This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json) Hash identifier: DQZZMMm42CqcHNvLue01oo9+crQwrhKfNXAXbHym51E= Subject key identifier: A3:75:46:66:6A:2B:61:AA:5F:46:E7:CA:DF:B3:A2:4F:B8:E2:63:C9 Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43 Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43 Certificate serial: 019AF5AF17E3D6A26E08ED0769B6E9FD2823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 22:01:24 +0000 Manifest this update: Sat 06 Dec 2025 22:01:24 +0000 Manifest next update: Sun 07 Dec 2025 22:01:24 +0000 Files and hashes: 1: XC8oYcpTiN7Sp5cFmMF21IOCs5E.roa (hash: ELbj8X27A4edrX774m1HSzNCxhpcePnCe+oGBGFLxVk=) 2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: Vzcug9yCPLdBYXusWGTMEvMOErXPoI82UPdVsQgbcFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:17:e3:d6:a2:6e:08:ed:07:69:b6:e9:fd:28:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43 Validity Not Before: Dec 6 22:01:24 2025 GMT Not After : Dec 7 22:01:24 2025 GMT Subject: CN=a37546666a2b61aa5f46e7cadfb3a24fb8e263c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a3:fa:bc:ca:bb:8b:eb:ae:98:1e:8d:ab:11: b7:a9:53:33:e7:d7:ce:f1:bc:53:76:af:a0:f8:f7: 36:51:70:2e:68:37:6c:8c:aa:07:b9:c0:66:f2:53: e5:8b:aa:e2:83:72:68:11:0d:73:73:95:ec:26:f3: 24:9d:11:4d:55:bb:f7:80:5a:db:c7:f7:d0:45:b2: 1f:20:b3:7e:3b:36:af:b5:3e:73:9b:0f:d4:03:b6: 04:58:d0:98:76:af:58:67:26:14:be:3e:cd:82:46: 00:98:88:f9:31:a9:a9:43:00:bb:43:ce:f7:ee:40: 5e:da:6d:d0:84:6d:6f:01:e8:77:ea:cd:84:de:7b: 2a:de:61:b1:ed:b4:ba:35:02:a8:fe:bf:08:24:11: 78:3e:86:21:16:bc:34:08:3e:24:71:9c:82:37:bd: 0d:a8:0f:00:e7:3a:ef:ea:9a:6e:d4:df:66:e6:e8: f5:a3:97:05:08:19:c4:14:4f:fe:93:96:90:66:67: 66:6f:9e:b7:8a:98:00:96:2e:e7:da:9c:e2:82:b7: 89:e2:31:7d:f0:5a:53:2a:e2:57:3b:d1:8f:78:52: c1:aa:51:ac:bb:6a:f5:63:e0:b3:91:ec:c9:91:57: 74:38:89:5a:7b:62:f0:5c:13:1d:36:49:7f:ee:b3: 0e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:75:46:66:6A:2B:61:AA:5F:46:E7:CA:DF:B3:A2:4F:B8:E2:63:C9 X509v3 Authority Key Identifier: keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:78:06:15:b9:b3:df:b6:c2:d4:81:89:18:06:31:93:43:a8: 58:74:6d:16:6d:36:c4:d0:ad:bf:13:02:ae:04:34:e6:52:53: d5:dc:32:70:cb:d8:03:d6:61:8d:ad:dc:14:43:88:f1:63:c6: b2:29:03:e4:cd:e7:1f:b2:95:83:2e:36:d6:f5:8d:f6:81:6f: c8:30:29:d0:7c:c9:28:8b:cc:66:e4:22:5a:4c:31:30:74:d1: a2:ef:78:54:52:8c:c2:19:01:11:fa:e0:88:b9:8a:79:5e:fe: 87:d7:f3:df:66:6d:1b:57:ab:2d:51:ef:73:18:c0:bf:6c:45: 9e:af:93:b8:ec:ad:1a:8f:30:ea:e1:d1:44:9c:70:72:60:3d: a8:37:f3:b0:eb:1b:4c:26:21:8a:24:a9:5d:fb:d5:46:77:7a: b9:66:ba:2e:b3:4a:d2:6c:5a:4a:37:56:61:45:85:46:cb:c2: 35:f7:54:c3:96:44:9e:39:a8:9a:50:c2:f9:4b:35:33:69:83: 53:bc:5d:a3:b9:c0:e8:c8:cb:07:3d:de:19:48:e4:75:57:d8: d4:36:65:f9:f0:e7:21:a3:5e:0c:51:96:c9:00:92:77:7e:d3: 80:c7:c5:4f:e7:9c:9b:8d:b5:3d:74:44:f2:6d:43:7b:60:9b: c4:4b:69:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rxfj1qJuCO0Habbp/SgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDVkNDUyYThlZDUzNTI4N2ZlYjM2NTE0YmM4N2MwMjIz NTVhNDMwHhcNMjUxMjA2MjIwMTI0WhcNMjUxMjA3MjIwMTI0WjAzMTEwLwYDVQQD EyhhMzc1NDY2NjZhMmI2MWFhNWY0NmU3Y2FkZmIzYTI0ZmI4ZTI2M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qP6vMq7i+uumB6NqxG3qVMz59fO 8bxTdq+g+Pc2UXAuaDdsjKoHucBm8lPli6rig3JoEQ1zc5XsJvMknRFNVbv3gFrb x/fQRbIfILN+OzavtT5zmw/UA7YEWNCYdq9YZyYUvj7NgkYAmIj5MampQwC7Q873 7kBe2m3QhG1vAeh36s2E3nsq3mGx7bS6NQKo/r8IJBF4PoYhFrw0CD4kcZyCN70N qA8A5zrv6ppu1N9m5uj1o5cFCBnEFE/+k5aQZmdmb563ipgAli7n2pzigreJ4jF9 8FpTKuJXO9GPeFLBqlGsu2r1Y+CzkezJkVd0OIlae2LwXBMdNkl/7rMO4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN1RmZqK2GqX0bnyt+zok+44mPJMB8GA1UdIwQY MBaAFGnV1FKo7VNSh/6zZRS8h8AiNVpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2Yt ZGQ5NDQzNTc5ZWQ1LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2YtZGQ5NDQzNTc5ZWQ1 LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHgGFbmz 37bC1IGJGAYxk0OoWHRtFm02xNCtvxMCrgQ05lJT1dwycMvYA9Zhja3cFEOI8WPG sikD5M3nH7KVgy421vWN9oFvyDAp0HzJKIvMZuQiWkwxMHTRou94VFKMwhkBEfrg iLmKeV7+h9fz32ZtG1erLVHvcxjAv2xFnq+TuOytGo8w6uHRRJxwcmA9qDfzsOsb TCYhiiSpXfvVRnd6uWa6LrNK0mxaSjdWYUWFRsvCNfdUw5ZEnjmomlDC+Us1M2mD U7xdo7nA6MjLBz3eGUjkdVfY1DZl+fDnIaNeDFGWyQCSd37TgMfFT+ecm421PXRE 8m1De2CbxEtpUg== -----END CERTIFICATE-----Generated at Sun Dec 7 07:40:56 2025 by rpki-client