This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft File: fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json) Hash identifier: rl+LFITlNqG+ReAiECdxlcPgtw1mOB9o2WCjfbglLwU= Subject key identifier: 03:9C:30:24:DD:01:1B:03:31:08:9F:2F:17:FA:DD:C0:B9:8E:17:FA Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca Certificate serial: 019B33B22ACE3416F20A6C0A9FEF53FB55E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft Manifest number: 1647 Signing time: Thu 18 Dec 2025 23:01:12 +0000 Manifest this update: Thu 18 Dec 2025 23:01:12 +0000 Manifest next update: Fri 19 Dec 2025 23:01:12 +0000 Files and hashes: 1: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (hash: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=) 2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: Y/ubUYz5+XahoI7DJU/JyIeK3EXkhLwqsnY+9pml5aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:2a:ce:34:16:f2:0a:6c:0a:9f:ef:53:fb:55:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca Validity Not Before: Dec 18 23:01:12 2025 GMT Not After : Dec 19 23:01:12 2025 GMT Subject: CN=039c3024dd011b0331089f2f17faddc0b98e17fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:93:1f:02:69:48:c6:d8:89:96:06:04:c6:e9: ec:63:92:83:a2:21:36:ad:21:35:b8:60:1e:1b:4e: ab:2f:dc:8f:9e:1d:b8:2f:a9:68:9a:5d:81:9c:3d: fa:45:d2:f0:62:18:75:43:58:76:39:38:ae:d2:3a: 5d:2b:eb:0f:d4:3a:c2:38:dc:71:b4:f7:a2:03:3c: 87:72:dc:c4:9d:57:bd:a2:e8:4b:bd:8c:89:6d:24: c7:e0:f2:08:a0:19:3d:d1:2a:73:65:04:58:24:b4: 07:02:06:be:f8:34:b5:7b:a9:11:68:60:97:bf:3a: f3:07:04:bc:fb:27:36:69:49:25:69:cf:0c:01:3e: 13:7d:0a:e6:6f:21:27:34:bd:eb:33:b9:a0:9d:e5: fd:47:4c:ea:7f:22:53:5d:f2:f5:ec:22:bf:46:ff: 94:b3:62:e9:60:22:e7:eb:04:94:74:5b:57:84:91: 3b:66:04:12:75:3c:5d:1c:b3:21:35:ec:1f:f1:d6: 07:9d:cd:de:61:c1:b8:06:39:ec:3f:57:af:3b:cd: c9:92:d8:fe:5b:cd:7c:8b:e4:40:4d:3d:49:61:6a: 73:e1:5f:0c:da:ac:b3:70:98:74:a3:08:b3:bd:57: e0:eb:b0:7b:0f:b9:3f:73:56:22:fb:93:bd:d0:38: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9C:30:24:DD:01:1B:03:31:08:9F:2F:17:FA:DD:C0:B9:8E:17:FA X509v3 Authority Key Identifier: keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fe:ad:e8:68:3b:3b:2c:39:e8:1c:7a:ce:04:e2:ff:8a:b6: 52:13:ba:35:03:48:67:b1:80:d1:94:09:41:6b:2d:a6:b3:ea: 02:95:04:b2:60:ed:be:8f:df:40:c4:57:3e:4f:61:54:ed:06: 23:a3:fe:56:68:61:bf:d8:fe:82:0e:73:74:7e:34:a2:1e:7f: 89:00:c5:48:7e:be:35:73:42:9d:a7:2f:5f:8c:77:f1:82:cf: c9:f2:94:38:64:90:b5:f7:10:48:34:50:d2:4d:2f:d1:94:3a: 65:4c:30:a3:ee:ba:35:0b:e9:72:ab:0b:e7:56:1c:ce:28:4c: 37:6c:1e:d7:22:a7:7a:8b:2e:50:67:08:38:77:7c:30:bd:82: 97:c6:a0:b3:46:5f:0e:ca:75:3e:e6:5c:51:36:b7:28:40:ae: 52:03:7b:56:c7:3b:43:23:18:8c:f2:eb:f9:4d:5f:4d:38:ec: 0a:9e:57:a1:f4:77:4e:dc:3a:e3:df:80:55:11:52:2b:5b:23: d4:3e:bb:a2:73:c3:2e:80:24:e7:98:03:83:12:30:5c:27:a4: 4b:56:a1:62:f4:e0:59:1e:9e:92:3f:5c:c9:e0:bd:94:35:bd: b0:50:48:eb:6c:36:02:d3:f4:a2:49:9d:2a:c0:45:fb:c7:0d: 9e:0a:82:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsirONBbyCmwKn+9T+1XnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjdjZmQ2Yzg4MjZhNjdmNjQyYTM3M2QxMzE5NTUzMDhk OWMxY2EwHhcNMjUxMjE4MjMwMTEyWhcNMjUxMjE5MjMwMTEyWjAzMTEwLwYDVQQD EygwMzljMzAyNGRkMDExYjAzMzEwODlmMmYxN2ZhZGRjMGI5OGUxN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5MfAmlIxtiJlgYExunsY5KDoiE2 rSE1uGAeG06rL9yPnh24L6loml2BnD36RdLwYhh1Q1h2OTiu0jpdK+sP1DrCONxx tPeiAzyHctzEnVe9ouhLvYyJbSTH4PIIoBk90SpzZQRYJLQHAga++DS1e6kRaGCX vzrzBwS8+yc2aUklac8MAT4TfQrmbyEnNL3rM7mgneX9R0zqfyJTXfL17CK/Rv+U s2LpYCLn6wSUdFtXhJE7ZgQSdTxdHLMhNewf8dYHnc3eYcG4BjnsP1evO83Jktj+ W818i+RATT1JYWpz4V8M2qyzcJh0owizvVfg67B7D7k/c1Yi+5O90Diw9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOcMCTdARsDMQifLxf63cC5jhf6MB8GA1UdIwQY MBaAFH33z9bIgmpn9kKjc9ExlVMI2cHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAt YmYxYzVjYzM2YjY2LzEvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAtYmYxYzVjYzM2YjY2 LzEvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaP6t6Gg7 Oyw56Bx6zgTi/4q2UhO6NQNIZ7GA0ZQJQWstprPqApUEsmDtvo/fQMRXPk9hVO0G I6P+Vmhhv9j+gg5zdH40oh5/iQDFSH6+NXNCnacvX4x38YLPyfKUOGSQtfcQSDRQ 0k0v0ZQ6ZUwwo+66NQvpcqsL51YczihMN2we1yKneosuUGcIOHd8ML2Cl8ags0Zf Dsp1PuZcUTa3KECuUgN7Vsc7QyMYjPLr+U1fTTjsCp5XofR3Ttw649+AVRFSK1sj 1D67onPDLoAk55gDgxIwXCekS1ahYvTgWR6ekj9cyeC9lDW9sFBI62w2AtP0okmd KsBF+8cNngqCmw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:53 2025 by rpki-client