This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json) Hash identifier: xEYR14QiEvl5w4RdXQCxsVy5z/JyPZuYQgcDU38WV9g= Subject key identifier: 16:B1:05:1B:81:A2:9F:D3:96:5C:AD:14:86:90:7B:7D:F5:80:64:2C Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf Certificate serial: 019AF23FB13793E40E55842F714CAC1DBF76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft Manifest number: 0D0C Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=) 2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: 8irocj38yhp/Pjp76r9UmBADfKpDMlbC5JzL/BbZhic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b1:37:93:e4:0e:55:84:2f:71:4c:ac:1d:bf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=16b1051b81a29fd3965cad1486907b7df580642c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:76:99:5e:00:c0:91:03:3d:bc:0b:0d:28:12: 39:22:e3:a4:b0:45:d8:0b:1f:95:3c:7c:1a:b3:f2: 52:bb:60:4b:e7:2b:bc:48:31:00:29:b5:a8:48:0f: cc:6b:f7:be:e0:ee:7f:37:ae:76:ee:28:f9:67:00: ee:47:12:21:db:ae:2a:d0:29:28:69:f4:b8:6e:00: 84:3c:27:55:ce:ee:ec:c0:61:45:77:1c:0f:d4:fe: f8:3b:fb:0f:84:d3:ea:5f:76:1f:1d:56:06:15:7c: e1:d3:db:44:eb:e7:96:1a:02:8b:db:ec:fc:66:28: a8:0c:02:01:34:c4:11:d5:ba:c5:cd:9e:b3:d7:bb: af:02:36:c3:ae:74:02:37:c3:56:1a:c3:e8:aa:0d: 03:d9:f6:e0:70:6d:4e:3b:74:90:98:f4:0f:97:d6: 03:cb:1c:d3:d8:cc:7f:8c:80:cf:24:cf:df:6b:14: 64:74:81:85:2e:27:d6:03:6a:74:2f:e3:e1:3c:3c: d7:10:66:1c:36:89:0c:f8:58:53:01:97:87:88:3c: 90:a1:18:14:91:c4:be:ee:63:23:b4:fb:eb:57:9f: 27:36:68:ab:78:41:db:d4:44:92:2e:21:74:2e:5e: e2:a2:fa:21:28:a8:8e:30:a0:4a:04:22:1d:1f:64: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B1:05:1B:81:A2:9F:D3:96:5C:AD:14:86:90:7B:7D:F5:80:64:2C X509v3 Authority Key Identifier: keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2a:14:1d:ab:46:d7:5b:0a:80:5e:f9:12:92:a2:90:cc:ce: 09:17:94:6f:16:a5:b1:5d:ed:ac:5c:e1:c3:bc:ef:c5:54:55: 47:8c:bc:70:14:f4:18:71:c2:87:2c:97:32:3a:f2:72:c4:53: cc:8c:b9:e0:8c:44:b3:6d:13:03:7d:e8:66:b0:f8:12:af:4f: 03:4c:13:23:f8:7b:d8:72:10:9f:da:d4:37:74:a9:07:f4:e3: 00:71:86:c1:1d:91:67:0b:63:1f:40:2d:d5:31:fc:38:12:ad: 6b:a2:4e:91:a0:4a:76:7a:dc:48:36:51:5b:ce:37:f6:82:49: b3:22:dd:77:0f:45:46:44:50:93:b9:7d:d3:7b:f3:cf:da:0a: 4a:f4:de:26:02:43:cd:eb:57:cf:c1:65:96:8c:51:b7:09:3b: 43:21:fc:f2:a9:9f:72:a3:7d:24:10:1a:fd:de:19:fb:e1:fc: d7:bb:85:23:a6:e0:8e:ba:a4:8d:0f:4a:58:48:41:6f:07:e9: 87:7b:f0:36:b1:ba:d2:08:0c:04:10:6a:df:c7:52:ec:8f:96: c4:6b:0c:7f:69:74:3d:01:b6:86:67:06:98:7a:e6:d2:4a:b1: 76:bc:52:d1:5a:5a:40:13:a2:a5:c5:e3:a1:f0:58:31:7d:8b: d5:56:04:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7E3k+QOVYQvcUysHb92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWY2Y2EzMzUzNGI4NTMwYjlmMjE0ZWM4ZWE5M2RkMjVi ZDFmY2YwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD EygxNmIxMDUxYjgxYTI5ZmQzOTY1Y2FkMTQ4NjkwN2I3ZGY1ODA2NDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XaZXgDAkQM9vAsNKBI5IuOksEXY Cx+VPHwas/JSu2BL5yu8SDEAKbWoSA/Ma/e+4O5/N6527ij5ZwDuRxIh264q0Cko afS4bgCEPCdVzu7swGFFdxwP1P74O/sPhNPqX3YfHVYGFXzh09tE6+eWGgKL2+z8 ZiioDAIBNMQR1brFzZ6z17uvAjbDrnQCN8NWGsPoqg0D2fbgcG1OO3SQmPQPl9YD yxzT2Mx/jIDPJM/faxRkdIGFLifWA2p0L+PhPDzXEGYcNokM+FhTAZeHiDyQoRgU kcS+7mMjtPvrV58nNmireEHb1ESSLiF0Ll7iovohKKiOMKBKBCIdH2S4UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaxBRuBop/TllytFIaQe331gGQsMB8GA1UdIwQY MBaAFEavbKM1NLhTC58hTsjqk90lvR/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUt YzVjZWZkOThmNjIxLzEvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84ZTgwYWYtMmQ2NC00Nzg0LTgxMTUtYzVjZWZkOThmNjIx LzEvUnE5c296VTB1Rk1MbnlGT3lPcVQzU1c5SDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCoUHatG 11sKgF75EpKikMzOCReUbxalsV3trFzhw7zvxVRVR4y8cBT0GHHChyyXMjrycsRT zIy54IxEs20TA33oZrD4Eq9PA0wTI/h72HIQn9rUN3SpB/TjAHGGwR2RZwtjH0At 1TH8OBKta6JOkaBKdnrcSDZRW8439oJJsyLddw9FRkRQk7l903vzz9oKSvTeJgJD zetXz8FlloxRtwk7QyH88qmfcqN9JBAa/d4Z++H817uFI6bgjrqkjQ9KWEhBbwfp h3vwNrG60ggMBBBq38dS7I+WxGsMf2l0PQG2hmcGmHrm0kqxdrxS0VpaQBOipcXj ofBYMX2L1VYEew== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:34 2025 by rpki-client