This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json) Hash identifier: MZ678WsZAGWSqyxuAhqBgEKZQ4bwyEJ26E8EgSLtBxg= Subject key identifier: 1F:95:CF:4E:87:8D:CE:2C:4B:32:7F:D8:FC:4F:7F:97:6F:C5:19:ED Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24 Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324 Certificate serial: 019B51F334CD1E835C038E2B033EED700761 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft Manifest number: 1798 Signing time: Wed 24 Dec 2025 20:00:51 +0000 Manifest this update: Wed 24 Dec 2025 20:00:51 +0000 Manifest next update: Thu 25 Dec 2025 20:00:51 +0000 Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: 9+sh91GniUzM3DdGhuEY9+CI6T3MEOUZUVKPHOtyIms=) 2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:34:cd:1e:83:5c:03:8e:2b:03:3e:ed:70:07:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324 Validity Not Before: Dec 24 20:00:51 2025 GMT Not After : Dec 25 20:00:51 2025 GMT Subject: CN=1f95cf4e878dce2c4b327fd8fc4f7f976fc519ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:61:a5:96:84:30:22:fd:2d:f4:37:64:6a: 2e:bf:b5:7d:25:a0:68:aa:6f:2b:11:4d:70:13:40: 49:e6:89:84:03:6b:11:58:19:67:c1:05:4f:77:26: f8:1a:e9:78:b4:33:a0:76:f1:bc:d1:45:8c:b5:a8: c5:28:27:24:59:a7:ff:1b:00:a9:b9:13:fd:29:7e: f5:cc:45:94:42:e6:7d:7b:17:9a:ab:56:2c:03:fe: 45:b8:82:e1:03:e2:36:b1:a7:ac:3a:57:cc:a0:7c: 44:cc:50:ca:f2:86:43:fa:82:1f:df:34:bf:7c:ae: 7e:bb:15:a8:77:75:ad:fa:d1:70:72:4e:2b:d9:e3: 99:f8:5b:c7:54:e3:f7:e6:b9:2c:7d:d0:16:db:d2: d9:c0:96:dc:c6:a5:1f:61:cc:a7:b2:cc:32:0f:a7: 26:31:c3:5e:0a:1d:b3:e9:7d:fa:81:03:46:d0:43: 7d:b0:97:db:e8:60:66:91:87:ea:cb:c1:24:06:3e: 5f:30:de:88:86:5b:c5:22:8f:74:f5:93:68:3e:ba: cb:10:14:d9:e8:d9:b8:a8:2f:23:3e:e9:02:d8:c4: 83:30:e5:5d:06:05:a5:02:52:dd:9f:3c:82:ef:a3: 98:86:01:9c:20:f0:58:d0:dc:89:04:b7:4f:04:bf: 82:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:95:CF:4E:87:8D:CE:2C:4B:32:7F:D8:FC:4F:7F:97:6F:C5:19:ED X509v3 Authority Key Identifier: keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:03:65:30:f0:9a:d3:1d:af:63:90:b9:f3:7d:ab:0e:37:82: 9f:fa:58:0f:e4:b4:a3:4d:07:3e:cd:a1:f6:ec:08:65:20:88: b5:6c:03:80:ea:a1:1f:6d:46:b5:4e:e4:3a:f3:c8:2d:93:6e: db:f4:50:46:5c:3a:fa:32:ac:ec:58:d5:96:9b:c5:8f:e7:f5: 99:8b:8e:02:08:57:c5:06:12:14:5c:8c:b3:3c:8c:ae:fd:8e: 24:c5:65:66:ac:a9:30:a7:7d:82:33:7b:44:0f:04:d5:ce:67: 01:3b:d3:b5:78:e4:a7:d0:1b:15:d9:74:11:3e:17:6b:72:c8: 0d:a1:b0:3f:78:85:b8:36:ad:9a:7c:e5:9f:53:93:47:78:d9: 97:c2:9d:55:18:85:05:1f:50:36:26:dc:f2:ec:d5:b3:74:78: 5c:ba:80:54:8b:27:6e:46:12:c2:92:15:bf:6f:82:87:f2:15: 29:3d:15:3a:02:3b:01:3b:37:bd:19:b7:77:f9:a1:6c:05:26: bf:ee:a5:b3:7f:b0:dc:bf:bb:37:f7:9c:82:f3:34:4d:44:6b: fa:71:c9:59:6c:07:02:bd:57:fc:0c:b9:94:2b:17:c1:38:75: 3c:f7:56:0a:cb:fe:45:5e:69:a3:f9:c2:95:d0:75:8f:6b:6e: 20:55:54:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8zTNHoNcA44rAz7tcAdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNmI0YzU4ZTZjZmQ5ZmE3ZTcyMjJhNThiMzYyNmRiN2I5 ODUzMjQwHhcNMjUxMjI0MjAwMDUxWhcNMjUxMjI1MjAwMDUxWjAzMTEwLwYDVQQD EygxZjk1Y2Y0ZTg3OGRjZTJjNGIzMjdmZDhmYzRmN2Y5NzZmYzUxOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6NhpZaEMCL9LfQ3ZGouv7V9JaBo qm8rEU1wE0BJ5omEA2sRWBlnwQVPdyb4Gul4tDOgdvG80UWMtajFKCckWaf/GwCp uRP9KX71zEWUQuZ9exeaq1YsA/5FuILhA+I2saesOlfMoHxEzFDK8oZD+oIf3zS/ fK5+uxWod3Wt+tFwck4r2eOZ+FvHVOP35rksfdAW29LZwJbcxqUfYcynsswyD6cm McNeCh2z6X36gQNG0EN9sJfb6GBmkYfqy8EkBj5fMN6IhlvFIo909ZNoPrrLEBTZ 6Nm4qC8jPukC2MSDMOVdBgWlAlLdnzyC76OYhgGcIPBY0NyJBLdPBL+CgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+Vz06Hjc4sSzJ/2PxPf5dvxRntMB8GA1UdIwQY MBaAFONrTFjmz9n6fnIipYs2Jtt7mFMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMt ODAwYzk5ODUxMzY4LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMtODAwYzk5ODUxMzY4 LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQNlMPCa 0x2vY5C5832rDjeCn/pYD+S0o00HPs2h9uwIZSCItWwDgOqhH21GtU7kOvPILZNu 2/RQRlw6+jKs7FjVlpvFj+f1mYuOAghXxQYSFFyMszyMrv2OJMVlZqypMKd9gjN7 RA8E1c5nATvTtXjkp9AbFdl0ET4Xa3LIDaGwP3iFuDatmnzln1OTR3jZl8KdVRiF BR9QNibc8uzVs3R4XLqAVIsnbkYSwpIVv2+Ch/IVKT0VOgI7ATs3vRm3d/mhbAUm v+6ls3+w3L+7N/ecgvM0TURr+nHJWWwHAr1X/Ay5lCsXwTh1PPdWCsv+RV5po/nC ldB1j2tuIFVUyA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:29 2025 by rpki-client