This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json) Hash identifier: jcDn1GhvtkesRhhuED2vGT17QjX/hBoJS5FoO7HExIo= Subject key identifier: 2D:8C:D5:74:E6:DE:2B:8B:9C:81:2E:DC:2D:4C:B9:B6:9C:BD:62:22 Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Certificate serial: 019AFB0BA8C67AACEDC5F9D0A329956C4449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft Manifest number: 1779 Signing time: Sun 07 Dec 2025 23:00:36 +0000 Manifest this update: Sun 07 Dec 2025 23:00:36 +0000 Manifest next update: Mon 08 Dec 2025 23:00:36 +0000 Files and hashes: 1: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (hash: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=) 2: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=) 3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=) 4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: L8wOEbUR4iBetdq3GFRF3ID7uyDBkrZMJGMNAMOWtBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:0b:a8:c6:7a:ac:ed:c5:f9:d0:a3:29:95:6c:44:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Validity Not Before: Dec 7 23:00:36 2025 GMT Not After : Dec 8 23:00:36 2025 GMT Subject: CN=2d8cd574e6de2b8b9c812edc2d4cb9b69cbd6222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:7e:ae:66:07:ff:57:96:7a:d4:98:0e:58: e1:51:22:4a:a0:f6:fc:f1:66:1d:d5:cb:ca:15:97: 96:76:e1:3f:2d:8a:b4:d7:91:30:f0:7b:3a:80:c7: 86:f5:76:46:0c:b9:20:00:49:98:b8:ce:69:ca:f6: 76:5e:94:e3:2b:44:60:81:9f:c7:8c:f7:6f:3c:6e: de:8a:d1:2f:6d:1d:3d:86:24:a0:f1:cc:a7:35:74: 1b:ef:e8:71:b9:08:47:22:44:f9:e4:51:ed:3f:6a: ba:d1:24:13:01:24:cd:06:fe:93:3f:56:1e:6a:9a: bd:b4:82:cd:e6:d9:be:60:1a:46:e1:1c:a7:6b:95: 43:4e:d5:6d:e7:5a:27:72:af:6e:f8:4c:f2:7e:c9: aa:92:8e:a8:d6:9a:a9:00:94:97:f7:42:dc:82:b3: 3b:4f:54:7b:23:c4:6d:94:70:dd:e1:09:a0:f3:5a: 0b:4c:d2:6b:6a:0d:fa:60:d8:35:57:a5:ce:01:58: 10:8d:13:e0:ab:fc:cd:43:9c:b9:d2:e3:74:61:da: c1:06:ea:fd:b5:9d:44:de:f3:8e:38:2c:01:ae:6b: a4:3e:cd:f4:26:ed:d9:79:33:02:c7:af:c6:98:ea: 4e:ec:89:a9:ab:32:d7:3f:da:91:d4:6e:11:61:20: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8C:D5:74:E6:DE:2B:8B:9C:81:2E:DC:2D:4C:B9:B6:9C:BD:62:22 X509v3 Authority Key Identifier: keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:65:87:31:8b:9a:fb:ea:9b:89:3a:9f:45:17:14:fd:7f:03: a1:e4:82:29:a6:7b:a6:04:0d:30:da:19:43:ce:67:40:9c:3f: 4e:11:ea:31:3b:45:11:bc:a4:2b:78:b9:ed:64:5c:67:e6:67: 1b:18:2a:0c:5c:03:2c:f4:8e:dd:78:8a:22:b2:c0:a8:1d:6c: 21:6b:b2:34:85:9b:56:d2:96:59:3c:31:5d:f3:88:43:81:a4: 66:6a:a5:fb:2f:8f:3b:b5:5d:43:cd:1a:8d:8d:9e:fe:83:65: d5:c0:17:0b:2c:06:aa:77:1b:fa:4b:e5:d9:64:a5:00:31:0b: 52:b5:28:9e:eb:75:c5:26:f0:f4:30:0f:b5:b5:4e:e1:6f:7f: e3:35:e9:6f:a8:61:5d:0c:06:ee:44:9b:87:98:b7:75:12:30: 5c:f2:4a:c4:cd:fa:d1:91:ae:dd:3d:3e:9b:c4:b3:c1:b9:af: d2:2d:e3:79:c0:6d:ce:37:b0:b8:d8:3a:46:90:cd:cc:d1:53: 5f:9f:1c:5e:ee:94:38:c1:02:ac:74:fb:bf:34:53:20:71:56: fc:66:ac:8d:3a:4d:47:74:a7:53:4f:ca:46:8b:b0:ae:96:68: e7:89:4e:31:eb:8e:02:ed:6a:48:a1:48:fa:ec:e5:34:79:61: 22:1b:2b:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7C6jGeqztxfnQoymVbERJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz NThlMjMwHhcNMjUxMjA3MjMwMDM2WhcNMjUxMjA4MjMwMDM2WjAzMTEwLwYDVQQD EygyZDhjZDU3NGU2ZGUyYjhiOWM4MTJlZGMyZDRjYjliNjljYmQ2MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ9+rmYH/1eWetSYDljhUSJKoPb8 8WYd1cvKFZeWduE/LYq015Ew8Hs6gMeG9XZGDLkgAEmYuM5pyvZ2XpTjK0RggZ/H jPdvPG7eitEvbR09hiSg8cynNXQb7+hxuQhHIkT55FHtP2q60SQTASTNBv6TP1Ye apq9tILN5tm+YBpG4Ryna5VDTtVt51oncq9u+Ezyfsmqko6o1pqpAJSX90LcgrM7 T1R7I8RtlHDd4Qmg81oLTNJrag36YNg1V6XOAVgQjRPgq/zNQ5y50uN0YdrBBur9 tZ1E3vOOOCwBrmukPs30Ju3ZeTMCx6/GmOpO7ImpqzLXP9qR1G4RYSADSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2M1XTm3iuLnIEu3C1MubacvWIiMB8GA1UdIwQY MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt NzdjMTA0ODQyMmQ4LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4 LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWWHMYua ++qbiTqfRRcU/X8DoeSCKaZ7pgQNMNoZQ85nQJw/ThHqMTtFEbykK3i57WRcZ+Zn GxgqDFwDLPSO3XiKIrLAqB1sIWuyNIWbVtKWWTwxXfOIQ4GkZmql+y+PO7VdQ80a jY2e/oNl1cAXCywGqncb+kvl2WSlADELUrUonut1xSbw9DAPtbVO4W9/4zXpb6hh XQwG7kSbh5i3dRIwXPJKxM360ZGu3T0+m8Szwbmv0i3jecBtzjewuNg6RpDNzNFT X58cXu6UOMECrHT7vzRTIHFW/GasjTpNR3SnU0/KRouwrpZo54lOMeuOAu1qSKFI +uzlNHlhIhsrug== -----END CERTIFICATE-----Generated at Mon Dec 8 01:19:19 2025 by rpki-client