This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json) Hash identifier: +Cw0k+MjAEmCaNbfyp/YNTlUWLQ+s01uKczqvkNh/98= Subject key identifier: 65:05:E6:B7:F5:A3:00:BC:76:29:32:CD:DB:61:E6:C1:4F:7C:E5:24 Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0 Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0 Certificate serial: 019B4B4CD3865F285A02A85467D9B7048671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft Manifest number: 0EA3 Signing time: Tue 23 Dec 2025 13:01:24 +0000 Manifest this update: Tue 23 Dec 2025 13:01:24 +0000 Manifest next update: Wed 24 Dec 2025 13:01:24 +0000 Files and hashes: 1: BRx8YXqDNB1GFUFqyh6QeZ00QCQ.roa (hash: o3eKIyn+wElbYPzG51u2wAS6yMUVN8sHDDwj5Rm2E/Q=) 2: VbwtiBX2ms4ySWY9SuuxQ_e54iU.roa (hash: k9pKrx75Mce4A5zPehz4672JfRhT62oujRsmOrrbRnk=) 3: W_LcH2rarIjndbdlJP8dn2zg91I.roa (hash: ABTtDVp9Hfq4kC7VPzIn0vf/HFoFzUVcLY2Iv5yLp7M=) 4: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: qPVqp2Rv0cGjJOwPJVl9Tf+7gFQJG8xPjgjN0s4KMlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:d3:86:5f:28:5a:02:a8:54:67:d9:b7:04:86:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0 Validity Not Before: Dec 23 13:01:24 2025 GMT Not After : Dec 24 13:01:24 2025 GMT Subject: CN=6505e6b7f5a300bc762932cddb61e6c14f7ce524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:a9:ca:e4:67:06:2c:de:0c:f6:ad:46:a9: a2:d8:a6:29:f8:c3:89:24:ce:62:09:fd:43:6c:53: ea:b9:8e:f3:35:e6:3d:e0:24:2c:0f:b5:c3:cf:ad: ce:1e:33:39:25:12:3b:14:0f:63:fe:3e:b6:fa:88: be:68:0b:31:eb:b7:29:6d:ca:71:9a:02:5f:81:3e: b6:fe:7e:9a:7f:5f:ea:a3:f6:6d:0b:a3:55:2f:9d: 99:64:87:03:aa:0c:42:28:cc:97:f9:98:43:8e:83: 24:98:e4:a2:bb:14:bb:d9:11:34:68:c5:0a:2d:23: a4:d6:93:e2:29:3d:a8:f0:90:8f:d2:59:4d:69:a5: 50:21:d1:de:fa:9f:e1:83:c1:34:d2:77:e6:44:62: ab:6a:f1:af:c9:8d:7c:e6:91:58:e0:2a:6e:2d:60: 59:ee:f0:ca:8d:f5:30:38:b4:6b:b1:a0:ec:4b:af: 37:66:fd:55:9e:ba:d2:a4:8f:d8:7b:d2:74:a4:cc: 5f:38:5f:63:5f:a5:57:64:61:d5:a1:3e:b9:af:ce: 1b:cb:30:6c:07:d7:41:81:92:82:63:73:3a:58:fd: 8d:73:48:3a:8e:ed:e0:44:85:8f:7a:df:a9:86:40: 5a:2e:58:6d:71:d8:30:ec:eb:b5:90:2a:2b:99:2f: 4e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:05:E6:B7:F5:A3:00:BC:76:29:32:CD:DB:61:E6:C1:4F:7C:E5:24 X509v3 Authority Key Identifier: keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:05:f6:0d:c0:50:b1:73:53:6b:c2:9f:69:fc:e3:12:ed:60: df:72:4c:d0:e0:4a:b5:a6:93:0c:8d:94:6e:c0:a3:03:1d:8b: b0:37:bd:6e:0d:33:90:0d:79:67:62:f7:cf:67:bb:8f:41:5f: 50:17:33:5c:01:61:7d:f1:3f:08:75:4a:41:e9:40:e8:ff:26: 55:a1:49:58:ac:f3:7b:bb:4d:38:84:85:5f:56:56:00:ba:bb: d7:d9:66:df:56:f9:4d:cb:33:51:e2:b8:33:9e:e5:75:39:b2: fe:1a:a0:5c:64:e7:f4:04:eb:79:3c:3c:b9:04:d6:40:87:1c: bf:b2:88:22:54:fc:29:ca:05:a6:01:99:6b:76:bb:e2:10:c0: 50:03:cb:b8:db:e3:87:bf:6d:54:c3:1b:3a:41:2e:f3:c8:5d: 8a:ae:8a:a9:2f:28:fe:02:09:19:97:54:26:90:eb:c9:81:3a: 11:6e:a5:2a:b4:de:3f:45:f6:6f:b8:22:b1:ca:6d:21:55:ae: 7a:83:8c:21:2e:b1:f8:46:2c:a1:f8:af:d4:3e:d3:50:74:3d: 85:12:08:28:56:c1:54:ff:af:bf:0b:38:80:00:f8:02:ea:a5: b6:cf:0b:ea:46:ae:5e:f1:5d:fa:6c:77:7a:9d:10:99:e9:de: a5:aa:06:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTNOGXyhaAqhUZ9m3BIZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw OTRkYTAwHhcNMjUxMjIzMTMwMTI0WhcNMjUxMjI0MTMwMTI0WjAzMTEwLwYDVQQD Eyg2NTA1ZTZiN2Y1YTMwMGJjNzYyOTMyY2RkYjYxZTZjMTRmN2NlNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzimpyuRnBizeDPatRqmi2KYp+MOJ JM5iCf1DbFPquY7zNeY94CQsD7XDz63OHjM5JRI7FA9j/j62+oi+aAsx67cpbcpx mgJfgT62/n6af1/qo/ZtC6NVL52ZZIcDqgxCKMyX+ZhDjoMkmOSiuxS72RE0aMUK LSOk1pPiKT2o8JCP0llNaaVQIdHe+p/hg8E00nfmRGKravGvyY185pFY4CpuLWBZ 7vDKjfUwOLRrsaDsS683Zv1VnrrSpI/Ye9J0pMxfOF9jX6VXZGHVoT65r84byzBs B9dBgZKCY3M6WP2Nc0g6ju3gRIWPet+phkBaLlhtcdgw7Ou1kCormS9OLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUF5rf1owC8dikyzdth5sFPfOUkMB8GA1UdIwQY MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt NmRjMWY1NjAzMWViLzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgX2DcBQ sXNTa8KfafzjEu1g33JM0OBKtaaTDI2UbsCjAx2LsDe9bg0zkA15Z2L3z2e7j0Ff UBczXAFhffE/CHVKQelA6P8mVaFJWKzze7tNOISFX1ZWALq719lm31b5TcszUeK4 M57ldTmy/hqgXGTn9ATreTw8uQTWQIccv7KIIlT8KcoFpgGZa3a74hDAUAPLuNvj h79tVMMbOkEu88hdiq6KqS8o/gIJGZdUJpDryYE6EW6lKrTeP0X2b7giscptIVWu eoOMIS6x+EYsofiv1D7TUHQ9hRIIKFbBVP+vvws4gAD4Auqlts8L6kauXvFd+mx3 ep0QmenepaoGZw== -----END CERTIFICATE-----Generated at Tue Dec 23 15:21:22 2025 by rpki-client