This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json) Hash identifier: sfXKLrwYCgRZk+4X9+qkWJS8ydhlITIKQfX+/fPeIFA= Subject key identifier: 93:B9:9A:DF:F6:ED:37:0B:E5:9E:6C:81:A6:73:88:DA:A2:36:F3:AA Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd Certificate serial: 019B337B40CC57C192E47442C0F8A909EFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft Manifest number: 06B6 Signing time: Thu 18 Dec 2025 22:01:14 +0000 Manifest this update: Thu 18 Dec 2025 22:01:14 +0000 Manifest next update: Fri 19 Dec 2025 22:01:14 +0000 Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=) 2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: tG3WaW2xP19Y+RdTexy45g5Vek30qEixrWkd99gv3J8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:40:cc:57:c1:92:e4:74:42:c0:f8:a9:09:ef:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd Validity Not Before: Dec 18 22:01:14 2025 GMT Not After : Dec 19 22:01:14 2025 GMT Subject: CN=93b99adff6ed370be59e6c81a67388daa236f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:79:bc:2d:c1:db:54:69:41:e7:23:13:05: 9c:16:6c:63:b7:99:ce:b7:58:7e:7d:7e:64:bf:85: 0d:70:a4:8c:16:c1:70:ac:99:88:13:8c:9a:47:7b: 8c:44:2f:30:45:0d:71:4b:a2:0a:86:f0:3b:e0:c8: 3c:9d:5f:44:a5:ff:df:e3:8a:90:f7:fd:fd:7e:28: 8b:eb:5c:03:35:2b:0d:91:fb:86:3f:71:09:41:c0: 04:c4:42:fd:ba:7b:35:46:da:ff:e3:22:af:b7:60: 75:f3:c9:26:83:bc:61:0b:9f:5b:0e:de:70:3d:11: 05:62:ed:77:11:da:f0:53:8a:e2:e4:2f:0c:a7:e4: 47:f7:79:89:da:b2:31:8e:1f:70:03:53:c4:5a:66: f1:ba:35:83:46:12:7f:0a:28:d9:a9:62:ac:71:03: 00:5f:05:30:f4:73:83:18:ff:ad:ef:21:58:bc:8b: 0f:84:fb:a7:01:4c:4d:32:e9:11:c2:37:17:5b:28: 2f:95:13:64:67:66:5a:6b:21:fc:54:b4:68:81:75: 3f:4e:9f:9d:cf:ae:10:de:39:77:ff:4a:6d:ed:ab: f5:00:54:27:d1:17:cd:c2:2d:89:2c:c8:b1:56:68: 87:4a:7f:c1:9d:4a:1b:99:e2:da:f2:eb:69:64:0d: 75:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:9A:DF:F6:ED:37:0B:E5:9E:6C:81:A6:73:88:DA:A2:36:F3:AA X509v3 Authority Key Identifier: keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a5:ab:99:31:f8:23:08:d8:0b:c2:5c:f8:7c:e7:c1:5a:1d: 8e:90:5f:c9:62:aa:40:00:54:12:c8:8b:95:cf:d2:67:a0:92: cf:85:c1:93:89:85:3b:c4:41:13:b4:ab:af:c3:e1:6e:19:ab: 2f:6d:ea:21:21:87:8d:67:59:28:e8:f7:36:e1:1f:a9:92:0f: b3:3b:35:5a:6c:84:b9:dc:cc:6f:6e:d5:fa:3f:20:0f:ef:6b: cb:e0:a7:c9:52:75:60:62:a1:3d:53:72:17:70:64:22:23:40: cc:47:81:89:12:59:44:fa:17:8f:78:0a:6e:50:5f:a5:b3:13: 68:1b:5b:52:a9:3a:4e:c4:39:54:af:03:d9:68:41:74:f3:01: ce:26:60:cb:24:65:ee:04:26:f2:a1:71:a1:6b:57:6e:2d:4f: e3:4a:31:3b:fc:22:e7:a6:88:8d:ba:6d:e9:f4:14:de:12:fb: 9d:15:91:e4:77:d9:ad:5e:a4:bb:ab:0d:74:4d:49:3a:a9:84: fd:8d:6e:2b:a8:23:8b:f2:a1:f7:37:23:a5:95:8e:34:a6:90: 46:93:62:54:5c:f8:38:e1:d6:3d:d0:8b:dd:36:a4:93:75:a5: 5d:03:c5:e7:60:75:59:84:ea:87:f4:68:c6:16:b9:20:c8:a1: 76:e0:78:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze0DMV8GS5HRCwPipCe/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMDQxMDZmMzAyYzAwNzdlOTBiNjY3NjJlYmIyMjJlNjEx YjMzZGQwHhcNMjUxMjE4MjIwMTE0WhcNMjUxMjE5MjIwMTE0WjAzMTEwLwYDVQQD Eyg5M2I5OWFkZmY2ZWQzNzBiZTU5ZTZjODFhNjczODhkYWEyMzZmM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDF5vC3B21RpQecjEwWcFmxjt5nO t1h+fX5kv4UNcKSMFsFwrJmIE4yaR3uMRC8wRQ1xS6IKhvA74Mg8nV9Epf/f44qQ 9/39fiiL61wDNSsNkfuGP3EJQcAExEL9uns1Rtr/4yKvt2B188kmg7xhC59bDt5w PREFYu13EdrwU4ri5C8Mp+RH93mJ2rIxjh9wA1PEWmbxujWDRhJ/CijZqWKscQMA XwUw9HODGP+t7yFYvIsPhPunAUxNMukRwjcXWygvlRNkZ2ZaayH8VLRogXU/Tp+d z64Q3jl3/0pt7av1AFQn0RfNwi2JLMixVmiHSn/BnUobmeLa8utpZA11PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJO5mt/27TcL5Z5sgaZziNqiNvOqMB8GA1UdIwQY MBaAFK4EEG8wLAB36Qtmdi67Ii5hGzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdRUWJ6QXNBSGZwQzJaMkxyc2lMbUViTTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iOTA3MjktODNkMi00YzE4LTgwNjMt MTFmZTI3ZDhlMTcwLzEvcmdRUWJ6QXNBSGZwQzJaMkxyc2lMbUViTTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iOTA3MjktODNkMi00YzE4LTgwNjMtMTFmZTI3ZDhlMTcw LzEvcmdRUWJ6QXNBSGZwQzJaMkxyc2lMbUViTTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaWrmTH4 IwjYC8Jc+HznwVodjpBfyWKqQABUEsiLlc/SZ6CSz4XBk4mFO8RBE7Srr8Phbhmr L23qISGHjWdZKOj3NuEfqZIPszs1WmyEudzMb27V+j8gD+9ry+CnyVJ1YGKhPVNy F3BkIiNAzEeBiRJZRPoXj3gKblBfpbMTaBtbUqk6TsQ5VK8D2WhBdPMBziZgyyRl 7gQm8qFxoWtXbi1P40oxO/wi56aIjbpt6fQU3hL7nRWR5HfZrV6ku6sNdE1JOqmE /Y1uK6gji/Kh9zcjpZWONKaQRpNiVFz4OOHWPdCL3Takk3WlXQPF52B1WYTqh/Ro xha5IMihduB4Vw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:18:40 2025 by rpki-client