This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft File: IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json) Hash identifier: uZnUIsc2qTtwSLxW89bxkljCkXLJMkBUg2ftDlNejiA= Subject key identifier: 59:A5:66:7C:E3:C0:76:9C:CA:4C:AA:14:75:55:14:9D:63:53:56:E7 Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b Certificate serial: 019AF0BF3CE57CA933977A64C468B7FE87AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft Manifest number: 163C Signing time: Fri 05 Dec 2025 23:00:56 +0000 Manifest this update: Fri 05 Dec 2025 23:00:56 +0000 Manifest next update: Sat 06 Dec 2025 23:00:56 +0000 Files and hashes: 1: 8LdKjmmRFspBva59gTRvEJDyC7s.roa (hash: GcpsTHxi3ZG8tETWo5oxKbnWLb/jW7ozr4maXyFDKLI=) 2: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: Kn2H3UYMIsyi0sl0HWrFYn0b1No3a36eJYEr3FFpzHM=) 3: ZtZZEAiMokBjnJ6RL0fW_WRtUvg.roa (hash: HYmFAXxKVnFTMBP2WvTIUya5uxGXpwouKqV1Y54fjKg=) 4: j43LOA8IRrlHidVD9kIt8ts1bQQ.roa (hash: ajq42AMhzoj0izmv7N0d9nYjqO9xCqAA6SJaUcmPxOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3c:e5:7c:a9:33:97:7a:64:c4:68:b7:fe:87:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b Validity Not Before: Dec 5 23:00:56 2025 GMT Not After : Dec 6 23:00:56 2025 GMT Subject: CN=59a5667ce3c0769cca4caa147555149d635356e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7a:c0:2d:3a:76:30:8c:11:e1:6a:fd:ff:b8: dc:8d:4a:63:58:07:92:d2:df:5e:44:9d:e4:94:ae: 88:57:42:24:2e:c5:0c:9a:9a:ce:63:b3:5a:29:3c: 79:c8:14:9a:f2:ae:ec:ef:e7:f6:99:86:d1:08:02: b8:c5:33:88:0d:7a:75:33:fe:dd:e5:4a:29:2e:0b: b1:8d:eb:c2:2e:f2:0d:5d:8e:9c:b7:c9:a0:91:2e: d7:30:9a:81:19:d8:52:51:83:18:e3:4a:c8:9d:65: 7a:34:dc:06:9b:df:d3:f2:3f:c8:60:0d:79:bb:98: d3:54:c3:5d:8c:c1:39:3c:97:2e:05:c4:c0:bb:08: ce:55:04:5b:c5:c5:e6:ab:41:37:68:0c:db:fd:4d: 1b:4a:33:2b:46:2e:cf:55:9a:53:ba:d4:b5:bb:3e: fe:f9:f4:ac:49:12:2c:9c:a0:4e:34:18:7e:d3:a7: e5:5f:39:f2:f8:a0:c0:26:09:bc:ec:a5:92:f0:e3: cf:4e:2c:d5:bd:2d:c3:42:6d:ee:70:30:d1:6e:d7: 4f:41:46:80:a2:f0:27:db:5c:e8:0a:4c:11:b3:0d: 1d:19:7e:09:4f:34:5e:07:2b:6b:12:99:60:e7:49: 5e:bb:d5:37:14:75:52:e1:88:f1:51:d8:f8:f9:0b: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A5:66:7C:E3:C0:76:9C:CA:4C:AA:14:75:55:14:9D:63:53:56:E7 X509v3 Authority Key Identifier: keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4b:74:3c:3e:ac:27:3c:5a:fb:96:74:fa:d4:1d:e0:7d:76: f5:be:f1:93:1e:22:5c:8e:94:49:ff:cf:83:11:17:5c:68:20: c1:7d:9c:9d:fb:ec:1c:47:19:02:8f:e6:6b:09:e6:2e:c2:1e: f4:00:f7:2b:d8:a9:ac:2a:af:07:f8:28:e3:6e:a1:23:c8:4b: ab:01:07:10:77:49:85:8d:1c:60:8d:12:25:9e:a5:00:a6:e1: bb:6e:ca:c5:49:3e:e7:3f:f6:bd:51:12:89:5a:f3:c6:76:11: 52:ec:33:bd:e2:2d:c8:11:c9:48:16:fe:39:12:2d:f6:b0:2c: 9d:d2:b4:2e:bd:90:ae:b2:23:60:6e:2c:7e:c9:01:72:d8:9e: bb:2e:2c:5b:f0:36:97:50:a8:ad:b8:de:e9:bb:cd:43:f3:58: 9c:86:38:f0:c1:b3:39:bc:aa:26:a0:a2:30:81:e4:a9:e6:2a: c8:43:7c:fa:b8:cc:9c:d1:40:f4:69:f9:42:05:9b:b2:7e:97: 84:a5:74:7a:47:1b:37:a4:e3:95:27:7c:b0:5a:ad:a6:e5:05: f6:59:eb:bf:88:bc:61:b8:93:cf:de:98:a2:95:a2:ce:fd:f4: 5f:e4:2e:97:27:95:5e:52:56:13:80:0f:a9:62:c0:ab:d8:ad: 69:17:ec:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzzlfKkzl3pkxGi3/oeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMzc1MTJlNTM1NWU4MTVhY2YwNjQ2MDNmOGFlM2Y1NTI4 YTVlM2IwHhcNMjUxMjA1MjMwMDU2WhcNMjUxMjA2MjMwMDU2WjAzMTEwLwYDVQQD Eyg1OWE1NjY3Y2UzYzA3NjljY2E0Y2FhMTQ3NTU1MTQ5ZDYzNTM1NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHrALTp2MIwR4Wr9/7jcjUpjWAeS 0t9eRJ3klK6IV0IkLsUMmprOY7NaKTx5yBSa8q7s7+f2mYbRCAK4xTOIDXp1M/7d 5UopLguxjevCLvINXY6ct8mgkS7XMJqBGdhSUYMY40rInWV6NNwGm9/T8j/IYA15 u5jTVMNdjME5PJcuBcTAuwjOVQRbxcXmq0E3aAzb/U0bSjMrRi7PVZpTutS1uz7+ +fSsSRIsnKBONBh+06flXzny+KDAJgm87KWS8OPPTizVvS3DQm3ucDDRbtdPQUaA ovAn21zoCkwRsw0dGX4JTzReBytrEplg50leu9U3FHVS4YjxUdj4+QsCswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmlZnzjwHacykyqFHVVFJ1jU1bnMB8GA1UdIwQY MBaAFCA3US5TVegVrPBkYD+K4/VSil47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEt YzJiYTI0NjUzZjdiLzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iMTQ3NWQtZmNjMi00OGJiLWFlMDEtYzJiYTI0NjUzZjdi LzEvSURkUkxsTlY2QldzOEdSZ1A0cmo5VktLWGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkt0PD6s Jzxa+5Z0+tQd4H129b7xkx4iXI6USf/PgxEXXGggwX2cnfvsHEcZAo/mawnmLsIe 9AD3K9iprCqvB/go426hI8hLqwEHEHdJhY0cYI0SJZ6lAKbhu27KxUk+5z/2vVES iVrzxnYRUuwzveItyBHJSBb+ORIt9rAsndK0Lr2QrrIjYG4sfskBctieuy4sW/A2 l1Corbje6bvNQ/NYnIY48MGzObyqJqCiMIHkqeYqyEN8+rjMnNFA9Gn5QgWbsn6X hKV0ekcbN6TjlSd8sFqtpuUF9lnrv4i8YbiTz96YopWizv30X+QulyeVXlJWE4AP qWLAq9itaRfs6A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:58 2025 by rpki-client