This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft File: _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json) Hash identifier: /vHWG0lyqPG3CbkcIfg9SsX2T6kwjJ5Db1+0dI9Tcy0= Subject key identifier: 43:41:3B:11:BB:59:8E:28:44:50:0C:28:15:01:48:70:4D:46:9A:D7 Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Certificate serial: 019B41DB39BC8CCDAA5E7444503D0F47B05C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft Manifest number: 114F Signing time: Sun 21 Dec 2025 17:00:44 +0000 Manifest this update: Sun 21 Dec 2025 17:00:44 +0000 Manifest next update: Mon 22 Dec 2025 17:00:44 +0000 Files and hashes: 1: MWUNq-ftYkXKNHhiuPmUDR8aNAY.roa (hash: sRHJK0hHdEHRSKSboElSRlINRVoo+ylHVvGY64QPq+U=) 2: XWI8UOsSBKLk-uPWG5IIm7lO5T0.roa (hash: wdsMuB8ozKSUOKmJcSdKQImpm/V8CgY5mxXeyIgvzhE=) 3: XZNvs4P6cEV3kqSeAChYJB2sLl8.roa (hash: g9CiDmAcRp9vEbDCpFa+vtYpHitX7GCMzN75HJigDyc=) 4: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: pN5wDOpiXfKFjFjzgzmcpjdQp0rj5JU5qlVUBLXKQs0=) 5: i7s_rOXOS6kYX0sDFEqFGZad-XM.roa (hash: /n5dO1dlOLjxt3g9xlSAiuAp1pYED4+r3AwngO41LLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:39:bc:8c:cd:aa:5e:74:44:50:3d:0f:47:b0:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Validity Not Before: Dec 21 17:00:44 2025 GMT Not After : Dec 22 17:00:44 2025 GMT Subject: CN=43413b11bb598e2844500c28150148704d469ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:90:10:2e:f0:43:0b:79:ad:ef:aa:b4:74:59: 2a:2d:a0:6f:2a:03:2b:46:3f:bb:2c:1c:ab:b2:29: 63:45:d9:1e:52:34:a5:34:a9:17:98:78:ba:30:96: 11:0c:e3:42:71:e6:44:f8:08:eb:c3:8a:f4:41:e0: 6c:55:76:ab:9d:8c:2d:f9:56:f8:00:8e:a5:b5:61: 8c:e4:dc:17:25:2e:cf:05:67:9b:30:31:7b:25:07: d8:47:5e:27:48:a5:cb:08:6b:ba:83:51:d6:f2:a5: c4:a5:6d:63:96:17:00:e5:a5:95:2e:0d:6b:e5:60: 95:07:75:c6:6d:31:b6:12:97:30:e2:47:8e:6e:8b: f9:ff:0b:74:62:7b:ba:50:f1:97:d1:74:7e:8f:3b: aa:f4:17:16:3a:42:9a:5c:33:9c:9f:d9:f6:2a:96: 8c:0a:e3:30:2c:01:25:5a:e2:1c:a7:48:40:88:33: 81:11:9c:32:fa:7f:ea:cf:72:a0:1f:3f:04:1b:ca: 89:fc:13:24:39:36:f9:98:48:72:28:a7:2a:84:53: c8:80:96:b4:6c:99:7f:ae:18:5c:5f:d7:3a:12:3e: d0:6d:b9:89:e6:d7:44:ed:13:45:38:47:3d:3c:af: 1a:9f:d3:b2:f2:39:8f:63:ce:05:23:a8:bd:36:ce: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:41:3B:11:BB:59:8E:28:44:50:0C:28:15:01:48:70:4D:46:9A:D7 X509v3 Authority Key Identifier: keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ea:a6:51:77:9f:e9:28:d7:60:ad:eb:dd:8d:99:19:2c:ba: ca:d5:bb:2e:df:33:0d:b9:d3:42:a5:37:28:ac:59:00:52:b1: 43:0c:32:0b:01:5f:44:ce:30:8f:b6:4f:62:04:38:cf:fe:80: 5f:51:70:88:38:68:28:29:f6:04:ac:4d:8d:c6:25:41:e8:a8: e4:3d:f6:10:95:2f:34:5e:d6:bd:b0:c6:5c:f6:07:c9:82:1f: e8:2d:58:1e:0a:68:94:d6:bd:d9:7b:58:5e:49:4c:60:fe:19: 9f:e8:00:23:21:40:14:b7:eb:36:6c:17:c1:3c:ed:2e:c5:d3: 98:f0:b2:10:fc:37:47:90:45:96:60:f0:23:bf:5e:41:fd:ca: f5:8a:6c:eb:01:08:3f:b7:86:3a:90:9a:a7:a7:07:c2:46:e4: 02:8c:61:9b:b7:70:60:80:63:f3:b1:b0:10:76:11:1a:8c:87: 2a:24:41:55:4f:5f:84:09:0f:86:e5:8c:08:f9:6e:ba:74:6a: f9:a0:cc:6c:f4:ae:f1:aa:08:c6:63:7b:34:91:9b:06:a8:76: c6:2b:bb:c0:36:30:e8:cf:e6:c7:d5:9f:6e:39:b0:d3:aa:79: 72:d1:57:eb:3a:05:68:35:b6:29:10:b2:e4:b7:d8:76:da:d2: 0d:10:e9:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2zm8jM2qXnREUD0PR7BcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5 ZTBhNTEwHhcNMjUxMjIxMTcwMDQ0WhcNMjUxMjIyMTcwMDQ0WjAzMTEwLwYDVQQD Eyg0MzQxM2IxMWJiNTk4ZTI4NDQ1MDBjMjgxNTAxNDg3MDRkNDY5YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5AQLvBDC3mt76q0dFkqLaBvKgMr Rj+7LByrsiljRdkeUjSlNKkXmHi6MJYRDONCceZE+Ajrw4r0QeBsVXarnYwt+Vb4 AI6ltWGM5NwXJS7PBWebMDF7JQfYR14nSKXLCGu6g1HW8qXEpW1jlhcA5aWVLg1r 5WCVB3XGbTG2Epcw4keObov5/wt0Ynu6UPGX0XR+jzuq9BcWOkKaXDOcn9n2KpaM CuMwLAElWuIcp0hAiDOBEZwy+n/qz3KgHz8EG8qJ/BMkOTb5mEhyKKcqhFPIgJa0 bJl/rhhcX9c6Ej7QbbmJ5tdE7RNFOEc9PK8an9Oy8jmPY84FI6i9Ns50pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENBOxG7WY4oRFAMKBUBSHBNRprXMB8GA1UdIwQY MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt YWYxY2MyMzE3ZTM5LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5 LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeqmUXef 6SjXYK3r3Y2ZGSy6ytW7Lt8zDbnTQqU3KKxZAFKxQwwyCwFfRM4wj7ZPYgQ4z/6A X1FwiDhoKCn2BKxNjcYlQeio5D32EJUvNF7WvbDGXPYHyYIf6C1YHgpolNa92XtY XklMYP4Zn+gAIyFAFLfrNmwXwTztLsXTmPCyEPw3R5BFlmDwI79eQf3K9Yps6wEI P7eGOpCap6cHwkbkAoxhm7dwYIBj87GwEHYRGoyHKiRBVU9fhAkPhuWMCPluunRq +aDMbPSu8aoIxmN7NJGbBqh2xiu7wDYw6M/mx9Wfbjmw06p5ctFX6zoFaDW2KRCy 5LfYdtrSDRDpoA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:21 2025 by rpki-client