This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json) Hash identifier: B/rSuNM3mfa3ZX1si+pNJcNiURyCfPqy2Pi4QN2/3jo= Subject key identifier: 1E:15:A1:BC:9C:B7:B1:49:CD:D6:15:64:00:DE:D5:B3:A0:B0:4C:3A Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04 Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04 Certificate serial: 019B330D6EDAE66B5B63CFFD43BC20BE8998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 20:01:16 +0000 Manifest this update: Thu 18 Dec 2025 20:01:16 +0000 Manifest next update: Fri 19 Dec 2025 20:01:16 +0000 Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=) 2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: E/YGm3CBHSgEJLIa7rGrvlv/hB1htq1FM4/vdpL2we0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:6e:da:e6:6b:5b:63:cf:fd:43:bc:20:be:89:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04 Validity Not Before: Dec 18 20:01:16 2025 GMT Not After : Dec 19 20:01:16 2025 GMT Subject: CN=1e15a1bc9cb7b149cdd6156400ded5b3a0b04c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:d0:83:83:c5:b9:41:8d:3a:63:35:ad:5b: da:ac:59:e9:a3:8b:98:41:01:ff:74:66:ae:b2:e3: b2:de:fd:45:0b:a8:fa:85:04:c5:8c:a3:8f:5d:0f: 04:c2:2e:10:4d:ff:ad:fc:c1:13:3d:86:b7:b5:f0: d5:97:75:4a:02:e9:41:57:35:ea:72:a8:30:d2:7c: 4d:bd:88:b3:a2:09:b7:97:de:93:0f:47:33:fa:06: 45:88:a0:c1:e4:bb:1a:6c:c8:68:9e:5b:5f:56:70: 25:20:3f:38:d7:5f:62:02:63:e2:df:f3:1f:4c:77: 2a:35:66:f6:63:f6:69:38:79:c3:f3:bf:90:aa:f9: c0:e6:37:ab:83:01:ae:58:97:76:15:8e:99:49:df: ee:a6:83:ab:d0:40:b5:e3:c8:46:11:b4:38:a8:f3: ae:55:95:5d:2b:13:ed:86:26:51:57:54:2e:48:4f: 04:0b:03:37:4d:a2:d5:69:50:a9:a1:35:88:37:b3: d9:be:72:fd:79:bf:36:6b:88:1d:b5:48:2c:21:18: 31:98:3a:3d:f3:63:e3:84:ac:2a:07:f3:12:2b:76: c8:50:18:3b:49:3b:08:ef:76:7d:a8:ea:5a:f6:f0: 3c:95:6b:9b:c0:4f:aa:7b:1d:26:20:e0:a3:8c:28: 85:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:15:A1:BC:9C:B7:B1:49:CD:D6:15:64:00:DE:D5:B3:A0:B0:4C:3A X509v3 Authority Key Identifier: keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fe:e7:2e:c4:3d:58:f4:e9:89:d8:d4:eb:3c:6e:f9:4a:3e: d9:6d:3d:25:ac:6b:79:cf:93:94:cd:66:bc:93:9d:2e:aa:dd: 91:3f:5b:cc:d6:f7:4e:a7:55:f2:97:3f:7a:85:63:8d:fe:7f: e1:34:bc:ee:a7:88:50:94:1e:6c:40:33:85:5c:36:17:87:71: 51:d6:71:bf:4f:95:5a:2e:34:ae:15:40:ab:e1:ce:2c:a0:44: 72:06:9b:52:2c:04:88:ec:d8:39:ac:23:b5:3a:5c:ef:68:43: 31:28:ef:50:de:42:ec:d7:66:be:ab:fb:13:65:ed:cf:f0:03: 32:c1:e3:4d:d7:64:be:12:6c:b2:c5:a7:76:0d:1d:2c:7a:2f: 42:2f:b6:3f:4b:0b:30:d6:d4:a1:bf:1d:9c:c5:c4:8d:6d:ca: c0:d0:07:18:9d:5c:62:0a:77:d2:dc:96:35:d6:7d:03:1e:f5: 42:63:04:4b:1e:04:2d:2a:e5:37:70:09:76:d2:6c:fc:0d:d7: ff:19:d4:24:d9:4a:e2:2d:1c:2a:91:bf:1f:f6:f7:78:2c:90: 20:13:4d:17:43:4f:3a:0a:6d:9a:88:a3:1e:96:28:62:74:6b: 7c:be:2e:f0:4a:90:e1:12:18:3f:e9:d9:fe:f7:97:5a:76:f5: 09:a9:ed:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDW7a5mtbY8/9Q7wgvomYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZDNhOTE0NTk3M2M3OWEzZTdiOTU1MzFlM2QwZGY3ZDI4 YzRhMDQwHhcNMjUxMjE4MjAwMTE2WhcNMjUxMjE5MjAwMTE2WjAzMTEwLwYDVQQD EygxZTE1YTFiYzljYjdiMTQ5Y2RkNjE1NjQwMGRlZDViM2EwYjA0YzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEvQg4PFuUGNOmM1rVvarFnpo4uY QQH/dGausuOy3v1FC6j6hQTFjKOPXQ8Ewi4QTf+t/METPYa3tfDVl3VKAulBVzXq cqgw0nxNvYizogm3l96TD0cz+gZFiKDB5LsabMhonltfVnAlID84119iAmPi3/Mf THcqNWb2Y/ZpOHnD87+QqvnA5jergwGuWJd2FY6ZSd/upoOr0EC148hGEbQ4qPOu VZVdKxPthiZRV1QuSE8ECwM3TaLVaVCpoTWIN7PZvnL9eb82a4gdtUgsIRgxmDo9 82PjhKwqB/MSK3bIUBg7STsI73Z9qOpa9vA8lWubwE+qex0mIOCjjCiFJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4Vobyct7FJzdYVZADe1bOgsEw6MB8GA1UdIwQY MBaAFInTqRRZc8eaPnuVUx49DffSjEoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUt N2Q0MGMxMWE5NTAwLzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUtN2Q0MGMxMWE5NTAw LzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADf7nLsQ9 WPTpidjU6zxu+Uo+2W09Jaxrec+TlM1mvJOdLqrdkT9bzNb3TqdV8pc/eoVjjf5/ 4TS87qeIUJQebEAzhVw2F4dxUdZxv0+VWi40rhVAq+HOLKBEcgabUiwEiOzYOawj tTpc72hDMSjvUN5C7Ndmvqv7E2Xtz/ADMsHjTddkvhJsssWndg0dLHovQi+2P0sL MNbUob8dnMXEjW3KwNAHGJ1cYgp30tyWNdZ9Ax71QmMESx4ELSrlN3AJdtJs/A3X /xnUJNlK4i0cKpG/H/b3eCyQIBNNF0NPOgptmoijHpYoYnRrfL4u8EqQ4RIYP+nZ /veXWnb1Cant/g== -----END CERTIFICATE-----Generated at Thu Dec 18 21:30:27 2025 by rpki-client