This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json) Hash identifier: X1NEf+6s4YvRjUCIkzLStBY/EtRseHS4gA9gonsBaIM= Subject key identifier: 76:16:C2:8C:38:21:BA:0A:AB:AA:B4:D9:71:63:B9:FD:01:73:9F:BA Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48 Certificate serial: 019AF23FC3DD194E1875668BFA28BE31D283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft Manifest number: 0273 Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (hash: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=) 2: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: f7nfOBQ4Z/r3IxBzvIu63fRJ4uBoGev5dvr2tsjg9eY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c3:dd:19:4e:18:75:66:8b:fa:28:be:31:d2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fdb088e98e4e6415d944142212448369005b48 Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=7616c28c3821ba0aabaab4d97163b9fd01739fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:fb:c5:58:f8:cb:34:11:39:3a:cc:cb:c4: 6b:8f:61:7a:11:6d:71:7c:b4:27:7f:40:48:c5:f6: 5a:dc:25:e6:d9:f3:42:65:ed:d4:f7:6b:7b:fb:92: 3a:c9:16:74:59:31:3e:59:a2:9a:63:12:1f:95:56: 0c:8e:7f:54:9a:5f:b7:17:79:63:46:2f:71:9c:a1: 30:70:53:87:a5:3b:30:68:a1:d5:db:34:b2:81:ca: 1e:96:b2:ec:d8:f0:82:a4:56:d9:8c:6b:6e:f3:10: 16:08:4c:83:87:5b:ab:a2:8c:7c:a6:de:21:38:46: a7:b8:13:85:31:bd:3b:34:55:48:93:5f:8b:a6:4a: 9d:6c:6a:77:27:4f:12:c1:08:5d:6b:42:e0:1a:c7: 4a:9e:08:5c:ad:fe:b8:52:8d:3f:aa:09:91:71:36: c6:8e:90:48:4f:7c:4d:19:6c:ec:a1:78:6b:e8:e8: 0c:08:05:60:0d:d5:b3:0f:00:70:be:6d:f1:a7:17: e4:57:4c:ba:19:e1:48:6d:85:45:d0:fa:0a:1f:88: 59:9f:be:69:17:31:e2:a6:0f:1e:dd:96:12:94:ef: 86:41:69:98:fd:75:77:4c:0e:c7:8b:51:63:15:4b: a8:33:e4:ec:fe:a9:b0:d0:4a:f1:d2:fc:95:9a:15: a5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:16:C2:8C:38:21:BA:0A:AB:AA:B4:D9:71:63:B9:FD:01:73:9F:BA X509v3 Authority Key Identifier: keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:97:49:80:4e:df:f0:d5:47:ed:bc:22:d4:04:7d:6b:3a:8a: 6a:67:61:50:e1:ef:15:18:01:11:07:5c:56:ac:ed:6e:b4:9d: 9f:68:f1:ec:9b:96:91:b0:0c:e7:3e:be:0a:f6:8a:51:7b:3a: bd:90:3f:0e:d9:74:75:7a:57:06:1e:80:67:d7:42:63:5c:43: ad:aa:73:95:50:79:28:31:5c:e9:34:93:6c:b4:6b:39:72:fd: 9b:49:fd:c7:39:7e:9c:2a:36:bb:e6:41:4a:c5:e7:c6:15:66: a6:98:f2:a2:57:14:21:04:50:91:04:5e:d6:9a:12:f7:39:68: 40:3b:ff:49:41:b2:a4:bf:76:aa:92:06:e2:a6:a2:05:08:ab: 4b:61:80:14:81:57:84:6b:f4:31:57:ed:bc:f7:96:99:c8:7d: 47:31:3c:4f:b4:3c:bb:f6:40:a6:2e:b8:bf:b8:48:78:ea:59: 13:2c:c5:3e:55:e6:04:28:0a:e4:43:e2:b4:bf:b0:c8:24:fe: b6:da:7c:af:51:3c:88:61:dd:91:3a:ee:ec:c9:2c:11:56:54: 52:13:d7:3f:8e:90:3e:9c:51:ca:a5:7d:1d:71:45:74:ed:b6: 8b:75:fa:ae:e5:10:df:78:a8:a3:f7:f1:79:da:18:34:e0:ae: 57:39:6a:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8PdGU4YdWaL+ii+MdKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmRiMDg4ZTk4ZTRlNjQxNWQ5NDQxNDIyMTI0NDgzNjkw MDViNDgwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD Eyg3NjE2YzI4YzM4MjFiYTBhYWJhYWI0ZDk3MTYzYjlmZDAxNzM5ZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWf7xVj4yzQROTrMy8Rrj2F6EW1x fLQnf0BIxfZa3CXm2fNCZe3U92t7+5I6yRZ0WTE+WaKaYxIflVYMjn9Uml+3F3lj Ri9xnKEwcFOHpTswaKHV2zSygcoelrLs2PCCpFbZjGtu8xAWCEyDh1uroox8pt4h OEanuBOFMb07NFVIk1+LpkqdbGp3J08SwQhda0LgGsdKnghcrf64Uo0/qgmRcTbG jpBIT3xNGWzsoXhr6OgMCAVgDdWzDwBwvm3xpxfkV0y6GeFIbYVF0PoKH4hZn75p FzHipg8e3ZYSlO+GQWmY/XV3TA7Hi1FjFUuoM+Ts/qmw0Erx0vyVmhWlpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYWwow4IboKq6q02XFjuf0Bc5+6MB8GA1UdIwQY MBaAFBX9sIjpjk5kFdlEFCISRINpAFtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUt MmY2M2FiNDZmMzFjLzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUtMmY2M2FiNDZmMzFj LzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopdJgE7f 8NVH7bwi1AR9azqKamdhUOHvFRgBEQdcVqztbrSdn2jx7JuWkbAM5z6+CvaKUXs6 vZA/Dtl0dXpXBh6AZ9dCY1xDrapzlVB5KDFc6TSTbLRrOXL9m0n9xzl+nCo2u+ZB SsXnxhVmppjyolcUIQRQkQRe1poS9zloQDv/SUGypL92qpIG4qaiBQirS2GAFIFX hGv0MVftvPeWmch9RzE8T7Q8u/ZApi64v7hIeOpZEyzFPlXmBCgK5EPitL+wyCT+ ttp8r1E8iGHdkTru7MksEVZUUhPXP46QPpxRyqV9HXFFdO22i3X6ruUQ33ioo/fx edoYNOCuVzlqMw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:52 2025 by rpki-client