This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft File: __48efMne-a_MrCqZ5PfjuT8aT8.mft (raw, json) Hash identifier: r9t6GVioaa/uGKvevMMgZtW1V70kcuJC1y1L4sGSZx0= Subject key identifier: C1:90:CD:8D:90:C5:DE:D0:8F:E2:29:D5:06:25:6C:6E:11:1D:CC:EA Authority key identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F Certificate issuer: /CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f Certificate serial: 019AF1646D5F78ED8591A4FFBA480663E10A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft Manifest number: 02A7 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: 0kaaAyo2H1IRNt6Ftj5Xi8qB5D8.roa (hash: vEdWjhFIP+oKICnFyIXPgNR6jJ68k0xMBCGivZ1H4Mc=) 2: __48efMne-a_MrCqZ5PfjuT8aT8.crl (hash: IWr3qxtt5GJHzn5mRqtue5nWgmSKNJpyNIwyw648538=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6d:5f:78:ed:85:91:a4:ff:ba:48:06:63:e1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=c190cd8d90c5ded08fe229d506256c6e111dccea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:be:b6:31:65:07:f3:34:e9:f9:51:58:0e: 75:96:45:61:cf:9a:79:5b:9f:2f:e9:6f:f1:8e:13: c5:4e:b7:c6:9b:37:e2:6c:e8:1c:a3:15:84:40:9d: e4:37:d1:63:3f:89:9e:63:e2:cf:23:33:c8:59:ce: 3c:55:57:60:c7:99:db:07:fd:a0:37:0b:6b:5c:7c: 3d:ad:ad:ce:53:cf:05:3d:52:b3:4c:c4:ff:7d:37: df:79:2e:07:e7:c3:00:d3:44:b8:ef:42:df:59:30: c1:da:73:1c:64:73:db:46:53:15:5a:2b:03:19:9d: 6d:73:9f:00:26:b3:07:99:a1:d8:5e:58:88:9d:2d: 88:d5:f0:2e:78:eb:62:e7:18:cb:ac:fa:1c:ec:10: 9a:db:80:85:52:ae:ae:29:6a:cb:9e:5c:dc:78:22: f5:d4:28:ae:1c:9c:8d:a7:47:a3:de:ff:54:dc:52: 02:54:94:09:c3:dc:34:8a:51:bc:22:8d:aa:4e:79: 97:1b:aa:8b:94:b8:8e:43:d3:99:04:0a:e5:15:7c: cf:7b:c7:df:d5:f5:3b:ab:e3:89:90:a2:d6:ef:fa: d7:93:10:82:2e:f4:de:62:3e:e7:15:c1:5d:21:15: 34:2b:f6:9d:6c:56:82:c2:35:8d:17:32:c1:a5:7c: c6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:90:CD:8D:90:C5:DE:D0:8F:E2:29:D5:06:25:6C:6E:11:1D:CC:EA X509v3 Authority Key Identifier: keyid:FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:11:7c:99:bb:32:b4:02:bb:3e:d5:e6:8c:38:30:f1:96:3a: ca:fd:b9:c1:25:59:49:65:12:aa:8b:ef:15:c1:b2:ca:b6:d0: 6f:7a:95:30:06:6a:55:18:72:f3:c5:8d:d6:e4:9c:4d:ee:c5: f1:76:08:bd:47:bb:a1:df:d7:f4:dc:57:9e:56:6b:33:a7:67: 6f:4a:e0:23:f7:3d:7f:24:d4:25:74:9c:50:c8:d5:9a:34:54: bf:b7:1d:ad:28:84:ea:b2:c7:ed:80:9a:70:30:f0:41:b9:e2: 50:33:1b:fd:d4:bc:0a:38:ac:21:a3:e8:a1:de:f2:3d:6f:eb: 2f:36:a3:c5:06:85:09:65:d7:da:1d:20:5d:81:ff:41:1d:9c: 8d:af:a3:9f:03:bb:ab:d7:d9:09:53:d4:02:b7:fa:93:67:cf: 91:7b:47:10:4e:65:fb:21:2f:2f:ba:50:87:f8:7a:8c:0d:73: a4:06:d2:d5:2c:bf:e3:ce:7f:25:04:46:98:3b:e9:b1:26:03: 73:2c:71:ec:1f:b3:5d:8c:42:5a:dc:a6:a9:07:56:8b:57:b5: 59:e8:e3:41:35:38:b4:20:7d:a2:42:fa:97:2e:17:c3:13:00: 92:fe:ad:46:5a:f3:bb:48:74:b6:f7:b4:51:a9:8d:92:ce:4d: 94:af:12:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZG1feO2FkaT/ukgGY+EKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZmUzYzc5ZjMyNzdiZTZiZjMyYjBhYTY3OTNkZjhlZTRm YzY5M2YwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD EyhjMTkwY2Q4ZDkwYzVkZWQwOGZlMjI5ZDUwNjI1NmM2ZTExMWRjY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol++tjFlB/M06flRWA51lkVhz5p5 W58v6W/xjhPFTrfGmzfibOgcoxWEQJ3kN9FjP4meY+LPIzPIWc48VVdgx5nbB/2g NwtrXHw9ra3OU88FPVKzTMT/fTffeS4H58MA00S470LfWTDB2nMcZHPbRlMVWisD GZ1tc58AJrMHmaHYXliInS2I1fAueOti5xjLrPoc7BCa24CFUq6uKWrLnlzceCL1 1CiuHJyNp0ej3v9U3FICVJQJw9w0ilG8Io2qTnmXG6qLlLiOQ9OZBArlFXzPe8ff 1fU7q+OJkKLW7/rXkxCCLvTeYj7nFcFdIRU0K/adbFaCwjWNFzLBpXzGwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGQzY2Qxd7Qj+Ip1QYlbG4RHczqMB8GA1UdIwQY MBaAFP/+PHnzJ3vmvzKwqmeT347k/Gk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQt ZjIwMjVkN2FlOGJkLzEvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQtZjIwMjVkN2FlOGJk LzEvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBF8mbsy tAK7PtXmjDgw8ZY6yv25wSVZSWUSqovvFcGyyrbQb3qVMAZqVRhy88WN1uScTe7F 8XYIvUe7od/X9NxXnlZrM6dnb0rgI/c9fyTUJXScUMjVmjRUv7cdrSiE6rLH7YCa cDDwQbniUDMb/dS8CjisIaPood7yPW/rLzajxQaFCWXX2h0gXYH/QR2cja+jnwO7 q9fZCVPUArf6k2fPkXtHEE5l+yEvL7pQh/h6jA1zpAbS1Sy/485/JQRGmDvpsSYD cyxx7B+zXYxCWtymqQdWi1e1WejjQTU4tCB9okL6ly4XwxMAkv6tRlrzu0h0tve0 UamNks5NlK8Snw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:27 2025 by rpki-client