This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft File: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json) Hash identifier: 7K7c0it+2aulAAceRoDl28YimnL7TovHspdUo3jWtgI= Subject key identifier: FF:51:D0:BD:38:C8:1A:A0:D5:42:39:C2:1F:DA:DE:15:A4:B0:9C:31 Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Certificate serial: 019AF3F7ABCF4079DD76D33CFE510330E66E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft Manifest number: 11C9 Signing time: Sat 06 Dec 2025 14:01:26 +0000 Manifest this update: Sat 06 Dec 2025 14:01:26 +0000 Manifest next update: Sun 07 Dec 2025 14:01:26 +0000 Files and hashes: 1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: b3HqighovU8npvW/WZ+G1QcBFPqTM/JhS5u9Ux18gPo=) 2: AY8IrrzWhOI4edGB_Tl_2NFsPT4.roa (hash: uiO1qHM3dqC6uI/IPIfdOOSGwVI3hRDJi3/ZtYOJrsc=) 3: gnq-AR8Xd72mcm6lbFMDArBc5CM.roa (hash: 9S2hc504KDha1WUQXHo7oEPqtD/gvge/SWCBJIRS81w=) 4: hq906rq-ZUJ1rsRNyLa6JRxlY-c.roa (hash: W24B5y3blRSexP4/ZgUhUaITtqn0pVBgRqtpx/ttccY=) 5: k2zVIiwdTRAvcuIEhqj4cmMmGVQ.roa (hash: f6fiju9NCn/GwpDLcVhQnZ97ECOZ0vtJQ1vpuQYEjA4=) 6: uhJ-XIVNq77fWXsLmAjcO82hF0c.roa (hash: /Yf7GSbjy7jBNyAQCFoiblzDBo0DTRvflVo58Ipv4OQ=) 7: xENVRuP5uKqGbiuyJdR6-8GlIEE.roa (hash: Lt6FxlNVVzKwTUuuYwOrC8tiEKNsKK8scI+0fsrZ7WU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ab:cf:40:79:dd:76:d3:3c:fe:51:03:30:e6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Validity Not Before: Dec 6 14:01:26 2025 GMT Not After : Dec 7 14:01:26 2025 GMT Subject: CN=ff51d0bd38c81aa0d54239c21fdade15a4b09c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:bd:8d:56:8f:4f:9b:c2:00:80:65:cd:4f: bc:e5:39:bd:1b:00:0d:84:0f:28:52:d1:46:a2:cd: 79:e5:79:54:d8:bd:4f:69:44:3c:35:89:05:1f:14: 08:15:72:85:b0:99:fc:a1:f0:d1:a8:68:4a:98:70: 13:59:02:ba:5d:4c:ee:51:cf:0a:0f:44:06:f5:da: d3:71:1f:cb:2b:78:b0:23:84:9f:f8:f5:37:4c:bf: 85:7c:5a:bc:9b:6c:f7:f2:ec:ef:b8:b6:2c:91:95: 50:8d:5a:a1:24:eb:8b:17:82:9f:6f:73:c0:04:dd: f4:84:39:f0:5e:a8:08:47:ee:00:19:c3:c8:d5:65: b1:3f:7e:2e:75:29:2f:4f:eb:7b:5c:54:e2:1d:9e: e6:af:4f:d7:20:95:fd:fb:84:31:50:c3:3c:90:5a: db:7a:2e:cd:d5:6e:ab:42:40:83:1b:20:61:84:c3: 43:ad:7e:3e:39:3a:b2:62:cb:ec:fc:5b:31:79:41: a4:db:42:10:f5:db:20:33:85:fd:ac:30:45:fd:68: 01:2d:8f:0a:59:43:6b:8e:d4:6f:bb:be:d9:b1:dc: 2e:1b:28:eb:02:96:26:ae:f5:78:c0:65:5f:4b:80: 3f:9c:e1:44:36:7d:50:47:fd:23:e9:7d:ef:84:5f: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:51:D0:BD:38:C8:1A:A0:D5:42:39:C2:1F:DA:DE:15:A4:B0:9C:31 X509v3 Authority Key Identifier: keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c6:fb:0a:ed:c6:dd:1c:9a:f2:cb:8c:9d:a7:ef:a5:d6:75: d6:a9:12:6c:e4:49:9e:98:4d:91:5f:c8:b4:09:4c:a7:10:55: c6:46:b5:5a:a2:74:f5:a9:ed:9a:fd:8f:b3:29:63:fa:ee:8b: 60:b7:9d:09:f3:0a:af:a9:d2:5c:dd:00:4e:db:2b:05:5b:7f: da:2a:f6:57:d4:5c:ff:26:36:d3:9f:75:29:82:be:65:72:de: 91:a6:83:78:ff:7e:5a:03:ce:b7:91:03:07:64:66:f3:d6:71: b9:4b:59:4d:57:0e:e8:70:22:dd:8c:c2:fc:09:a7:d0:6a:aa: d4:26:fd:10:8c:e9:0f:53:a8:7c:bf:6c:1f:37:97:98:2d:cb: b8:de:db:2b:29:96:23:8a:fe:51:ca:09:20:2e:62:a2:db:27: c6:d8:4c:b9:fc:f2:60:26:f9:f9:f3:fd:14:aa:8e:df:65:52: 22:ee:2d:d1:da:17:c9:ad:bc:ef:10:d1:07:e9:c1:57:ef:24: b0:6d:47:2f:7f:7b:10:d8:fa:85:57:d5:ed:99:da:3c:c9:ef: 8f:f2:c8:51:00:03:b5:09:cd:6b:fc:8f:c5:10:89:ad:98:c4: d3:ab:90:82:0f:fd:95:3a:40:7c:30:bf:8c:b1:ee:4b:07:c9: 44:ae:ab:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz96vPQHnddtM8/lEDMOZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy NDhlMTQwHhcNMjUxMjA2MTQwMTI2WhcNMjUxMjA3MTQwMTI2WjAzMTEwLwYDVQQD EyhmZjUxZDBiZDM4YzgxYWEwZDU0MjM5YzIxZmRhZGUxNWE0YjA5YzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qe9jVaPT5vCAIBlzU+85Tm9GwAN hA8oUtFGos155XlU2L1PaUQ8NYkFHxQIFXKFsJn8ofDRqGhKmHATWQK6XUzuUc8K D0QG9drTcR/LK3iwI4Sf+PU3TL+FfFq8m2z38uzvuLYskZVQjVqhJOuLF4Kfb3PA BN30hDnwXqgIR+4AGcPI1WWxP34udSkvT+t7XFTiHZ7mr0/XIJX9+4QxUMM8kFrb ei7N1W6rQkCDGyBhhMNDrX4+OTqyYsvs/FsxeUGk20IQ9dsgM4X9rDBF/WgBLY8K WUNrjtRvu77ZsdwuGyjrApYmrvV4wGVfS4A/nOFENn1QR/0j6X3vhF+GPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9R0L04yBqg1UI5wh/a3hWksJwxMB8GA1UdIwQY MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2 LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMb7Cu3G 3Rya8suMnafvpdZ11qkSbORJnphNkV/ItAlMpxBVxka1WqJ09antmv2Psylj+u6L YLedCfMKr6nSXN0ATtsrBVt/2ir2V9Rc/yY20591KYK+ZXLekaaDeP9+WgPOt5ED B2Rm89ZxuUtZTVcO6HAi3YzC/Amn0Gqq1Cb9EIzpD1OofL9sHzeXmC3LuN7bKymW I4r+UcoJIC5iotsnxthMufzyYCb5+fP9FKqO32VSIu4t0doXya287xDRB+nBV+8k sG1HL397ENj6hVfV7ZnaPMnvj/LIUQADtQnNa/yPxRCJrZjE06uQgg/9lTpAfDC/ jLHuSwfJRK6rcg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:56 2025 by rpki-client