This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json) Hash identifier: 3azLCt5D6mtw/F3mgQYbvLmCTnBKbu0V5YgFiy1D5VA= Subject key identifier: 8B:5E:95:CD:62:7A:FE:C5:FD:1E:4C:28:A9:1B:1E:3F:2B:3C:BA:D3 Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f Certificate serial: 019B2E1E02D1A22E5D030A45764078209DA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft Manifest number: 16B2 Signing time: Wed 17 Dec 2025 21:01:17 +0000 Manifest this update: Wed 17 Dec 2025 21:01:17 +0000 Manifest next update: Thu 18 Dec 2025 21:01:17 +0000 Files and hashes: 1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=) 2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=) 3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: XNxJpcl0gFqu/0MmYoDnXbVzToJzcJ1qXfWQRvDxv+s=) 4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=) 5: vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa (hash: +Y5yMjWW8tVQD13wU5Y5PDbZdKBIW8wWdWt2aTYL2Ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1e:02:d1:a2:2e:5d:03:0a:45:76:40:78:20:9d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f Validity Not Before: Dec 17 21:01:17 2025 GMT Not After : Dec 18 21:01:17 2025 GMT Subject: CN=8b5e95cd627afec5fd1e4c28a91b1e3f2b3cbad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:52:eb:45:69:02:29:a0:d3:41:a8:8b:4c: f7:8e:eb:b8:44:9d:28:83:50:de:c1:65:86:30:bc: 05:8b:15:32:5e:3b:c5:50:af:74:b9:59:05:df:68: 2f:b3:55:99:1d:81:99:5a:61:82:f6:61:31:c8:a3: 3a:1d:e4:06:e5:5b:4c:de:8d:af:4f:f9:57:39:e3: 86:29:d8:b4:d4:b0:09:dd:a6:5f:22:7f:54:1f:9e: fc:51:66:d0:ee:e6:e5:4c:f7:ae:0c:0e:72:f3:38: 7d:8e:f2:87:90:b1:30:ff:c3:88:b8:1f:8c:30:7b: 3e:7d:e4:84:d1:fe:5a:a8:ed:d5:89:73:c1:fb:b8: 4d:df:e3:87:4e:a3:29:5c:61:83:2a:31:72:4c:df: d1:bb:13:ec:46:30:99:c7:d5:91:65:46:3f:47:86: 5d:9a:e2:68:60:b2:18:85:ea:5f:b3:96:cf:4c:48: 42:5a:5c:03:bd:c5:95:29:14:1c:00:de:59:d7:21: 44:a7:e4:ae:f1:c7:2e:4d:f2:71:45:cb:c0:5f:11: 5c:94:6e:42:2f:2d:b4:63:55:99:14:83:e5:54:c1: bf:3e:38:31:d9:2a:52:c1:64:c5:13:f1:3e:ab:a9: d9:bb:10:02:03:3a:ae:d6:4f:1a:2c:7c:b5:0d:10: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5E:95:CD:62:7A:FE:C5:FD:1E:4C:28:A9:1B:1E:3F:2B:3C:BA:D3 X509v3 Authority Key Identifier: keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:aa:64:0a:fe:96:ea:23:d7:62:ad:69:fb:aa:0a:e7:35:dd: a2:bb:2a:32:4f:9e:b5:24:be:3f:78:61:01:59:f7:bb:c7:2c: b6:4e:07:04:e2:89:ca:4a:7b:cc:e0:ab:36:9b:ef:33:14:b3: c1:c4:95:74:5f:b3:64:d3:12:a5:1e:8a:df:1c:1d:d7:e1:04: db:e1:5e:8c:d9:a6:25:cf:f2:25:8e:36:46:44:21:5f:d8:07: 54:d8:df:2a:0b:81:ee:08:62:06:3c:c4:a7:aa:83:9e:ac:e6: 09:fa:ac:80:93:4b:78:db:1c:b7:a5:f9:ba:69:f7:1c:9a:36: 17:2e:ff:0d:2d:47:db:3e:b9:56:5b:56:7e:8a:b5:75:34:1e: 4f:31:12:ea:6d:18:14:6c:75:05:0f:c2:46:d7:9e:88:af:33: 12:a7:84:e9:31:3f:5b:cc:3d:ca:f6:99:3f:7e:e7:59:b2:0c: 28:5f:d4:27:16:d4:0a:b1:be:c4:4d:5b:45:36:e3:0c:29:c0: aa:3f:db:74:e0:7d:48:ff:80:c4:27:21:cf:2d:a7:7f:5a:3a: 5f:d9:dc:68:c6:a5:32:ff:9b:e4:7b:8a:ca:ef:4d:1c:f7:03: a4:07:82:82:12:23:cd:40:d1:8e:88:bc:75:3b:12:fd:f8:69: 8d:f5:86:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHgLRoi5dAwpFdkB4IJ2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYWQ2MWQ4ZThjMWFiZGE4NTk2OTMwZTIxZjE4MjExYTUx NzY4MWYwHhcNMjUxMjE3MjEwMTE3WhcNMjUxMjE4MjEwMTE3WjAzMTEwLwYDVQQD Eyg4YjVlOTVjZDYyN2FmZWM1ZmQxZTRjMjhhOTFiMWUzZjJiM2NiYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1exS60VpAimg00Goi0z3juu4RJ0o g1DewWWGMLwFixUyXjvFUK90uVkF32gvs1WZHYGZWmGC9mExyKM6HeQG5VtM3o2v T/lXOeOGKdi01LAJ3aZfIn9UH578UWbQ7ublTPeuDA5y8zh9jvKHkLEw/8OIuB+M MHs+feSE0f5aqO3ViXPB+7hN3+OHTqMpXGGDKjFyTN/RuxPsRjCZx9WRZUY/R4Zd muJoYLIYhepfs5bPTEhCWlwDvcWVKRQcAN5Z1yFEp+Su8ccuTfJxRcvAXxFclG5C Ly20Y1WZFIPlVMG/Pjgx2SpSwWTFE/E+q6nZuxACAzqu1k8aLHy1DRCYEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItelc1iev7F/R5MKKkbHj8rPLrTMB8GA1UdIwQY MBaAFP2tYdjowavahZaTDiHxghGlF2gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2Et ODRlZTIyYTNlZTViLzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2EtODRlZTIyYTNlZTVi LzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmapkCv6W 6iPXYq1p+6oK5zXdorsqMk+etSS+P3hhAVn3u8cstk4HBOKJykp7zOCrNpvvMxSz wcSVdF+zZNMSpR6K3xwd1+EE2+FejNmmJc/yJY42RkQhX9gHVNjfKguB7ghiBjzE p6qDnqzmCfqsgJNLeNsct6X5umn3HJo2Fy7/DS1H2z65VltWfoq1dTQeTzES6m0Y FGx1BQ/CRteeiK8zEqeE6TE/W8w9yvaZP37nWbIMKF/UJxbUCrG+xE1bRTbjDCnA qj/bdOB9SP+AxCchzy2nf1o6X9ncaMalMv+b5HuKyu9NHPcDpAeCghIjzUDRjoi8 dTsS/fhpjfWGDA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:02:52 2025 by rpki-client