This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json) Hash identifier: cXtsK+RQo5oKcnik1cb3zHW/YFtkWexNv7PzluDdI9Q= Subject key identifier: D8:23:BB:49:82:14:AB:FF:AC:CC:32:6F:9B:7D:F9:91:46:C6:1E:1C Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Certificate serial: 019AF5E5B1AF29C0CA8021D38162D67CCE71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft Manifest number: 0BA0 Signing time: Sat 06 Dec 2025 23:01:02 +0000 Manifest this update: Sat 06 Dec 2025 23:01:02 +0000 Manifest next update: Sun 07 Dec 2025 23:01:02 +0000 Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=) 2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=) 3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: hH66GoazG4PfoSWHjSOn/ZQuWj2CIyzeLzTM4xiAGoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:b1:af:29:c0:ca:80:21:d3:81:62:d6:7c:ce:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Validity Not Before: Dec 6 23:01:02 2025 GMT Not After : Dec 7 23:01:02 2025 GMT Subject: CN=d823bb498214abffaccc326f9b7df99146c61e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:a5:11:67:b5:3b:dc:de:80:fd:dd:c3:eb: eb:eb:94:b7:87:3d:cb:1d:94:ce:2f:3a:24:74:11: aa:b1:0b:cc:a0:1f:70:ff:e7:e9:20:fc:5f:3e:c4: a5:be:66:c1:eb:5a:86:27:95:8f:17:af:d8:66:23: 61:61:2b:bd:a1:0b:59:36:60:c5:c3:c0:ff:88:c6: b6:26:1e:a4:e1:f2:c8:ab:75:2e:0a:87:6c:5d:9c: 60:00:23:2f:49:d9:ad:1f:13:c2:cc:5e:ac:5d:c1: aa:5e:b1:7e:ad:b7:76:af:64:03:09:1f:94:1a:f5: fe:5d:d7:98:69:dc:6d:a6:1f:34:bd:9b:6a:b4:56: 7d:4f:8b:7c:27:c0:e4:f8:28:cd:7e:49:d7:66:ef: d0:48:29:42:70:3f:32:46:94:8c:3c:b7:05:96:c1: 2b:2e:49:bc:24:a7:76:d8:1c:7f:e9:b4:a7:28:7b: 83:02:c8:5e:d1:70:2e:c4:16:71:3c:09:c8:8b:eb: 03:a4:ce:9c:ed:93:f2:fb:ec:b6:e6:bb:3e:ba:d3: 0e:6d:12:f4:35:58:f8:9b:8c:b3:f2:11:97:a9:34: da:ae:1c:68:ba:27:c6:2e:1f:d5:49:0a:7f:6c:d3: 40:ca:8e:bb:ca:70:27:ac:af:e4:8a:66:a4:b3:5a: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:23:BB:49:82:14:AB:FF:AC:CC:32:6F:9B:7D:F9:91:46:C6:1E:1C X509v3 Authority Key Identifier: keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:97:dd:e8:64:e9:1a:50:14:be:fc:a8:fd:fd:50:cb:c1:23: 8c:34:ed:26:71:f5:48:e0:ef:94:e9:bc:c4:e3:99:06:09:0d: 10:fa:55:70:41:e3:6f:45:77:8f:ce:0d:15:da:31:64:b2:40: 96:e5:0b:05:6e:ea:20:b3:26:3e:86:85:e2:85:4c:ed:b9:2d: 87:a5:8f:51:d3:36:2a:56:24:a0:0d:f9:b5:3b:2d:c2:2b:d8: 94:e0:0f:ea:89:30:d5:f4:75:ff:6e:6d:1c:e9:34:98:bf:fc: b1:1b:02:70:d2:cb:29:d8:f8:ba:e2:ac:19:de:da:51:03:a6: 4d:af:43:73:96:fe:83:ab:9d:ff:47:80:97:26:24:46:8e:0c: ef:86:ea:77:dc:54:a0:76:3e:2a:13:07:89:a4:9e:b4:7f:b0: 70:29:a1:18:4c:30:20:56:83:50:d0:e2:d7:16:a1:88:fe:6e: ac:6c:5c:f7:28:02:20:14:9b:50:9d:2a:c5:ab:8f:83:91:21: 70:9a:6a:fe:fc:1a:1b:19:a3:bd:63:5f:12:47:7f:73:da:f7: 15:f9:61:84:0c:82:3e:f2:d4:e9:80:b6:9e:7f:fc:9d:16:9d: 27:09:bc:d1:69:8e:e1:82:1a:22:bc:7e:cb:f7:3e:3e:bc:cb: a6:9d:fd:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15bGvKcDKgCHTgWLWfM5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2I1MjljOWRjOTUyNmYwOTliZjE2YWM4OWRjYzhhZGZl MTgyNDAwHhcNMjUxMjA2MjMwMTAyWhcNMjUxMjA3MjMwMTAyWjAzMTEwLwYDVQQD EyhkODIzYmI0OTgyMTRhYmZmYWNjYzMyNmY5YjdkZjk5MTQ2YzYxZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07ilEWe1O9zegP3dw+vr65S3hz3L HZTOLzokdBGqsQvMoB9w/+fpIPxfPsSlvmbB61qGJ5WPF6/YZiNhYSu9oQtZNmDF w8D/iMa2Jh6k4fLIq3UuCodsXZxgACMvSdmtHxPCzF6sXcGqXrF+rbd2r2QDCR+U GvX+XdeYadxtph80vZtqtFZ9T4t8J8Dk+CjNfknXZu/QSClCcD8yRpSMPLcFlsEr Lkm8JKd22Bx/6bSnKHuDAshe0XAuxBZxPAnIi+sDpM6c7ZPy++y25rs+utMObRL0 NVj4m4yz8hGXqTTarhxouifGLh/VSQp/bNNAyo67ynAnrK/kimaks1oJBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgju0mCFKv/rMwyb5t9+ZFGxh4cMB8GA1UdIwQY MBaAFK07UpydyVJvCZvxasidzIrf4YJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTIt YjIwZWJlNTk1NDc1LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTItYjIwZWJlNTk1NDc1 LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpfd6GTp GlAUvvyo/f1Qy8EjjDTtJnH1SODvlOm8xOOZBgkNEPpVcEHjb0V3j84NFdoxZLJA luULBW7qILMmPoaF4oVM7bkth6WPUdM2KlYkoA35tTstwivYlOAP6okw1fR1/25t HOk0mL/8sRsCcNLLKdj4uuKsGd7aUQOmTa9Dc5b+g6ud/0eAlyYkRo4M74bqd9xU oHY+KhMHiaSetH+wcCmhGEwwIFaDUNDi1xahiP5urGxc9ygCIBSbUJ0qxauPg5Eh cJpq/vwaGxmjvWNfEkd/c9r3FflhhAyCPvLU6YC2nn/8nRadJwm80WmO4YIaIrx+ y/c+PrzLpp39QA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:55 2025 by rpki-client