This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft File: _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json) Hash identifier: cTYg+bppas5o1a4QEi8wvAEu70lZxkh8bjOyHMTDHQY= Subject key identifier: E4:6A:C6:76:1F:0D:77:3B:B8:94:37:EA:22:71:FD:A8:42:D0:96:D4 Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca Certificate serial: 019B390F26BC97D4E95C5B9E84157F00AC2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft Manifest number: 1796 Signing time: Sat 20 Dec 2025 00:00:52 +0000 Manifest this update: Sat 20 Dec 2025 00:00:52 +0000 Manifest next update: Sun 21 Dec 2025 00:00:52 +0000 Files and hashes: 1: 02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa (hash: 1lC1lblUpRwTVQ+Ge49BDR+GJQFgOVsafNXG64hb/XY=) 2: Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa (hash: 2MxUFjGmuDKUG21lzv5veXhyhTQId3UhJyQ5SEul+IE=) 3: RqVcFJZ-UOtFVhYTc8Tvk-2MyWc.roa (hash: EkympbPJChDE++MdHcZn5otezDPhnhwM5HrzDsbo97E=) 4: UGBZOZSWywjphqY06-K_M1ZGoT0.roa (hash: RJB+IF1dz0DTQaSONy8F1A13L8REX4DXW9Kvah614y8=) 5: VqGI977rLYSlPvPeIqKzU5gAsRQ.roa (hash: lpVLT1GI44DAxERwMidgTiLaLBc+qxFL0OsVYhw1jZs=) 6: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: G8uEORT7iSub09U86XhRrBky8FURbPZ0VEBtETVV3gg=) 7: ftA_0MHprxcS8SlFhkjswrNXwFY.roa (hash: smdGNCpTIhX1wgE3ptT3KMsrSmr38EbIS8Vn8KXDg24=) 8: vdV5qL7SpepCbsvsvfAJBAz8FxI.roa (hash: zM4+IpZ2NSkVy8xnsYcs6SKRJCNxX1j91N1iXdAJ3Zs=) 9: zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa (hash: ZLxLzKI7oWxHfaoLaLC/qvHYpwJYh49zyjA/TXCZ5qY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:26:bc:97:d4:e9:5c:5b:9e:84:15:7f:00:ac:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca Validity Not Before: Dec 20 00:00:52 2025 GMT Not After : Dec 21 00:00:52 2025 GMT Subject: CN=e46ac6761f0d773bb89437ea2271fda842d096d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:a7:73:75:88:60:53:b8:75:fa:23:c2:0e: 94:c7:67:26:4e:dc:af:fa:a6:16:a6:1c:81:c1:d4: a8:08:61:b9:71:0e:4d:bf:f9:29:a7:51:24:b3:d2: 9c:6c:b7:75:e9:37:57:99:f1:f9:6b:69:00:6d:cf: 4d:6a:b1:66:86:15:72:83:46:94:e8:ec:50:a5:ae: 18:8c:e9:d6:6b:d8:18:34:97:4f:8d:ce:bd:01:18: 2d:b3:86:b6:46:91:20:bf:a2:04:b3:7e:7e:72:da: 5d:49:3a:05:5f:39:02:61:ee:c2:6d:46:8d:08:eb: 94:64:29:3a:16:3d:9a:9f:b5:46:69:3f:93:da:a1: 2b:63:ae:f6:90:6a:3c:59:21:97:4a:13:3c:1a:e0: 24:f2:cf:db:ad:a7:26:66:95:4c:04:05:04:14:ec: f0:fa:a9:92:69:1d:39:52:3c:da:c4:67:fd:1c:64: c8:7e:b5:2a:c4:49:ca:b6:38:6d:68:26:eb:3d:fe: 8a:38:27:b1:1a:cc:e4:29:a8:e8:e0:20:fb:82:1a: 7f:c4:63:37:bb:6f:85:b3:18:da:a0:2f:7a:f5:20: 09:40:d7:a9:9c:2d:a8:04:dd:f7:7f:5c:6c:71:11: bb:de:dd:69:de:05:47:7b:c0:5a:bd:08:40:be:16: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6A:C6:76:1F:0D:77:3B:B8:94:37:EA:22:71:FD:A8:42:D0:96:D4 X509v3 Authority Key Identifier: keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:61:b4:a0:1d:5e:94:9f:ad:69:09:93:20:34:a6:6e:72:6e: bb:40:69:db:60:0f:63:52:ef:77:fc:e2:74:a2:0e:0b:24:8d: f4:eb:bb:7e:8a:ce:1f:02:c1:10:e5:81:78:15:7f:64:c5:bf: 9e:ec:c9:76:7f:20:cc:ae:07:d9:33:eb:43:94:33:0c:a3:3b: c8:bc:3c:c6:fb:34:89:c4:67:23:99:c1:b3:26:b3:c6:81:7b: 48:f6:f6:ea:15:40:14:56:bb:66:a0:10:b5:87:d7:af:ef:3f: b0:1e:81:af:7a:88:2d:7f:b9:ec:a9:1f:f1:d2:67:eb:d6:55: aa:bb:0e:3f:29:82:71:7f:55:0d:9c:0d:7f:66:22:01:59:03: c6:86:32:8c:7c:1a:f1:0a:f4:88:c5:a2:99:8a:32:59:dd:9a: 4b:13:45:b8:5d:99:cd:df:c5:fd:95:8e:27:e9:a8:68:53:b6: 95:ec:29:46:31:8d:bb:18:61:70:ca:a4:82:06:eb:da:75:8a: 3a:55:4c:ca:0d:ec:a7:53:77:4a:b8:36:21:a6:10:c4:d5:3d: e1:1a:a8:37:38:60:55:ef:a2:18:39:14:0e:2c:f6:02:9b:42: 8b:cb:e8:1a:7b:6f:f7:d0:b4:c5:4c:bf:f4:67:54:8d:40:2b: 69:30:ff:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dya8l9TpXFuehBV/AKwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGQwNjk3ODk2OWE4YmRhYjZkNjM1OTA2MmQ3NzgxZTAz NDQ5Y2EwHhcNMjUxMjIwMDAwMDUyWhcNMjUxMjIxMDAwMDUyWjAzMTEwLwYDVQQD EyhlNDZhYzY3NjFmMGQ3NzNiYjg5NDM3ZWEyMjcxZmRhODQyZDA5NmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6mnc3WIYFO4dfojwg6Ux2cmTtyv +qYWphyBwdSoCGG5cQ5Nv/kpp1Eks9KcbLd16TdXmfH5a2kAbc9NarFmhhVyg0aU 6OxQpa4YjOnWa9gYNJdPjc69ARgts4a2RpEgv6IEs35+ctpdSToFXzkCYe7CbUaN COuUZCk6Fj2an7VGaT+T2qErY672kGo8WSGXShM8GuAk8s/bracmZpVMBAUEFOzw +qmSaR05UjzaxGf9HGTIfrUqxEnKtjhtaCbrPf6KOCexGszkKajo4CD7ghp/xGM3 u2+FsxjaoC969SAJQNepnC2oBN33f1xscRG73t1p3gVHe8BavQhAvha6pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORqxnYfDXc7uJQ36iJx/ahC0JbUMB8GA1UdIwQY MBaAFPxNBpeJaai9q21jWQYtd4HgNEnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEt ZGEwM2JmN2EyZWMyLzEvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEtZGEwM2JmN2EyZWMy LzEvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGG0oB1e lJ+taQmTIDSmbnJuu0Bp22APY1Lvd/zidKIOCySN9Ou7forOHwLBEOWBeBV/ZMW/ nuzJdn8gzK4H2TPrQ5QzDKM7yLw8xvs0icRnI5nBsyazxoF7SPb26hVAFFa7ZqAQ tYfXr+8/sB6Br3qILX+57Kkf8dJn69ZVqrsOPymCcX9VDZwNf2YiAVkDxoYyjHwa 8Qr0iMWimYoyWd2aSxNFuF2Zzd/F/ZWOJ+moaFO2lewpRjGNuxhhcMqkggbr2nWK OlVMyg3sp1N3Srg2IaYQxNU94RqoNzhgVe+iGDkUDiz2AptCi8voGntv99C0xUy/ 9GdUjUAraTD/fg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:25:47 2025 by rpki-client