This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json) Hash identifier: eq7FNcWCZRvf4JAgkCLUY7M2Br8PuEL6cHGfcmdUcVU= Subject key identifier: 40:F5:CB:C4:1A:F0:7A:66:CA:89:6D:DC:5E:66:93:83:E2:34:FF:56 Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Certificate serial: 019B08C77C016085C25646AD53E2B8992D92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft Manifest number: 16C1 Signing time: Wed 10 Dec 2025 15:00:49 +0000 Manifest this update: Wed 10 Dec 2025 15:00:49 +0000 Manifest next update: Thu 11 Dec 2025 15:00:49 +0000 Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=) 2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: P16DDuBoxngzOJa+ERWYZzFOv+h0L+Qs8lZtGrvxl50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c7:7c:01:60:85:c2:56:46:ad:53:e2:b8:99:2d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112 Validity Not Before: Dec 10 15:00:49 2025 GMT Not After : Dec 11 15:00:49 2025 GMT Subject: CN=40f5cbc41af07a66ca896ddc5e669383e234ff56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d2:ca:c3:63:01:49:8f:ad:ef:b2:d9:1b:35: 5e:7f:ae:71:68:68:21:69:c0:4b:5c:07:00:46:ed: 2f:7e:24:ef:e7:39:51:23:37:ce:5c:d1:0d:ec:58: 03:36:9a:b9:31:af:90:ff:38:2d:de:36:96:2e:2f: 96:eb:4f:7d:94:47:64:3f:a0:ec:83:28:f0:60:5b: e8:f5:05:3c:5b:d6:df:11:9b:63:39:24:cb:88:69: d1:02:d9:96:ad:39:43:a4:cb:36:1c:60:59:7e:0d: 12:be:60:dd:38:d3:44:7a:a1:b8:4e:f4:76:1f:41: ca:61:a8:2e:82:ef:6f:e3:6c:93:27:15:62:bc:18: a9:45:04:8d:d0:b0:3a:8c:41:89:88:64:3a:5c:81: 86:ea:9b:e4:3f:c9:6f:ea:80:4c:60:14:e2:02:e2: 2e:65:c9:f8:dd:7d:6c:92:ee:0a:6f:37:20:19:44: 18:fa:c2:1b:bc:8f:c7:4f:e8:2b:6a:8b:6c:bc:56: 21:1d:a4:cb:cc:95:ff:5c:72:67:04:28:a4:29:d9: 56:ef:2f:fb:6f:b1:7e:f8:b1:bf:ad:11:b4:9e:34: 44:ec:aa:06:2a:c4:78:c4:8c:e5:85:81:5c:fb:9b: dd:5f:46:10:73:5a:06:cd:23:6a:fb:e1:a6:a1:9b: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F5:CB:C4:1A:F0:7A:66:CA:89:6D:DC:5E:66:93:83:E2:34:FF:56 X509v3 Authority Key Identifier: keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:52:46:08:61:69:48:ec:98:dc:84:e1:1e:d8:85:92:1a:86: f6:7a:ca:59:28:9b:ea:d4:ee:17:f0:89:7a:af:60:36:79:e3: a2:e3:ad:50:ec:00:1a:84:36:13:ac:18:35:c9:18:9f:de:66: c1:5b:5b:43:8f:0c:1e:4c:99:29:25:72:bc:55:eb:90:67:19: ae:a7:c9:7c:f8:af:0d:90:06:96:d8:85:51:d3:13:ad:4f:cf: c0:af:9c:9d:43:5d:74:bf:28:47:a7:60:b8:2a:0e:3d:12:4f: f7:0d:f2:28:19:0e:ae:bd:16:67:44:77:ca:d0:2c:c8:b6:c5: 20:b6:b4:fb:de:08:b5:08:b7:1e:b9:aa:77:3c:ff:ef:e6:90: ef:cc:0a:aa:1f:ef:f2:b9:a6:8a:10:16:90:1f:85:76:8f:e0: fa:20:4f:7f:71:f7:24:62:71:06:3e:06:54:0b:48:19:79:24: fd:b3:4f:40:b1:fa:85:88:14:0a:9a:e1:6d:0f:30:13:1c:9f: 02:ee:3b:a4:c3:7d:53:d3:ed:4b:f1:5b:44:dd:0b:44:23:e7: 72:54:99:3c:aa:55:b4:b6:8b:70:d2:30:08:78:0e:af:0c:e9: 57:a3:26:d5:74:a1:6a:c9:20:f4:18:6d:17:4f:13:db:a8:08: 0e:16:75:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIx3wBYIXCVkatU+K4mS2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzFhZDQ2ZTBiOWMwMTBjZDI4ODVlNjAwMmMxYTViOTNj ZDUxMTIwHhcNMjUxMjEwMTUwMDQ5WhcNMjUxMjExMTUwMDQ5WjAzMTEwLwYDVQQD Eyg0MGY1Y2JjNDFhZjA3YTY2Y2E4OTZkZGM1ZTY2OTM4M2UyMzRmZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dLKw2MBSY+t77LZGzVef65xaGgh acBLXAcARu0vfiTv5zlRIzfOXNEN7FgDNpq5Ma+Q/zgt3jaWLi+W6099lEdkP6Ds gyjwYFvo9QU8W9bfEZtjOSTLiGnRAtmWrTlDpMs2HGBZfg0SvmDdONNEeqG4TvR2 H0HKYagugu9v42yTJxVivBipRQSN0LA6jEGJiGQ6XIGG6pvkP8lv6oBMYBTiAuIu Zcn43X1sku4KbzcgGUQY+sIbvI/HT+graotsvFYhHaTLzJX/XHJnBCikKdlW7y/7 b7F++LG/rRG0njRE7KoGKsR4xIzlhYFc+5vdX0YQc1oGzSNq++GmoZvtFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED1y8Qa8Hpmyolt3F5mk4PiNP9WMB8GA1UdIwQY MBaAFEUxrUbgucAQzSiF5gAsGluTzVESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAt MzJkZTU4NThiYTZjLzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAtMzJkZTU4NThiYTZj LzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVJGCGFp SOyY3IThHtiFkhqG9nrKWSib6tTuF/CJeq9gNnnjouOtUOwAGoQ2E6wYNckYn95m wVtbQ48MHkyZKSVyvFXrkGcZrqfJfPivDZAGltiFUdMTrU/PwK+cnUNddL8oR6dg uCoOPRJP9w3yKBkOrr0WZ0R3ytAsyLbFILa0+94ItQi3Hrmqdzz/7+aQ78wKqh/v 8rmmihAWkB+Fdo/g+iBPf3H3JGJxBj4GVAtIGXkk/bNPQLH6hYgUCprhbQ8wExyf Au47pMN9U9PtS/FbRN0LRCPnclSZPKpVtLaLcNIwCHgOrwzpV6Mm1XShaskg9Bht F08T26gIDhZ1Ow== -----END CERTIFICATE-----Generated at Wed Dec 10 17:22:26 2025 by rpki-client