This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json) Hash identifier: TGG2eFlsqiqdpjCHAYGsXDqLV+xWtmpR44iNVYuXF8Y= Subject key identifier: 04:21:6E:96:84:4B:D3:78:BB:CB:83:8C:F6:17:1A:91:C5:24:E3:CB Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a Certificate serial: 019AF31CF92AD1DFD9FE2269E3512CE5C63E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft Manifest number: 1127 Signing time: Sat 06 Dec 2025 10:02:33 +0000 Manifest this update: Sat 06 Dec 2025 10:02:33 +0000 Manifest next update: Sun 07 Dec 2025 10:02:33 +0000 Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: vaVp5m8XdltHzjLQQlk3astzrn07JfQEVMESbngr6qU=) 2: wMviITx4-Ydrde8DagnvJudrSTQ.roa (hash: Bhx7NILq0TmOVBjEhBEQzkx4nDg+vAlvQ+Bo2NSJwBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:f9:2a:d1:df:d9:fe:22:69:e3:51:2c:e5:c6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a Validity Not Before: Dec 6 10:02:33 2025 GMT Not After : Dec 7 10:02:33 2025 GMT Subject: CN=04216e96844bd378bbcb838cf6171a91c524e3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:44:8a:16:58:f7:43:16:09:cf:b9:8c:fa:77: 93:cc:b3:cc:c0:06:55:d9:ca:69:bc:7a:ab:b1:b5: 3b:2c:8a:6d:bc:8d:25:20:da:ac:8f:3f:74:f2:1a: 13:23:79:9b:f4:02:39:ef:93:a6:6c:c7:31:cf:d3: 41:94:8b:87:b6:b2:59:a8:55:3e:9b:22:0e:64:ad: 65:4f:9e:ee:12:f0:3e:11:e4:dd:50:3c:df:86:35: c9:35:60:13:34:0a:14:5c:85:20:df:1e:e9:d7:91: b8:9f:26:96:04:55:4c:a1:96:5a:39:c1:e1:8d:87: 17:37:60:59:1c:c8:c4:12:bf:fd:1d:ed:f4:8e:01: 0e:07:38:cb:50:47:a1:77:ba:c5:b6:5a:28:df:fd: 93:97:c0:d6:4a:bf:49:88:6e:47:df:f5:af:23:a9: 99:cf:a2:66:86:f8:62:d9:91:d9:87:f7:e6:04:69: d3:c6:bc:e1:9b:9b:87:59:bd:19:9f:a2:e6:dd:b7: 84:4e:07:5f:38:0c:89:91:8f:37:2d:26:33:ae:f5: fc:b0:8d:1c:8d:4d:73:b1:8a:dd:38:72:d7:f4:c7: 9e:d8:10:00:3d:ab:dd:dc:ee:05:0a:14:34:f4:e7: c8:6e:fa:78:3a:4b:9a:b2:2f:db:d7:f4:6e:76:dc: 2d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:21:6E:96:84:4B:D3:78:BB:CB:83:8C:F6:17:1A:91:C5:24:E3:CB X509v3 Authority Key Identifier: keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:79:6c:1b:c9:7e:53:71:bf:e7:0c:2c:d0:07:63:c8:b2:51: 81:1a:4b:d0:61:a6:44:25:10:aa:09:52:09:b9:d6:9a:ab:28: ca:9e:4f:3c:cc:68:f2:b7:15:77:3c:59:94:97:02:8e:d8:5d: 0a:7d:09:b8:b4:78:e4:7a:8a:94:6f:31:32:af:39:f0:63:b4: fc:b4:2c:35:57:6b:fb:fc:ea:35:37:31:19:3b:4f:27:d6:0d: f4:87:b5:fb:70:6b:54:6b:53:d3:fd:3d:df:48:0b:c3:0b:43: 9f:02:55:95:b5:cf:51:d3:37:9e:18:59:6c:2e:6e:6f:e1:3f: 0b:de:ad:8c:0a:5e:f1:09:1c:81:34:50:a1:47:35:2e:d5:86: e9:0b:32:00:00:1e:99:b0:78:df:7e:e1:37:7b:24:79:56:17: 1d:13:bc:cf:65:00:96:9b:bf:e7:89:f5:7e:01:47:4b:a7:49: da:36:22:f7:a6:83:82:46:c7:46:41:18:bf:01:bf:20:97:de: f3:93:13:90:3a:cb:d4:94:a0:1f:c1:a0:06:1f:55:e3:6d:f0: 71:8c:01:c7:d4:36:ee:af:29:d2:46:5c:2a:9f:b7:f1:7d:d6: 43:03:e1:e4:83:a4:0e:32:62:27:75:40:a5:56:c8:5b:a5:1e: 7f:46:43:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPkq0d/Z/iJp41Es5cY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZDM1ZTBkYTQzOWJlYTY1YzQ4MzI5Y2U5ZThiMTA5M2Y3 MjMwMGEwHhcNMjUxMjA2MTAwMjMzWhcNMjUxMjA3MTAwMjMzWjAzMTEwLwYDVQQD EygwNDIxNmU5Njg0NGJkMzc4YmJjYjgzOGNmNjE3MWE5MWM1MjRlM2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7USKFlj3QxYJz7mM+neTzLPMwAZV 2cppvHqrsbU7LIptvI0lINqsjz908hoTI3mb9AI575OmbMcxz9NBlIuHtrJZqFU+ myIOZK1lT57uEvA+EeTdUDzfhjXJNWATNAoUXIUg3x7p15G4nyaWBFVMoZZaOcHh jYcXN2BZHMjEEr/9He30jgEOBzjLUEehd7rFtloo3/2Tl8DWSr9JiG5H3/WvI6mZ z6Jmhvhi2ZHZh/fmBGnTxrzhm5uHWb0Zn6Lm3beETgdfOAyJkY83LSYzrvX8sI0c jU1zsYrdOHLX9Mee2BAAPavd3O4FChQ09OfIbvp4Okuasi/b1/Rudtwt8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQhbpaES9N4u8uDjPYXGpHFJOPLMB8GA1UdIwQY MBaAFKzTXg2kOb6mXEgynOnosQk/cjAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMWIxNWYtN2QzZC00YWY2LWI2NTYt NjViYjFhODlmMjU5LzEvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hMWIxNWYtN2QzZC00YWY2LWI2NTYtNjViYjFhODlmMjU5 LzEvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXlsG8l+ U3G/5wws0AdjyLJRgRpL0GGmRCUQqglSCbnWmqsoyp5PPMxo8rcVdzxZlJcCjthd Cn0JuLR45HqKlG8xMq858GO0/LQsNVdr+/zqNTcxGTtPJ9YN9Ie1+3BrVGtT0/09 30gLwwtDnwJVlbXPUdM3nhhZbC5ub+E/C96tjApe8QkcgTRQoUc1LtWG6QsyAAAe mbB4337hN3skeVYXHRO8z2UAlpu/54n1fgFHS6dJ2jYi96aDgkbHRkEYvwG/IJfe 85MTkDrL1JSgH8GgBh9V423wcYwBx9Q27q8p0kZcKp+38X3WQwPh5IOkDjJiJ3VA pVbIW6Uef0ZDmA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:36:31 2025 by rpki-client