This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft File: adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json) Hash identifier: rbSUnnc6P3O8VqCv5QvCM5AGVQysRabnDJQNh5R/bX4= Subject key identifier: 3E:9F:FF:CA:4D:F0:57:93:C0:C9:F4:C4:CA:BE:32:65:11:3A:D9:FB Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87 Certificate issuer: /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787 Certificate serial: 019B30E845733012E0D3FE94C097AEC10761 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft Manifest number: 0473 Signing time: Thu 18 Dec 2025 10:01:27 +0000 Manifest this update: Thu 18 Dec 2025 10:01:27 +0000 Manifest next update: Fri 19 Dec 2025 10:01:27 +0000 Files and hashes: 1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: b2+bNkAPmrcdJkeigmUQkALD84Y3MdnpyYZEzwlAdsw=) 2: rvjv-klu4UPy3RgCuDK0uwY_4pQ.roa (hash: VpYiP9YZqNvc2RLGse05pZkEy6ixiDuEG/Kk/ZGHkkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:45:73:30:12:e0:d3:fe:94:c0:97:ae:c1:07:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787 Validity Not Before: Dec 18 10:01:27 2025 GMT Not After : Dec 19 10:01:27 2025 GMT Subject: CN=3e9fffca4df05793c0c9f4c4cabe3265113ad9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:74:42:ce:df:fc:6a:6c:9a:16:e9:d9:6d:0d: 8a:10:7c:e8:31:e4:32:1c:8f:3b:f0:76:0f:74:dd: d9:aa:3c:9d:c7:05:ff:cd:82:43:13:fd:c1:0f:44: a0:03:be:8b:39:3b:5b:34:c3:7e:06:eb:1c:e7:3f: d8:e9:8b:0e:82:dc:06:a2:58:a2:55:c1:56:e8:1a: 4e:bf:b4:85:d5:28:20:e1:50:e2:c8:4c:58:be:a3: 3b:fa:ae:99:a9:9d:a8:3a:6f:0e:f2:c0:f0:0c:a2: c8:07:5c:66:63:05:0b:93:6d:64:7e:bc:ec:bc:72: 42:24:63:72:5e:be:1d:11:17:07:ea:2e:b6:43:01: 27:c6:c8:26:b3:57:38:5e:d8:aa:70:6f:9a:1e:df: 7b:75:2e:cc:92:84:f4:48:db:b0:e2:b0:25:4e:ad: 93:37:9b:59:62:a8:87:1f:0a:6a:02:f2:64:58:82: 86:28:b5:99:92:3b:c4:8f:6e:36:05:40:9b:13:97: 46:e6:6b:8f:de:e0:1e:fe:00:06:5a:ee:01:52:1b: 51:41:94:75:70:2e:bd:ba:00:80:9c:0f:08:f3:85: d0:c7:ab:0f:13:af:bb:8c:2c:0d:ef:12:a6:59:6a: fc:f7:0e:68:26:cf:ac:08:ae:36:89:0d:cc:d9:77: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9F:FF:CA:4D:F0:57:93:C0:C9:F4:C4:CA:BE:32:65:11:3A:D9:FB X509v3 Authority Key Identifier: keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b3:ca:3d:0e:87:a2:9a:34:a4:d2:ed:fd:a7:79:91:bc:17: ae:d5:ac:dc:4c:e8:1a:6c:cc:74:8a:fb:0d:44:10:76:96:26: 40:ed:8f:bc:a4:18:71:2a:a3:3f:66:d7:1e:53:fc:f1:27:7e: d2:ba:01:a2:6e:25:03:62:7d:8d:8b:75:48:0a:b4:ec:04:2f: 31:6b:2a:0d:9b:d3:ca:e4:fd:0a:0e:85:8c:b8:3b:f1:45:f7: a3:36:b9:5c:dc:80:b2:b3:3f:4f:6f:3f:dc:e0:3e:f9:58:16: 7d:0d:78:03:bf:36:78:47:aa:9f:1a:71:c2:c0:22:73:9e:94: 24:44:09:d4:e4:3b:5e:21:1d:23:f1:7b:62:20:99:81:b5:b4: ee:0b:17:77:3a:76:6e:51:d0:b2:25:4c:95:b1:03:ad:a0:1a: 14:fa:a2:98:fc:d1:cb:31:63:52:80:e7:e6:ba:3f:c5:b3:42: 0d:e1:59:00:45:86:2f:01:b6:d9:63:04:8f:a3:a9:ca:ac:52: 2b:d3:39:59:a2:f3:b3:61:b9:bf:83:8e:08:07:36:cc:1d:f8: f7:d9:24:fd:6d:60:21:66:1a:dc:9a:7e:a3:f7:35:9c:f7:8c: 02:a3:6b:3d:1b:fb:44:5d:73:3a:7f:cd:d8:35:0a:58:70:7a: 5c:b4:8c:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6EVzMBLg0/6UwJeuwQdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDQ5MmJlM2ZjZjhjYzVhODU5YzkwNDhjNTBmZDQwYmZk Yjc3ODcwHhcNMjUxMjE4MTAwMTI3WhcNMjUxMjE5MTAwMTI3WjAzMTEwLwYDVQQD EygzZTlmZmZjYTRkZjA1NzkzYzBjOWY0YzRjYWJlMzI2NTExM2FkOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHRCzt/8amyaFunZbQ2KEHzoMeQy HI878HYPdN3ZqjydxwX/zYJDE/3BD0SgA76LOTtbNMN+Busc5z/Y6YsOgtwGolii VcFW6BpOv7SF1Sgg4VDiyExYvqM7+q6ZqZ2oOm8O8sDwDKLIB1xmYwULk21kfrzs vHJCJGNyXr4dERcH6i62QwEnxsgms1c4XtiqcG+aHt97dS7MkoT0SNuw4rAlTq2T N5tZYqiHHwpqAvJkWIKGKLWZkjvEj242BUCbE5dG5muP3uAe/gAGWu4BUhtRQZR1 cC69ugCAnA8I84XQx6sPE6+7jCwN7xKmWWr89w5oJs+sCK42iQ3M2Xd2JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6f/8pN8FeTwMn0xMq+MmUROtn7MB8GA1UdIwQY MBaAFGnUkr4/z4zFqFnJBIxQ/UC/23eHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUt NTkyMDhiYWJlYjEzLzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUtNTkyMDhiYWJlYjEz LzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbPKPQ6H opo0pNLt/ad5kbwXrtWs3EzoGmzMdIr7DUQQdpYmQO2PvKQYcSqjP2bXHlP88Sd+ 0roBom4lA2J9jYt1SAq07AQvMWsqDZvTyuT9Cg6FjLg78UX3oza5XNyAsrM/T28/ 3OA++VgWfQ14A782eEeqnxpxwsAic56UJEQJ1OQ7XiEdI/F7YiCZgbW07gsXdzp2 blHQsiVMlbEDraAaFPqimPzRyzFjUoDn5ro/xbNCDeFZAEWGLwG22WMEj6OpyqxS K9M5WaLzs2G5v4OOCAc2zB3499kk/W1gIWYa3Jp+o/c1nPeMAqNrPRv7RF1zOn/N 2DUKWHB6XLSMPQ== -----END CERTIFICATE-----Generated at Thu Dec 18 16:14:57 2025 by rpki-client