This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json) Hash identifier: touTYr9L1ERuiuzfVGHVYfsdqvYuz2AUx/Insa9lPa0= Subject key identifier: C9:67:8F:75:A2:6F:91:A9:F8:83:D5:1E:B9:1D:B0:D2:85:1A:EF:6B Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Certificate serial: 019B2E8B7BEDF2AF15D6FFF9851466EAFFC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft Manifest number: 0F84 Signing time: Wed 17 Dec 2025 23:00:51 +0000 Manifest this update: Wed 17 Dec 2025 23:00:51 +0000 Manifest next update: Thu 18 Dec 2025 23:00:51 +0000 Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=) 2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: bOFmjIxgb+lcXpYNJmZwvWFFj6k1pEXtl4XjIVOLYkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:7b:ed:f2:af:15:d6:ff:f9:85:14:66:ea:ff:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Validity Not Before: Dec 17 23:00:51 2025 GMT Not After : Dec 18 23:00:51 2025 GMT Subject: CN=c9678f75a26f91a9f883d51eb91db0d2851aef6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:96:b2:b7:0a:ed:03:4a:bd:24:7e:ca:1b: 1a:a0:8e:b6:d1:f1:ef:83:c4:66:b9:6c:07:09:50: 5e:63:ff:41:9d:37:12:66:1e:fe:d4:1c:6f:77:4e: a7:70:99:45:09:0b:15:9a:d6:de:4c:bb:32:f6:29: 3e:6e:a3:c2:78:d8:37:4b:ea:5d:50:94:05:ec:7c: dd:66:32:8a:50:d5:c5:57:5e:aa:b4:a2:4f:4d:b4: ca:a8:ae:e5:ae:15:19:d7:56:73:74:dc:88:a5:89: c7:75:84:08:5f:5c:ed:0f:a2:18:cd:f1:ed:21:17: e1:f3:a9:47:d3:52:01:2f:27:6b:ab:57:70:e1:fc: ba:7f:b3:e6:35:e8:6e:66:91:f3:08:5e:3d:c5:cf: 13:e4:ba:81:c4:1a:76:32:37:85:d5:c4:6e:c6:ac: f9:63:86:05:6c:a7:39:3e:5c:35:be:6c:96:28:33: e3:0c:fe:08:33:2d:04:a7:f8:1c:55:15:61:e6:0b: 05:cc:56:db:f4:d8:85:86:99:b7:4c:f7:d3:b5:29: 47:e4:0e:f6:7f:02:4c:ac:fa:8f:c4:f5:95:3c:eb: 25:d5:b4:b8:2f:18:ce:4a:2f:de:63:81:d0:03:05: bd:66:24:88:c6:6e:e7:15:3c:0e:5f:a2:a8:90:3b: f0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:8F:75:A2:6F:91:A9:F8:83:D5:1E:B9:1D:B0:D2:85:1A:EF:6B X509v3 Authority Key Identifier: keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:88:dc:22:13:9a:83:7e:8e:69:92:f5:cf:1c:6e:9a:3a:19: 9e:e3:60:69:80:62:b7:25:78:ce:09:76:a1:02:2b:e4:0c:18: 02:d0:e5:fa:eb:1b:9a:66:d0:c2:e4:5f:33:ed:05:b9:12:3a: 08:e5:82:4d:ef:bc:25:04:0d:83:86:db:9b:be:b4:46:29:fc: 11:02:a8:b8:98:eb:4a:fc:92:3e:8b:48:f0:12:1a:55:50:63: 40:c6:45:5e:21:40:76:a0:cc:ab:10:e5:60:b1:d9:8c:56:cd: d3:a8:3f:15:73:f4:ea:93:a4:aa:ea:b5:23:22:eb:79:66:2e: 9d:f1:12:94:7e:de:68:9a:e4:60:c8:90:70:d2:6a:59:01:77: 37:7b:32:77:eb:68:49:df:10:ef:ec:c1:cd:29:8d:6d:b1:0a: be:18:f7:f8:ca:16:f0:cc:57:b1:ea:f9:3f:53:4d:e0:b5:eb: f0:ff:85:8a:31:cd:64:2a:30:e5:17:ea:7a:d7:bc:1a:4d:7d: 43:af:26:c5:ff:9a:31:43:3e:46:db:ef:ab:47:79:84:09:17: cb:d9:37:7d:56:11:65:b4:ca:23:00:a9:25:c8:2a:b7:ea:a9: 28:b4:d8:a8:75:35:a3:31:47:0b:67:da:65:b1:3e:ac:ec:3e: 58:29:1b:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui3vt8q8V1v/5hRRm6v/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMjA5YzkyNjQ2YWUzNDJjYWE1ZDQ2ZGMxZDM3MzVhMGQy ZTdiMTQwHhcNMjUxMjE3MjMwMDUxWhcNMjUxMjE4MjMwMDUxWjAzMTEwLwYDVQQD EyhjOTY3OGY3NWEyNmY5MWE5Zjg4M2Q1MWViOTFkYjBkMjg1MWFlZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd2WsrcK7QNKvSR+yhsaoI620fHv g8RmuWwHCVBeY/9BnTcSZh7+1Bxvd06ncJlFCQsVmtbeTLsy9ik+bqPCeNg3S+pd UJQF7HzdZjKKUNXFV16qtKJPTbTKqK7lrhUZ11ZzdNyIpYnHdYQIX1ztD6IYzfHt IRfh86lH01IBLydrq1dw4fy6f7PmNehuZpHzCF49xc8T5LqBxBp2MjeF1cRuxqz5 Y4YFbKc5Plw1vmyWKDPjDP4IMy0Ep/gcVRVh5gsFzFbb9NiFhpm3TPfTtSlH5A72 fwJMrPqPxPWVPOsl1bS4LxjOSi/eY4HQAwW9ZiSIxm7nFTwOX6KokDvwIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlnj3Wib5Gp+IPVHrkdsNKFGu9rMB8GA1UdIwQY MBaAFK4gnJJkauNCyqXUbcHTc1oNLnsUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgt ZTBhMjNkYTVlNjI4LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zZjNhMzAtM2U2NC00MzgwLWExNDgtZTBhMjNkYTVlNjI4 LzEvcmlDY2ttUnE0MExLcGRSdHdkTnpXZzB1ZXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAojcIhOa g36OaZL1zxxumjoZnuNgaYBityV4zgl2oQIr5AwYAtDl+usbmmbQwuRfM+0FuRI6 COWCTe+8JQQNg4bbm760Rin8EQKouJjrSvySPotI8BIaVVBjQMZFXiFAdqDMqxDl YLHZjFbN06g/FXP06pOkquq1IyLreWYunfESlH7eaJrkYMiQcNJqWQF3N3syd+to Sd8Q7+zBzSmNbbEKvhj3+MoW8MxXser5P1NN4LXr8P+FijHNZCow5Rfqete8Gk19 Q68mxf+aMUM+Rtvvq0d5hAkXy9k3fVYRZbTKIwCpJcgqt+qpKLTYqHU1ozFHC2fa ZbE+rOw+WCkbsg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:11:49 2025 by rpki-client