This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft File: rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft (raw, json) Hash identifier: MD7UNGci4s05lYTQ2/8TWpsXcKrXucwAQo9EQKyBhTs= Subject key identifier: 89:84:60:D8:52:23:77:F5:C5:28:71:48:D2:5C:0B:45:DC:74:33:F6 Authority key identifier: AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06 Certificate issuer: /CN=acfbbca852b957385909f6bd288cdf363f218b06 Certificate serial: 019AF464CF5494A0D8AA47C4842F219B1866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft Manifest number: 1438 Signing time: Sat 06 Dec 2025 16:00:38 +0000 Manifest this update: Sat 06 Dec 2025 16:00:38 +0000 Manifest next update: Sun 07 Dec 2025 16:00:38 +0000 Files and hashes: 1: IsJ0c25oEMcq2hs62WVn3JnR5kc.roa (hash: FVZnWTpWqx/hdTsogFHC4HE54Isaap3vLQprMcgXpZE=) 2: rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl (hash: ZfEIQm31SVxe+TLQnwTK5m/rx9wOyf960xhmudVF/xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:cf:54:94:a0:d8:aa:47:c4:84:2f:21:9b:18:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acfbbca852b957385909f6bd288cdf363f218b06 Validity Not Before: Dec 6 16:00:38 2025 GMT Not After : Dec 7 16:00:38 2025 GMT Subject: CN=898460d8522377f5c5287148d25c0b45dc7433f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:91:06:96:31:dc:92:fb:02:c3:78:f3:44: 6f:0f:16:9b:04:a3:e7:8a:b1:78:ad:d9:10:63:b8: fa:d6:61:f1:c6:81:eb:56:4c:07:ba:31:fc:d9:36: 66:87:c4:44:61:db:63:3c:6b:7e:26:14:c1:56:2c: 60:b3:6f:a1:83:59:4d:fc:f9:17:81:c1:fd:41:a5: 65:e5:9e:57:8b:ab:fb:f6:44:0e:37:41:7f:3a:d6: b2:50:ca:0d:a5:f2:50:dd:b0:cf:2e:78:19:9d:9c: 01:e4:93:81:90:fb:21:8b:50:6f:f5:58:0c:b8:75: 43:ad:e6:d6:4a:07:a9:d1:af:86:db:63:8c:54:82: b5:64:4b:7e:72:46:66:4f:46:ec:22:e9:11:66:15: 3f:77:5d:d7:5b:cd:14:66:85:8f:9f:ac:bf:3e:34: 78:ad:62:4c:c3:d5:28:f1:70:b6:28:6f:c4:0f:92: 8a:5f:2c:d0:5d:d3:b2:1f:e2:26:08:75:f6:be:d0: 80:14:44:96:a6:37:23:3f:f3:6c:2e:57:f2:03:b7: 75:74:8d:a3:49:a2:8e:68:34:96:4f:1f:e9:9b:3b: 5e:04:8f:7d:4d:4c:4b:e4:de:7c:16:34:68:0f:6d: 9f:ef:35:19:a8:ea:4b:15:0c:b7:0f:d6:ad:28:e6: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:84:60:D8:52:23:77:F5:C5:28:71:48:D2:5C:0B:45:DC:74:33:F6 X509v3 Authority Key Identifier: keyid:AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:03:48:db:4e:2f:73:2d:88:af:bb:0c:fd:71:76:50:29:85: b0:66:64:73:bf:8e:d2:7b:68:77:82:ff:46:59:f3:61:09:74: 53:4f:03:06:dd:24:21:90:90:9e:56:7c:c6:d8:50:d8:2c:cc: 03:47:92:78:26:7b:88:b3:8a:0f:2a:db:01:70:ed:15:60:11: b9:d0:9b:2b:46:d6:2f:c5:d8:0e:a2:db:d0:1c:04:d8:3a:5e: a3:79:17:3a:80:ae:ed:28:cd:3a:54:6b:8f:36:b5:f6:d2:3a: 8a:e7:71:17:62:c2:a5:54:3f:ee:cf:2a:47:2e:20:b6:2a:3c: cd:b0:68:e3:73:17:bd:6f:91:ab:1e:c9:f2:32:42:cf:8d:0c: 0a:77:0d:c2:9e:c7:26:e0:f2:f3:d9:f1:7d:05:e7:30:ba:ca: fb:3e:b3:a0:0d:27:03:31:ec:80:d5:d1:78:be:ea:7a:6f:7d: 68:b8:f1:9e:50:7f:16:3c:1d:31:3a:e9:bc:f8:e9:1e:4f:03: 60:5d:85:c2:6a:13:b8:b9:a6:b3:b4:c8:e1:52:58:2a:54:f5: f3:16:6f:c2:ce:49:56:ff:57:75:ec:0f:1d:0c:e7:88:ae:e7: 36:9c:5c:e0:b9:d4:72:47:47:ac:a2:0e:7a:4a:2c:e9:77:58: da:e1:c9:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZM9UlKDYqkfEhC8hmxhmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZmJiY2E4NTJiOTU3Mzg1OTA5ZjZiZDI4OGNkZjM2M2Yy MThiMDYwHhcNMjUxMjA2MTYwMDM4WhcNMjUxMjA3MTYwMDM4WjAzMTEwLwYDVQQD Eyg4OTg0NjBkODUyMjM3N2Y1YzUyODcxNDhkMjVjMGI0NWRjNzQzM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupORBpYx3JL7AsN480RvDxabBKPn irF4rdkQY7j61mHxxoHrVkwHujH82TZmh8REYdtjPGt+JhTBVixgs2+hg1lN/PkX gcH9QaVl5Z5Xi6v79kQON0F/OtayUMoNpfJQ3bDPLngZnZwB5JOBkPshi1Bv9VgM uHVDrebWSgep0a+G22OMVIK1ZEt+ckZmT0bsIukRZhU/d13XW80UZoWPn6y/PjR4 rWJMw9Uo8XC2KG/ED5KKXyzQXdOyH+ImCHX2vtCAFESWpjcjP/NsLlfyA7d1dI2j SaKOaDSWTx/pmzteBI99TUxL5N58FjRoD22f7zUZqOpLFQy3D9atKOa0OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImEYNhSI3f1xShxSNJcC0XcdDP2MB8GA1UdIwQY MBaAFKz7vKhSuVc4WQn2vSiM3zY/IYsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclB1OHFGSzVWemhaQ2ZhOUtJemZOajhoaXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81MjQ3YjMtNjA2Ny00MzZkLWFlMTkt Y2JhNzIyZWNiMmRiLzEvclB1OHFGSzVWemhaQ2ZhOUtJemZOajhoaXdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS81MjQ3YjMtNjA2Ny00MzZkLWFlMTktY2JhNzIyZWNiMmRi LzEvclB1OHFGSzVWemhaQ2ZhOUtJemZOajhoaXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgNI204v cy2Ir7sM/XF2UCmFsGZkc7+O0ntod4L/RlnzYQl0U08DBt0kIZCQnlZ8xthQ2CzM A0eSeCZ7iLOKDyrbAXDtFWARudCbK0bWL8XYDqLb0BwE2Dpeo3kXOoCu7SjNOlRr jza19tI6iudxF2LCpVQ/7s8qRy4gtio8zbBo43MXvW+Rqx7J8jJCz40MCncNwp7H JuDy89nxfQXnMLrK+z6zoA0nAzHsgNXReL7qem99aLjxnlB/FjwdMTrpvPjpHk8D YF2FwmoTuLmms7TI4VJYKlT18xZvws5JVv9XdewPHQzniK7nNpxc4LnUckdHrKIO ekos6XdY2uHJlQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:52:03 2025 by rpki-client