This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json) Hash identifier: atUJrTyDnSmHSENRhLEAkJvVK309QVOgygg8gwvKwlI= Subject key identifier: EE:96:FF:B5:66:64:4E:82:BB:09:D8:AC:84:1C:25:75:C8:11:5C:4E Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6 Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6 Certificate serial: 019B427FF0C8520D6BB81076BF9D409088FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft Manifest number: 145A Signing time: Sun 21 Dec 2025 20:00:39 +0000 Manifest this update: Sun 21 Dec 2025 20:00:39 +0000 Manifest next update: Mon 22 Dec 2025 20:00:39 +0000 Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=) 2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: /QjEQMfmZ6RlXUk6MZI7aUcDzckcyY7fT9gobG0Hies=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:f0:c8:52:0d:6b:b8:10:76:bf:9d:40:90:88:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6 Validity Not Before: Dec 21 20:00:39 2025 GMT Not After : Dec 22 20:00:39 2025 GMT Subject: CN=ee96ffb566644e82bb09d8ac841c2575c8115c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:03:ba:d8:b6:36:af:02:10:1f:58:81:63: a1:b9:c7:b8:90:2c:7b:02:96:af:20:05:cf:68:b3: 5d:82:01:f0:b1:da:63:9f:ab:9b:05:a6:03:74:dd: 3d:c8:51:37:11:78:94:a6:06:06:8d:ac:81:51:41: bd:ca:6d:b0:53:81:ab:e3:d3:ee:eb:d4:5a:c2:fc: 57:c5:f8:75:e7:f3:d6:65:e1:7d:85:f5:96:5e:32: 81:20:aa:96:de:63:88:1b:13:5a:47:56:c4:08:4b: dd:87:03:02:e8:3c:10:1e:85:83:4b:ff:c1:c0:5e: ef:62:17:ce:4f:03:e1:8b:ac:16:3e:cf:3c:da:5d: 63:8e:3c:b9:9b:e3:ff:27:aa:62:b8:95:2a:47:a8: 35:02:cf:06:a5:f6:bb:8e:a6:68:2b:2d:de:e4:14: ad:f2:ee:45:7a:ac:10:a2:1f:d8:b3:f9:7e:de:49: af:2d:d1:7a:f6:ec:89:6b:70:bc:da:ac:17:52:70: 77:3f:7b:d1:55:0d:5d:ea:b2:69:5e:69:cb:7f:f5: c3:51:0e:c7:f5:59:ce:ba:6d:58:93:b9:5f:fe:86: 65:34:3e:57:c8:08:50:e7:97:d8:4f:a8:0e:1c:6f: 36:9f:2a:2f:8a:c1:9c:df:97:2d:a4:a5:ca:52:aa: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:96:FF:B5:66:64:4E:82:BB:09:D8:AC:84:1C:25:75:C8:11:5C:4E X509v3 Authority Key Identifier: keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f6:08:d7:ae:f5:cc:4a:8f:e4:be:3a:fc:82:8f:51:21:c5: db:63:80:8e:80:bd:42:8d:e8:b5:16:31:53:cc:27:b3:65:e0: 3a:dd:df:f8:4f:0a:17:04:5a:e0:dd:b7:95:96:78:f5:7b:37: 55:71:a3:ad:10:6e:f4:f7:cf:f7:b4:65:f5:56:d6:8f:f6:3e: fb:0d:e1:57:05:66:c7:82:02:a9:a7:51:22:bb:82:3d:72:09: 84:15:fd:b3:91:47:e5:ef:1a:e6:60:d5:b7:cb:63:74:e7:dd: 03:c6:15:b1:5f:ad:13:83:9e:40:82:aa:ee:31:0a:c2:31:07: 38:b2:7c:55:d0:96:6c:73:95:f9:74:b5:08:79:f5:e8:66:c2: f8:1e:fd:31:11:05:e2:6f:ec:a7:99:36:8e:3d:19:bc:37:7b: 9b:79:d1:77:ff:10:df:10:ea:bc:f7:f0:e1:fe:2a:ad:5e:c0: 0f:ae:aa:0a:20:cf:ee:ba:e0:e0:c1:de:8e:f3:c6:87:10:1b: e0:73:72:5f:ea:ba:f4:86:14:a0:44:de:b0:76:e5:27:01:bd: 83:7d:f1:74:0e:18:a4:a5:71:6f:48:dd:5e:4c:f7:57:7c:48: 01:16:b4:be:db:9a:ac:ad:42:00:db:8d:9c:0c:d1:1a:8b:64: b4:af:51:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf/DIUg1ruBB2v51AkIj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NWVmZDZjNDc3ODA2YmQ2YjQ1MjY3NTU4ZDY4MjhmZWVj NjFlYTYwHhcNMjUxMjIxMjAwMDM5WhcNMjUxMjIyMjAwMDM5WjAzMTEwLwYDVQQD EyhlZTk2ZmZiNTY2NjQ0ZTgyYmIwOWQ4YWM4NDFjMjU3NWM4MTE1YzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiMDuti2Nq8CEB9YgWOhuce4kCx7 ApavIAXPaLNdggHwsdpjn6ubBaYDdN09yFE3EXiUpgYGjayBUUG9ym2wU4Gr49Pu 69RawvxXxfh15/PWZeF9hfWWXjKBIKqW3mOIGxNaR1bECEvdhwMC6DwQHoWDS//B wF7vYhfOTwPhi6wWPs882l1jjjy5m+P/J6piuJUqR6g1As8Gpfa7jqZoKy3e5BSt 8u5FeqwQoh/Ys/l+3kmvLdF69uyJa3C82qwXUnB3P3vRVQ1d6rJpXmnLf/XDUQ7H 9VnOum1Yk7lf/oZlND5XyAhQ55fYT6gOHG82nyovisGc35ctpKXKUqp18wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6W/7VmZE6CuwnYrIQcJXXIEVxOMB8GA1UdIwQY MBaAFJRe/WxHeAa9a0UmdVjWgo/uxh6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMjhmYWItNGViYy00ZTFmLTg0MGUt YmM0MjQzNDlhMTZlLzEvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zMjhmYWItNGViYy00ZTFmLTg0MGUtYmM0MjQzNDlhMTZl LzEvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvYI1671 zEqP5L46/IKPUSHF22OAjoC9Qo3otRYxU8wns2XgOt3f+E8KFwRa4N23lZZ49Xs3 VXGjrRBu9PfP97Rl9VbWj/Y++w3hVwVmx4ICqadRIruCPXIJhBX9s5FH5e8a5mDV t8tjdOfdA8YVsV+tE4OeQIKq7jEKwjEHOLJ8VdCWbHOV+XS1CHn16GbC+B79MREF 4m/sp5k2jj0ZvDd7m3nRd/8Q3xDqvPfw4f4qrV7AD66qCiDP7rrg4MHejvPGhxAb 4HNyX+q69IYUoETesHblJwG9g33xdA4YpKVxb0jdXkz3V3xIARa0vtuarK1CANuN nAzRGotktK9Rgg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:14 2025 by rpki-client