This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft File: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json) Hash identifier: dRiG0p0DpDdH5S5NWC4WhBTKJ0sjnyCqe0H9tBBMy78= Subject key identifier: 6A:34:F0:83:21:33:3B:60:1E:F2:D0:31:E4:4A:42:E5:DE:EE:22:43 Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a Certificate serial: 019B2D0AA71A00F0CEADBB316EDBD8F8DC7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft Manifest number: 0754 Signing time: Wed 17 Dec 2025 16:00:31 +0000 Manifest this update: Wed 17 Dec 2025 16:00:31 +0000 Manifest next update: Thu 18 Dec 2025 16:00:31 +0000 Files and hashes: 1: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (hash: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=) 2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: hv1V4Pb6mB3akWbWbAR3iqQ9Udb7DHxJ3FebchBcNUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:a7:1a:00:f0:ce:ad:bb:31:6e:db:d8:f8:dc:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a Validity Not Before: Dec 17 16:00:31 2025 GMT Not After : Dec 18 16:00:31 2025 GMT Subject: CN=6a34f08321333b601ef2d031e44a42e5deee2243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:03:92:de:05:d5:f9:e0:a6:2c:d7:b0:38:39: e3:13:b0:65:6b:b3:4d:d6:a3:2e:07:75:df:e5:73: f6:da:3b:f1:c7:3a:f8:62:84:b7:b8:4b:e1:92:d7: c8:14:33:0a:2c:bb:f4:29:16:61:5a:62:18:58:71: 5d:05:3b:88:fd:59:e9:c1:76:4d:f0:58:2c:c7:d7: c9:d9:92:06:76:7d:16:cf:27:52:d4:66:85:6d:63: b1:4d:74:91:2c:9f:f4:0d:e0:44:94:f8:1e:a4:e7: 00:cb:fd:8b:39:f8:4d:16:73:50:3e:11:da:a7:66: 75:eb:15:e3:75:28:b9:66:6a:3f:cd:3a:99:a5:3c: 3c:85:79:4f:59:7c:70:6b:e0:94:ec:18:d7:79:28: 43:0b:11:34:aa:05:ad:f0:41:14:f0:0d:fd:31:ca: 95:c0:30:5b:d3:20:21:35:e9:32:1a:46:82:e0:24: 94:63:2d:4c:21:4b:a2:f9:c2:1c:12:d5:cf:e8:19: 76:a4:40:f6:e7:e4:f8:28:2d:e0:0a:7c:0f:29:b7: 42:6b:ef:73:a2:4b:af:58:78:7d:bc:9a:a4:58:76: 77:3c:ea:37:3f:1f:40:87:8e:4e:42:bd:26:b6:94: f7:3b:90:b3:85:49:49:dd:eb:bb:7e:59:98:19:c2: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:34:F0:83:21:33:3B:60:1E:F2:D0:31:E4:4A:42:E5:DE:EE:22:43 X509v3 Authority Key Identifier: keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:69:7b:7e:f6:b1:a1:f9:7e:22:80:13:c1:d6:4e:bd:81:a6: 17:39:43:cf:f3:90:ba:44:9f:7c:f2:a6:34:08:c6:a2:05:a6: 0f:de:ec:68:49:6e:ee:ce:58:b1:20:f1:b6:79:a5:fd:5e:26: 8d:d1:5d:26:5b:d2:ce:37:bf:89:46:05:3f:38:49:e3:b1:74: 1e:82:a5:8b:1e:a5:de:d2:22:b7:45:31:3a:31:a0:4d:8a:d0: 72:89:2c:c5:3a:88:a0:d4:15:48:f2:c9:ff:3b:d3:fb:c1:1e: 82:27:f7:01:ca:c0:0c:dc:55:c2:e6:2e:b9:34:c1:35:d3:13: 71:6f:86:7b:cf:a3:5f:0a:a5:7f:23:3b:d2:23:e4:e7:d7:9a: 70:df:f4:c7:05:95:de:46:6d:55:05:68:8d:17:71:de:84:31: 7c:07:0f:1f:23:3b:f9:d4:a0:f5:f3:dc:40:f4:17:f8:a7:72: 54:55:12:5b:1e:80:dc:51:ba:cb:6e:74:84:bc:6f:ad:8a:a9: 9b:51:c1:01:a4:fd:fd:93:d6:c4:3c:55:e0:29:41:8e:f2:db: c2:53:7e:1e:4c:06:10:a9:d5:9c:48:d9:8c:6e:13:15:a9:8b: 88:cc:06:3f:7e:05:b6:cd:cd:a0:7c:ca:00:e1:98:c3:43:bb: 12:a0:b5:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCqcaAPDOrbsxbtvY+Nx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZDZiZTk3YmNmZTEyYmVjYmU4MmI3ODQxMDQ3ZjU3OTcy YTkzNWEwHhcNMjUxMjE3MTYwMDMxWhcNMjUxMjE4MTYwMDMxWjAzMTEwLwYDVQQD Eyg2YTM0ZjA4MzIxMzMzYjYwMWVmMmQwMzFlNDRhNDJlNWRlZWUyMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AOS3gXV+eCmLNewODnjE7Bla7NN 1qMuB3Xf5XP22jvxxzr4YoS3uEvhktfIFDMKLLv0KRZhWmIYWHFdBTuI/VnpwXZN 8Fgsx9fJ2ZIGdn0WzydS1GaFbWOxTXSRLJ/0DeBElPgepOcAy/2LOfhNFnNQPhHa p2Z16xXjdSi5Zmo/zTqZpTw8hXlPWXxwa+CU7BjXeShDCxE0qgWt8EEU8A39McqV wDBb0yAhNekyGkaC4CSUYy1MIUui+cIcEtXP6Bl2pED25+T4KC3gCnwPKbdCa+9z okuvWHh9vJqkWHZ3POo3Px9Ah45OQr0mtpT3O5CzhUlJ3eu7flmYGcKFxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo08IMhMztgHvLQMeRKQuXe7iJDMB8GA1UdIwQY MBaAFKzWvpe8/hK+y+greEEEf1eXKpNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80YjdjMmUtMDg5Zi00NzA4LTkxODQt MmE4NGFjYmUwN2VlLzEvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC80YjdjMmUtMDg5Zi00NzA4LTkxODQtMmE4NGFjYmUwN2Vl LzEvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGl7fvax ofl+IoATwdZOvYGmFzlDz/OQukSffPKmNAjGogWmD97saElu7s5YsSDxtnml/V4m jdFdJlvSzje/iUYFPzhJ47F0HoKlix6l3tIit0UxOjGgTYrQcoksxTqIoNQVSPLJ /zvT+8Eegif3AcrADNxVwuYuuTTBNdMTcW+Ge8+jXwqlfyM70iPk59eacN/0xwWV 3kZtVQVojRdx3oQxfAcPHyM7+dSg9fPcQPQX+KdyVFUSWx6A3FG6y250hLxvrYqp m1HBAaT9/ZPWxDxV4ClBjvLbwlN+HkwGEKnVnEjZjG4TFamLiMwGP34Fts3NoHzK AOGYw0O7EqC1GA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:24 2025 by rpki-client