This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json) Hash identifier: /rG6JKo3c9LVdZw2+4vDcQfIaAHLeOYebbKhUeDqoFM= Subject key identifier: 4E:73:F8:C9:D3:53:78:72:24:F5:5D:36:1B:3A:86:67:05:67:04:76 Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39 Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39 Certificate serial: 019AF389CB9DF985ABC1D39E9118A181E134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 12:01:25 +0000 Manifest this update: Sat 06 Dec 2025 12:01:25 +0000 Manifest next update: Sun 07 Dec 2025 12:01:25 +0000 Files and hashes: 1: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (hash: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=) 2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: IW8in4yYXmqumTTdL2bOXyJIrrK649S7bfna6m3ajvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:cb:9d:f9:85:ab:c1:d3:9e:91:18:a1:81:e1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39 Validity Not Before: Dec 6 12:01:25 2025 GMT Not After : Dec 7 12:01:25 2025 GMT Subject: CN=4e73f8c9d353787224f55d361b3a866705670476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:17:a9:75:00:ba:0d:b3:d0:a3:de:75:dd:d2: 88:f3:b5:dd:5f:f3:1f:74:a8:ce:5e:12:45:3f:c9: bf:9c:87:47:c9:23:4d:d4:c3:54:ee:cd:f2:52:a7: 92:69:2e:ce:15:ae:e7:da:fc:23:dd:02:c9:bc:9f: af:68:40:5a:91:ef:3c:5f:a8:4f:f4:35:fa:8d:fc: b7:db:e9:e2:b1:db:88:4d:1d:df:d4:29:a7:5f:0a: 65:7d:80:27:83:3e:54:00:65:39:cd:1b:c3:3f:fd: 7e:db:7e:fe:60:e0:7d:02:51:f1:72:a8:58:50:f7: 5c:72:ed:fc:45:1a:4f:91:14:93:e7:31:74:93:60: 6c:64:09:42:13:95:38:10:b9:82:1e:07:22:ff:b2: 44:08:b9:6c:bb:74:6e:5d:4b:01:b8:b7:70:5d:a3: 38:4f:ba:b1:43:d4:29:52:85:a5:c2:05:5b:73:14: 2e:37:cb:3d:6c:fb:71:9a:32:41:2d:64:47:d4:98: 9a:db:6c:52:d2:fa:fa:13:2b:59:0a:a7:22:f4:3e: 4a:6e:84:7d:be:c7:91:cc:32:7f:f1:b4:f4:72:db: 13:ca:93:b1:b2:c9:6a:78:e2:c0:3f:ad:4d:c2:7e: a5:e7:27:2e:77:48:a7:02:c6:5d:79:fb:31:08:1e: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:73:F8:C9:D3:53:78:72:24:F5:5D:36:1B:3A:86:67:05:67:04:76 X509v3 Authority Key Identifier: keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d2:ac:bf:e8:03:db:51:bf:55:ae:8c:34:4e:01:c1:39:fa: 90:a3:50:f8:7a:ca:5a:85:8b:4c:c4:d0:fd:14:39:5b:4e:49: 07:e4:5f:f7:59:87:9b:f3:a0:1e:7d:f8:fa:d7:77:7a:e9:7a: 12:7d:6e:b4:7c:24:79:62:88:30:9e:ff:e0:0c:0e:93:e9:79: ac:ec:ac:2f:77:e0:23:73:69:83:89:21:09:43:a6:cb:37:28: 21:74:c0:e3:ec:59:d3:ae:30:5f:80:6f:64:44:1b:ad:26:f0: 3c:10:4e:8d:82:df:2d:66:56:a6:2f:bb:8d:a9:4a:ad:fd:01: 24:1b:ef:d7:41:74:e9:d2:be:c0:ff:72:e3:5a:5e:54:73:22: ae:bb:99:a1:2b:c9:b0:0c:d1:b1:95:99:2f:ab:f4:34:00:05: f4:e9:1b:5e:9a:b3:9b:b5:d0:19:e8:b2:b0:a6:30:1f:0f:f2: b2:27:e7:29:bb:dd:7f:b1:15:e2:a6:76:11:32:74:d4:11:5c: bc:11:bb:7a:55:ce:38:e4:9c:65:a1:57:06:b6:c5:f5:f5:a4: c0:98:68:89:39:36:3a:6f:5b:08:1b:49:75:42:9a:79:e3:bb: 56:c4:ca:94:0d:fb:9e:ff:c5:13:28:eb:2e:12:ac:1f:e8:25: 82:e6:92:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicud+YWrwdOekRihgeE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWI5OTc0ODk5OWFiOGUwMjE4ZjdjOGRiZGNjNTY5OGQ2 NjlkMzkwHhcNMjUxMjA2MTIwMTI1WhcNMjUxMjA3MTIwMTI1WjAzMTEwLwYDVQQD Eyg0ZTczZjhjOWQzNTM3ODcyMjRmNTVkMzYxYjNhODY2NzA1NjcwNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BepdQC6DbPQo9513dKI87XdX/Mf dKjOXhJFP8m/nIdHySNN1MNU7s3yUqeSaS7OFa7n2vwj3QLJvJ+vaEBake88X6hP 9DX6jfy32+nisduITR3f1CmnXwplfYAngz5UAGU5zRvDP/1+237+YOB9AlHxcqhY UPdccu38RRpPkRST5zF0k2BsZAlCE5U4ELmCHgci/7JECLlsu3RuXUsBuLdwXaM4 T7qxQ9QpUoWlwgVbcxQuN8s9bPtxmjJBLWRH1Jia22xS0vr6EytZCqci9D5KboR9 vseRzDJ/8bT0ctsTypOxsslqeOLAP61Nwn6l5ycud0inAsZdefsxCB6e2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5z+MnTU3hyJPVdNhs6hmcFZwR2MB8GA1UdIwQY MBaAFKzrmXSJmauOAhj3yNvcxWmNZp05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTkt NjU5YWU4MjE5OTFjLzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTktNjU5YWU4MjE5OTFj LzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNKsv+gD 21G/Va6MNE4BwTn6kKNQ+HrKWoWLTMTQ/RQ5W05JB+Rf91mHm/OgHn34+td3eul6 En1utHwkeWKIMJ7/4AwOk+l5rOysL3fgI3Npg4khCUOmyzcoIXTA4+xZ064wX4Bv ZEQbrSbwPBBOjYLfLWZWpi+7jalKrf0BJBvv10F06dK+wP9y41peVHMirruZoSvJ sAzRsZWZL6v0NAAF9OkbXpqzm7XQGeiysKYwHw/ysifnKbvdf7EV4qZ2ETJ01BFc vBG7elXOOOScZaFXBrbF9fWkwJhoiTk2Om9bCBtJdUKaeeO7VsTKlA37nv/FEyjr LhKsH+glguaSQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:34 2025 by rpki-client