This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft File: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json) Hash identifier: RfRVq+fghs30YAqk2pcwmV6XXrW+bNlmhZb8/ZzefDQ= Subject key identifier: 26:9C:E4:34:27:12:1A:E7:E8:61:A8:09:7E:A5:C1:99:ED:9C:65:71 Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47 Certificate issuer: /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447 Certificate serial: 019B2D78DBC1E74CACA2022BF9B9143EEA8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 18:00:53 +0000 Manifest this update: Wed 17 Dec 2025 18:00:53 +0000 Manifest next update: Thu 18 Dec 2025 18:00:53 +0000 Files and hashes: 1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=) 2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: vgF2Olv0Ol2fFOlpOXuLGKWCypKk7VEnMCPZPRATv24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:db:c1:e7:4c:ac:a2:02:2b:f9:b9:14:3e:ea:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447 Validity Not Before: Dec 17 18:00:53 2025 GMT Not After : Dec 18 18:00:53 2025 GMT Subject: CN=269ce43427121ae7e861a8097ea5c199ed9c6571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:d6:0f:4f:62:7e:65:30:0a:3f:32:59:90: 63:8c:12:34:91:e5:4c:76:29:af:ab:32:7b:0e:f6: 86:65:97:cf:81:32:27:fd:a8:74:e6:76:e2:91:36: a5:74:92:f5:d6:f1:fd:c6:bc:b4:d5:fe:63:f6:b3: 04:d7:6d:2d:53:34:1f:70:6b:35:be:b4:47:03:8a: 3b:5b:37:fd:e4:20:12:d3:37:e5:53:14:37:cc:62: 70:3d:48:80:88:a7:01:5f:d4:3f:df:61:3a:9f:b2: 2e:52:db:ce:bd:f2:59:12:1b:33:aa:54:15:e6:14: 8b:11:1f:95:d6:d9:af:dc:62:f7:86:df:27:2a:d4: 05:bd:71:dd:95:58:c3:2c:f0:07:b8:d4:1d:d5:76: 64:6d:44:71:3e:38:2a:72:f1:10:ab:73:e5:23:83: 46:b4:6c:94:81:db:eb:9f:df:bb:86:21:70:8a:03: 8f:f2:d0:75:45:18:67:0a:1e:35:4a:a5:d9:18:94: 0a:95:ca:12:56:ee:d3:a9:8c:8a:76:38:1a:23:ab: a8:08:f2:20:3c:ab:d9:38:03:39:ab:26:ed:0d:a1: 14:e6:b8:65:1a:af:98:96:39:61:39:b6:a9:39:10: 6f:2e:87:72:ed:56:10:50:88:81:f7:a6:3c:42:18: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9C:E4:34:27:12:1A:E7:E8:61:A8:09:7E:A5:C1:99:ED:9C:65:71 X509v3 Authority Key Identifier: keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:25:1c:d7:79:91:6e:6c:1a:d4:36:dd:73:f8:11:62:b3:ad: 46:a6:f6:f2:e3:ba:62:70:30:91:b8:68:2c:b2:e9:ff:0c:7a: 1b:19:16:30:00:2e:7a:dc:88:c3:66:7f:1f:18:24:f6:fd:f9: 85:71:d0:06:fa:6e:5d:c2:24:b7:0c:db:29:b9:46:bd:a3:d3: dc:6d:b2:c9:63:49:4a:63:5b:a0:3f:29:78:83:a5:d4:fb:7b: 49:1e:a6:27:bd:e5:88:2e:4b:2d:fb:69:2b:6b:c5:8d:cf:3e: 60:76:75:35:c9:54:1a:77:eb:3c:96:a3:9c:a9:b8:27:ec:6c: 91:7f:c7:11:0f:2a:df:f3:58:f6:d0:9e:8c:27:d9:77:0c:8e: 24:3c:ed:d7:82:e4:c1:f3:45:c2:63:04:82:26:1a:1e:ba:1f: 35:6b:d3:36:bc:c7:4b:7a:04:19:18:eb:f0:6c:20:26:7c:94: b6:f6:69:4a:fa:5b:38:38:8b:fd:7c:ce:63:c6:30:f9:e2:0d: c7:35:05:9f:80:02:eb:f6:55:83:cd:23:2d:46:3b:59:06:54: b9:71:df:93:ec:30:ca:9f:e1:56:20:00:cf:af:6f:3f:e6:d2: af:22:01:c8:db:be:ff:18:a2:48:5f:8d:c3:f2:fe:f0:da:14: 2b:f2:47:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteNvB50ysogIr+bkUPuqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTAyZjFhZjE3ZDAwZmQ4MGEzZDlmZTlmZmU4MWQwNGNl MTc0NDcwHhcNMjUxMjE3MTgwMDUzWhcNMjUxMjE4MTgwMDUzWjAzMTEwLwYDVQQD EygyNjljZTQzNDI3MTIxYWU3ZTg2MWE4MDk3ZWE1YzE5OWVkOWM2NTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhzWD09ifmUwCj8yWZBjjBI0keVM dimvqzJ7DvaGZZfPgTIn/ah05nbikTaldJL11vH9xry01f5j9rME120tUzQfcGs1 vrRHA4o7Wzf95CAS0zflUxQ3zGJwPUiAiKcBX9Q/32E6n7IuUtvOvfJZEhszqlQV 5hSLER+V1tmv3GL3ht8nKtQFvXHdlVjDLPAHuNQd1XZkbURxPjgqcvEQq3PlI4NG tGyUgdvrn9+7hiFwigOP8tB1RRhnCh41SqXZGJQKlcoSVu7TqYyKdjgaI6uoCPIg PKvZOAM5qybtDaEU5rhlGq+YljlhObapORBvLody7VYQUIiB96Y8Qhh4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCac5DQnEhrn6GGoCX6lwZntnGVxMB8GA1UdIwQY MBaAFK0QLxrxfQD9gKPZ/p/+gdBM4XRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMWE3OGItZGQzNi00ZWU5LWEyNjAt M2IxYWFkOWZkZDU3LzEvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lMWE3OGItZGQzNi00ZWU5LWEyNjAtM2IxYWFkOWZkZDU3 LzEvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSUc13mR bmwa1Dbdc/gRYrOtRqb28uO6YnAwkbhoLLLp/wx6GxkWMAAuetyIw2Z/Hxgk9v35 hXHQBvpuXcIktwzbKblGvaPT3G2yyWNJSmNboD8peIOl1Pt7SR6mJ73liC5LLftp K2vFjc8+YHZ1NclUGnfrPJajnKm4J+xskX/HEQ8q3/NY9tCejCfZdwyOJDzt14Lk wfNFwmMEgiYaHrofNWvTNrzHS3oEGRjr8GwgJnyUtvZpSvpbODiL/XzOY8Yw+eIN xzUFn4AC6/ZVg80jLUY7WQZUuXHfk+wwyp/hViAAz69vP+bSryIByNu+/xiiSF+N w/L+8NoUK/JHUQ== -----END CERTIFICATE-----Generated at Thu Dec 18 00:08:54 2025 by rpki-client