This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json) Hash identifier: qXuAgdbVjGJgCWYkfOduHHVd3pc1hwv4D3OkbEUADY4= Subject key identifier: 7B:CD:A8:58:C7:F7:97:30:3E:3A:DF:D3:4C:F5:9A:BF:74:72:B9:83 Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48 Certificate serial: 019B50E06C6DBDD627614949C041BC2D675C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft Manifest number: 02A4 Signing time: Wed 24 Dec 2025 15:00:43 +0000 Manifest this update: Wed 24 Dec 2025 15:00:43 +0000 Manifest next update: Thu 25 Dec 2025 15:00:43 +0000 Files and hashes: 1: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (hash: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=) 2: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: dJXp3R26PMVRyhf3jDmhTgSYkmURDChkBMCtRJN1ZvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:6c:6d:bd:d6:27:61:49:49:c0:41:bc:2d:67:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fdb088e98e4e6415d944142212448369005b48 Validity Not Before: Dec 24 15:00:43 2025 GMT Not After : Dec 25 15:00:43 2025 GMT Subject: CN=7bcda858c7f797303e3adfd34cf59abf7472b983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:58:07:60:e7:6f:0e:cb:fb:fe:39:5a:53: a4:89:c9:0d:80:ad:3b:0b:2d:03:7f:00:ca:e7:d7: 2c:42:10:2f:a7:fe:b3:42:cb:4e:7d:01:69:6e:f5: 9b:01:d4:d0:36:81:86:c3:73:0f:83:10:72:94:5c: 61:4a:dc:16:21:b1:d7:33:61:af:55:54:08:5e:5d: b1:8d:d9:fc:08:0b:9f:74:4e:df:1e:25:6d:e9:da: a3:5b:41:06:ae:2e:48:96:d4:9f:15:c7:5f:98:58: b4:c7:12:42:a8:3b:69:01:5b:50:72:38:db:df:d7: a3:56:e9:81:77:a1:9a:e1:f0:d1:31:60:73:21:19: 4b:f3:00:e8:ca:f0:57:0a:4f:d7:15:7c:e0:51:f1: 44:14:6e:fb:0f:5a:22:1a:21:4e:53:51:b4:02:1f: 11:09:d9:15:ad:24:4a:32:87:3b:bd:33:dd:e4:99: c0:26:35:52:cd:2f:c3:65:9a:54:6f:8d:77:8c:39: 27:7d:96:cc:c4:79:c2:de:cc:cb:6a:cb:86:01:08: 46:e8:84:30:3c:03:84:ef:7e:99:45:18:9c:e4:6e: 93:4f:2b:a0:09:69:16:fe:c9:6b:a4:36:19:2f:f9: f8:fe:2b:d9:86:7b:40:4f:27:ab:dc:bc:d6:ba:7d: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CD:A8:58:C7:F7:97:30:3E:3A:DF:D3:4C:F5:9A:BF:74:72:B9:83 X509v3 Authority Key Identifier: keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:86:dc:aa:22:e3:d9:4f:f5:74:a5:ab:80:2a:52:b9:4b:fb: 5f:3f:fb:6d:4c:52:ac:77:ad:3e:3a:e2:2d:3c:11:18:46:7b: 64:22:ba:b8:29:cb:0f:9a:f0:27:74:0a:f7:b5:ed:4e:22:dc: d8:2f:8d:57:47:2e:c7:c0:2d:39:86:bd:83:66:c3:c1:04:c3: 9e:25:25:40:9d:82:6f:94:41:e0:f7:0f:22:7f:68:76:a6:a8: 64:75:cb:82:ea:d7:7c:8e:96:5d:22:d5:29:cb:18:af:d0:45: 0b:99:ad:e8:c9:0e:18:61:ab:3a:df:af:90:61:9e:6a:f0:df: 42:b3:35:dd:58:bd:a6:30:d0:41:fd:b0:b8:b4:c0:f5:e0:1a: 46:83:ec:97:e7:41:04:3d:b1:52:c2:0f:39:f7:d1:80:7b:93: a5:01:e1:f7:88:16:e6:fa:4a:6a:b1:2d:a2:4b:16:91:70:53: 9a:15:cd:d9:a3:84:a2:47:0a:aa:85:3e:f8:98:4b:72:d9:30: 34:aa:85:4a:eb:c3:88:d6:69:f8:b1:9c:aa:3d:b7:4d:b7:e3: 92:5f:42:24:0b:1c:91:61:aa:4b:4a:30:78:87:c9:95:41:7e: 60:15:c9:34:61:14:e8:a2:e5:01:70:16:a6:eb:8d:6b:6e:5f: 18:9c:9f:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4GxtvdYnYUlJwEG8LWdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmRiMDg4ZTk4ZTRlNjQxNWQ5NDQxNDIyMTI0NDgzNjkw MDViNDgwHhcNMjUxMjI0MTUwMDQzWhcNMjUxMjI1MTUwMDQzWjAzMTEwLwYDVQQD Eyg3YmNkYTg1OGM3Zjc5NzMwM2UzYWRmZDM0Y2Y1OWFiZjc0NzJiOTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFZYB2Dnbw7L+/45WlOkickNgK07 Cy0DfwDK59csQhAvp/6zQstOfQFpbvWbAdTQNoGGw3MPgxBylFxhStwWIbHXM2Gv VVQIXl2xjdn8CAufdE7fHiVt6dqjW0EGri5IltSfFcdfmFi0xxJCqDtpAVtQcjjb 39ejVumBd6Ga4fDRMWBzIRlL8wDoyvBXCk/XFXzgUfFEFG77D1oiGiFOU1G0Ah8R CdkVrSRKMoc7vTPd5JnAJjVSzS/DZZpUb413jDknfZbMxHnC3szLasuGAQhG6IQw PAOE736ZRRic5G6TTyugCWkW/slrpDYZL/n4/ivZhntATyer3LzWun1c2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvNqFjH95cwPjrf00z1mr90crmDMB8GA1UdIwQY MBaAFBX9sIjpjk5kFdlEFCISRINpAFtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUt MmY2M2FiNDZmMzFjLzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUtMmY2M2FiNDZmMzFj LzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxIbcqiLj 2U/1dKWrgCpSuUv7Xz/7bUxSrHetPjriLTwRGEZ7ZCK6uCnLD5rwJ3QK97XtTiLc 2C+NV0cux8AtOYa9g2bDwQTDniUlQJ2Cb5RB4PcPIn9odqaoZHXLgurXfI6WXSLV KcsYr9BFC5mt6MkOGGGrOt+vkGGeavDfQrM13Vi9pjDQQf2wuLTA9eAaRoPsl+dB BD2xUsIPOffRgHuTpQHh94gW5vpKarEtoksWkXBTmhXN2aOEokcKqoU++JhLctkw NKqFSuvDiNZp+LGcqj23Tbfjkl9CJAsckWGqS0oweIfJlUF+YBXJNGEU6KLlAXAW puuNa25fGJyfmw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:29 2025 by rpki-client