This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json) Hash identifier: YQ6ijV+mCq/c3Kyr/MD/aHkJyUtVtiJCFqKdmcye7X0= Subject key identifier: 2F:F3:F6:DE:D8:6D:54:D9:68:C3:86:54:C1:45:3E:47:0D:81:B0:16 Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Certificate serial: 019AF0BF2A8EEC5BFA7BD5778BCC97919C0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft Manifest number: 0F64 Signing time: Fri 05 Dec 2025 23:00:51 +0000 Manifest this update: Fri 05 Dec 2025 23:00:51 +0000 Manifest next update: Sat 06 Dec 2025 23:00:51 +0000 Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=) 2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: xmNWCdx3J7eQahS5KhdAxKb4FKeQz1Gzc35cC7GOuGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2a:8e:ec:5b:fa:7b:d5:77:8b:cc:97:91:9c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Validity Not Before: Dec 5 23:00:51 2025 GMT Not After : Dec 6 23:00:51 2025 GMT Subject: CN=2ff3f6ded86d54d968c38654c1453e470d81b016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:d0:8c:40:11:02:a4:d4:8d:e0:a0:04:c0: 46:2e:fd:8c:ac:b1:5d:52:c8:21:df:d3:fe:48:04: c5:20:d9:a0:a2:9b:9c:ff:1a:a2:e6:1e:0b:f6:6f: 8a:68:b5:f2:43:3e:56:46:db:6f:c1:39:3e:89:33: ea:e6:bb:e5:e6:10:05:c6:34:27:09:a9:b1:fd:7f: 27:10:7a:d4:11:4a:38:26:74:9c:3f:f5:43:3c:be: 23:6b:47:be:bd:d3:a8:61:55:c1:0f:64:9f:70:6b: f6:34:d8:da:82:40:bd:29:ee:99:75:2a:43:72:03: e5:cc:da:ef:02:ca:95:8f:71:8a:af:04:b1:40:13: 20:28:7e:65:be:b0:63:da:9f:d3:2f:b9:bc:bc:6f: 75:c4:59:92:45:e1:b1:96:f2:b5:ee:e2:a7:e8:2f: cf:2a:fb:e4:f0:56:40:0f:89:6b:47:c3:ed:34:a5: 02:19:fa:05:4c:3e:5b:d4:78:e6:c2:ac:61:e3:ad: 13:42:9e:6f:d8:9e:5a:1f:4d:c2:1b:af:6e:66:28: 89:27:3a:2f:e8:6b:17:d4:71:d0:7b:6e:e4:7c:45: cf:09:82:a6:3c:fa:51:74:2a:33:ce:8d:ac:f4:de: fa:0f:02:09:cc:74:c1:ff:17:2e:8f:d3:88:1b:b8: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F3:F6:DE:D8:6D:54:D9:68:C3:86:54:C1:45:3E:47:0D:81:B0:16 X509v3 Authority Key Identifier: keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a7:47:f7:02:db:8b:7b:4e:46:79:a7:e1:de:85:fc:6f:46: 55:e2:f1:07:e2:ce:04:a6:8c:bd:14:8c:71:7c:35:bd:b1:ad: ae:87:ca:2d:f0:bd:38:94:c4:72:9e:aa:09:2f:94:05:44:ce: 3d:09:ca:d4:89:55:4f:41:85:2b:7c:4d:70:75:67:35:aa:e2: 72:cd:d5:79:c6:d6:c0:46:ec:c0:d0:fb:d0:c5:7e:40:9e:1c: c4:87:03:a2:5b:18:8b:ae:65:0a:71:a8:96:47:5f:e5:d8:69: e6:09:7c:08:06:4d:8a:03:f0:62:3e:e1:b8:14:94:f3:e6:d5: 51:44:d9:e0:d0:fd:e6:f9:de:be:e5:44:48:b6:2a:24:42:b2: 55:39:9c:6d:1e:fb:43:7e:e6:d6:74:f5:be:49:8d:51:eb:85: a0:04:ae:c8:45:7b:32:23:29:99:2f:4c:d6:db:2e:68:ed:0c: 1c:c5:30:da:03:cf:2b:70:2d:ee:6f:d4:4a:e5:1b:b3:e8:4a: 4a:cd:73:d8:d4:a9:84:fa:34:b3:fc:09:51:1a:92:cb:9a:ef: ee:45:bb:da:fd:a3:70:65:1d:34:1e:b0:8f:4a:ee:24:02:d0: 9c:c4:bd:80:cd:dd:34:fa:3c:32:70:33:a0:08:ac:6d:e4:8c: 99:11:42:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyqO7Fv6e9V3i8yXkZwNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMjA5YzkyNjQ2YWUzNDJjYWE1ZDQ2ZGMxZDM3MzVhMGQy ZTdiMTQwHhcNMjUxMjA1MjMwMDUxWhcNMjUxMjA2MjMwMDUxWjAzMTEwLwYDVQQD EygyZmYzZjZkZWQ4NmQ1NGQ5NjhjMzg2NTRjMTQ1M2U0NzBkODFiMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdfQjEARAqTUjeCgBMBGLv2MrLFd Usgh39P+SATFINmgopuc/xqi5h4L9m+KaLXyQz5WRttvwTk+iTPq5rvl5hAFxjQn Camx/X8nEHrUEUo4JnScP/VDPL4ja0e+vdOoYVXBD2SfcGv2NNjagkC9Ke6ZdSpD cgPlzNrvAsqVj3GKrwSxQBMgKH5lvrBj2p/TL7m8vG91xFmSReGxlvK17uKn6C/P Kvvk8FZAD4lrR8PtNKUCGfoFTD5b1Hjmwqxh460TQp5v2J5aH03CG69uZiiJJzov 6GsX1HHQe27kfEXPCYKmPPpRdCozzo2s9N76DwIJzHTB/xcuj9OIG7ivlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/z9t7YbVTZaMOGVMFFPkcNgbAWMB8GA1UdIwQY MBaAFK4gnJJkauNCyqXUbcHTc1oNLnsUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgt ZTBhMjNkYTVlNjI4LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgtZTBhMjNkYTVlNjI4 LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6dH9wLb i3tORnmn4d6F/G9GVeLxB+LOBKaMvRSMcXw1vbGtrofKLfC9OJTEcp6qCS+UBUTO PQnK1IlVT0GFK3xNcHVnNarics3VecbWwEbswND70MV+QJ4cxIcDolsYi65lCnGo lkdf5dhp5gl8CAZNigPwYj7huBSU8+bVUUTZ4ND95vnevuVESLYqJEKyVTmcbR77 Q37m1nT1vkmNUeuFoASuyEV7MiMpmS9M1tsuaO0MHMUw2gPPK3At7m/USuUbs+hK Ss1z2NSphPo0s/wJURqSy5rv7kW72v2jcGUdNB6wj0ruJALQnMS9gM3dNPo8MnAz oAisbeSMmRFC3g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:39 2025 by rpki-client