This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json) Hash identifier: mfxpQCWaHbSrPkzpn1+dx82ZEvLiYNHzCFHb2q1AgOE= Subject key identifier: F0:84:07:2A:7C:2B:3D:D3:01:89:24:41:C9:8C:7C:B9:9D:CE:23:2D Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56 Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956 Certificate serial: 019B300C01923F13AA5E59F628442B89EE54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 06:00:51 +0000 Manifest this update: Thu 18 Dec 2025 06:00:51 +0000 Manifest next update: Fri 19 Dec 2025 06:00:51 +0000 Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=) 2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: Rv6xMWj8PT3Vp+Jkk4pBiBZ3Fok+mGxZeUpJ5TOzor8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:01:92:3f:13:aa:5e:59:f6:28:44:2b:89:ee:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956 Validity Not Before: Dec 18 06:00:51 2025 GMT Not After : Dec 19 06:00:51 2025 GMT Subject: CN=f084072a7c2b3dd301892441c98c7cb99dce232d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:56:6d:29:7a:70:2f:1e:e7:f6:5b:b7:b3: 73:02:bf:39:5e:dc:7f:c8:1c:7a:8b:c9:56:7a:3a: 1c:2d:3d:91:c5:69:7b:4e:58:79:f3:3b:55:2f:62: 2a:06:c2:b0:f4:a7:5b:cb:d7:94:5d:7a:dc:ca:e1: c7:15:46:e0:0b:81:f4:0d:0c:e9:17:0a:fc:5c:6f: c7:d7:b8:58:45:26:33:f1:f2:96:19:8c:4d:af:fc: f4:0c:d5:6e:52:89:9c:cc:d4:f0:53:5f:a3:ee:72: 9c:ca:e7:b4:89:e9:04:93:36:69:f4:05:24:e5:fb: b8:ca:e1:8c:50:55:87:f1:bf:97:31:f2:02:80:96: 94:51:8d:de:22:28:2d:c4:e3:95:af:1f:92:b3:78: b5:fd:39:9a:2c:ff:5d:f2:31:0c:62:a1:c6:d4:f3: 4d:3a:56:97:21:66:31:ec:70:da:2f:d2:16:de:3e: ca:32:d3:5c:fb:55:4e:74:ec:13:83:c4:e8:e9:09: c1:af:cb:78:ca:9d:49:f8:f3:1d:9f:96:15:61:d9: a1:6b:94:05:d9:45:6c:d9:e6:ae:61:45:a7:dc:20: 49:6f:69:e4:d4:a6:2f:15:18:fb:8d:82:14:4d:2a: d4:55:fd:4a:ca:c5:8c:81:a4:1f:7c:c9:24:57:42: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:84:07:2A:7C:2B:3D:D3:01:89:24:41:C9:8C:7C:B9:9D:CE:23:2D X509v3 Authority Key Identifier: keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0b:a8:03:75:62:f8:0f:0e:cf:ce:f5:7b:21:00:52:1a:c6: 10:9b:03:74:44:24:33:b6:cc:46:b8:8d:35:51:44:d5:67:c0: 4b:84:dc:8a:20:5b:01:e6:42:10:6c:84:cb:4e:04:72:be:13: e7:34:32:5c:ce:ad:be:d0:5e:9c:65:5e:fe:43:2c:16:86:9a: 83:ad:c1:4e:40:d8:91:8c:16:2c:69:43:3a:c2:ae:81:4f:e0: 56:e9:fc:cb:f9:e4:5f:ab:79:92:18:20:1a:05:48:cd:b1:b9: e7:79:e1:7b:c3:7f:83:79:6a:07:0a:2f:ee:09:d4:86:5d:fe: 00:c8:4c:7e:dd:a9:0e:0c:4b:96:a4:62:f8:a5:35:2d:4e:fe: eb:47:5e:fd:bf:ef:60:bd:e2:9e:44:35:62:79:fe:99:8f:83: bb:a6:99:46:e5:5d:3f:2d:08:9a:70:cd:1d:52:25:0a:2d:e1: 30:77:27:5d:c5:38:29:8c:ee:47:cf:29:62:a2:e6:63:2d:27: 1c:ac:e7:ec:57:93:38:13:e4:68:d4:ec:e2:a4:3b:bf:70:22: 49:17:f3:56:7b:13:2b:a3:3b:87:73:67:87:ef:b5:cc:fa:4f: af:5f:9d:0e:f0:b4:ab:a8:1e:e0:09:ae:3b:ce:3c:32:21:b2: f7:34:79:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDAGSPxOqXln2KEQrie5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZGNjZTkxMDAwNDUxNDk0YzQzYzE1ZDE3MmRhMmViOWQ1 Yjc5NTYwHhcNMjUxMjE4MDYwMDUxWhcNMjUxMjE5MDYwMDUxWjAzMTEwLwYDVQQD EyhmMDg0MDcyYTdjMmIzZGQzMDE4OTI0NDFjOThjN2NiOTlkY2UyMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWNWbSl6cC8e5/Zbt7NzAr85Xtx/ yBx6i8lWejocLT2RxWl7Tlh58ztVL2IqBsKw9Kdby9eUXXrcyuHHFUbgC4H0DQzp Fwr8XG/H17hYRSYz8fKWGYxNr/z0DNVuUomczNTwU1+j7nKcyue0iekEkzZp9AUk 5fu4yuGMUFWH8b+XMfICgJaUUY3eIigtxOOVrx+Ss3i1/TmaLP9d8jEMYqHG1PNN OlaXIWYx7HDaL9IW3j7KMtNc+1VOdOwTg8To6QnBr8t4yp1J+PMdn5YVYdmha5QF 2UVs2eauYUWn3CBJb2nk1KYvFRj7jYIUTSrUVf1KysWMgaQffMkkV0IbkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCEByp8Kz3TAYkkQcmMfLmdziMtMB8GA1UdIwQY MBaAFJDczpEABFFJTEPBXRctouudW3lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MWZkYmItOGJhMi00YjdlLTk4MGYt ZWU2MGIwZGRiZGFhLzEva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81MWZkYmItOGJhMi00YjdlLTk4MGYtZWU2MGIwZGRiZGFh LzEva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgguoA3Vi +A8Oz871eyEAUhrGEJsDdEQkM7bMRriNNVFE1WfAS4TciiBbAeZCEGyEy04Ecr4T 5zQyXM6tvtBenGVe/kMsFoaag63BTkDYkYwWLGlDOsKugU/gVun8y/nkX6t5khgg GgVIzbG553nhe8N/g3lqBwov7gnUhl3+AMhMft2pDgxLlqRi+KU1LU7+60de/b/v YL3inkQ1Ynn+mY+Du6aZRuVdPy0ImnDNHVIlCi3hMHcnXcU4KYzuR88pYqLmYy0n HKzn7FeTOBPkaNTs4qQ7v3AiSRfzVnsTK6M7h3Nnh++1zPpPr1+dDvC0q6ge4Amu O848MiGy9zR5aw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:57:00 2025 by rpki-client