This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft File: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json) Hash identifier: AxV8LzgJwmpS3VH6HTBJp9P76kV2rI/SJEyBTQ9o80s= Subject key identifier: DF:1F:1D:29:C2:09:79:32:D2:50:62:05:8F:E9:AA:0F:C2:90:44:F4 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B3B3518DB0E94E5F2AF32F769362A86EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft Manifest number: 17CE Signing time: Sat 20 Dec 2025 10:01:34 +0000 Manifest this update: Sat 20 Dec 2025 10:01:34 +0000 Manifest next update: Sun 21 Dec 2025 10:01:34 +0000 Files and hashes: 1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: 9Hd/ok5Xjr/YKVvSah9YBUX2dXMzUswH8GbBNP36s/o=) 2: 1U6WyMqsZGid0T3NYQ9DAZ6gJQY.roa (hash: F8XNKrvuc9Q1Nu4SwuceqF3nF6Xwjfiv6CKLGF36N9o=) 3: AOzgmFptP-TTohv3IqoDSstHBco.roa (hash: E03eZxbf/EuXdLKDt7qVPONNosnX3JMcim9Rf3ahviw=) 4: ARYdkedt9hArm1X7hp83_Cg5tpQ.roa (hash: JuBJSBaOkvov17EXCYN32IfgGgf0k5Tgl6lj874nn5w=) 5: EnUCXK5toVH53tlZOLLeV6oPWBg.roa (hash: 5dFEexl7EsTZCh+F8XMO8WuHOD0gqtHWJ30CQfuEpV4=) 6: GkHiDHIr7HTOUId4AyJatL1OA68.roa (hash: ry2bBxXk4C9dBw82DZVtUnDVRsGRjPykl7o+jmf06RM=) 7: I5QYvq4IicclfQWoviXNqVkoJ1Y.roa (hash: 5MBWFEJVGuF7S46IjtmTYb6qp1cvuLGpPvqKkXBXql8=) 8: JD10CY-i84YcUMqJlGDowbidmN8.roa (hash: XMDhrcZoGK5i42ls2n+Jvun/2Ta8y4audrWdpm2Fv7o=) 9: KeM1ORJvG57zJzj1K2DwpMPSMZU.roa (hash: XHsHlY/bthSxdaTkdBh4Cmp1Xjdn7NaEjSx+3/K5zJQ=) 10: Kpu-woyfQvXBZfd1b22Idh3h33U.roa (hash: qJO2UPFNA1dZx3ehm0lE/hT5Zn8Q29+wMwWC8D8ulww=) 11: NDTb5wEV6mi4gNG-Fu6rF-wbgiA.roa (hash: NEy4PeHLS5dO/ZjNCa+Z5peBIXcrVaqt3QmALKubiB0=) 12: NjLk2e2zqXQskhSwEvgc6VrieSE.roa (hash: /tSrJbpm+cVRf2wVaaTrsH5ognA/ZAO3z9nKKazqJL4=) 13: Nv12FFJAhm76vmtQvLtk0-qb9uU.roa (hash: GWYX+UV7jTRToJvscvGnDmcfi+hdjE9fs/PSDIO/qXI=) 14: P6DmMh6gJbdEiU32OPNgOyp7mCY.roa (hash: 88yaz4q97O5d7cXTtRqRjBiGFSE36MGooJOUALTPCRA=) 15: PVvGYWt24uzVlwnsAFMPqAtNvZQ.roa (hash: jUjkhiHyuibAHI/mM+xTuAPWbIQGwY5NVpAGVowuUvU=) 16: PjMzQwKUrF-VvmoyR5v8Mv9UDo0.roa (hash: djWTkmrlBUFs68uxALTdJmeXHsgVGm4cPvwKlvS+poM=) 17: TFiXnA69SUIjZxShh655vlYs5os.roa (hash: iue8xNO+FBfmf0WBI+KQBXMK4ZDijvqm8QzG1kL5NP4=) 18: X_FL5W5PaBcXLOauRMxOwRuyYlc.roa (hash: kCKDT8tcDr1dP8XE79tCmIW9bJ4NTTFNxriENFz7kC0=) 19: Xdb2GonGqu9DkyPtW1xL_ewg_Bo.roa (hash: GVGr4S1zTr+dNdiuuONrJJ2q6Nn0ihVO0n5qN0zw/pQ=) 20: ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa (hash: Tk3A5shWtfiSwwuDcCc68dVXd7yvds9RfjT7MSIEjKQ=) 21: _Vf3TO7lMmdtkCjp92trzTwldE4.roa (hash: ThjCJsCygSwWOPGFIhdZvUVgS1n+5uy4UgbfkgRne8M=) 22: _YFT4hVNYyXh4lnoEwOwHf8FvbM.roa (hash: tlgEY6jYUU+UF0+FT6gUJlgYou8+Ams7PkVw5ofCpx4=) 23: b77IgHc-0C0Rr_dfvuGtS4avGl0.roa (hash: pUFCLnY0Uuj86mPeajrETTuvcuysKr2jMpqMVsvwa6w=) 24: cm0LnEhivdiG8YPAYwDpDqid4TY.roa (hash: vvmdzQrIc6DH27Jx2ppbWfOfWIe4OW78TOQB1QE//Zs=) 25: eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa (hash: qJu+C3kZMtw4Lzr4RPWfIIggz4SLZ1MdPm3V0ZSYkCA=) 26: grTxe7kxw6ZzaQqpTIbiKf1m4JM.roa (hash: i5OkfeqChX4b5A5gBGr0b6nOiJOg7XT/mMLOR9RIW50=) 27: hNrTf4PE5wrSnR7cUGP-FWLvavA.roa (hash: 419lgUmCiB5WepdJkvKnWC8TY9QzFCGf/bRs/Tt6fMo=) 28: ki55bfqHhRC77pU-EJ0EZN9IsgY.roa (hash: AccLPwD52wvMA4/Hsn0acDKYYBn7x4JHw/P1GwnYSwA=) 29: lAsvBALGAB7ffanhsI2XBbzGjwg.roa (hash: Lfmd3jAWkGrnZmmpvbr3VmK27pHIPidZbcCZnfMNIH8=) 30: lDebapMVKq7c3cdLNAzBSuTVL9I.roa (hash: JLLBlWGQZm0pTsOl8c3P+gghkK2T0TR/9bgigt6vPnw=) 31: skoFlpQBI8LF51NmTT39lnjZrMk.roa (hash: l+MFPkSAFr/Bu/aMzD3WDDtaslazJr/lXcJRueoJtKQ=) 32: u0rrjscEg5ouwkZEoUUv9ywqEJM.roa (hash: KAhmaRaJ9yCDkMpLHGC+00wVlDYCLhy/BJgRV7XQ8BQ=) 33: u3IeL1WtwZrppYb7gzyGvxoAWq4.roa (hash: u4/0Flhb+g2HVbYnU4CFZNSkHaVHi6ldxHLZ21W79Xw=) 34: vVo5jg2GQAZIqK4h2tPzZS3ji70.roa (hash: VyY0O3FHC/dgFA8HrUMfqDla8B1EBlXwEVoR6qUh5T0=) 35: xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa (hash: lnF7laQENq7wiyRjfsr7hJCvC1X60Wd/Bj27GtnwCQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:18:db:0e:94:e5:f2:af:32:f7:69:36:2a:86:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Dec 20 10:01:34 2025 GMT Not After : Dec 21 10:01:34 2025 GMT Subject: CN=df1f1d29c2097932d25062058fe9aa0fc29044f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:0d:7f:d9:b9:84:d2:11:ec:4f:c7:cd:76: b1:7c:7d:bc:d6:d1:37:3f:6c:88:83:8e:d3:38:25: 36:08:b6:6d:64:a1:03:18:6c:a6:1a:e3:79:f0:e7: e9:ed:d8:28:a8:d4:ef:92:a2:4a:65:6a:68:92:69: 3f:e6:85:22:e1:c0:2f:05:83:b0:98:b8:46:ec:0b: 57:76:c7:b8:79:e7:69:58:37:33:7f:5f:a4:bd:54: f7:a9:c2:9a:eb:66:cf:17:b8:8d:d9:79:f9:61:ef: f3:c4:b3:a5:bc:90:7f:60:44:c4:df:27:ec:31:d9: fa:db:b8:f6:e2:48:96:f0:65:d8:1c:75:0d:1d:3c: 08:02:2f:df:87:9c:da:e3:e5:b0:9a:c4:09:0e:29: fa:92:c0:a9:4f:e7:2e:f9:f2:7a:ae:6f:12:02:88: 77:96:b0:86:dd:fd:41:58:16:d6:9b:30:72:31:68: 27:f0:0c:c9:ec:98:16:24:52:fc:2c:e5:a6:97:09: b4:3d:c0:1a:15:1d:b5:86:ce:94:bc:b1:71:43:6c: 6f:bb:b8:e7:ba:18:be:f6:12:d0:ce:75:77:81:a2: 2b:24:61:6a:9d:29:4a:15:ac:15:34:3a:f9:a1:b4: 23:17:55:a5:a0:aa:66:1b:ce:ce:61:f7:b5:1c:21: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:1F:1D:29:C2:09:79:32:D2:50:62:05:8F:E9:AA:0F:C2:90:44:F4 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f7:38:6e:67:ad:8c:c8:bc:d7:e5:63:7a:66:d3:07:2a:b0: 9d:45:15:0a:26:62:54:89:b0:29:c9:d8:12:18:a6:b9:33:87: ce:56:8a:df:e6:6e:49:4a:7a:c4:c7:fb:d5:ce:2d:e9:9b:7b: ae:70:f8:25:c5:64:56:f9:bf:8e:33:f7:0b:49:af:f9:5c:c6: 3c:98:e7:51:c4:f8:3d:c3:14:d2:c6:74:61:b5:b2:6e:24:21: d7:94:c3:75:8e:d3:ee:cc:96:92:44:e0:c3:c6:49:35:34:65: a3:f4:a3:a7:22:13:50:ff:32:6e:a7:3c:6d:14:1e:5b:18:ce: e8:2f:0a:c1:77:f6:29:b3:82:ec:7f:1d:e9:59:b4:8e:68:a3: 33:ed:bd:87:e0:cd:68:c0:e1:bf:06:a4:5c:2c:85:e2:07:f3: 62:d6:8e:e9:ac:66:60:39:51:95:ed:32:ff:94:48:45:43:19: d9:da:80:51:af:f5:4b:ed:de:fe:de:69:8f:41:71:04:e5:b8: 2a:4b:c4:69:59:3f:ef:74:7a:da:e2:18:2c:53:f5:65:2c:30: c0:32:00:e7:21:60:ed:24:b5:f1:70:93:d6:37:56:57:0f:52: b6:0b:ec:cc:7f:85:14:a4:65:f8:42:97:f1:7d:36:44:4d:b1: db:28:5c:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NRjbDpTl8q8y92k2KobuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjUxMjIwMTAwMTM0WhcNMjUxMjIxMTAwMTM0WjAzMTEwLwYDVQQD EyhkZjFmMWQyOWMyMDk3OTMyZDI1MDYyMDU4ZmU5YWEwZmMyOTA0NGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9MNf9m5hNIR7E/HzXaxfH281tE3 P2yIg47TOCU2CLZtZKEDGGymGuN58Ofp7dgoqNTvkqJKZWpokmk/5oUi4cAvBYOw mLhG7AtXdse4eedpWDczf1+kvVT3qcKa62bPF7iN2Xn5Ye/zxLOlvJB/YETE3yfs Mdn627j24kiW8GXYHHUNHTwIAi/fh5za4+WwmsQJDin6ksCpT+cu+fJ6rm8SAoh3 lrCG3f1BWBbWmzByMWgn8AzJ7JgWJFL8LOWmlwm0PcAaFR21hs6UvLFxQ2xvu7jn uhi+9hLQznV3gaIrJGFqnSlKFawVNDr5obQjF1WloKpmG87OYfe1HCFEDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8fHSnCCXky0lBiBY/pqg/CkET0MB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/c4bmet jMi81+VjembTByqwnUUVCiZiVImwKcnYEhimuTOHzlaK3+ZuSUp6xMf71c4t6Zt7 rnD4JcVkVvm/jjP3C0mv+VzGPJjnUcT4PcMU0sZ0YbWybiQh15TDdY7T7syWkkTg w8ZJNTRlo/SjpyITUP8ybqc8bRQeWxjO6C8KwXf2KbOC7H8d6Vm0jmijM+29h+DN aMDhvwakXCyF4gfzYtaO6axmYDlRle0y/5RIRUMZ2dqAUa/1S+3e/t5pj0FxBOW4 KkvEaVk/73R62uIYLFP1ZSwwwDIA5yFg7SS18XCT1jdWVw9StgvszH+FFKRl+EKX 8X02RE2x2yhcYA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:43:22 2025 by rpki-client