This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: 2HgvngnNcKE55ybwZ8Uq2LIRQwIatoB/EtI8ji7eX1k= Subject key identifier: C3:12:ED:FE:28:94:F5:20:E9:0F:8A:E2:BF:9B:D6:1C:92:47:35:11 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019B2664CAC5BC2A61DBB92E507B569C3FAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 1640 Signing time: Tue 16 Dec 2025 09:01:38 +0000 Manifest this update: Tue 16 Dec 2025 09:01:38 +0000 Manifest next update: Wed 17 Dec 2025 09:01:38 +0000 Files and hashes: 1: 1-qo2IZfSQe_p35VuNGg4c_fEmc.roa (hash: ZNytEtjJE3PoSw4fLaCNFgz51wqNOEOmou9bPPKVA2c=) 2: 2ax4rXEQA4dV7JremBmC0hQtaug.roa (hash: R/IKnZobJlpQGcUf505T2eKyq/irMcu2IrwltIWV+u4=) 3: D7oUSyhrzSWYYWl3XhQsUS72Yg4.roa (hash: gFrsONax/RUGkygvJXfVvu2wc5r7m/Z6tusuo2v3M6g=) 4: JOxitDZrH06_7gdJfTN1yzrI7bs.roa (hash: I4I1UDRrHD91eVymVzkfYVMUc8wdJt2DaDwRY1upCck=) 5: OBaSZfmehcZUBqMMFijQNwThNdI.roa (hash: 7APqv18WVWke1FDylnRooW5eMht73lWY6YprLban2L8=) 6: PZIj01LldFateFu3od4_Vnbh84Q.roa (hash: ecoXbiPRWhHOY6nEuRa20dSVzR4wCTgLp8nw9UHReAg=) 7: XukASID4vdHx7vc_ang5UnSgHH8.roa (hash: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=) 8: j5-XW5coEbjIakLbav-a-xkoxss.roa (hash: 3PeUPnbjaNU5eTMyl99skfbBuUv7EoDvaqaX+1+rQl4=) 9: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: zeL7QUl4xf884OhIRBiHejF+L1tOdl05YWLP19mVx7w=) 10: zZkIW74qXtltgoLUxRfnjX8t5Bg.roa (hash: CVMBCJyn+beuTJEHswvGuHQF9hMYEJm+xn7R7IlaPlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:ca:c5:bc:2a:61:db:b9:2e:50:7b:56:9c:3f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Dec 16 09:01:38 2025 GMT Not After : Dec 17 09:01:38 2025 GMT Subject: CN=c312edfe2894f520e90f8ae2bf9bd61c92473511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:c7:44:d7:d1:44:44:ad:55:a3:1f:1b:02: 53:6b:47:b7:de:50:14:16:d6:88:0f:62:4c:6a:fa: 56:48:d1:2b:bf:e5:87:af:fb:ff:da:54:9d:0d:34: a9:56:a4:8d:10:8e:50:43:12:23:c2:ef:70:77:85: 16:e7:4d:32:d2:dd:3e:c2:66:3f:2a:ce:56:61:d5: 39:03:b9:37:96:12:29:a4:5f:42:68:8f:db:1c:87: 51:9d:5f:1e:ea:8c:50:7d:bf:05:22:df:b7:5a:0f: 2b:3a:d9:d2:6c:95:e6:ff:85:b3:b8:dd:18:db:7a: f0:d0:40:15:75:5b:56:ca:9a:4e:8b:81:f0:2d:bd: 64:5b:04:16:06:ff:0f:63:7b:b1:72:ae:59:c2:88: a6:39:2a:c6:a2:45:3b:37:7a:ab:0c:4d:ec:3c:25: d7:0f:af:f8:1e:1f:4e:ec:ef:0c:bd:b6:3e:70:d8: c6:db:fa:71:a4:d8:ee:5e:39:18:89:a7:23:f9:05: c7:18:43:3d:cd:8d:0b:b4:e7:b6:f6:19:d5:ce:46: d3:db:d0:a2:16:fa:58:01:56:c7:a7:b7:b4:a8:5a: 8e:19:da:b5:ab:b8:d8:5c:95:cc:b2:ea:5d:72:a0: 5f:a3:04:16:7d:58:90:0e:ae:22:94:be:dc:22:ba: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:12:ED:FE:28:94:F5:20:E9:0F:8A:E2:BF:9B:D6:1C:92:47:35:11 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3b:2e:50:13:84:fd:30:88:47:f6:8a:4f:11:a2:74:59:e4: e5:9f:b5:c9:bd:b0:bf:3b:fc:4c:bf:4b:57:ca:2c:dc:eb:ba: 8a:c0:86:78:1b:6e:0d:4f:7d:04:a2:04:7a:0d:d0:dc:f1:8a: 3e:86:66:0b:ce:f8:01:dd:cb:9d:77:b8:f7:a8:61:4f:1e:c7: d5:0e:8e:44:41:48:b5:fa:8f:c5:5f:f6:04:bc:ca:d7:a0:fc: 5c:61:83:9b:6c:38:8a:c4:ef:dc:f6:30:07:ae:74:16:f8:d1: 96:4a:08:86:c2:24:4e:10:58:2b:94:06:e8:4d:da:58:79:da: 41:aa:62:2d:a8:22:b2:86:09:c3:a8:16:d8:e8:4e:3b:a3:c6: 18:0f:66:ec:b0:ac:92:72:ee:7a:46:c9:fe:ab:42:00:bf:7a: 92:55:a4:3e:2d:7f:6a:96:87:3b:74:40:66:b8:8a:e3:7b:92: 55:6f:e2:32:e0:6a:b7:53:f4:55:65:e3:1d:8b:27:50:b2:df: a7:48:d0:33:32:77:f4:96:6b:89:ab:0b:29:4a:7f:7d:d8:ce: 1c:6f:cf:2d:80:5a:81:40:e6:2f:eb:51:78:d5:d5:17:bb:07: 5f:a7:dd:98:b9:39:31:7d:7e:4f:e7:52:ac:63:d4:da:1d:5f: fe:e0:4f:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZMrFvCph27kuUHtWnD+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjUxMjE2MDkwMTM4WhcNMjUxMjE3MDkwMTM4WjAzMTEwLwYDVQQD EyhjMzEyZWRmZTI4OTRmNTIwZTkwZjhhZTJiZjliZDYxYzkyNDczNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjTHRNfRREStVaMfGwJTa0e33lAU FtaID2JMavpWSNErv+WHr/v/2lSdDTSpVqSNEI5QQxIjwu9wd4UW500y0t0+wmY/ Ks5WYdU5A7k3lhIppF9CaI/bHIdRnV8e6oxQfb8FIt+3Wg8rOtnSbJXm/4WzuN0Y 23rw0EAVdVtWyppOi4HwLb1kWwQWBv8PY3uxcq5ZwoimOSrGokU7N3qrDE3sPCXX D6/4Hh9O7O8MvbY+cNjG2/pxpNjuXjkYiacj+QXHGEM9zY0LtOe29hnVzkbT29Ci FvpYAVbHp7e0qFqOGdq1q7jYXJXMsupdcqBfowQWfViQDq4ilL7cIrpirwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMS7f4olPUg6Q+K4r+b1hySRzURMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDsuUBOE /TCIR/aKTxGidFnk5Z+1yb2wvzv8TL9LV8os3Ou6isCGeBtuDU99BKIEeg3Q3PGK PoZmC874Ad3LnXe496hhTx7H1Q6OREFItfqPxV/2BLzK16D8XGGDm2w4isTv3PYw B650FvjRlkoIhsIkThBYK5QG6E3aWHnaQapiLagisoYJw6gW2OhOO6PGGA9m7LCs knLuekbJ/qtCAL96klWkPi1/apaHO3RAZriK43uSVW/iMuBqt1P0VWXjHYsnULLf p0jQMzJ39JZriasLKUp/fdjOHG/PLYBagUDmL+tReNXVF7sHX6fdmLk5MX1+T+dS rGPU2h1f/uBPYg== -----END CERTIFICATE-----Generated at Tue Dec 16 17:54:48 2025 by rpki-client