This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json) Hash identifier: uYH2nzQR5kaE4bWRZA83zj8/8ViXZ52uXSzv2eXkFUA= Subject key identifier: CA:EC:1C:13:6A:72:2F:EE:C9:D9:71:D2:56:52:E9:16:11:B8:F3:A4 Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Certificate serial: 019B367BF8A4497BE30164523CDB83FB910B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 12:00:52 +0000 Manifest this update: Fri 19 Dec 2025 12:00:52 +0000 Manifest next update: Sat 20 Dec 2025 12:00:52 +0000 Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=) 2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=) 3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: Ns4kmYlFDMzXaIZ+2QMwth/7rkUlFchfC1Jq4ewuOwg=) 4: utXzgzMJjaIrp5ghklXHQNuDj0w.roa (hash: Y9s+msDVsT/czxYxM2UzwdwxQOsm8/16ui4R//h8OS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:f8:a4:49:7b:e3:01:64:52:3c:db:83:fb:91:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Validity Not Before: Dec 19 12:00:52 2025 GMT Not After : Dec 20 12:00:52 2025 GMT Subject: CN=caec1c136a722feec9d971d25652e91611b8f3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:f7:5c:a1:0c:2b:b6:da:71:fd:ad:c9:64: f7:88:18:2e:06:78:d7:75:a2:bc:e5:af:82:d9:74: c1:e2:e6:44:cb:06:10:eb:35:9c:a3:a9:5b:f0:e3: e6:18:a8:ec:5f:10:68:76:d2:a6:ac:7c:85:e2:7e: 02:50:a1:ec:59:67:98:f3:62:4e:72:26:b2:02:67: 09:f4:4d:25:48:2d:97:7c:d1:89:58:e1:86:68:2c: ee:5d:8f:e9:ea:5a:e7:3b:ce:e9:85:d8:ab:92:1e: 1d:6e:60:d4:07:77:e4:c7:2f:2e:56:c1:dd:d3:71: f0:8f:75:74:79:68:16:00:c3:c2:1f:46:d9:ce:d8: e5:67:c0:90:3d:43:a5:34:0d:df:ab:c5:5e:54:26: 85:0f:ca:c6:97:df:78:5a:6a:fd:b8:27:81:c8:6f: 08:03:b2:4c:7e:d8:e8:0d:1e:79:67:6d:63:a2:67: a9:b3:88:ef:d7:58:7a:a8:91:3a:f7:89:05:9d:d4: 37:26:cb:bf:f6:f0:f3:59:29:2b:f7:da:6c:5a:8f: 99:06:53:20:14:df:60:81:c4:ec:8f:33:77:5d:66: 3f:67:94:16:c8:64:82:b0:69:0b:f9:1a:06:d3:bd: 22:f9:ed:3f:c8:fb:14:c7:d6:2e:26:ac:52:f5:d9: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EC:1C:13:6A:72:2F:EE:C9:D9:71:D2:56:52:E9:16:11:B8:F3:A4 X509v3 Authority Key Identifier: keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b2:8c:a1:e7:ea:91:36:2d:bf:01:34:b7:0f:99:20:9d:5d: 8c:67:78:cf:89:ad:51:4e:c8:7c:57:94:64:58:b2:ff:a4:48: 0b:18:e8:40:18:8c:51:eb:de:db:71:42:35:0c:af:c6:01:10: a8:f1:b8:a3:f7:03:f7:be:12:20:87:e4:b3:2d:0e:01:32:52: 5b:21:ab:55:93:fa:35:fa:62:2c:a0:33:56:c9:14:4d:dc:b4: eb:be:9b:87:02:f2:5c:27:9c:b2:73:b0:67:8f:b2:09:72:06: 37:e9:e9:b6:31:b1:cb:37:bb:34:db:1f:65:32:ea:e1:01:2f: d1:e7:50:88:17:7b:31:bd:4c:b5:1b:3b:f1:8d:ab:3c:53:c4: 78:d9:03:01:25:32:ad:29:b7:33:50:ac:12:0f:af:70:e7:ba: 72:08:fc:4e:03:5a:41:0c:65:03:79:95:10:4b:f8:80:28:a5: a6:95:09:5c:6b:63:6c:be:b8:23:a6:9a:0c:5f:dd:ae:4f:25: d8:db:b5:68:eb:9b:f0:c5:9f:b0:e9:14:71:1e:76:82:08:47: 93:63:cb:6c:53:8a:9f:36:7a:31:b9:22:49:a7:93:2a:35:07: 71:c1:62:c0:5c:a9:a6:bf:28:29:ca:dd:75:de:ba:5a:aa:39: 27:d0:05:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e/ikSXvjAWRSPNuD+5ELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3 NmRhOTUwHhcNMjUxMjE5MTIwMDUyWhcNMjUxMjIwMTIwMDUyWjAzMTEwLwYDVQQD EyhjYWVjMWMxMzZhNzIyZmVlYzlkOTcxZDI1NjUyZTkxNjExYjhmM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxb3XKEMK7bacf2tyWT3iBguBnjX daK85a+C2XTB4uZEywYQ6zWco6lb8OPmGKjsXxBodtKmrHyF4n4CUKHsWWeY82JO ciayAmcJ9E0lSC2XfNGJWOGGaCzuXY/p6lrnO87phdirkh4dbmDUB3fkxy8uVsHd 03Hwj3V0eWgWAMPCH0bZztjlZ8CQPUOlNA3fq8VeVCaFD8rGl994Wmr9uCeByG8I A7JMftjoDR55Z21jomeps4jv11h6qJE694kFndQ3Jsu/9vDzWSkr99psWo+ZBlMg FN9ggcTsjzN3XWY/Z5QWyGSCsGkL+RoG070i+e0/yPsUx9YuJqxS9dkuHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrsHBNqci/uydlx0lZS6RYRuPOkMB8GA1UdIwQY MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt NzQ3NWY3MGRmOWZhLzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7KMoefq kTYtvwE0tw+ZIJ1djGd4z4mtUU7IfFeUZFiy/6RICxjoQBiMUeve23FCNQyvxgEQ qPG4o/cD974SIIfksy0OATJSWyGrVZP6NfpiLKAzVskUTdy0676bhwLyXCecsnOw Z4+yCXIGN+nptjGxyze7NNsfZTLq4QEv0edQiBd7Mb1MtRs78Y2rPFPEeNkDASUy rSm3M1CsEg+vcOe6cgj8TgNaQQxlA3mVEEv4gCilppUJXGtjbL64I6aaDF/drk8l 2Nu1aOub8MWfsOkUcR52gghHk2PLbFOKnzZ6MbkiSaeTKjUHccFiwFyppr8oKcrd dd66Wqo5J9AFsQ== -----END CERTIFICATE-----Generated at Fri Dec 19 18:46:31 2025 by rpki-client