This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft File: rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json) Hash identifier: GYxraXpnrSSjvEbeGfzv0TAed2j39WN+IeX2/yguc2g= Subject key identifier: 4C:89:21:90:E9:08:56:AF:45:BA:02:65:E3:1E:84:51:FD:3E:FF:74 Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Certificate serial: 019AF0BF68EA924673AC40DB03AEAFF18005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft Manifest number: 0B22 Signing time: Fri 05 Dec 2025 23:01:07 +0000 Manifest this update: Fri 05 Dec 2025 23:01:07 +0000 Manifest next update: Sat 06 Dec 2025 23:01:07 +0000 Files and hashes: 1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=) 2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=) 3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=) 4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: twIU2N1PfZfdD3OPmVQFtxDSF4krBKlFerID6xyf1BQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:68:ea:92:46:73:ac:40:db:03:ae:af:f1:80:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Validity Not Before: Dec 5 23:01:07 2025 GMT Not After : Dec 6 23:01:07 2025 GMT Subject: CN=4c892190e90856af45ba0265e31e8451fd3eff74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:ea:a7:dd:00:33:18:5f:db:7d:71:19:56: 25:66:a7:53:dc:97:62:fb:c1:46:c4:f0:06:35:99: bf:8a:a4:14:4d:a6:33:87:15:1f:43:44:87:c1:f3: 3f:97:d0:c4:45:3e:09:f5:52:bd:52:6a:6c:58:04: a8:20:0d:ac:73:c4:4e:a6:2a:45:82:fc:6e:c5:98: ce:02:e8:51:8e:44:71:96:fe:7d:b9:a7:55:70:ad: 36:e6:4a:60:aa:49:f8:dd:85:75:94:ec:22:db:47: 05:2b:e9:39:09:68:f0:46:03:3f:6b:cd:7c:56:6c: 2b:53:b8:73:67:dc:6d:d7:83:ec:61:c6:53:29:cc: 8d:29:b3:cc:37:49:95:ee:5c:74:43:0e:4d:01:55: ec:c8:d2:cb:63:a4:26:fe:1e:48:7b:01:49:3b:81: c3:9e:fa:94:a1:9a:4e:04:23:ff:7f:7b:2f:d9:d5: a4:f8:00:7e:7f:73:83:15:a9:9a:6e:37:72:da:61: 16:e8:75:fd:66:1f:d7:4e:0d:19:af:a7:aa:74:d4: b7:ed:ca:0f:69:52:71:89:2f:73:6e:ef:c4:29:cb: 89:2e:90:0d:3d:9b:0d:79:60:d8:60:98:d0:6f:58: 34:46:5d:64:33:f9:25:79:66:67:af:63:86:4a:04: 9b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:21:90:E9:08:56:AF:45:BA:02:65:E3:1E:84:51:FD:3E:FF:74 X509v3 Authority Key Identifier: keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:9d:ec:7f:4c:73:cf:fc:7c:26:08:d6:44:2e:c6:3c:82: 60:2b:33:61:05:94:de:f9:a6:56:63:1b:63:c5:ca:33:8f:1a: 5a:15:c4:55:ed:9e:73:f2:ea:06:c9:37:9d:e2:1a:95:63:7b: 29:a4:38:f8:51:73:5d:32:3f:a5:02:40:1c:76:65:f4:a1:b8: 18:68:90:50:69:1c:55:ed:05:0d:14:7f:34:00:56:eb:24:39: ec:13:ab:bb:82:d4:1c:37:6d:ee:e3:20:16:7b:9a:a1:39:b0: 51:38:2c:04:77:5d:ee:8b:82:25:08:3d:45:08:63:55:0f:ec: 98:67:c2:5d:3e:ec:a7:0b:f5:3d:6f:e3:f2:56:ab:2e:e9:ea: 28:6d:c9:e1:dd:e0:f1:64:25:c4:41:82:c5:3c:85:45:db:41: 8c:5c:4d:5b:52:a8:0e:a2:4f:e2:1b:28:36:8c:e2:12:a4:a0: ae:b0:ad:00:6a:3a:12:d5:8a:f2:6c:94:27:75:c0:34:1a:66: 70:f8:1e:5f:66:1c:db:78:49:61:a0:a2:72:8f:6a:8b:ab:c9: 2c:fe:21:f7:80:45:f4:ba:b5:e0:a7:45:99:5d:2a:75:12:a4: 95:85:dd:44:f0:94:9a:4a:cc:61:b4:2e:b9:04:d4:95:4c:d6: b1:80:c9:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2jqkkZzrEDbA66v8YAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2 NWRhNDUwHhcNMjUxMjA1MjMwMTA3WhcNMjUxMjA2MjMwMTA3WjAzMTEwLwYDVQQD Eyg0Yzg5MjE5MGU5MDg1NmFmNDViYTAyNjVlMzFlODQ1MWZkM2VmZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYzqp90AMxhf231xGVYlZqdT3Jdi +8FGxPAGNZm/iqQUTaYzhxUfQ0SHwfM/l9DERT4J9VK9UmpsWASoIA2sc8ROpipF gvxuxZjOAuhRjkRxlv59uadVcK025kpgqkn43YV1lOwi20cFK+k5CWjwRgM/a818 VmwrU7hzZ9xt14PsYcZTKcyNKbPMN0mV7lx0Qw5NAVXsyNLLY6Qm/h5IewFJO4HD nvqUoZpOBCP/f3sv2dWk+AB+f3ODFamabjdy2mEW6HX9Zh/XTg0Zr6eqdNS37coP aVJxiS9zbu/EKcuJLpANPZsNeWDYYJjQb1g0Rl1kM/kleWZnr2OGSgSbEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyJIZDpCFavRboCZeMehFH9Pv90MB8GA1UdIwQY MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt NTU1ZjNmMThlNTRmLzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhid7H9M c8/8fCYI1kQuxjyCYCszYQWU3vmmVmMbY8XKM48aWhXEVe2ec/LqBsk3neIalWN7 KaQ4+FFzXTI/pQJAHHZl9KG4GGiQUGkcVe0FDRR/NABW6yQ57BOru4LUHDdt7uMg FnuaoTmwUTgsBHdd7ouCJQg9RQhjVQ/smGfCXT7spwv1PW/j8larLunqKG3J4d3g 8WQlxEGCxTyFRdtBjFxNW1KoDqJP4hsoNoziEqSgrrCtAGo6EtWK8myUJ3XANBpm cPgeX2Yc23hJYaCico9qi6vJLP4h94BF9Lq14KdFmV0qdRKklYXdRPCUmkrMYbQu uQTUlUzWsYDJBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:33 2025 by rpki-client