This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json) Hash identifier: PUfdNE5WjEuq/umuFXlEgp5hPGr2Iv55Ck6ejY+yWF4= Subject key identifier: 91:AB:8D:81:1B:50:7C:EA:09:F2:13:3F:4F:99:3A:70:24:F4:75:C0 Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70 Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70 Certificate serial: 019B0FA5313FF158FFB786B19943AECC1880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft Manifest number: 1775 Signing time: Thu 11 Dec 2025 23:00:42 +0000 Manifest this update: Thu 11 Dec 2025 23:00:42 +0000 Manifest next update: Fri 12 Dec 2025 23:00:42 +0000 Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=) 2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: s3nV/0A7K3wuhCY/s+sZ6xDRf/B9UjGSXXE+KQjF9Cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:31:3f:f1:58:ff:b7:86:b1:99:43:ae:cc:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70 Validity Not Before: Dec 11 23:00:42 2025 GMT Not After : Dec 12 23:00:42 2025 GMT Subject: CN=91ab8d811b507cea09f2133f4f993a7024f475c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:b9:74:68:00:15:0c:d7:9a:47:d7:a0:80: a2:88:1f:62:f5:4f:54:c5:7a:13:d9:c3:7b:06:91: 47:18:a5:8d:3e:e5:a8:ed:98:43:58:f3:0a:dd:86: 5b:9a:9b:64:53:7d:5a:8b:37:50:01:fc:6e:3e:88: d4:b5:36:38:65:65:13:25:1c:40:88:28:be:5b:f0: 65:e6:2e:dd:00:ac:46:88:84:2a:25:4f:aa:81:af: 75:41:61:52:03:15:aa:32:78:89:86:bc:a6:4d:f4: 1c:fa:4f:9d:41:e6:e6:4c:41:c6:b8:53:78:06:40: 87:41:a2:a5:a5:62:02:23:ca:fa:b2:94:b4:68:8a: 25:c4:ab:74:cc:54:99:3e:81:6e:87:10:6f:2a:a1: d5:11:e9:7c:39:cb:13:4f:bf:1a:17:4e:14:21:0a: 74:93:5f:c5:89:ac:ae:17:ec:c5:c0:b5:24:90:dd: 26:39:b6:18:21:ab:fb:34:c9:49:44:b0:2a:5d:df: 02:2a:6d:ef:6d:e6:e8:b8:a8:7d:1c:e7:63:48:7b: 41:29:4b:94:bb:06:02:e6:ae:36:a1:d6:81:2a:1e: fd:53:d0:fd:5e:98:cf:18:d5:df:98:3f:83:eb:74: 6d:8c:aa:79:c1:3a:a5:37:7a:31:f8:c2:92:3c:dd: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AB:8D:81:1B:50:7C:EA:09:F2:13:3F:4F:99:3A:70:24:F4:75:C0 X509v3 Authority Key Identifier: keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9c:84:65:fe:83:a1:48:a7:d8:60:4d:f5:66:2a:fa:3c:68: 06:ae:96:27:f9:9a:18:e8:aa:7d:db:49:5a:6e:c3:a7:ba:37: 5b:7d:c1:65:8e:1c:4b:49:38:fa:16:84:9f:8c:29:61:cb:c3: 34:0c:ac:a7:7a:12:33:76:96:62:57:c4:28:f8:0c:14:44:32: fa:ca:bb:bd:f0:c3:4d:93:b0:3a:91:a2:53:45:48:88:ea:8a: 14:dc:46:35:2c:82:10:35:f3:57:0d:5a:1c:ab:bf:4d:f9:80: 42:02:67:c5:6c:fd:3b:ee:68:58:0d:8c:d7:e4:14:20:1a:b7: 88:bf:0e:66:83:9f:2a:3c:07:b5:b9:e8:27:7b:4e:04:e4:ce: b1:fd:c0:ba:9a:63:63:41:3e:6b:b3:76:67:77:b6:f2:c4:27: 2b:44:41:d9:32:e4:d4:89:13:ca:28:8a:a8:67:46:eb:87:87: 83:59:64:da:07:cb:35:33:b1:6d:0c:09:25:25:ac:4e:1e:ae: cb:0f:5e:47:d9:49:ed:42:51:71:4c:2d:c3:6e:11:d3:ca:c8: 2c:1b:28:1c:e7:1e:16:71:e0:de:26:b3:99:7a:ff:59:75:45: ac:cc:35:ca:e2:a8:d5:bd:0c:ab:f9:2b:13:80:97:38:02:a7: eb:89:8a:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpTE/8Vj/t4axmUOuzBiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmNmMDNlNDRkYTI4YjczMTllYTdiN2I1YjExMGI5Yjhj YjdhNzAwHhcNMjUxMjExMjMwMDQyWhcNMjUxMjEyMjMwMDQyWjAzMTEwLwYDVQQD Eyg5MWFiOGQ4MTFiNTA3Y2VhMDlmMjEzM2Y0Zjk5M2E3MDI0ZjQ3NWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoam5dGgAFQzXmkfXoICiiB9i9U9U xXoT2cN7BpFHGKWNPuWo7ZhDWPMK3YZbmptkU31aizdQAfxuPojUtTY4ZWUTJRxA iCi+W/Bl5i7dAKxGiIQqJU+qga91QWFSAxWqMniJhrymTfQc+k+dQebmTEHGuFN4 BkCHQaKlpWICI8r6spS0aIolxKt0zFSZPoFuhxBvKqHVEel8OcsTT78aF04UIQp0 k1/FiayuF+zFwLUkkN0mObYYIav7NMlJRLAqXd8CKm3vbebouKh9HOdjSHtBKUuU uwYC5q42odaBKh79U9D9XpjPGNXfmD+D63RtjKp5wTqlN3ox+MKSPN0T1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGrjYEbUHzqCfITP0+ZOnAk9HXAMB8GA1UdIwQY MBaAFK0s8D5E2ii3MZ6nt7WxELm4y3pwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt YmUwNjVlMWFjMDY3LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3 LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpyEZf6D oUin2GBN9WYq+jxoBq6WJ/maGOiqfdtJWm7Dp7o3W33BZY4cS0k4+haEn4wpYcvD NAysp3oSM3aWYlfEKPgMFEQy+sq7vfDDTZOwOpGiU0VIiOqKFNxGNSyCEDXzVw1a HKu/TfmAQgJnxWz9O+5oWA2M1+QUIBq3iL8OZoOfKjwHtbnoJ3tOBOTOsf3Auppj Y0E+a7N2Z3e28sQnK0RB2TLk1IkTyiiKqGdG64eHg1lk2gfLNTOxbQwJJSWsTh6u yw9eR9lJ7UJRcUwtw24R08rILBsoHOceFnHg3iazmXr/WXVFrMw1yuKo1b0Mq/kr E4CXOAKn64mKEA== -----END CERTIFICATE-----Generated at Fri Dec 12 06:47:24 2025 by rpki-client