This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json) Hash identifier: k6vuv0pm6SonR6KVP89fjvE/XfIH83Aj0qo/KfkMmj0= Subject key identifier: 0A:31:EF:67:40:91:98:42:31:C3:FA:42:61:60:5E:92:8F:64:9D:13 Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48 Certificate serial: 019B2287DB56FF50BEB9E41646A0D6DF8E42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft Manifest number: 028C Signing time: Mon 15 Dec 2025 15:01:27 +0000 Manifest this update: Mon 15 Dec 2025 15:01:27 +0000 Manifest next update: Tue 16 Dec 2025 15:01:27 +0000 Files and hashes: 1: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (hash: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=) 2: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: w6gqsW7GJSLoYD731wvfgbAjQzfYDJocpAPF4uRnfso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:db:56:ff:50:be:b9:e4:16:46:a0:d6:df:8e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fdb088e98e4e6415d944142212448369005b48 Validity Not Before: Dec 15 15:01:27 2025 GMT Not After : Dec 16 15:01:27 2025 GMT Subject: CN=0a31ef674091984231c3fa4261605e928f649d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:30:db:54:07:13:11:d4:1e:5e:ff:dc:a3: 66:c5:bb:b3:80:77:ac:db:f4:f7:5b:fc:9b:a0:fc: eb:83:d1:59:fc:fe:42:f8:a7:fb:1b:1e:60:3c:e8: f1:af:bd:3a:5f:7b:ec:46:4f:5f:51:cf:e1:1f:74: 55:b1:bb:e1:d8:a3:1c:c2:f5:d2:4b:4c:09:6b:ac: b2:d3:d4:8a:9d:5e:37:75:f8:38:6a:b6:28:e4:48: 36:8e:70:20:4f:85:3e:e7:2b:e5:61:b2:6b:30:d9: a1:b8:bf:40:a7:63:33:fc:1d:5f:6b:95:89:18:f2: 23:8c:7d:54:73:f0:70:9b:7e:b1:05:8e:de:20:75: 51:96:12:db:e0:2c:e3:d8:99:67:77:8d:fe:34:36: 34:d7:f9:e2:f7:6e:df:67:4a:c4:79:5b:aa:d7:96: b3:f7:07:22:d6:50:8d:85:23:28:d8:3f:95:f2:87: f7:ce:84:27:c9:65:62:fa:ea:85:f4:df:26:94:79: ac:82:72:8b:74:bc:1f:bd:3d:3e:95:fc:3b:fe:8d: bf:e2:c5:ab:06:c2:d3:0f:14:df:0f:8e:3f:d2:8a: 74:55:6e:f2:eb:c8:5a:50:60:21:82:8c:e1:da:0b: ce:45:ac:23:07:d2:fe:ee:93:3b:95:23:88:4e:47: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:31:EF:67:40:91:98:42:31:C3:FA:42:61:60:5E:92:8F:64:9D:13 X509v3 Authority Key Identifier: keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:8d:e2:48:df:e5:32:7c:3d:55:38:1c:3d:87:22:70:63:73: e8:d9:19:b6:44:64:8d:bc:0f:a8:83:b1:a6:7b:d0:7d:f9:98: bb:d8:a4:23:6c:2e:04:86:13:1a:1d:69:8d:40:ce:95:9d:f7: 64:d5:b5:0b:fc:7f:60:b1:47:45:cf:a3:27:59:fd:7d:46:b7: 4a:e5:a6:80:56:25:84:7c:11:22:30:78:e5:0f:ba:41:c8:0a: c9:56:5c:ce:7f:ef:3f:d0:cd:63:59:b2:01:08:cd:37:3a:b9: 12:9f:d8:75:9b:3d:63:18:fd:2c:e3:07:c4:97:cc:ff:cb:33: 97:5d:97:06:b6:89:47:de:94:ae:dc:cb:a0:01:f3:96:56:80: f2:af:d4:52:c0:71:ad:e7:0a:c7:f9:64:d8:0f:c8:06:cd:72: 34:15:28:eb:0e:25:c9:c9:f2:d2:0c:93:a5:a9:17:9c:cc:9d: cf:97:53:bb:e9:a5:03:0e:2e:61:37:b0:ce:f7:62:e8:ad:43: d0:ed:ac:87:54:0b:7f:af:2f:35:e5:2f:07:7c:09:86:f0:b0: 5f:0d:21:6c:91:15:aa:a6:2e:8e:ed:19:eb:7b:fa:7d:65:87: 7c:98:69:a4:12:b3:d0:69:90:33:cc:c4:26:89:1c:a4:fa:8c: c8:f7:97:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih9tW/1C+ueQWRqDW345CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmRiMDg4ZTk4ZTRlNjQxNWQ5NDQxNDIyMTI0NDgzNjkw MDViNDgwHhcNMjUxMjE1MTUwMTI3WhcNMjUxMjE2MTUwMTI3WjAzMTEwLwYDVQQD EygwYTMxZWY2NzQwOTE5ODQyMzFjM2ZhNDI2MTYwNWU5MjhmNjQ5ZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCYw21QHExHUHl7/3KNmxbuzgHes 2/T3W/yboPzrg9FZ/P5C+Kf7Gx5gPOjxr706X3vsRk9fUc/hH3RVsbvh2KMcwvXS S0wJa6yy09SKnV43dfg4arYo5Eg2jnAgT4U+5yvlYbJrMNmhuL9Ap2Mz/B1fa5WJ GPIjjH1Uc/Bwm36xBY7eIHVRlhLb4Czj2Jlnd43+NDY01/ni927fZ0rEeVuq15az 9wci1lCNhSMo2D+V8of3zoQnyWVi+uqF9N8mlHmsgnKLdLwfvT0+lfw7/o2/4sWr BsLTDxTfD44/0op0VW7y68haUGAhgozh2gvORawjB9L+7pM7lSOITkf+IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAox72dAkZhCMcP6QmFgXpKPZJ0TMB8GA1UdIwQY MBaAFBX9sIjpjk5kFdlEFCISRINpAFtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUt MmY2M2FiNDZmMzFjLzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUtMmY2M2FiNDZmMzFj LzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGY3iSN/l Mnw9VTgcPYcicGNz6NkZtkRkjbwPqIOxpnvQffmYu9ikI2wuBIYTGh1pjUDOlZ33 ZNW1C/x/YLFHRc+jJ1n9fUa3SuWmgFYlhHwRIjB45Q+6QcgKyVZczn/vP9DNY1my AQjNNzq5Ep/YdZs9Yxj9LOMHxJfM/8szl12XBraJR96UrtzLoAHzllaA8q/UUsBx recKx/lk2A/IBs1yNBUo6w4lycny0gyTpakXnMydz5dTu+mlAw4uYTewzvdi6K1D 0O2sh1QLf68vNeUvB3wJhvCwXw0hbJEVqqYuju0Z63v6fWWHfJhppBKz0GmQM8zE JokcpPqMyPeX4w== -----END CERTIFICATE-----Generated at Tue Dec 16 00:27:54 2025 by rpki-client