This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft File: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json) Hash identifier: l0GDzN07G3Z+nAtxaoVwjfjSwVwcBJ65cabzXr4lOU0= Subject key identifier: A9:82:8B:15:4C:4F:AE:80:B2:EB:45:8E:D1:E8:44:88:C6:6C:FB:AF Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Certificate serial: 019B397D5FE75BBC9A5855DB3EF04795AA40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft Manifest number: 11ED Signing time: Sat 20 Dec 2025 02:01:16 +0000 Manifest this update: Sat 20 Dec 2025 02:01:16 +0000 Manifest next update: Sun 21 Dec 2025 02:01:16 +0000 Files and hashes: 1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: onvq8v3+opkwUKnMzmzKzk9v4PIGdPxXQKZ2Dmq4HX8=) 2: AY8IrrzWhOI4edGB_Tl_2NFsPT4.roa (hash: uiO1qHM3dqC6uI/IPIfdOOSGwVI3hRDJi3/ZtYOJrsc=) 3: gnq-AR8Xd72mcm6lbFMDArBc5CM.roa (hash: 9S2hc504KDha1WUQXHo7oEPqtD/gvge/SWCBJIRS81w=) 4: hq906rq-ZUJ1rsRNyLa6JRxlY-c.roa (hash: W24B5y3blRSexP4/ZgUhUaITtqn0pVBgRqtpx/ttccY=) 5: k2zVIiwdTRAvcuIEhqj4cmMmGVQ.roa (hash: f6fiju9NCn/GwpDLcVhQnZ97ECOZ0vtJQ1vpuQYEjA4=) 6: uhJ-XIVNq77fWXsLmAjcO82hF0c.roa (hash: /Yf7GSbjy7jBNyAQCFoiblzDBo0DTRvflVo58Ipv4OQ=) 7: xENVRuP5uKqGbiuyJdR6-8GlIEE.roa (hash: Lt6FxlNVVzKwTUuuYwOrC8tiEKNsKK8scI+0fsrZ7WU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:5f:e7:5b:bc:9a:58:55:db:3e:f0:47:95:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Validity Not Before: Dec 20 02:01:16 2025 GMT Not After : Dec 21 02:01:16 2025 GMT Subject: CN=a9828b154c4fae80b2eb458ed1e84488c66cfbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:e0:61:8b:b3:db:4f:2f:d7:1c:31:9d:28: 2f:d2:ad:88:46:85:75:c0:64:ae:85:f7:4a:34:6a: 8a:11:86:4c:01:a5:b6:6b:fb:fc:11:f9:d4:18:f0: 5a:ce:59:e7:45:e9:b5:d5:80:32:da:62:1b:dc:70: bc:de:bd:31:a7:fb:66:4d:3b:3c:8d:da:0b:4d:4f: 48:f5:7b:26:ff:98:34:b7:55:43:55:fc:9b:a0:f6: 03:47:c0:50:cd:4a:dd:a7:93:a2:66:20:d9:2f:8b: 8d:90:a8:a1:4e:43:e5:45:eb:77:c6:e2:17:21:ea: 1b:81:49:60:81:f9:e6:45:96:29:0f:bb:27:45:06: 64:b6:ce:ca:ff:97:4c:21:4f:81:70:85:8b:6a:80: d6:74:b8:29:fe:dc:66:32:68:2f:82:c1:b0:a3:d3: e7:e1:11:07:ae:d8:c0:3c:d7:88:55:2f:55:84:a4: 60:9b:30:1a:eb:22:a0:df:a7:7c:88:9f:7e:46:b5: 8d:cc:4e:2c:e6:d5:36:5a:13:bf:35:ac:1c:a9:ac: 6d:67:76:47:4b:8b:a5:b8:94:21:69:fa:fd:34:cd: a2:6d:4d:f6:93:26:a1:7d:1c:86:2f:c7:10:6a:be: 15:28:1f:84:0a:7f:62:03:b3:bd:cc:03:b7:8a:b5: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:82:8B:15:4C:4F:AE:80:B2:EB:45:8E:D1:E8:44:88:C6:6C:FB:AF X509v3 Authority Key Identifier: keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5c:2d:59:26:c7:bf:35:49:36:9f:1d:d7:e3:79:4d:d8:9f: 69:c6:cc:24:73:78:fe:fc:7a:10:d8:13:69:c4:7b:b5:87:57: 73:34:9b:3d:91:78:67:e1:33:5e:0b:46:0a:33:70:93:04:f0: 4d:28:ea:ec:98:d7:1c:05:47:71:ee:2c:76:25:3d:0f:52:44: a3:fa:0e:b4:46:cc:ad:78:69:b5:6d:3d:5a:47:8a:6e:53:19: 95:6d:54:4c:ce:d7:f6:fd:c2:53:bf:ec:8e:bb:46:93:5b:f5: 37:f1:02:f7:e9:a6:82:b3:1b:fd:4c:22:9e:05:9d:f6:f2:87: 24:08:3b:ca:88:0e:c9:d6:1b:25:5c:4a:62:ad:a8:05:4b:45: b6:21:fe:4b:e0:4b:b1:42:9a:a9:50:c7:0b:60:4e:61:68:d7: ea:71:20:64:81:18:1e:51:b1:a3:48:34:b2:8d:50:cf:91:57: 5a:cc:9c:4f:9c:c0:c4:08:70:2e:05:60:3a:2e:99:93:ce:aa: 73:fb:b5:86:0d:fb:6b:36:1b:cd:76:3c:55:3f:5f:b8:da:f3: 08:3b:c3:80:4c:e8:42:0f:1f:01:da:f4:18:b8:db:eb:dc:6b: 9b:43:93:33:89:2d:db:d2:dd:a0:d6:60:54:5f:3c:cc:5b:ae: d7:e5:4e:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fV/nW7yaWFXbPvBHlapAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy NDhlMTQwHhcNMjUxMjIwMDIwMTE2WhcNMjUxMjIxMDIwMTE2WjAzMTEwLwYDVQQD EyhhOTgyOGIxNTRjNGZhZTgwYjJlYjQ1OGVkMWU4NDQ4OGM2NmNmYmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gTgYYuz208v1xwxnSgv0q2IRoV1 wGSuhfdKNGqKEYZMAaW2a/v8EfnUGPBazlnnRem11YAy2mIb3HC83r0xp/tmTTs8 jdoLTU9I9Xsm/5g0t1VDVfyboPYDR8BQzUrdp5OiZiDZL4uNkKihTkPlRet3xuIX IeobgUlggfnmRZYpD7snRQZkts7K/5dMIU+BcIWLaoDWdLgp/txmMmgvgsGwo9Pn 4REHrtjAPNeIVS9VhKRgmzAa6yKg36d8iJ9+RrWNzE4s5tU2WhO/NawcqaxtZ3ZH S4uluJQhafr9NM2ibU32kyahfRyGL8cQar4VKB+ECn9iA7O9zAO3irWDnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmCixVMT66AsutFjtHoRIjGbPuvMB8GA1UdIwQY MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2 LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlwtWSbH vzVJNp8d1+N5TdifacbMJHN4/vx6ENgTacR7tYdXczSbPZF4Z+EzXgtGCjNwkwTw TSjq7JjXHAVHce4sdiU9D1JEo/oOtEbMrXhptW09WkeKblMZlW1UTM7X9v3CU7/s jrtGk1v1N/EC9+mmgrMb/UwingWd9vKHJAg7yogOydYbJVxKYq2oBUtFtiH+S+BL sUKaqVDHC2BOYWjX6nEgZIEYHlGxo0g0so1Qz5FXWsycT5zAxAhwLgVgOi6Zk86q c/u1hg37azYbzXY8VT9fuNrzCDvDgEzoQg8fAdr0GLjb69xrm0OTM4kt29LdoNZg VF88zFuu1+VOrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:43:29 2025 by rpki-client