This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft File: advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json) Hash identifier: FK7WxmniGI1qBLJyvDw+moYKQtZX2rKpOpp8a3TgRWE= Subject key identifier: C8:99:AA:60:97:AB:92:1B:E4:15:BF:BA:7F:71:75:29:0C:8E:CC:9F Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B3D90BBAE4620883A7866ED8D1AEB37AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft Manifest number: 0521 Signing time: Sat 20 Dec 2025 21:00:53 +0000 Manifest this update: Sat 20 Dec 2025 21:00:53 +0000 Manifest next update: Sun 21 Dec 2025 21:00:53 +0000 Files and hashes: 1: 356qaAYQpDV5m2Riq8A1jSL_myc.roa (hash: J+LALyAXIHBq3+bBLiTSfwMeZdohnuBRZTHDVc6I9II=) 2: 50QBDzaaWAWirDv35AlJpGDh488.roa (hash: U9zp626nKKun30mCMXd5d52t9o6/HWZq00zHsZoBgiw=) 3: 5vI96mdACUYtbrBj1hpxS2th8SU.roa (hash: +D5F/vhkd6kDEoeI5nvUAAqsYy/qD8SkAXkJnFT0scM=) 4: 6tthdMUigNGL-Lj03VV1437ckw0.roa (hash: 3DKuUAToC850yfEHGnyn8P4fVujt3XjQI9EcyxZgd7k=) 5: 7md33wTGzdjzkpdm2YWPb96DeAE.roa (hash: XTg5R+tAMtHvJrOV1S/6jDI/yrBqzGpGjvAacgtOwFs=) 6: FNzx-AXDWYQXweTOw5GW8wLwA8Y.roa (hash: pI2apPSLr8xZ4eK8bjFcepwZqTx3hkzwJixceRtYmFQ=) 7: H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa (hash: alhkfmIs5h48famyJbrNqD1LroO26bFxdaO2RO80rB0=) 8: Nx_LlHukO6YVT2BEBxBXRcLN_po.roa (hash: KT5voOJbr5oTRoQ5gvpwOS1NktXBmDgt7n2ImgfHYoM=) 9: RNey77PyYZ7q5aSaC4PKivPQUp4.roa (hash: nbnaDHAsWvelX6heHPYA3AE04SRORSzM43r0uMU5XGU=) 10: SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa (hash: Gny5FCnUJO7mwZfbJF+nB2yfn78HUv4IFWcliadewNg=) 11: Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa (hash: gAGb1Y5AmI4FXfL962Kn9U3vKesk+PWP9SX12mcYBwQ=) 12: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: udvvDt1SNFLcBpXvHiz40Z8Ew/7df2NcpYbVQcRQxQQ=) 13: ixSljlpAv7VqFqZBManiWIU_IIY.roa (hash: S7kK0yaWZD9cO4dIzOpKGjzXHLiqqB9lAeIuZmQigdM=) 14: kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa (hash: cRZ9xm6BVrOYd9CySCPL4z+78bjkaTOH3OZ66vuPhhQ=) 15: lNQAITIC5PmIJYf58oFmM4_t7ZI.roa (hash: EoC37uqzi538UDD96xogxI48SXL4t+AtWBAP3kmAc9E=) 16: nzL5rU21d1PlGGMQdcFTW627B-Y.roa (hash: 9reJY4cgowCz0eQpIjwulCKKRQRpF5bMWpAhQfAMQg8=) 17: rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa (hash: l8U8iyph5EKJjwuIU1Ch+SfAGqICGB1ZppWFQqcO0KU=) 18: uPVNzfaFCEVH8pgEcujrS2hKdGY.roa (hash: 624lPGVpaWFoqr9oTQxsUT+zutBPV/3xF9eLcAlFX3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:bb:ae:46:20:88:3a:78:66:ed:8d:1a:eb:37:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Dec 20 21:00:53 2025 GMT Not After : Dec 21 21:00:53 2025 GMT Subject: CN=c899aa6097ab921be415bfba7f7175290c8ecc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:05:05:3a:12:ff:61:e3:d1:c6:15:bd:d6: 89:f8:21:0f:2d:96:6f:fa:b5:22:58:47:19:d6:f0: d5:fb:77:55:1d:5b:19:50:41:6f:73:84:90:91:c6: 19:74:7d:b8:d1:0e:f8:68:94:65:e9:1b:f8:14:7e: bd:b0:1d:85:a9:15:4f:6a:f4:51:32:e6:75:9a:88: 1e:6a:a3:72:07:2c:2c:fd:d7:f8:97:42:bb:8a:78: e2:10:0b:88:08:b8:89:b9:7f:5e:3c:29:12:b5:7e: 95:34:14:51:16:84:14:a0:75:0d:0c:9a:5d:41:7b: 21:76:bc:4c:43:33:5f:ec:b2:c1:3d:91:ae:5b:23: 69:ea:25:82:81:59:ff:93:2f:3b:9f:ee:09:a0:0f: 5e:7a:4c:15:b9:23:23:67:55:04:5d:ba:c4:27:ea: 96:d0:f8:df:46:6f:ff:32:7b:50:1c:8e:f9:e1:b7: 0e:88:82:99:8f:33:ae:bb:87:3a:59:c1:7f:cf:60: f2:8e:ba:58:ba:50:ef:57:e2:c2:56:7b:14:88:3d: 9e:bd:a6:98:95:84:b8:2e:84:d2:90:61:f5:63:3c: b8:36:ea:23:9e:34:8f:65:60:41:ea:0f:1d:fb:f3: 65:b1:00:9e:ba:33:47:13:ec:cc:57:64:4a:e9:1c: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:99:AA:60:97:AB:92:1B:E4:15:BF:BA:7F:71:75:29:0C:8E:CC:9F X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:37:e4:2a:ea:9b:c3:ba:ef:8a:94:e1:62:79:32:16:e2:fa: 60:d4:91:a4:3f:ca:97:0c:6a:f2:9b:ab:8d:13:a7:b5:9d:8c: e3:82:9c:54:87:a8:0f:bb:ca:a8:f9:6c:f9:79:5a:e1:36:d1: b9:a7:8f:d6:2d:20:43:5e:d6:72:4d:77:fb:b0:83:52:7d:95: 93:62:d8:2d:a2:2d:a7:98:9e:d7:72:f6:1c:68:11:df:61:03: 64:88:6d:3c:bf:99:f8:c1:f0:a9:46:8c:21:87:57:bd:9e:3d: 75:34:a0:7e:04:46:c9:d7:2f:80:5b:a3:77:2d:83:d4:1e:8a: 53:1b:4e:28:ec:b3:f5:bc:b5:bd:cd:3e:f2:6a:9a:f1:be:cd: b9:ac:46:d8:65:03:eb:66:61:b4:9f:3b:1e:b4:6c:ea:7a:38: 00:38:f7:37:e3:de:25:74:a4:97:f7:a7:dc:35:ee:45:9f:72: c6:c4:03:e7:45:8d:f1:b8:a9:6c:12:13:a7:14:45:d7:9a:a6: 86:a6:19:da:15:57:6a:3c:1c:1f:c7:fc:08:46:de:03:cf:71: fd:39:ad:92:f7:e5:21:ee:09:8b:19:54:cb:5e:40:a2:3e:45: c0:c5:31:a0:ec:d0:75:ef:ac:77:d1:51:d3:49:9b:d3:b1:a3: f9:21:73:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLuuRiCIOnhm7Y0a6zerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjUxMjIwMjEwMDUzWhcNMjUxMjIxMjEwMDUzWjAzMTEwLwYDVQQD EyhjODk5YWE2MDk3YWI5MjFiZTQxNWJmYmE3ZjcxNzUyOTBjOGVjYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbsFBToS/2Hj0cYVvdaJ+CEPLZZv +rUiWEcZ1vDV+3dVHVsZUEFvc4SQkcYZdH240Q74aJRl6Rv4FH69sB2FqRVPavRR MuZ1mogeaqNyByws/df4l0K7injiEAuICLiJuX9ePCkStX6VNBRRFoQUoHUNDJpd QXshdrxMQzNf7LLBPZGuWyNp6iWCgVn/ky87n+4JoA9eekwVuSMjZ1UEXbrEJ+qW 0PjfRm//MntQHI754bcOiIKZjzOuu4c6WcF/z2DyjrpYulDvV+LCVnsUiD2evaaY lYS4LoTSkGH1Yzy4NuojnjSPZWBB6g8d+/NlsQCeujNHE+zMV2RK6RwZ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiZqmCXq5Ib5BW/un9xdSkMjsyfMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTfkKuqb w7rvipThYnkyFuL6YNSRpD/Klwxq8purjROntZ2M44KcVIeoD7vKqPls+Xla4TbR uaeP1i0gQ17Wck13+7CDUn2Vk2LYLaItp5ie13L2HGgR32EDZIhtPL+Z+MHwqUaM IYdXvZ49dTSgfgRGydcvgFujdy2D1B6KUxtOKOyz9by1vc0+8mqa8b7NuaxG2GUD 62ZhtJ87HrRs6no4ADj3N+PeJXSkl/en3DXuRZ9yxsQD50WN8bipbBITpxRF15qm hqYZ2hVXajwcH8f8CEbeA89x/TmtkvflIe4JixlUy15Aoj5FwMUxoOzQde+sd9FR 00mb07Gj+SFz6w== -----END CERTIFICATE-----Generated at Sun Dec 21 00:20:24 2025 by rpki-client