This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json) Hash identifier: rnw3dzD1L0xLhx8ehENMAeHMH+oMvMDqPwPyLt6Ly7E= Subject key identifier: 05:92:76:8B:E5:C2:84:15:56:CA:2E:4F:C5:BD:3B:63:FD:DE:DA:B0 Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902 Certificate serial: 019B27AE233CB8EDAD9B49ECC9123CAA4ECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 15:01:22 +0000 Manifest this update: Tue 16 Dec 2025 15:01:22 +0000 Manifest next update: Wed 17 Dec 2025 15:01:22 +0000 Files and hashes: 1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=) 2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: M66n+G0HkMONVNpD5uDuDspWXUVZXVMp9Ha7+2hMGws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:23:3c:b8:ed:ad:9b:49:ec:c9:12:3c:aa:4e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902 Validity Not Before: Dec 16 15:01:22 2025 GMT Not After : Dec 17 15:01:22 2025 GMT Subject: CN=0592768be5c2841556ca2e4fc5bd3b63fddedab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:7d:d9:98:9b:6a:70:1c:bb:73:e6:06:01: 3e:e2:e8:3f:2f:7d:2d:17:cd:c5:ae:2d:87:3f:a5: 77:a8:c1:2d:85:6a:b8:d3:8f:44:26:b1:53:5a:46: 7f:ee:fa:dc:86:11:4b:49:1a:a3:ad:b2:7d:21:7b: 5d:0a:2c:ff:b1:37:f9:79:5f:a1:7d:67:78:2c:21: 42:f6:d4:64:35:e7:7b:93:ec:b9:a7:d5:24:37:16: 2b:fd:9e:56:11:37:60:7f:65:0f:48:a4:f1:0b:97: 1f:75:c9:59:ec:af:b2:a2:a1:2e:8e:f5:f1:fa:cf: 26:bc:cc:30:a0:4a:38:81:c1:0e:0f:31:8c:96:4b: c6:48:eb:e1:f6:1b:1d:d3:bc:7b:bd:85:19:54:d6: 06:6f:d2:9a:23:db:e1:3f:55:66:52:0b:75:fb:20: 7d:bb:5e:f6:ba:0b:46:2a:48:6f:89:7e:6b:b1:52: b2:6c:ae:4d:06:bc:01:55:a7:cc:4d:e0:7b:a5:70: a9:20:8e:37:f6:75:1e:7f:a8:49:f5:df:04:c5:4b: 12:9a:a9:f1:de:9b:44:97:83:17:27:56:70:b8:27: bf:42:55:7d:f8:b5:c5:bd:9d:14:66:ff:17:61:f0: e7:2e:d6:b9:27:45:32:c9:3c:af:a0:c6:f4:99:75: 97:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:92:76:8B:E5:C2:84:15:56:CA:2E:4F:C5:BD:3B:63:FD:DE:DA:B0 X509v3 Authority Key Identifier: keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:57:99:38:ea:76:e5:80:63:c5:84:01:5f:e7:67:fd:e8:c8: 55:39:8b:3d:c1:d2:9a:1e:c4:7f:64:1b:de:0b:90:54:24:6c: dd:cf:52:eb:78:24:60:70:12:c6:43:54:81:62:19:48:54:1d: 57:0c:76:8e:1b:8d:73:0f:12:9a:f4:87:62:4a:e0:68:6b:9c: 97:d0:3c:19:67:65:ea:ec:66:e0:6a:54:ae:30:61:5c:14:91: 7d:22:57:4d:2d:47:3c:b8:dc:94:58:01:ac:39:78:fb:44:6b: d9:51:1f:f1:2a:df:62:d7:dd:f4:47:9d:6e:29:a6:29:71:3d: 5b:53:81:2a:4d:1b:27:18:c7:a8:d9:37:c7:ae:26:f0:02:a4: 2c:00:03:35:ae:3a:9d:e1:04:eb:c2:cc:99:77:0f:d1:ba:ac: 66:1a:82:20:eb:d8:38:5f:72:40:b7:4c:6e:c8:83:36:74:3d: 40:31:d9:c9:de:5f:83:d3:c3:20:d2:ae:a0:d9:f2:71:11:4c: 5e:05:fa:4a:a0:c9:d5:7d:c3:63:18:6b:65:76:b1:5a:cf:96: cd:e0:e1:d2:5a:2d:80:f0:93:b8:41:78:b3:c5:80:6e:e8:47: 84:d9:e0:54:64:ed:dc:9a:96:4e:39:a2:94:ff:f9:b3:c6:6f: 9a:ea:3f:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnriM8uO2tm0nsyRI8qk7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTBjZGQwYjhiNzMzMDRjOTg1ZmRlMWIxMGU0MDE4MmJm MTM5MDIwHhcNMjUxMjE2MTUwMTIyWhcNMjUxMjE3MTUwMTIyWjAzMTEwLwYDVQQD EygwNTkyNzY4YmU1YzI4NDE1NTZjYTJlNGZjNWJkM2I2M2ZkZGVkYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspZ92ZibanAcu3PmBgE+4ug/L30t F83Fri2HP6V3qMEthWq4049EJrFTWkZ/7vrchhFLSRqjrbJ9IXtdCiz/sTf5eV+h fWd4LCFC9tRkNed7k+y5p9UkNxYr/Z5WETdgf2UPSKTxC5cfdclZ7K+yoqEujvXx +s8mvMwwoEo4gcEODzGMlkvGSOvh9hsd07x7vYUZVNYGb9KaI9vhP1VmUgt1+yB9 u172ugtGKkhviX5rsVKybK5NBrwBVafMTeB7pXCpII439nUef6hJ9d8ExUsSmqnx 3ptEl4MXJ1ZwuCe/QlV9+LXFvZ0UZv8XYfDnLta5J0UyyTyvoMb0mXWXdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWSdovlwoQVVsouT8W9O2P93tqwMB8GA1UdIwQY MBaAFK0QzdC4tzMEyYX94bEOQBgr8TkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDIt NDdiYmYyMWVhYzlmLzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDItNDdiYmYyMWVhYzlm LzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVeZOOp2 5YBjxYQBX+dn/ejIVTmLPcHSmh7Ef2Qb3guQVCRs3c9S63gkYHASxkNUgWIZSFQd Vwx2jhuNcw8SmvSHYkrgaGucl9A8GWdl6uxm4GpUrjBhXBSRfSJXTS1HPLjclFgB rDl4+0Rr2VEf8SrfYtfd9EedbimmKXE9W1OBKk0bJxjHqNk3x64m8AKkLAADNa46 neEE68LMmXcP0bqsZhqCIOvYOF9yQLdMbsiDNnQ9QDHZyd5fg9PDINKuoNnycRFM XgX6SqDJ1X3DYxhrZXaxWs+WzeDh0lotgPCTuEF4s8WAbuhHhNngVGTt3JqWTjmi lP/5s8Zvmuo/tg== -----END CERTIFICATE-----Generated at Tue Dec 16 20:55:22 2025 by rpki-client