This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json) Hash identifier: U5bkoDdfvuht90Ad2X8xqwN2YqAE3OxYE8QJ0NSulU8= Subject key identifier: B7:FF:E8:36:8C:C2:9E:11:6D:14:A9:21:BF:4F:E6:49:09:CB:CB:EF Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c Certificate serial: 019B4626B240AEFA63C9571F39BBF2C56619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft Manifest number: 051E Signing time: Mon 22 Dec 2025 13:01:39 +0000 Manifest this update: Mon 22 Dec 2025 13:01:39 +0000 Manifest next update: Tue 23 Dec 2025 13:01:39 +0000 Files and hashes: 1: RyuUu8aSOA4RRrkxjhCMyWt8M-4.roa (hash: N00rEgshheQJFJlnzMgkGFoydAhTWl79InbpFappf/8=) 2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: 8dHNHPNh5YU1jp1INA5LzHJrs+4l6ZLuXhdhNvgxCTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:b2:40:ae:fa:63:c9:57:1f:39:bb:f2:c5:66:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c Validity Not Before: Dec 22 13:01:39 2025 GMT Not After : Dec 23 13:01:39 2025 GMT Subject: CN=b7ffe8368cc29e116d14a921bf4fe64909cbcbef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:8d:fb:bd:89:bf:d4:5e:7a:8a:7f:eb:68: ba:c0:e5:8f:f7:fb:36:6c:c7:3f:8b:de:be:b3:fa: 92:8d:32:04:88:8f:92:89:c6:08:7c:33:7f:fb:5b: d1:dd:99:bc:e6:34:46:34:94:32:05:3f:24:fe:5c: 94:ad:06:94:77:65:c2:70:2c:5c:02:dd:06:65:26: c1:32:12:6c:5f:17:14:61:a3:b0:26:e4:d2:23:71: 24:9a:9e:2e:f0:80:90:08:d7:26:59:12:07:29:3e: 15:df:98:76:9e:9b:ff:9c:45:8b:71:cc:e7:24:48: d3:3d:96:00:de:1b:58:37:cf:7d:7d:b1:1a:dd:73: 3f:67:e6:55:4d:06:9f:6b:31:ef:32:2b:aa:6a:29: eb:ce:82:b8:6a:96:15:55:dc:9e:b4:ac:61:7b:7e: 17:d1:c1:41:30:dc:36:05:b5:ef:4a:91:d1:cd:7b: 1e:ad:67:eb:8d:ef:b7:48:18:ed:c1:99:8f:4d:32: 78:9c:56:75:74:3b:ee:2f:63:7d:37:2a:9d:bf:93: 80:1b:f9:c4:36:84:fa:6e:ae:da:29:40:48:77:8f: 57:66:48:70:d4:2c:b0:26:91:90:92:76:fc:49:38: b1:02:f1:3d:f4:b1:42:6b:ee:fa:51:a0:0f:0c:8e: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:E8:36:8C:C2:9E:11:6D:14:A9:21:BF:4F:E6:49:09:CB:CB:EF X509v3 Authority Key Identifier: keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:6a:1d:54:55:e9:c0:45:3b:2a:54:2a:da:06:d3:69:33:77: 45:d5:06:65:67:ac:61:1b:e7:7f:b4:b8:4c:7f:71:23:19:f2: a8:aa:5f:31:fc:cf:59:c1:2d:47:19:d2:8d:1c:c8:e2:d2:c6: fe:64:b7:74:12:02:41:ae:48:39:24:bc:9d:bd:d0:fd:25:e0: c0:ff:ca:8f:85:f8:de:5a:ce:c3:48:84:0f:dc:e5:df:61:b3: 7a:be:6f:84:37:b2:16:6f:e5:1f:54:12:94:6c:3d:8b:70:23: be:5e:74:6e:76:cd:58:d5:2b:3b:ee:7c:60:31:50:0c:65:39: b7:1b:5e:fa:da:65:32:7d:45:ed:2c:7e:5c:8b:f1:95:81:8d: 36:4e:97:3b:f2:fb:f1:06:c2:dc:d8:b5:e2:23:e8:7b:b7:13: 48:af:3b:d8:08:15:4c:70:36:16:01:00:14:33:cb:68:c0:79: 8a:90:b7:23:ac:4f:76:5d:31:fc:67:15:7e:a2:26:b9:0e:89: ae:2c:7b:ea:56:11:d4:2d:13:5d:d4:2a:25:20:cd:0a:01:6d: d7:06:fd:24:2a:86:85:a6:18:2a:bf:56:4f:fc:ef:28:21:f8: f8:7b:95:ad:1b:39:d5:92:91:07:36:ac:16:0b:ed:90:76:c7: c0:8e:c4:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJrJArvpjyVcfObvyxWYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm YTlkNmMwHhcNMjUxMjIyMTMwMTM5WhcNMjUxMjIzMTMwMTM5WjAzMTEwLwYDVQQD EyhiN2ZmZTgzNjhjYzI5ZTExNmQxNGE5MjFiZjRmZTY0OTA5Y2JjYmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjeN+72Jv9Reeop/62i6wOWP9/s2 bMc/i96+s/qSjTIEiI+SicYIfDN/+1vR3Zm85jRGNJQyBT8k/lyUrQaUd2XCcCxc At0GZSbBMhJsXxcUYaOwJuTSI3Ekmp4u8ICQCNcmWRIHKT4V35h2npv/nEWLcczn JEjTPZYA3htYN899fbEa3XM/Z+ZVTQafazHvMiuqainrzoK4apYVVdyetKxhe34X 0cFBMNw2BbXvSpHRzXserWfrje+3SBjtwZmPTTJ4nFZ1dDvuL2N9Nyqdv5OAG/nE NoT6bq7aKUBId49XZkhw1CywJpGQknb8STixAvE99LFCa+76UaAPDI6AlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLf/6DaMwp4RbRSpIb9P5kkJy8vvMB8GA1UdIwQY MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5 LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs2odVFXp wEU7KlQq2gbTaTN3RdUGZWesYRvnf7S4TH9xIxnyqKpfMfzPWcEtRxnSjRzI4tLG /mS3dBICQa5IOSS8nb3Q/SXgwP/Kj4X43lrOw0iED9zl32Gzer5vhDeyFm/lH1QS lGw9i3Ajvl50bnbNWNUrO+58YDFQDGU5txte+tplMn1F7Sx+XIvxlYGNNk6XO/L7 8QbC3Ni14iPoe7cTSK872AgVTHA2FgEAFDPLaMB5ipC3I6xPdl0x/GcVfqImuQ6J rix76lYR1C0TXdQqJSDNCgFt1wb9JCqGhaYYKr9WT/zvKCH4+HuVrRs51ZKRBzas FgvtkHbHwI7EPg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:29 2025 by rpki-client