:04:fe:fb:b7:9a:42:67:04: 4d:4c:f9:9a:51:9e:02:c1:c5:86:9d:bb:bd:39:3c:f6:bb:c5: 4e:17:75:ee:21:dd:d4:a4:09:23:0d:c6:0b:dc:44:09:52:c2: 72:81:eb:ff:f6:02:21:38:b4:ad:1b:85:be:d9:c3:f8:fe:bc: a5:a4:b2:0a:1e:6d:10:8f:f5:24:70:dd:54:a6:20:43:0c:ac: 25:33:98:14:61:90:25:cb:b2:52:a5:0a:0b:0a:c1:bb:27:aa: 3e:73:39:90:60:04:de:7a:91:12:71:e6:8c:22:78:50:76:bd: 96:0f:04:d1:01:b7:bc:8f:8b:24:f1:13:fc:61:99:a1:b3:05: 75:f9:34:4a:1b:65:b3:70:96:6c:9a:49:f0:a1:13:fc:59:be: 6e:b2:fe:dd:8a:2a:a7:d6:c4:30:e3:66:54:58:21:d4:aa:b1: 83:6b:87:7a:59:41:d7:4d:7f:93:b8:05:54:a5:f3:e1:23:c1: c9:74:62:39:4c:3f:e6:be:fc:93:2a:de:6b:39:1a:b3:c6:01: a6:fd:ad:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscGAdmj/PgHoXVvQ5jD9JgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDI4OGU1NDczMGIxMDkzYWY0OTk5MzgwMzQyZjg1ZDgx OThkMGEwHhcNMjUxMjE0MDkwMTM1WhcNMjUxMjE1MDkwMTM1WjAzMTEwLwYDVQQD Eyg4ZGRkYmIwY2UxMjhlYTBhY2QzN2UzOTgxNzVmYTEwNDMwZmVkOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGvSkbikPc6oedO0JO3rLW1HCN58 PLIeotg1Ttltlc7KJgv1adKBlzltIXH1UCDWQZ9ADN4sPZmiAbkGSv7aloBsV+lj SWJVhndaMbNQCy3QkiOEcFplRdIQfE4g4D5HncMh0K5F3KckL3fHc+O08jRVnaEv X43R9AISdD+jw2PVx9LW8KW4dMhTUBxmbGPmyBeyoB5PHd4gHHmZTvPm5U4wV6nr nsZKXLdla6qSYQySGurGl5qQLe1qMJRLWm8GCjShqFXKbictxNbTmfWI+qnN73HT 8GKCnxRoT1rDVBHev60je6mLtIKgLdq+8Mj/Kpy8cb/V9+3fiKipfgkKSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3duwzhKOoKzTfjmBdfoQQw/tk5MB8GA1UdIwQY MBaAFAHSiOVHMLEJOvSZk4A0L4XYGY0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MmMwYTctMmMwMC00YTBkLWIwZjkt YmNlM2ViNTc3NWViLzEvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85MmMwYTctMmMwMC00YTBkLWIwZjktYmNlM2ViNTc3NWVi LzEvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYATuRF+B PNbKHrKTj/qOWxnuK569kZFK+4kFQPikp7MCGaGh0Ba2t+uNLaaMUQT++7eaQmcE TUz5mlGeAsHFhp27vTk89rvFThd17iHd1KQJIw3GC9xECVLCcoHr//YCITi0rRuF vtnD+P68paSyCh5tEI/1JHDdVKYgQwysJTOYFGGQJcuyUqUKCwrBuyeqPnM5kGAE 3nqREnHmjCJ4UHa9lg8E0QG3vI+LJPET/GGZobMFdfk0Shtls3CWbJpJ8KET/Fm+ brL+3Yoqp9bEMONmVFgh1Kqxg2uHellB101/k7gFVKXz4SPByXRiOUw/5r78kyre azkas8YBpv2t3g== -----END CERTIFICATE-----Generated at Sun Dec 14 16:39:49 2025 by rpki-client