This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json) Hash identifier: irqFZmHC3lVlUwXYAkyK5F2E5GIt+kfc5GEIvzx1WMQ= Subject key identifier: FF:77:DE:1A:28:8E:43:02:A5:B7:AB:65:20:60:8F:77:47:DC:96:63 Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82 Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82 Certificate serial: 019AF12CEE3CEE191E7608DDB2D531E8B89C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft Manifest number: 0CD6 Signing time: Sat 06 Dec 2025 01:00:44 +0000 Manifest this update: Sat 06 Dec 2025 01:00:44 +0000 Manifest next update: Sun 07 Dec 2025 01:00:44 +0000 Files and hashes: 1: 9An93QZ5VcdXnM-SpuqFZ7HTYmU.roa (hash: FvzvcUzn3akzojaHHdMGtSYsI1uUN+lMDojMlOkLqXs=) 2: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: wECiC+eQ3nxnp20M68CqwFn/xceC43hiPRARvHPkBRE=) 3: RAD4tK02ktN0fOfQsDIg0oXzowM.roa (hash: zP2Pk53gLmd7JDeyZonVGODT/lrmnaflf5tGkA0jXzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ee:3c:ee:19:1e:76:08:dd:b2:d5:31:e8:b8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82 Validity Not Before: Dec 6 01:00:44 2025 GMT Not After : Dec 7 01:00:44 2025 GMT Subject: CN=ff77de1a288e4302a5b7ab6520608f7747dc9663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:90:72:97:5b:eb:f4:c4:bf:96:46:96:bb: cb:3b:f3:aa:49:e0:46:73:bc:d8:47:48:ec:1a:b1: 7d:de:b1:95:9e:e0:68:b7:ed:db:a5:f1:97:d2:85: 4b:ed:1f:43:01:11:34:fc:10:34:c1:47:9f:eb:ec: 90:30:04:b7:3d:6a:dc:00:24:f2:b4:4d:af:d2:15: ed:3f:24:f2:4c:74:49:36:08:88:9f:9b:77:05:d3: 69:21:c3:bb:c5:51:5f:33:80:ac:39:13:72:b7:46: 23:9c:10:68:40:fe:fb:19:cc:31:eb:af:10:68:2c: 86:c2:80:0c:a1:76:7f:91:95:c8:cd:11:26:d5:6a: e8:e5:83:9b:02:8e:bf:d3:fe:77:49:63:b6:3c:82: 77:77:6b:ab:31:8f:a6:5a:28:8f:03:af:98:03:7a: 20:ff:ce:68:11:83:7f:36:a8:92:ad:cc:a1:7b:e1: 11:2b:73:4a:5a:44:d7:85:9a:cf:15:18:2f:ce:b6: 9a:b1:ca:a3:26:db:be:2b:ff:ee:a0:09:b0:5e:4a: ea:af:4a:d0:2b:6c:7c:08:e7:85:75:d7:a5:a5:62: 40:fb:34:0d:64:55:c7:44:9a:8b:ee:9c:3e:0d:6d: b9:c2:d9:c9:88:e6:8d:64:cd:04:3b:ba:6f:e9:e3: 02:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:77:DE:1A:28:8E:43:02:A5:B7:AB:65:20:60:8F:77:47:DC:96:63 X509v3 Authority Key Identifier: keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:70:f6:d7:da:80:83:bd:33:ce:4b:6a:de:b9:35:03:98:b1: b4:d1:dd:6e:5c:30:42:86:43:e5:aa:1c:3a:27:74:4d:08:ed: 60:b7:94:fc:fd:72:6a:0c:f4:48:1f:db:af:59:cb:c0:94:d5: 7b:fc:73:2f:13:6d:3c:52:6c:09:43:27:e2:6a:fd:63:84:27: 4c:48:b1:ce:47:7e:84:d4:03:a1:70:99:26:f5:f8:b8:36:dc: 9d:ce:1f:4e:ca:96:18:cb:e9:e7:4b:8e:4e:bb:08:4d:8e:03: b9:7a:bf:d5:ed:e4:74:7b:a1:44:db:52:6c:c6:31:72:2b:cc: b3:61:73:c9:53:12:6a:26:bd:f6:5c:7b:2e:78:99:0a:1c:76: 90:ae:a1:a4:09:ee:ce:e4:01:0d:a1:8c:8d:87:b4:5e:1f:f3: c8:29:db:3c:dd:00:51:a9:cd:e4:a9:99:90:06:e5:31:66:19: f6:91:2b:1f:0b:b8:79:35:16:50:45:78:57:2c:e5:b0:68:7c: d4:c1:5f:8f:cc:18:3b:82:2b:68:ea:f4:11:4b:d9:ba:ee:31: 1f:1c:96:dc:20:a6:dc:0f:93:25:29:c8:6e:2a:2b:64:b8:b1: 1b:9b:c1:f3:10:69:80:ad:01:1a:50:a2:de:9b:a6:df:12:c0: 84:b6:30:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO487hkedgjdstUx6LicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl YWRhODIwHhcNMjUxMjA2MDEwMDQ0WhcNMjUxMjA3MDEwMDQ0WjAzMTEwLwYDVQQD EyhmZjc3ZGUxYTI4OGU0MzAyYTViN2FiNjUyMDYwOGY3NzQ3ZGM5NjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuziQcpdb6/TEv5ZGlrvLO/OqSeBG c7zYR0jsGrF93rGVnuBot+3bpfGX0oVL7R9DARE0/BA0wUef6+yQMAS3PWrcACTy tE2v0hXtPyTyTHRJNgiIn5t3BdNpIcO7xVFfM4CsORNyt0YjnBBoQP77Gcwx668Q aCyGwoAMoXZ/kZXIzREm1Wro5YObAo6/0/53SWO2PIJ3d2urMY+mWiiPA6+YA3og /85oEYN/NqiSrcyhe+ERK3NKWkTXhZrPFRgvzraascqjJtu+K//uoAmwXkrqr0rQ K2x8COeFddelpWJA+zQNZFXHRJqL7pw+DW25wtnJiOaNZM0EO7pv6eMC7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP933hoojkMCpberZSBgj3dH3JZjMB8GA1UdIwQY MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt ZGJmNzZlZDM5MzlmLzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXD219qA g70zzktq3rk1A5ixtNHdblwwQoZD5aocOid0TQjtYLeU/P1yagz0SB/br1nLwJTV e/xzLxNtPFJsCUMn4mr9Y4QnTEixzkd+hNQDoXCZJvX4uDbcnc4fTsqWGMvp50uO TrsITY4DuXq/1e3kdHuhRNtSbMYxcivMs2FzyVMSaia99lx7LniZChx2kK6hpAnu zuQBDaGMjYe0Xh/zyCnbPN0AUanN5KmZkAblMWYZ9pErHwu4eTUWUEV4VyzlsGh8 1MFfj8wYO4IraOr0EUvZuu4xHxyW3CCm3A+TJSnIbiorZLixG5vB8xBpgK0BGlCi 3pum3xLAhLYwQg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:17 2025 by rpki-client