This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft File: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft (raw, json) Hash identifier: pqzoUxenUXjECY+82YG1Fl92dxWBtviq6TePHvMZ50Q= Subject key identifier: A2:D0:2D:59:37:B9:F9:B8:B3:C8:0B:7A:26:66:7C:5F:5A:71:50:20 Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84 Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084 Certificate serial: 019B330CB84950F55B98E6FD6447BA02981B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft Manifest number: 09ED Signing time: Thu 18 Dec 2025 20:00:30 +0000 Manifest this update: Thu 18 Dec 2025 20:00:30 +0000 Manifest next update: Fri 19 Dec 2025 20:00:30 +0000 Files and hashes: 1: 5yM7l9glO5Y_kZZbeV1PY4oF4AI.roa (hash: Zrq7WRCOd9AEwWRm5k4u/56c3wqE+RlRfF9EKNORqJM=) 2: Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl (hash: 0CMN0NdqnsT0bda6k7NOu/+dP6hhfW7d75vFE7mP2Ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:b8:49:50:f5:5b:98:e6:fd:64:47:ba:02:98:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084 Validity Not Before: Dec 18 20:00:30 2025 GMT Not After : Dec 19 20:00:30 2025 GMT Subject: CN=a2d02d5937b9f9b8b3c80b7a26667c5f5a715020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:63:d8:4c:c9:26:95:a1:95:5d:d7:fa:d3: 94:1c:48:6c:88:ee:98:b0:9e:aa:ed:45:38:85:30: 0b:7b:4f:6a:27:b5:3b:eb:23:ef:2b:de:60:c1:08: 60:1e:8f:d9:06:b6:d1:c9:44:c6:95:0f:22:a4:75: 21:ab:ed:9f:04:21:4e:c2:55:48:3f:6a:de:63:81: 57:04:a6:86:73:00:9c:41:da:7b:cb:39:6b:17:38: 52:b9:68:4c:70:33:21:32:f5:79:1c:dc:a2:e1:06: 41:1d:e7:c2:02:f6:5f:e8:ef:40:b0:7d:17:1d:ba: 98:22:70:c6:68:19:cc:9a:af:f7:cc:d3:ec:a5:32: 72:24:60:bd:c8:ed:7b:31:09:69:99:28:ae:57:a8: ce:3c:e2:53:5a:67:85:f7:e9:68:7b:a9:32:18:19: 0e:73:90:71:92:6d:cf:77:d0:a3:8c:6e:f0:ea:75: c7:16:f5:c8:ab:e0:2c:81:c0:ef:f0:08:d6:2a:77: 23:2d:9e:0d:fa:a0:ff:f2:e3:e2:49:5d:73:db:2c: 36:8c:b4:d2:7b:7e:b7:6e:bc:cb:83:c8:9d:68:90: ce:92:aa:d4:c2:ff:6c:00:14:c1:ec:25:9c:5d:c2: e6:84:7e:96:b8:13:db:55:c7:7c:0f:0b:5b:b0:ec: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D0:2D:59:37:B9:F9:B8:B3:C8:0B:7A:26:66:7C:5F:5A:71:50:20 X509v3 Authority Key Identifier: keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b5:24:69:d3:ca:2e:fe:a1:ec:e3:62:c3:22:21:93:b6:44: 26:64:04:86:c6:63:8f:5d:7b:0c:f8:4f:28:c1:b0:9c:48:ec: 72:9f:09:92:6b:fc:20:e7:be:a1:75:78:ab:36:eb:d3:db:81: 44:3b:16:55:ef:1b:88:dc:d8:ce:21:78:1d:df:26:81:ce:ec: 4d:33:e1:38:88:59:53:31:62:24:6b:84:aa:2d:09:4f:fe:6a: 5e:4c:bf:a0:d6:7e:ea:52:18:23:d0:72:3d:f1:93:66:f8:d8: 28:ad:35:0f:4a:eb:bc:df:8d:86:72:14:90:03:6f:72:48:12: 10:13:c6:76:58:0d:35:d6:2f:f6:56:5a:01:3e:94:83:8b:02: 2c:56:28:e7:f9:c9:df:aa:30:2d:50:e4:6a:09:5b:17:2a:3c: af:12:f3:a1:e8:56:c1:7d:7e:10:bb:e8:d3:a0:4f:a9:3e:c0: 2c:c7:90:a6:1e:a0:a6:c4:e0:46:94:16:20:cb:c4:20:1a:bd: f1:bc:3c:c6:f3:63:ca:90:e5:28:48:9a:ea:92:1d:09:e7:5c: 75:e9:c1:3f:c2:19:c3:8b:90:63:48:af:8b:f6:dc:a8:13:23: c3:fa:65:e3:6e:ba:58:72:c5:7d:69:85:c3:6a:80:9f:33:e0: 3a:6c:9f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDLhJUPVbmOb9ZEe6ApgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWVkM2QxYTFhMWUyODMwZDQxNmFmYTA0N2I5NTIyMGU4 MTQwODQwHhcNMjUxMjE4MjAwMDMwWhcNMjUxMjE5MjAwMDMwWjAzMTEwLwYDVQQD EyhhMmQwMmQ1OTM3YjlmOWI4YjNjODBiN2EyNjY2N2M1ZjVhNzE1MDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjpj2EzJJpWhlV3X+tOUHEhsiO6Y sJ6q7UU4hTALe09qJ7U76yPvK95gwQhgHo/ZBrbRyUTGlQ8ipHUhq+2fBCFOwlVI P2reY4FXBKaGcwCcQdp7yzlrFzhSuWhMcDMhMvV5HNyi4QZBHefCAvZf6O9AsH0X HbqYInDGaBnMmq/3zNPspTJyJGC9yO17MQlpmSiuV6jOPOJTWmeF9+loe6kyGBkO c5Bxkm3Pd9CjjG7w6nXHFvXIq+AsgcDv8AjWKncjLZ4N+qD/8uPiSV1z2yw2jLTS e363brzLg8idaJDOkqrUwv9sABTB7CWcXcLmhH6WuBPbVcd8DwtbsOztWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLQLVk3ufm4s8gLeiZmfF9acVAgMB8GA1UdIwQY MBaAFEWu09GhoeKDDUFq+gR7lSIOgUCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYt MmM2OTk4NTM1OWMwLzEvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YzVkYzctYmY0MS00MDA4LTljZmYtMmM2OTk4NTM1OWMw LzEvUmE3VDBhR2g0b01OUVdyNkJIdVZJZzZCUUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7UkadPK Lv6h7ONiwyIhk7ZEJmQEhsZjj117DPhPKMGwnEjscp8Jkmv8IOe+oXV4qzbr09uB RDsWVe8biNzYziF4Hd8mgc7sTTPhOIhZUzFiJGuEqi0JT/5qXky/oNZ+6lIYI9By PfGTZvjYKK01D0rrvN+NhnIUkANvckgSEBPGdlgNNdYv9lZaAT6Ug4sCLFYo5/nJ 36owLVDkaglbFyo8rxLzoehWwX1+ELvo06BPqT7ALMeQph6gpsTgRpQWIMvEIBq9 8bw8xvNjypDlKEia6pIdCedcdenBP8IZw4uQY0ivi/bcqBMjw/pl4266WHLFfWmF w2qAnzPgOmyfmA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:43:11 2025 by rpki-client