This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft File: 61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft (raw, json) Hash identifier: RNAwKw+9qZSp8kGVyY1wAJ2cgFdu8zuP3RGuJl/6+B4= Subject key identifier: 3F:DB:80:FC:8B:D5:57:24:70:EB:EA:8A:D2:F6:4A:3B:E9:AD:4D:78 Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2 Certificate serial: 019B3FECD8362B1A79097628D9973F41824E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft Manifest number: 1677 Signing time: Sun 21 Dec 2025 08:00:44 +0000 Manifest this update: Sun 21 Dec 2025 08:00:44 +0000 Manifest next update: Mon 22 Dec 2025 08:00:44 +0000 Files and hashes: 1: 1-2EBppiSOjktT4c8541NHUWIXp4.roa (hash: mDi6ulbEvLogL54BCm4x5j5s52n2zOwohZJdy8LLDgM=) 2: 1-HseKewNAhORGPeG0jLZJxBWBmA.roa (hash: Gx06jT5zWYtxqZ2ePMD9C4nr+agXJCFs/O2+a8Lk6RQ=) 3: 61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl (hash: W+GCY3lZ4CBQJDrfxCI9aF0ETainvSfwDGIl2s3/+Pw=) 4: 99j68jcIcmMIEjblV6YGZG7Xz-A.roa (hash: 6pGtaoOAdQOjWl1uvPVsb4nf1cwSsH0trxw0JSPAMyQ=) 5: eyY-erluNs3v5144XEgHxCFOudE.roa (hash: TBmAqLL8PbuQkrNWT7JMgvjhkU1ufdS4TOsNk7ShJ90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:d8:36:2b:1a:79:09:76:28:d9:97:3f:41:82:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2 Validity Not Before: Dec 21 08:00:44 2025 GMT Not After : Dec 22 08:00:44 2025 GMT Subject: CN=3fdb80fc8bd5572470ebea8ad2f64a3be9ad4d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:21:82:dc:b3:66:82:b7:1a:e0:8f:a1:ae: ea:f2:90:67:2e:f9:42:3b:25:36:33:b5:1c:0a:51: 7e:ff:b7:67:85:66:7a:a9:77:6a:01:71:de:a6:6f: 55:ba:12:77:7e:3c:23:8a:a9:bb:b7:48:73:70:74: e0:d5:e3:0a:dc:fc:59:bb:97:e2:fc:d0:e5:f3:6b: c7:2e:da:28:c8:44:66:70:14:36:45:3c:8b:93:ca: 02:3e:95:5f:af:8a:78:f7:fb:49:de:8f:75:76:76: 1d:6e:13:1e:ae:41:4e:54:01:c4:b9:f0:48:b4:98: b7:cf:d4:bd:68:90:41:fe:0c:e0:0c:49:fe:3c:02: a0:4f:a4:0a:2e:3c:e0:c9:05:2c:c6:53:ed:85:62: 0f:d6:ea:06:e6:0d:ef:5d:0a:a5:1a:03:87:39:56: 4b:b9:85:e0:a3:57:a5:b7:4e:7b:4a:56:43:82:ea: 4b:f0:82:fe:32:08:eb:9c:60:98:ef:ea:df:9b:b3: 34:a6:92:b9:e4:22:c4:e1:6d:86:e5:c4:d3:ae:33: df:74:fc:1c:42:3c:87:64:87:c3:9a:44:88:0a:55: 25:53:c1:e1:cc:fd:a2:fa:6b:4b:65:42:46:1b:2b: 48:10:a3:f4:3d:0a:93:02:9a:bb:0c:44:cb:08:fa: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DB:80:FC:8B:D5:57:24:70:EB:EA:8A:D2:F6:4A:3B:E9:AD:4D:78 X509v3 Authority Key Identifier: keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:63:fc:51:e1:9d:ae:32:2e:a4:f6:35:b3:9e:29:11:8d:29: 28:cf:82:08:57:4a:ac:83:d8:dd:55:57:0f:46:a6:8e:cc:84: 88:06:f6:83:1e:1f:36:30:e7:58:93:bb:85:e9:03:85:dc:09: 4d:ea:ed:07:45:5a:1d:4f:22:4d:c0:e3:8d:2a:5e:91:ea:77: 98:23:74:cd:2a:d7:e4:c1:4c:2d:28:25:9a:53:df:e1:83:13: 02:8e:3d:1a:e6:ad:3d:30:ed:7f:5a:f9:1f:7e:ae:e4:95:44: 56:0f:c4:e5:8b:87:a7:7d:3d:1d:ef:66:b9:5c:0e:c7:e1:3a: 90:de:4d:62:eb:46:f3:68:e0:b8:24:84:27:c0:d4:80:f5:c0: 53:61:ca:73:e8:3b:8c:9f:1a:59:fa:d5:1b:e4:80:05:7b:f2: 98:aa:60:79:0f:a1:24:c8:58:3d:26:b9:b4:b6:35:05:e8:12: 08:f3:71:c0:ef:eb:b2:8a:ab:40:f8:3c:bb:f2:56:6f:85:d6: dc:25:bf:3a:7c:38:e8:e7:06:b4:5f:71:75:eb:f8:f9:56:ea: 5b:78:fe:76:e8:ee:9b:3c:30:f4:fd:00:f2:90:7e:cd:ea:be: 56:cd:5c:fe:06:39:d6:2a:44:e2:4e:79:74:5a:d7:87:69:76: 4e:f3:fb:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Ng2Kxp5CXYo2Zc/QYJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTBkMzA4NGJmOGFhOWVhNzc3ZDI0NWI2MGQ1MTFiZTE4 OWVhYjIwHhcNMjUxMjIxMDgwMDQ0WhcNMjUxMjIyMDgwMDQ0WjAzMTEwLwYDVQQD EygzZmRiODBmYzhiZDU1NzI0NzBlYmVhOGFkMmY2NGEzYmU5YWQ0ZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS8hgtyzZoK3GuCPoa7q8pBnLvlC OyU2M7UcClF+/7dnhWZ6qXdqAXHepm9VuhJ3fjwjiqm7t0hzcHTg1eMK3PxZu5fi /NDl82vHLtooyERmcBQ2RTyLk8oCPpVfr4p49/tJ3o91dnYdbhMerkFOVAHEufBI tJi3z9S9aJBB/gzgDEn+PAKgT6QKLjzgyQUsxlPthWIP1uoG5g3vXQqlGgOHOVZL uYXgo1elt057SlZDgupL8IL+MgjrnGCY7+rfm7M0ppK55CLE4W2G5cTTrjPfdPwc QjyHZIfDmkSIClUlU8HhzP2i+mtLZUJGGytIEKP0PQqTApq7DETLCPpW4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/bgPyL1VckcOvqitL2SjvprU14MB8GA1UdIwQY MBaAFOtQ0whL+Kqep3fSRbYNURvhieqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMt YWMwYzYwMTAwNDc4LzEvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xMmU3MmMtNzQ5MS00N2UyLWFjNTMtYWMwYzYwMTAwNDc4 LzEvNjFEVENFdjRxcDZuZDlKRnRnMVJHLUdKNnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWP8UeGd rjIupPY1s54pEY0pKM+CCFdKrIPY3VVXD0amjsyEiAb2gx4fNjDnWJO7hekDhdwJ TertB0VaHU8iTcDjjSpekep3mCN0zSrX5MFMLSglmlPf4YMTAo49GuatPTDtf1r5 H36u5JVEVg/E5YuHp309He9muVwOx+E6kN5NYutG82jguCSEJ8DUgPXAU2HKc+g7 jJ8aWfrVG+SABXvymKpgeQ+hJMhYPSa5tLY1BegSCPNxwO/rsoqrQPg8u/JWb4XW 3CW/Onw46OcGtF9xdev4+VbqW3j+dujumzww9P0A8pB+zeq+Vs1c/gY51ipE4k55 dFrXh2l2TvP7DA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:08:36 2025 by rpki-client