This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json) Hash identifier: z+mYSFZ2PgMDuXPPidcYP+UV3NcxXWNs+v5El9qR1yY= Subject key identifier: 90:77:39:56:56:6D:F1:2B:02:C7:15:A4:FE:1B:ED:C1:90:EB:1B:CD Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Certificate serial: 019B2D0C47FF36306C9E698BD6A0B844302A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 16:02:18 +0000 Manifest this update: Wed 17 Dec 2025 16:02:18 +0000 Manifest next update: Thu 18 Dec 2025 16:02:18 +0000 Files and hashes: 1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=) 2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: 1CYwdHzahb5OFUkL65a1CjPKpZeVVgtE0JJZCbb4ZoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:47:ff:36:30:6c:9e:69:8b:d6:a0:b8:44:30:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Validity Not Before: Dec 17 16:02:18 2025 GMT Not After : Dec 18 16:02:18 2025 GMT Subject: CN=90773956566df12b02c715a4fe1bedc190eb1bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:3e:55:a4:1a:d4:9d:ab:8a:3e:aa:d6:e1: 97:3e:60:0f:56:49:b2:4c:55:b0:a1:9a:03:97:14: 29:d2:12:82:d1:2f:dd:a6:b5:e6:b2:dc:b0:72:d7: f6:66:b0:85:ad:88:25:1d:87:8e:4c:b5:e7:fb:2d: 88:4d:65:28:58:be:f4:c0:a8:15:49:dc:1c:3c:bd: 4a:3f:e9:1e:3d:5d:da:ed:2a:bb:8c:99:c1:89:90: 51:82:f8:ba:0e:3c:1b:96:2a:d2:8e:4b:07:4c:99: 75:54:30:2f:44:7b:00:a7:73:4d:90:aa:4a:6d:60: 57:59:df:f4:c8:55:88:07:41:61:0e:fe:cb:8f:99: 7b:ea:6b:9b:2b:18:cc:18:e4:39:f4:a9:41:2e:8b: 1c:36:55:de:5f:94:be:fc:1f:f9:99:39:e8:df:4b: 5f:05:da:b5:0b:78:d1:a4:e6:fd:2c:91:3d:ce:70: 8a:fb:db:89:b8:b9:db:7f:5f:8a:98:49:f5:52:26: 47:35:59:c6:27:17:55:af:87:23:c2:f5:20:e9:7e: 68:ad:2c:86:ca:3b:78:74:6c:de:71:0a:03:f1:01: d1:db:99:f7:8e:75:46:d2:d6:4b:1c:b2:94:61:9f: 98:e5:2f:39:4c:eb:40:91:9f:27:07:4e:dc:3f:07: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:77:39:56:56:6D:F1:2B:02:C7:15:A4:FE:1B:ED:C1:90:EB:1B:CD X509v3 Authority Key Identifier: keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:91:88:14:76:e1:7b:ad:33:67:f3:29:24:ec:72:b4:31:eb: 63:07:3d:23:4c:6d:37:69:f6:af:0a:2e:bb:55:ac:1a:0f:84: 86:d1:3b:0a:9b:df:83:ba:6c:20:7d:93:aa:dd:b9:27:92:19: 8a:c0:ed:d7:fd:78:81:3a:03:24:3d:16:ce:42:51:1c:9f:fb: 65:45:b6:ae:c6:a4:75:02:1f:c2:a3:0e:62:5d:6b:5a:15:7a: c9:99:90:ce:75:e3:d7:3f:e7:1f:83:e0:65:88:bc:dc:51:32: 32:1f:1f:b0:ce:ba:db:4e:f4:27:cc:2a:f5:11:43:06:b2:4e: d1:fc:a2:d1:f6:73:26:cd:d2:e4:9a:8b:72:87:67:6b:71:2e: f9:fb:9e:67:dd:c8:74:6a:d0:ca:4c:25:17:fa:e6:6e:7b:a0: c9:6d:26:ac:6a:e0:8f:d8:08:0a:cb:57:27:bf:27:24:a3:8a: a7:f4:40:9a:71:d1:fc:94:ac:1b:8d:61:e2:b4:26:3e:a1:f1: 7f:50:16:42:7f:dd:b8:f3:24:80:47:ea:06:13:c0:07:af:61: 8a:a4:2a:05:3f:1d:8a:3b:32:46:df:fe:13:95:d9:83:03:74: b2:ee:f1:9d:0d:12:cd:ee:e8:6a:d2:15:cd:07:eb:1f:98:97: b5:87:1a:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDEf/NjBsnmmL1qC4RDAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWRmN2M1ZjgyZGJjMGIxZGJhMzI4Mjg2MmQ1M2VjODg3 ZDVjNjYwHhcNMjUxMjE3MTYwMjE4WhcNMjUxMjE4MTYwMjE4WjAzMTEwLwYDVQQD Eyg5MDc3Mzk1NjU2NmRmMTJiMDJjNzE1YTRmZTFiZWRjMTkwZWIxYmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5g+VaQa1J2rij6q1uGXPmAPVkmy TFWwoZoDlxQp0hKC0S/dprXmstywctf2ZrCFrYglHYeOTLXn+y2ITWUoWL70wKgV SdwcPL1KP+kePV3a7Sq7jJnBiZBRgvi6DjwblirSjksHTJl1VDAvRHsAp3NNkKpK bWBXWd/0yFWIB0FhDv7Lj5l76mubKxjMGOQ59KlBLoscNlXeX5S+/B/5mTno30tf Bdq1C3jRpOb9LJE9znCK+9uJuLnbf1+KmEn1UiZHNVnGJxdVr4cjwvUg6X5orSyG yjt4dGzecQoD8QHR25n3jnVG0tZLHLKUYZ+Y5S85TOtAkZ8nB07cPwcMmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJB3OVZWbfErAscVpP4b7cGQ6xvNMB8GA1UdIwQY MBaAFK+t98X4LbwLHboygoYtU+yIfVxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAt NzhmNmM4MDQ3NzNkLzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAtNzhmNmM4MDQ3NzNk LzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZGIFHbh e60zZ/MpJOxytDHrYwc9I0xtN2n2rwouu1WsGg+EhtE7Cpvfg7psIH2Tqt25J5IZ isDt1/14gToDJD0WzkJRHJ/7ZUW2rsakdQIfwqMOYl1rWhV6yZmQznXj1z/nH4Pg ZYi83FEyMh8fsM662070J8wq9RFDBrJO0fyi0fZzJs3S5JqLcodna3Eu+fueZ93I dGrQykwlF/rmbnugyW0mrGrgj9gICstXJ78nJKOKp/RAmnHR/JSsG41h4rQmPqHx f1AWQn/duPMkgEfqBhPAB69hiqQqBT8dijsyRt/+E5XZgwN0su7xnQ0Sze7oatIV zQfrH5iXtYca8g== -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:11 2025 by rpki-client