This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft File: rnqbF0Wlpww797zCwu4WZGCv96g.mft (raw, json) Hash identifier: H8m6KjI3yuEvvnE84W5PWGU7Cjx0ieSpSrYmXOIcYPk= Subject key identifier: 81:30:53:E8:F6:CF:2D:8D:92:D0:2F:B9:5A:AD:6F:92:75:6F:E2:83 Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8 Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8 Certificate serial: 019AF20958CFCCE0554933D2E2830A957958 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: I2jRnFFbsyX_NCbppyuykwqej0U.roa (hash: B02MgbLFeWjQmECze2lw8A+bHy0sSCgwfPb0qowSp+Q=) 2: NAiMyHsQ-abKVP6U5ZpEK_DkHV4.roa (hash: UKGnXTi/GeJEOIoHxk7WzSeeqHfs9EFC0zZJNKKSIz0=) 3: XA_piEc4HEvUHExh_2CSkkKu2EE.roa (hash: o4y+DZ7Kqo85gSPTmaUUa/xs87y4f7OVpkKcmJxleCE=) 4: f8xBUwiIZuwlbLideHYCraA5b80.roa (hash: 80zoqn9Od9Yp6Ppqm8QLXbeCtAS1Mylgf7fSAtsOaVc=) 5: rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa (hash: ANGzzWXs9WMc8fyGIbBpWcfcISDjUPoF4F+e/jtJ45I=) 6: rnqbF0Wlpww797zCwu4WZGCv96g.crl (hash: MArksUIdONJhGlWOnPCU9BrimQ4qIAChmoShc3fb+pM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:58:cf:cc:e0:55:49:33:d2:e2:83:0a:95:79:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=813053e8f6cf2d8d92d02fb95aad6f92756fe283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:96:a7:58:5b:38:37:68:da:59:b5:62:45: 2d:c6:5c:2b:a8:a4:fa:6d:e1:dd:4a:9a:08:69:40: 75:20:c3:d8:93:d2:5e:48:90:f5:6a:65:ce:bc:97: f2:95:2a:99:98:1e:7b:5c:64:c2:1f:b2:75:2d:c9: 67:9e:13:38:2c:bf:20:96:28:f6:79:7d:f4:41:3f: 53:43:be:11:6d:ad:d1:ef:10:50:35:f6:af:7a:97: 6a:04:51:f1:a9:00:12:23:ab:b1:93:e7:a5:aa:e6: 39:1f:74:a6:0d:ab:7b:a1:9e:dd:8d:5d:97:a6:b4: 15:cf:67:69:29:39:73:e1:a4:91:70:59:96:90:3e: 33:88:e9:4a:de:1c:26:08:b1:a4:4c:3b:cf:db:86: 5c:75:6a:d6:8e:e3:61:dd:b7:fc:f9:29:9e:e5:e1: 2a:dc:cf:57:b2:63:0f:67:5b:40:7f:18:d7:3e:34: 7a:70:c9:9e:43:2d:8f:1b:15:86:5c:7b:cd:a0:83: 74:5a:e5:c7:eb:73:96:13:76:bb:58:eb:b5:b1:dc: ec:02:3f:12:8c:0f:b0:80:58:ef:67:b2:1c:a4:57: 27:51:ad:9a:4c:30:7e:35:36:dc:83:97:97:f5:14: 8b:30:0c:1d:87:6a:d2:f0:96:9e:9e:d0:48:4b:8d: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:30:53:E8:F6:CF:2D:8D:92:D0:2F:B9:5A:AD:6F:92:75:6F:E2:83 X509v3 Authority Key Identifier: keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:56:d3:c5:ff:6a:86:cb:90:bd:47:49:20:c2:2c:05:5b:da: 34:27:47:17:b3:7d:23:0e:2e:81:c3:65:30:7d:f7:5e:e7:35: 17:d4:e1:84:2e:81:ac:ed:ab:7b:27:7d:30:18:28:52:e7:b3: c1:d6:b5:6e:76:87:5b:7b:ba:37:fd:9d:4c:1d:45:e0:70:dd: cd:54:17:fe:9c:10:b4:d8:11:f4:ab:0f:52:fe:0c:ef:7b:f9: 95:b5:28:31:c6:03:c5:2e:47:3b:db:62:fb:5b:68:77:57:cd: a4:c9:c3:2b:42:01:a8:70:27:15:79:23:4e:27:e2:24:4e:cf: 4b:28:83:cc:5d:cb:57:2d:fa:11:3a:20:48:10:a4:a5:a7:a9: 36:85:7b:3b:6c:52:39:ac:ce:0a:b1:98:34:3d:cc:20:19:23: d3:dc:88:b4:94:5e:2d:7b:4c:90:de:78:b0:3b:b4:b1:43:b8: 6f:72:09:86:32:cb:cb:7e:c9:a0:d5:05:2b:81:e5:9c:41:bb: bd:54:fa:95:33:b4:f5:92:f6:2f:71:13:bd:23:c5:21:14:a7: 7e:34:2d:dc:7d:c3:d2:d7:8f:c4:f8:9a:7a:b2:32:5f:fd:56: f9:e4:6b:33:2b:84:f5:4e:3b:bc:40:cd:1f:c0:50:f1:0e:ac: 2a:32:c9:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVjPzOBVSTPS4oMKlXlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlN2E5YjE3NDVhNWE3MGMzYmY3YmNjMmMyZWUxNjY0NjBh ZmY3YTgwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD Eyg4MTMwNTNlOGY2Y2YyZDhkOTJkMDJmYjk1YWFkNmY5Mjc1NmZlMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArISWp1hbODdo2lm1YkUtxlwrqKT6 beHdSpoIaUB1IMPYk9JeSJD1amXOvJfylSqZmB57XGTCH7J1LclnnhM4LL8glij2 eX30QT9TQ74Rba3R7xBQNfavepdqBFHxqQASI6uxk+elquY5H3SmDat7oZ7djV2X prQVz2dpKTlz4aSRcFmWkD4ziOlK3hwmCLGkTDvP24ZcdWrWjuNh3bf8+Sme5eEq 3M9XsmMPZ1tAfxjXPjR6cMmeQy2PGxWGXHvNoIN0WuXH63OWE3a7WOu1sdzsAj8S jA+wgFjvZ7IcpFcnUa2aTDB+NTbcg5eX9RSLMAwdh2rS8JaentBIS40w8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEwU+j2zy2NktAvuVqtb5J1b+KDMB8GA1UdIwQY MBaAFK56mxdFpacMO/e8wsLuFmRgr/eoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMt Y2M5YTc1OGM5OTE2LzEvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82ZTkwOWQtZDMyNS00OGExLTk0NDMtY2M5YTc1OGM5OTE2 LzEvcm5xYkYwV2xwd3c3OTd6Q3d1NFdaR0N2OTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlbTxf9q hsuQvUdJIMIsBVvaNCdHF7N9Iw4ugcNlMH33Xuc1F9ThhC6BrO2reyd9MBgoUuez wda1bnaHW3u6N/2dTB1F4HDdzVQX/pwQtNgR9KsPUv4M73v5lbUoMcYDxS5HO9ti +1tod1fNpMnDK0IBqHAnFXkjTifiJE7PSyiDzF3LVy36ETogSBCkpaepNoV7O2xS OazOCrGYND3MIBkj09yItJReLXtMkN54sDu0sUO4b3IJhjLLy37JoNUFK4HlnEG7 vVT6lTO09ZL2L3ETvSPFIRSnfjQt3H3D0tePxPiaerIyX/1W+eRrMyuE9U47vEDN H8BQ8Q6sKjLJTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:32 2025 by rpki-client