This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json) Hash identifier: CAssqkKRRrRmrvnhJopZQEnPWbJyGZjuQG01EbjceGM= Subject key identifier: 8D:63:A7:D2:75:F6:2D:FB:93:C5:88:3F:D4:16:A7:77:45:4F:F4:45 Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019B3FB67741B793BDE689945852F7EAC818 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft Manifest number: 118C Signing time: Sun 21 Dec 2025 07:01:21 +0000 Manifest this update: Sun 21 Dec 2025 07:01:21 +0000 Manifest next update: Mon 22 Dec 2025 07:01:21 +0000 Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=) 2: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: rNLSpVtgwNlOgcD0KDmgmBiziCOcKTkGSJC2bscof8U=) 3: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=) 4: p35nG8WnKus4OTOs7KI5F65sYzo.roa (hash: RVbXfLYb/+mFr+HMiMKT1IcR5Oe18VB+slW6Nc/dCTU=) 5: pcXYlaDPwjog7iEv3SU8SnXzBAo.roa (hash: /AdWWJb1IqZ42mmM/SvQrc5HCBK96OSXdfXnx0nlkCw=) 6: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=) 7: ySapTfZYgbxoEK957EhqmLLUXOc.roa (hash: PiAUqrCpwQjO/wsILlIaOLs415SXxFD6K/JzPp3q6ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:77:41:b7:93:bd:e6:89:94:58:52:f7:ea:c8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Dec 21 07:01:21 2025 GMT Not After : Dec 22 07:01:21 2025 GMT Subject: CN=8d63a7d275f62dfb93c5883fd416a777454ff445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:f5:1a:47:16:17:b2:d9:56:be:2d:33:14: bb:7b:e0:4f:e0:00:6d:25:10:8f:d8:11:de:49:1c: 96:b4:89:89:83:62:47:22:1d:c9:70:17:bc:ce:dc: 14:d5:5c:b3:37:95:52:43:67:84:f1:55:f7:2b:76: af:8b:1a:fe:fd:ad:db:6b:04:6c:a2:18:ee:7c:4a: dd:c4:47:66:14:34:b6:07:cb:a1:6f:b6:b4:d1:d2: e8:05:c6:63:2c:db:fa:df:b8:73:d6:4c:1d:9b:ec: ad:2a:aa:47:c2:b6:cc:65:45:69:8c:a0:52:e9:94: 13:74:db:93:2a:7d:2a:c2:17:4a:c3:74:29:aa:04: 52:02:27:87:e2:26:87:48:74:ba:5a:ad:09:92:e2: 14:fe:53:62:ac:fc:f8:8f:63:2f:9a:56:28:21:dd: f8:80:79:f2:06:58:ba:49:a4:e6:7e:c4:e7:19:5b: f9:e5:74:db:90:b4:8d:fe:be:6d:b5:cb:7f:2f:ae: 71:ba:5f:7a:4d:3f:c3:30:4f:f4:56:02:a5:88:e2: 20:7f:b7:f7:7f:a3:d9:41:83:bc:69:1f:b0:38:3f: 34:f3:17:9e:0e:15:11:62:f1:35:fb:8b:b5:7b:80: 13:86:3b:82:00:6b:8e:4d:ac:81:d3:4a:b7:ba:6e: a7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:63:A7:D2:75:F6:2D:FB:93:C5:88:3F:D4:16:A7:77:45:4F:F4:45 X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1a:31:b3:74:21:71:a0:cb:a1:6f:b2:3d:7e:7c:64:56:1a: 76:34:ab:27:a0:03:08:7a:99:13:34:fe:c0:d6:f7:31:27:f9: 0c:ed:5f:52:2b:cd:1e:c2:93:6e:54:c1:d5:ad:c4:03:09:ef: af:84:00:2d:a0:d2:ad:4c:e5:ae:96:a0:3f:32:1d:ab:a5:45: 2e:a6:68:d4:c1:db:21:12:51:a0:1d:cf:7a:5d:49:69:65:d7: f8:77:77:e4:3d:76:a8:99:f6:9f:ce:d4:dc:51:87:fc:bf:b0: da:96:7d:a0:a2:2e:9a:dc:fc:a0:fe:2c:09:81:29:34:65:17: 00:44:02:d6:dd:3c:31:8f:f7:d0:46:0a:2f:ed:fe:34:65:70: ac:8c:36:1d:a4:b2:07:28:18:e1:87:87:ee:59:44:c4:ad:9f: 5f:9a:7f:13:11:1c:ca:08:c3:96:85:c5:42:cc:04:16:d2:33: c1:7d:94:69:f8:cb:b3:41:20:00:8c:4c:dd:2e:cc:fe:fd:5a: f5:de:db:ee:79:03:d5:fe:e4:f0:90:9e:dc:79:ab:03:a0:6d: 7f:29:ac:32:60:64:0b:e6:56:ee:8e:42:41:e9:3c:44:f4:e4: 91:11:58:af:00:15:7f:e9:50:62:cd:ec:7e:bb:80:dd:1a:a9: 53:34:54:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tndBt5O95omUWFL36sgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjUxMjIxMDcwMTIxWhcNMjUxMjIyMDcwMTIxWjAzMTEwLwYDVQQD Eyg4ZDYzYTdkMjc1ZjYyZGZiOTNjNTg4M2ZkNDE2YTc3NzQ1NGZmNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Av1GkcWF7LZVr4tMxS7e+BP4ABt JRCP2BHeSRyWtImJg2JHIh3JcBe8ztwU1VyzN5VSQ2eE8VX3K3avixr+/a3bawRs ohjufErdxEdmFDS2B8uhb7a00dLoBcZjLNv637hz1kwdm+ytKqpHwrbMZUVpjKBS 6ZQTdNuTKn0qwhdKw3QpqgRSAieH4iaHSHS6Wq0JkuIU/lNirPz4j2MvmlYoId34 gHnyBli6SaTmfsTnGVv55XTbkLSN/r5ttct/L65xul96TT/DME/0VgKliOIgf7f3 f6PZQYO8aR+wOD808xeeDhURYvE1+4u1e4AThjuCAGuOTayB00q3um6noQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1jp9J19i37k8WIP9QWp3dFT/RFMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxoxs3Qh caDLoW+yPX58ZFYadjSrJ6ADCHqZEzT+wNb3MSf5DO1fUivNHsKTblTB1a3EAwnv r4QALaDSrUzlrpagPzIdq6VFLqZo1MHbIRJRoB3Pel1JaWXX+Hd35D12qJn2n87U 3FGH/L+w2pZ9oKIumtz8oP4sCYEpNGUXAEQC1t08MY/30EYKL+3+NGVwrIw2HaSy BygY4YeH7llExK2fX5p/ExEcygjDloXFQswEFtIzwX2UafjLs0EgAIxM3S7M/v1a 9d7b7nkD1f7k8JCe3HmrA6BtfymsMmBkC+ZW7o5CQek8RPTkkRFYrwAVf+lQYs3s fruA3RqpUzRUCw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:18:46 2025 by rpki-client