This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json) Hash identifier: bLYiqL5xdfeMqWILB87UxFTtA/E9OcQrIztKrcxQMF4= Subject key identifier: D9:1A:F7:4B:48:E0:33:70:6C:49:C8:A6:99:0C:55:51:3E:58:27:8C Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Certificate serial: 019AF389D236C23CEAACFFC2D2AFB4A85A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 12:01:26 +0000 Manifest this update: Sat 06 Dec 2025 12:01:26 +0000 Manifest next update: Sun 07 Dec 2025 12:01:26 +0000 Files and hashes: 1: 6QBVEiLusjnuHnwecVMK9Kg-WII.roa (hash: OapSvDTUmzDRZu9Q3KlIrLgI0CjCfgxrem8xot5UiSo=) 2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: gzIEVrhUD+311/7Zw4vEeCAHmZ49vYTB63kBlqtkyZI=) 3: GiC40GdnPgHbIqIbDNeP-spJi-M.roa (hash: Xd4LHWf6P2V0nuixtM1f8JXOI9EnPVM3k32pXeFOXiw=) 4: JeT3PicL3j6wpeXRT3s8FrJpy3w.roa (hash: tjXOPJYxlFtc8BfVkznJC0Nu37PcV0Dt33rxJApZ9kY=) 5: L5lOWtMXwmLYho3Arxcpd76R5sw.roa (hash: XM0Za1PmkukhwAWipMkx42usukTFibdWlbabSAWWgH4=) 6: Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa (hash: pZ1a8TMxYqDEEa657nYARi2g7u3tXGj01SXvh3eUl1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d2:36:c2:3c:ea:ac:ff:c2:d2:af:b4:a8:5a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Validity Not Before: Dec 6 12:01:26 2025 GMT Not After : Dec 7 12:01:26 2025 GMT Subject: CN=d91af74b48e033706c49c8a6990c55513e58278c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:fb:3c:07:f7:5c:09:ed:98:ca:38:36:93: 24:0a:38:6f:88:4d:32:cd:b9:10:8e:83:df:d6:9f: a7:54:52:02:59:b9:1b:f1:2e:fb:24:bb:8a:20:12: 57:5a:69:d6:f7:a1:d9:ab:5c:52:c5:77:b9:db:90: 34:54:79:0b:15:fa:cc:79:a9:7d:0d:51:0a:d0:3e: 30:41:e3:cc:40:a3:71:b9:83:e1:bb:9a:aa:06:60: 53:fc:f3:03:5e:66:9b:0b:59:4b:a8:10:35:90:1f: 86:a9:58:c8:c7:ba:8b:6c:51:d5:81:6c:4b:6a:2c: 14:5d:ae:8f:d8:2b:13:dd:c8:f0:b1:e5:9c:29:97: a9:5e:8c:7c:8f:c1:74:cc:d3:61:96:08:f0:47:aa: 5e:54:f3:3e:64:57:55:1e:ef:ba:ac:cc:d0:ce:81: d5:42:f1:dc:2e:57:06:f6:9b:81:40:6a:13:d7:b5: f2:5f:64:62:ea:c4:12:50:d3:96:ef:07:a9:98:ef: 9a:e9:99:d3:1a:7c:aa:14:a5:8a:2d:77:eb:94:99: 26:0d:27:4a:18:ab:34:68:7a:bb:93:9d:93:fa:99: a5:47:26:0a:d4:8c:e4:3b:45:e1:3f:d6:fe:91:6b: da:62:91:05:ad:79:c3:3c:f3:c2:02:3c:c3:57:ce: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:F7:4B:48:E0:33:70:6C:49:C8:A6:99:0C:55:51:3E:58:27:8C X509v3 Authority Key Identifier: keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:da:b0:c2:d7:b1:4e:64:96:df:cb:07:8f:38:66:52:a4:a7: 76:93:41:b7:57:20:f6:eb:5f:c2:46:a6:2d:a3:6b:fa:d5:96: fd:21:73:9d:7c:1c:f1:49:89:f2:29:a7:e6:71:5b:c4:f5:8f: af:ca:9e:11:a4:c7:3c:38:c0:4b:d1:28:03:29:c5:b5:96:90: 28:41:d3:fd:cb:a6:42:e3:0a:b3:06:90:0f:3c:24:a9:fe:19: b2:dd:16:1d:5e:10:3b:51:2f:f3:eb:7f:54:29:00:34:48:dc: 4a:61:a0:19:68:47:d7:0e:89:f0:b4:cc:2a:63:05:ab:16:25: d0:3c:cf:79:9b:0f:74:32:8f:c9:d7:8d:09:71:80:5e:45:c6: 9f:25:82:eb:aa:73:f9:12:df:8b:66:aa:bc:e7:d7:06:64:14: 86:7e:2f:0c:55:b5:96:eb:51:3b:b6:c6:78:56:89:22:ac:44: fe:61:3a:25:48:d3:0d:bf:98:89:ca:e3:2d:e0:3e:55:9a:40: 08:48:cd:36:e5:3a:b3:66:ef:17:4b:2c:93:3c:c5:22:fd:f8: e9:66:e0:2b:23:e3:b7:ed:15:08:76:59:86:7a:ce:8a:04:d3: e3:a4:4f:df:84:a9:5b:e2:fd:43:c8:83:3f:70:58:d0:70:b0: ad:12:bf:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidI2wjzqrP/C0q+0qFp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2 Y2QxYTMwHhcNMjUxMjA2MTIwMTI2WhcNMjUxMjA3MTIwMTI2WjAzMTEwLwYDVQQD EyhkOTFhZjc0YjQ4ZTAzMzcwNmM0OWM4YTY5OTBjNTU1MTNlNTgyNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2In7PAf3XAntmMo4NpMkCjhviE0y zbkQjoPf1p+nVFICWbkb8S77JLuKIBJXWmnW96HZq1xSxXe525A0VHkLFfrMeal9 DVEK0D4wQePMQKNxuYPhu5qqBmBT/PMDXmabC1lLqBA1kB+GqVjIx7qLbFHVgWxL aiwUXa6P2CsT3cjwseWcKZepXox8j8F0zNNhlgjwR6peVPM+ZFdVHu+6rMzQzoHV QvHcLlcG9puBQGoT17XyX2Ri6sQSUNOW7wepmO+a6ZnTGnyqFKWKLXfrlJkmDSdK GKs0aHq7k52T+pmlRyYK1IzkO0XhP9b+kWvaYpEFrXnDPPPCAjzDV854PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNka90tI4DNwbEnIppkMVVE+WCeMMB8GA1UdIwQY MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt MmVjZGExMWRlMTUzLzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItqwwtex TmSW38sHjzhmUqSndpNBt1cg9utfwkamLaNr+tWW/SFznXwc8UmJ8imn5nFbxPWP r8qeEaTHPDjAS9EoAynFtZaQKEHT/cumQuMKswaQDzwkqf4Zst0WHV4QO1Ev8+t/ VCkANEjcSmGgGWhH1w6J8LTMKmMFqxYl0DzPeZsPdDKPydeNCXGAXkXGnyWC66pz +RLfi2aqvOfXBmQUhn4vDFW1lutRO7bGeFaJIqxE/mE6JUjTDb+YicrjLeA+VZpA CEjNNuU6s2bvF0sskzzFIv346WbgKyPjt+0VCHZZhnrOigTT46RP34SpW+L9Q8iD P3BY0HCwrRK/hw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:58 2025 by rpki-client