This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft File: rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json) Hash identifier: nVxvspJwjmC0MKuxpsUyvTPaqexUPmiBHzLhaZGRVyY= Subject key identifier: 6A:66:76:CE:27:B3:4E:D9:EE:FA:53:B3:D6:91:8A:C6:D0:B5:52:BC Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD Certificate issuer: /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd Certificate serial: 019AF42E6F70853B1AC37667F20169975AC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft Manifest number: 0E34 Signing time: Sat 06 Dec 2025 15:01:15 +0000 Manifest this update: Sat 06 Dec 2025 15:01:15 +0000 Manifest next update: Sun 07 Dec 2025 15:01:15 +0000 Files and hashes: 1: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: bL289j0MlW211OnhSIrXDoFDi3USESs1QCmp66wkJTM=) 2: tNraF_vYfkVNYT3rk3dbIhzsa14.roa (hash: Cyq1XU96xKn0Vjeuoq5f1b6ik1hGAwtTzIf0Tu199FY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:6f:70:85:3b:1a:c3:76:67:f2:01:69:97:5a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd Validity Not Before: Dec 6 15:01:15 2025 GMT Not After : Dec 7 15:01:15 2025 GMT Subject: CN=6a6676ce27b34ed9eefa53b3d6918ac6d0b552bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:c6:64:1f:7f:14:c6:dd:32:6e:ff:5c:91: 7d:92:d3:f3:36:f9:33:1d:97:ee:f3:97:b0:45:0e: 63:a0:e2:99:f6:b1:57:e8:ee:9a:93:00:43:d2:a0: 65:0f:53:59:39:58:e4:d1:76:c9:f5:2b:eb:22:1e: a6:10:d1:07:71:3c:36:1b:58:24:ef:b6:08:9e:f9: 64:85:d8:e6:24:bb:fd:ed:e0:3f:7d:d9:d8:29:d7: 56:77:f9:92:ef:d6:59:05:ee:8c:8c:7d:24:29:48: d1:8c:6e:31:3f:2c:4e:d9:77:b1:e4:35:bf:fd:85: 87:aa:93:1f:56:60:b1:78:07:7d:15:a5:35:63:23: de:32:01:a1:09:4c:c4:1c:0a:4f:c5:c6:53:69:89: dc:99:35:c2:77:63:89:40:0f:1a:1c:ad:19:48:75: a7:a2:27:13:ef:f8:4a:f9:44:33:74:12:f3:86:52: a7:36:ff:1d:3b:3d:d2:90:e8:cb:37:1f:4b:ad:18: 7d:8c:ec:72:84:ec:27:f1:76:8a:0b:46:dd:f7:a6: 57:2c:2a:24:dc:b0:da:30:16:94:b5:ac:65:18:3b: c5:57:0f:5a:3c:cb:de:98:70:e4:fe:90:ca:c8:62: d2:81:46:01:c6:61:bf:5c:ba:e1:0e:fd:89:e2:9e: 6c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:66:76:CE:27:B3:4E:D9:EE:FA:53:B3:D6:91:8A:C6:D0:B5:52:BC X509v3 Authority Key Identifier: keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b6:2e:ac:5f:32:d3:e5:59:68:bb:3a:2f:16:e4:ec:5b:03: 40:aa:e9:7f:1a:9d:8f:09:a1:d2:80:1c:23:26:d3:63:be:31: 53:06:1b:49:0b:84:2b:39:c5:ae:12:4c:2a:6d:15:e1:e7:69: 52:c2:8d:e0:45:31:f7:10:2a:9d:c7:a0:75:d7:a8:13:d1:2d: 04:f9:f1:de:f3:50:a0:f8:d5:6a:c1:ad:83:ce:f6:84:01:0e: e1:3f:f8:79:ec:a6:a6:91:2f:55:d3:da:0f:bd:d3:fd:f4:79: 9a:14:7d:cc:a4:c2:a8:85:9b:11:34:80:56:ef:d5:ab:3e:2c: 56:f4:3c:0b:78:81:12:d7:ed:b8:82:60:64:bc:6d:ac:ca:8f: 1d:7e:d0:d5:91:61:ed:49:57:90:d0:91:67:b1:00:2d:14:9c: 17:f1:74:ae:b4:e1:62:9e:1c:5a:fa:d0:ef:46:c1:69:64:73: a5:b2:7d:3b:f8:38:21:4c:d9:5b:2c:76:73:10:c2:21:69:2a: 6b:c0:90:29:26:78:a1:b2:3c:78:55:79:03:e0:ae:23:db:45: 8b:59:c1:0d:54:b1:29:eb:dc:3c:c2:9a:05:ec:9c:68:24:11: 3a:c3:e2:11:0b:6c:1d:2b:c3:ce:60:ae:a4:cb:22:cc:65:85: d8:36:31:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lm9whTsaw3Zn8gFpl1rIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDI2MWNhZDBkZmYyZDliYjJmOGM3YWQwZGIyNmVkNTcz MGQzZGQwHhcNMjUxMjA2MTUwMTE1WhcNMjUxMjA3MTUwMTE1WjAzMTEwLwYDVQQD Eyg2YTY2NzZjZTI3YjM0ZWQ5ZWVmYTUzYjNkNjkxOGFjNmQwYjU1MmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwrGZB9/FMbdMm7/XJF9ktPzNvkz HZfu85ewRQ5joOKZ9rFX6O6akwBD0qBlD1NZOVjk0XbJ9SvrIh6mENEHcTw2G1gk 77YInvlkhdjmJLv97eA/fdnYKddWd/mS79ZZBe6MjH0kKUjRjG4xPyxO2Xex5DW/ /YWHqpMfVmCxeAd9FaU1YyPeMgGhCUzEHApPxcZTaYncmTXCd2OJQA8aHK0ZSHWn oicT7/hK+UQzdBLzhlKnNv8dOz3SkOjLNx9LrRh9jOxyhOwn8XaKC0bd96ZXLCok 3LDaMBaUtaxlGDvFVw9aPMvemHDk/pDKyGLSgUYBxmG/XLrhDv2J4p5s0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpmds4ns07Z7vpTs9aRisbQtVK8MB8GA1UdIwQY MBaAFK3SYcrQ3/LZuy+MetDbJu1XMNPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTQzNGEtZWIyZi00MDI2LWJjYzgt N2JjNDJkNWQ0MDcyLzEvcmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wYTQzNGEtZWIyZi00MDI2LWJjYzgtN2JjNDJkNWQ0MDcy LzEvcmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLYurF8y 0+VZaLs6Lxbk7FsDQKrpfxqdjwmh0oAcIybTY74xUwYbSQuEKznFrhJMKm0V4edp UsKN4EUx9xAqncegddeoE9EtBPnx3vNQoPjVasGtg872hAEO4T/4eeymppEvVdPa D73T/fR5mhR9zKTCqIWbETSAVu/Vqz4sVvQ8C3iBEtftuIJgZLxtrMqPHX7Q1ZFh 7UlXkNCRZ7EALRScF/F0rrThYp4cWvrQ70bBaWRzpbJ9O/g4IUzZWyx2cxDCIWkq a8CQKSZ4obI8eFV5A+CuI9tFi1nBDVSxKevcPMKaBeycaCQROsPiEQtsHSvDzmCu pMsizGWF2DYxgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:45 2025 by rpki-client