This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json) Hash identifier: 5WqN72kLRAfoNZZKb/QOYdPyyaDP4fazKdXdnQV2vU4= Subject key identifier: C9:2D:BD:E9:B9:27:DB:50:91:D5:A3:27:83:0D:12:9B:F7:A5:1A:C3 Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39 Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39 Certificate serial: 019B2F66F3C54A88F4D3E3824B7A9FDFF0F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 03:00:34 +0000 Manifest this update: Thu 18 Dec 2025 03:00:34 +0000 Manifest next update: Fri 19 Dec 2025 03:00:34 +0000 Files and hashes: 1: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (hash: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=) 2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: dwm3XueSV0akBuoOwyphuGd7BLGqP5JxoTBdm6olbQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:f3:c5:4a:88:f4:d3:e3:82:4b:7a:9f:df:f0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39 Validity Not Before: Dec 18 03:00:34 2025 GMT Not After : Dec 19 03:00:34 2025 GMT Subject: CN=c92dbde9b927db5091d5a327830d129bf7a51ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3a:60:4b:c5:56:a6:da:86:38:58:0d:16:6c: a1:27:d8:a8:f7:05:ab:01:7a:ef:d1:30:66:34:c6: 79:cf:72:ca:5d:86:d1:28:5d:8b:b1:a1:66:75:f3: 64:b6:f9:a2:2f:a9:52:d4:88:68:b2:0d:81:e2:9a: e4:7f:18:d2:a5:ce:34:95:d4:2b:fe:18:0d:c4:23: 2f:c5:1d:76:ab:b2:8d:8e:d5:de:c0:8e:62:03:fc: d3:2a:8a:72:80:17:aa:d2:be:8a:8c:c0:ee:a4:86: 98:04:38:c5:2b:db:f9:d5:c1:63:9f:c2:2a:cc:ff: 80:8d:cd:20:41:3f:2a:33:62:bb:c5:9f:52:49:42: 7a:ec:6e:97:5f:83:81:0c:d5:fd:e9:ad:8e:fb:dc: 5e:74:6e:f5:ad:5a:d2:0b:17:ea:a6:14:4a:41:4a: e5:fb:b3:0e:72:3a:34:76:05:95:17:39:89:30:fb: 47:d2:43:42:37:12:e5:3a:28:24:6a:cb:ff:fd:d8: ec:2e:e4:44:2a:26:ec:a6:2e:d5:5a:c8:75:27:4f: 9a:fd:6b:97:59:ab:5f:a8:dd:72:69:d1:b6:1e:49: b0:ed:bc:e7:33:ef:8d:33:55:a4:52:80:a1:87:33: 29:9e:cc:50:84:ad:68:35:41:a3:19:4b:52:ca:0e: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2D:BD:E9:B9:27:DB:50:91:D5:A3:27:83:0D:12:9B:F7:A5:1A:C3 X509v3 Authority Key Identifier: keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0c:c2:09:0a:68:5e:15:43:ac:7d:8d:9f:15:9a:dd:c8:33: c6:b3:4e:00:12:da:dc:1f:69:bf:4f:15:5f:63:37:3f:4f:bc: e0:35:33:79:17:7a:f3:a1:49:38:69:f1:4c:5f:b5:1e:6e:0d: de:bf:a8:1b:00:15:8c:15:c4:cf:fe:c4:f7:35:b7:15:d6:7f: b3:6b:4c:36:6a:2a:37:b9:96:17:9d:e1:d8:8e:72:92:25:1f: 18:2a:e9:8e:a2:cb:4d:e9:a5:23:7f:11:b7:0a:3f:da:99:56: ce:41:fc:ae:05:7f:83:20:98:80:ff:67:d7:bf:0e:63:38:7d: 84:61:dd:3c:e2:b7:24:28:f4:ed:0e:ec:a9:5f:5a:59:09:e6: 14:46:c7:b4:10:4c:fb:47:eb:b3:60:2a:ab:42:8f:b1:bc:bf: cb:26:6c:ef:ec:c2:56:7c:f8:e2:76:fb:38:2b:84:4e:ec:02: 39:04:da:d4:16:e3:d8:c1:f1:e6:39:32:00:f7:eb:76:2c:ce: 20:8b:f9:2d:b8:c5:7c:3b:f2:97:a3:eb:4f:6e:83:e9:4e:71: 57:13:45:78:ec:10:aa:fa:87:57:e8:83:91:8b:b6:ab:cb:a2: 05:62:be:75:9e:02:48:2f:69:21:cc:e7:a1:64:7c:67:6b:0d: 29:bd:4d:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZvPFSoj00+OCS3qf3/DwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWI5OTc0ODk5OWFiOGUwMjE4ZjdjOGRiZGNjNTY5OGQ2 NjlkMzkwHhcNMjUxMjE4MDMwMDM0WhcNMjUxMjE5MDMwMDM0WjAzMTEwLwYDVQQD EyhjOTJkYmRlOWI5MjdkYjUwOTFkNWEzMjc4MzBkMTI5YmY3YTUxYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjpgS8VWptqGOFgNFmyhJ9io9wWr AXrv0TBmNMZ5z3LKXYbRKF2LsaFmdfNktvmiL6lS1Ihosg2B4prkfxjSpc40ldQr /hgNxCMvxR12q7KNjtXewI5iA/zTKopygBeq0r6KjMDupIaYBDjFK9v51cFjn8Iq zP+Ajc0gQT8qM2K7xZ9SSUJ67G6XX4OBDNX96a2O+9xedG71rVrSCxfqphRKQUrl +7MOcjo0dgWVFzmJMPtH0kNCNxLlOigkasv//djsLuREKibspi7VWsh1J0+a/WuX WatfqN1yadG2Hkmw7bznM++NM1WkUoChhzMpnsxQhK1oNUGjGUtSyg6ySQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMktvem5J9tQkdWjJ4MNEpv3pRrDMB8GA1UdIwQY MBaAFKzrmXSJmauOAhj3yNvcxWmNZp05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTkt NjU5YWU4MjE5OTFjLzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTktNjU5YWU4MjE5OTFj LzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQzCCQpo XhVDrH2NnxWa3cgzxrNOABLa3B9pv08VX2M3P0+84DUzeRd686FJOGnxTF+1Hm4N 3r+oGwAVjBXEz/7E9zW3FdZ/s2tMNmoqN7mWF53h2I5ykiUfGCrpjqLLTemlI38R two/2plWzkH8rgV/gyCYgP9n178OYzh9hGHdPOK3JCj07Q7sqV9aWQnmFEbHtBBM +0frs2Aqq0KPsby/yyZs7+zCVnz44nb7OCuETuwCOQTa1Bbj2MHx5jkyAPfrdizO IIv5LbjFfDvyl6PrT26D6U5xVxNFeOwQqvqHV+iDkYu2q8uiBWK+dZ4CSC9pIczn oWR8Z2sNKb1NuA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:38:45 2025 by rpki-client