This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft File: rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft (raw, json) Hash identifier: p4IiqhZ924ASxb2NINqn37Ostjdh4h0uvxz0xfvOhL4= Subject key identifier: 71:F1:3B:8D:D7:99:90:89:D0:E9:63:A1:B7:EE:99:18:48:68:81:5C Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813 Certificate serial: 019B390F4D01F50728804AEC7F402B3F37F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft Manifest number: 0C11 Signing time: Sat 20 Dec 2025 00:01:02 +0000 Manifest this update: Sat 20 Dec 2025 00:01:02 +0000 Manifest next update: Sun 21 Dec 2025 00:01:02 +0000 Files and hashes: 1: 2yuHeP9Kzi2-iDsOvnhCDYlo6Uw.roa (hash: IHxChvWb85sgNgotrA/BnsV06YpBeOkmN/tTfoFuUvc=) 2: 84vkoPKxTF7pgwUvztDxRbjDrhQ.roa (hash: Wg3Ofao0gloehi9CthP/SdUCVsO6QMEQd9BpLHe3B8o=) 3: GKSQanExligYvTlhCHXIb80j450.roa (hash: xKvcqXgNWsJgbD21bBVQq7NU5gjELOTuBMVHtTDoCVI=) 4: Tyo6VF1ELTbvwtJyS6nZJLA8K-0.roa (hash: umfGkIDiH0PEP4Dex0coyv4+UbwotSLBPIcupKuR1h8=) 5: ekkDxJqu-ZlE3YVqxLbl94UD6sQ.roa (hash: +gZe1v06dqZXZbhN48Df/j5IB56FQCKk5ahi88pFN9Q=) 6: kNcVhQpRqGRKtRoApGjZuA5ACHo.roa (hash: EghVSyPoJOgbCHk/V4h5/7YBe1j1EcoGI/60cjBIYNw=) 7: rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl (hash: Fk3/VnX2MtfLpO6QGi6LR3mJrVS9gZDMBu9Jm5yw47s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:4d:01:f5:07:28:80:4a:ec:7f:40:2b:3f:37:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813 Validity Not Before: Dec 20 00:01:02 2025 GMT Not After : Dec 21 00:01:02 2025 GMT Subject: CN=71f13b8dd7999089d0e963a1b7ee99184868815c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e3:82:0e:ab:96:78:8f:ea:e6:7b:53:95:08: ec:19:18:93:39:e0:c5:54:a4:b4:b9:f2:23:83:04: 06:ee:8d:e9:95:c6:d5:77:59:15:dc:7f:78:eb:87: 1c:ac:52:ee:75:cf:b0:26:51:d5:bc:30:11:41:11: 8e:e1:81:77:54:92:69:6f:22:73:83:de:74:57:9f: d0:05:01:ff:1a:fa:04:e4:45:06:cc:6b:88:f4:59: 59:1b:70:bd:b9:94:5c:97:f9:e0:bf:2c:98:11:36: 04:dd:0a:f8:a8:f0:a8:b3:d8:19:a9:c7:05:47:70: c2:c9:50:91:7c:b3:79:47:9c:e0:68:b6:96:9c:80: e1:13:cb:2e:03:43:6c:b5:64:fc:41:92:f1:98:57: ca:33:87:1d:39:b4:d1:6b:61:88:e7:50:51:cc:a7: 0d:bd:4b:ac:03:4c:2c:ed:23:33:8f:b4:c7:95:69: 79:a9:93:e8:69:6b:8a:00:39:fd:49:9f:78:ab:cd: d8:dd:61:59:08:41:42:45:64:b7:bd:89:3f:39:14: 44:c8:59:59:61:0d:b6:49:4c:58:7d:b8:90:63:8c: e3:d0:cb:08:f7:94:f6:8f:7d:ba:a0:a8:00:40:a8: b1:1b:ca:75:74:5a:72:6f:0b:84:5b:09:2e:af:a5: 3c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:3B:8D:D7:99:90:89:D0:E9:63:A1:B7:EE:99:18:48:68:81:5C X509v3 Authority Key Identifier: keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:34:e1:7f:3c:a9:41:b1:bd:8c:6e:77:b2:9d:cb:34:1d:51: 25:73:65:2f:d0:f7:1d:fa:bf:a6:79:1d:ea:4a:80:6d:31:e6: e3:2b:91:e9:d3:d6:84:5c:38:35:88:37:82:90:9c:dc:a6:d7: 5c:13:c7:5c:d8:3a:bb:f9:27:d4:a0:d3:5f:9c:0b:5f:0f:28: bf:7b:62:89:c9:8a:5b:73:a8:08:1e:f2:e5:48:a9:6f:d8:26: 5f:9b:2f:5f:ce:5d:9f:bb:73:3c:e9:70:7d:39:bc:19:35:ce: a4:be:fc:d1:51:74:b4:a0:be:5e:aa:63:47:55:db:03:fd:86: 76:26:46:56:6a:73:59:63:e4:b3:72:08:c2:c1:79:1f:6f:ca: 25:3a:80:52:06:65:98:bf:91:da:0a:1a:71:d3:dd:1b:04:6a: 20:eb:43:bb:4d:cc:7a:d1:6b:45:6d:f6:0f:e1:e1:dc:2d:da: 9c:f8:63:b2:7b:d8:99:b8:c2:24:24:4e:6a:44:4d:16:f0:19: dc:f4:40:fa:11:08:40:4a:df:91:85:88:7c:a1:f4:f0:d1:a4: dc:e3:86:98:9f:09:5c:5c:96:3a:55:7b:f0:3d:85:28:83:50: 91:94:9e:29:85:cc:f0:a7:07:d5:21:ef:af:b7:4d:31:f6:4a: 05:cc:97:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D00B9QcogErsf0ArPzf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMWY3MjFiN2I3ZTZkMDQ5ZmJmZTUyMGUxY2E4OWMxY2Ey NTY4MTMwHhcNMjUxMjIwMDAwMTAyWhcNMjUxMjIxMDAwMTAyWjAzMTEwLwYDVQQD Eyg3MWYxM2I4ZGQ3OTk5MDg5ZDBlOTYzYTFiN2VlOTkxODQ4Njg4MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eOCDquWeI/q5ntTlQjsGRiTOeDF VKS0ufIjgwQG7o3plcbVd1kV3H9464ccrFLudc+wJlHVvDARQRGO4YF3VJJpbyJz g950V5/QBQH/GvoE5EUGzGuI9FlZG3C9uZRcl/ngvyyYETYE3Qr4qPCos9gZqccF R3DCyVCRfLN5R5zgaLaWnIDhE8suA0NstWT8QZLxmFfKM4cdObTRa2GI51BRzKcN vUusA0ws7SMzj7THlWl5qZPoaWuKADn9SZ94q83Y3WFZCEFCRWS3vYk/ORREyFlZ YQ22SUxYfbiQY4zj0MsI95T2j326oKgAQKixG8p1dFpybwuEWwkur6U8eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHxO43XmZCJ0OljobfumRhIaIFcMB8GA1UdIwQY MBaAFKwfcht7fm0En7/lIOHKicHKJWgTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjIt NjRkMjljODZiZjNlLzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjItNjRkMjljODZiZjNl LzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjThfzyp QbG9jG53sp3LNB1RJXNlL9D3Hfq/pnkd6kqAbTHm4yuR6dPWhFw4NYg3gpCc3KbX XBPHXNg6u/kn1KDTX5wLXw8ov3tiicmKW3OoCB7y5Uipb9gmX5svX85dn7tzPOlw fTm8GTXOpL780VF0tKC+XqpjR1XbA/2GdiZGVmpzWWPks3IIwsF5H2/KJTqAUgZl mL+R2goacdPdGwRqIOtDu03MetFrRW32D+Hh3C3anPhjsnvYmbjCJCROakRNFvAZ 3PRA+hEIQErfkYWIfKH08NGk3OOGmJ8JXFyWOlV78D2FKINQkZSeKYXM8KcH1SHv r7dNMfZKBcyXUQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:48:34 2025 by rpki-client