This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft File: advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json) Hash identifier: SFApWbhqqVin5OoOzZjQbI1YfSlRCC9B6nYrQIQva84= Subject key identifier: 1D:9D:75:B7:84:A3:69:15:C8:DB:ED:6D:C7:19:D0:0B:4F:36:BA:62 Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B3BA27072CBEF3CAE573EE8ABBA6E72F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft Manifest number: 0520 Signing time: Sat 20 Dec 2025 12:00:59 +0000 Manifest this update: Sat 20 Dec 2025 12:00:59 +0000 Manifest next update: Sun 21 Dec 2025 12:00:59 +0000 Files and hashes: 1: 356qaAYQpDV5m2Riq8A1jSL_myc.roa (hash: J+LALyAXIHBq3+bBLiTSfwMeZdohnuBRZTHDVc6I9II=) 2: 50QBDzaaWAWirDv35AlJpGDh488.roa (hash: U9zp626nKKun30mCMXd5d52t9o6/HWZq00zHsZoBgiw=) 3: 5vI96mdACUYtbrBj1hpxS2th8SU.roa (hash: +D5F/vhkd6kDEoeI5nvUAAqsYy/qD8SkAXkJnFT0scM=) 4: 6tthdMUigNGL-Lj03VV1437ckw0.roa (hash: 3DKuUAToC850yfEHGnyn8P4fVujt3XjQI9EcyxZgd7k=) 5: 7md33wTGzdjzkpdm2YWPb96DeAE.roa (hash: XTg5R+tAMtHvJrOV1S/6jDI/yrBqzGpGjvAacgtOwFs=) 6: FNzx-AXDWYQXweTOw5GW8wLwA8Y.roa (hash: pI2apPSLr8xZ4eK8bjFcepwZqTx3hkzwJixceRtYmFQ=) 7: H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa (hash: alhkfmIs5h48famyJbrNqD1LroO26bFxdaO2RO80rB0=) 8: Nx_LlHukO6YVT2BEBxBXRcLN_po.roa (hash: KT5voOJbr5oTRoQ5gvpwOS1NktXBmDgt7n2ImgfHYoM=) 9: RNey77PyYZ7q5aSaC4PKivPQUp4.roa (hash: nbnaDHAsWvelX6heHPYA3AE04SRORSzM43r0uMU5XGU=) 10: SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa (hash: Gny5FCnUJO7mwZfbJF+nB2yfn78HUv4IFWcliadewNg=) 11: Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa (hash: gAGb1Y5AmI4FXfL962Kn9U3vKesk+PWP9SX12mcYBwQ=) 12: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: rzcpBjU01AkyMChlud+8fPWsNXh+TEPHGGgwuhiZSeE=) 13: ixSljlpAv7VqFqZBManiWIU_IIY.roa (hash: S7kK0yaWZD9cO4dIzOpKGjzXHLiqqB9lAeIuZmQigdM=) 14: kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa (hash: cRZ9xm6BVrOYd9CySCPL4z+78bjkaTOH3OZ66vuPhhQ=) 15: lNQAITIC5PmIJYf58oFmM4_t7ZI.roa (hash: EoC37uqzi538UDD96xogxI48SXL4t+AtWBAP3kmAc9E=) 16: nzL5rU21d1PlGGMQdcFTW627B-Y.roa (hash: 9reJY4cgowCz0eQpIjwulCKKRQRpF5bMWpAhQfAMQg8=) 17: rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa (hash: l8U8iyph5EKJjwuIU1Ch+SfAGqICGB1ZppWFQqcO0KU=) 18: uPVNzfaFCEVH8pgEcujrS2hKdGY.roa (hash: 624lPGVpaWFoqr9oTQxsUT+zutBPV/3xF9eLcAlFX3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:70:72:cb:ef:3c:ae:57:3e:e8:ab:ba:6e:72:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Dec 20 12:00:59 2025 GMT Not After : Dec 21 12:00:59 2025 GMT Subject: CN=1d9d75b784a36915c8dbed6dc719d00b4f36ba62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:30:7b:45:9b:a1:85:05:ca:25:9d:90:4f:3d: 3d:af:59:92:2c:d7:c0:84:35:72:75:2e:5f:23:35: 47:1a:e7:0c:31:b2:cc:6e:61:f4:f1:93:a7:d8:54: 52:60:1a:22:84:bc:ee:5e:71:ea:74:06:03:c0:2f: a1:59:4d:b9:cc:57:98:bb:6e:28:1d:1d:54:2b:bf: 3a:79:13:37:2c:29:c6:8b:ca:d2:cd:72:8e:83:dc: 5c:e4:f5:0c:99:91:f3:04:c5:0e:cb:ca:4e:7d:39: 4b:8d:60:68:fb:67:8d:98:29:56:b6:39:b9:05:4d: 9c:85:e9:9c:90:86:f0:2f:62:16:73:f7:7e:b1:f7: 77:ef:e6:70:f5:db:4b:12:e7:f8:8d:7c:f5:92:7c: 1b:0e:f3:65:fb:01:9b:1f:f4:a8:2a:47:00:19:cd: 05:5c:8b:2a:4c:e1:cd:64:e0:85:91:1f:65:e3:e3: 70:be:57:24:15:f3:9a:ee:50:85:e6:91:f2:b3:f6: 33:44:3b:c7:2f:36:71:b8:d8:0b:a8:be:4b:b0:47: 5d:af:ff:cc:35:59:f5:cf:f3:15:06:70:0f:7f:22: 8d:57:8b:b4:66:99:86:b1:bc:bd:26:9d:7e:26:d2: 0a:96:d4:d3:5b:4c:33:a0:65:29:c9:3d:a7:ed:6f: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9D:75:B7:84:A3:69:15:C8:DB:ED:6D:C7:19:D0:0B:4F:36:BA:62 X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f1:db:24:f7:a0:b7:64:b0:46:9c:30:61:dc:a6:2d:34:81: e3:ba:9e:44:d0:34:de:d1:60:1c:cf:fa:83:52:ea:08:aa:30: dc:89:61:eb:57:16:a1:8b:36:12:90:c5:fd:0c:60:19:14:4c: cb:90:cd:0b:76:8b:1f:88:dc:47:d6:2f:5e:e9:e6:e6:f4:52: 8b:c5:f5:4c:2f:38:15:a2:1a:75:c0:d2:dd:d8:b3:5a:cc:8e: b4:bc:18:40:16:45:8e:03:48:05:b4:f1:8b:f7:ab:c7:72:45: ea:2f:0d:32:0c:95:a7:2b:02:d9:ec:00:09:91:ba:fa:c2:ff: 34:ac:b1:ac:e8:01:ba:ad:54:dc:88:9d:3b:06:d6:8f:30:94: 12:ab:18:c4:45:84:ab:f6:95:0e:1c:ec:c8:f0:62:03:ce:58: ad:63:43:5a:5f:54:3d:ff:c7:00:8c:b3:38:d2:13:a0:37:ad: e2:79:db:82:a5:03:16:45:a8:21:7c:b0:26:81:99:a9:0a:a6: 17:7f:eb:1a:59:39:a3:23:3b:b0:c8:0a:f4:0b:04:a2:29:83: a4:5d:dd:a5:f2:d8:f4:74:05:32:d3:c4:f6:96:10:f3:e4:60: 38:b9:06:12:ec:8d:83:34:ed:44:19:b1:26:e6:c0:88:b4:6f: 9c:6e:5b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7onByy+88rlc+6Ku6bnL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjUxMjIwMTIwMDU5WhcNMjUxMjIxMTIwMDU5WjAzMTEwLwYDVQQD EygxZDlkNzViNzg0YTM2OTE1YzhkYmVkNmRjNzE5ZDAwYjRmMzZiYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDB7RZuhhQXKJZ2QTz09r1mSLNfA hDVydS5fIzVHGucMMbLMbmH08ZOn2FRSYBoihLzuXnHqdAYDwC+hWU25zFeYu24o HR1UK786eRM3LCnGi8rSzXKOg9xc5PUMmZHzBMUOy8pOfTlLjWBo+2eNmClWtjm5 BU2chemckIbwL2IWc/d+sfd37+Zw9dtLEuf4jXz1knwbDvNl+wGbH/SoKkcAGc0F XIsqTOHNZOCFkR9l4+NwvlckFfOa7lCF5pHys/YzRDvHLzZxuNgLqL5LsEddr//M NVn1z/MVBnAPfyKNV4u0ZpmGsby9Jp1+JtIKltTTW0wzoGUpyT2n7W+dZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2ddbeEo2kVyNvtbccZ0AtPNrpiMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/HbJPeg t2SwRpwwYdymLTSB47qeRNA03tFgHM/6g1LqCKow3Ilh61cWoYs2EpDF/QxgGRRM y5DNC3aLH4jcR9YvXunm5vRSi8X1TC84FaIadcDS3dizWsyOtLwYQBZFjgNIBbTx i/erx3JF6i8NMgyVpysC2ewACZG6+sL/NKyxrOgBuq1U3IidOwbWjzCUEqsYxEWE q/aVDhzsyPBiA85YrWNDWl9UPf/HAIyzONIToDet4nnbgqUDFkWoIXywJoGZqQqm F3/rGlk5oyM7sMgK9AsEoimDpF3dpfLY9HQFMtPE9pYQ8+RgOLkGEuyNgzTtRBmx JubAiLRvnG5bWg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:16:07 2025 by rpki-client