This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: PDAuCEzdr0bkX8UbqiHlEhBxxKz2fK7PxcmDQuurwaM= Subject key identifier: 7A:F7:26:F7:9B:11:E8:D8:0A:39:65:C2:E2:7E:AD:F4:0F:70:97:41 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019B390FBD540CE7AEBB5F3A3D8D582CF9C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 062A Signing time: Sat 20 Dec 2025 00:01:31 +0000 Manifest this update: Sat 20 Dec 2025 00:01:31 +0000 Manifest next update: Sun 21 Dec 2025 00:01:31 +0000 Files and hashes: 1: 9RdZIw-S-FYoTEGCNtUVTMr1UI0.roa (hash: cuWu4zoZh39hHnMbQsbn1GavX5fkwgR9EpdjwPAYmFM=) 2: C36HYE9g7Segc4lKsITQsAPbk3A.roa (hash: xJXCT5dY3X53zr13t7CE1ukR4VVrDp6NvKtvl+FjEKs=) 3: J9sdBRndgWMXRbtrEj6DzAaduFM.roa (hash: 1mU1gIeMkOu38sOl5UhcF+y7DrqaJPBXlv7kx0JqTAw=) 4: K6r4JbxghClQGiOJgPHD3qM06uA.roa (hash: Z7BS3eMvEl2jFHcYWZaavqiGcVmavHPtMtk5iNM38S8=) 5: TC0Y0MRiVGuCk9KeE2YTdQkSY5g.roa (hash: A9A/+N3cfY5tTyxnkmJjtjdfLKr1kUCtTIA5PMEPYUY=) 6: WLnNiHQkhlfgINfxpD2br98XvwA.roa (hash: meEdE8yNwOSarbCrMNr+5gmR/PbuI8v0hmQMO5QzIaA=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: TJuViALzHGnKDCSZzUOvKnkC4qdoRxn9mlUv590ze1M=) 8: ji8mgP3HaP5YwCtbSswxHq5RkcI.roa (hash: 7Q+Cg2MRI/aftnl1dS18dRJiyUzgRYmnJMQKtspw+W8=) 9: jrWoUX2I08t96DUAzMXpfrjbImw.roa (hash: 5fZxekpC+R8XTkzuMqL1WK63VlO9GSurjZzzW/k5L60=) 10: nWYHniVnDldwYunEGsc0VWWiVYU.roa (hash: VRa9zgOVZdpaRaM8P3APLwpP4Czcpn3M9s3Qb5fNEps=) 11: pF_pVy2TIwjzEOlTFDghAKXtbzQ.roa (hash: hczSlLK7qtHA0sxQPsDXkLAUtpEz88IsWfA1PqBcBfA=) 12: sZTa8Qa0TVk8uF_RHqCxSF_1GR0.roa (hash: u/AILdLiccMU6aDdQlKIvISGgDYDPhdz3YzBRcZY5lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:bd:54:0c:e7:ae:bb:5f:3a:3d:8d:58:2c:f9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Dec 20 00:01:31 2025 GMT Not After : Dec 21 00:01:31 2025 GMT Subject: CN=7af726f79b11e8d80a3965c2e27eadf40f709741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:d1:67:16:cd:48:37:58:e0:c2:b8:20:9b: d9:e2:a2:83:85:bf:47:6b:dd:31:97:6d:9c:21:b3: 96:9c:6f:2a:17:e6:a4:ae:f2:2b:bf:f0:44:3c:ec: f4:5c:ef:50:59:f1:94:3d:81:84:f9:00:3f:d1:f5: af:7e:49:dd:e5:e9:27:2b:0f:2b:13:f5:d0:3f:b7: 96:89:50:f9:99:7e:da:68:bc:fe:59:58:e2:04:79: f1:77:16:c5:e7:6b:14:09:ee:f5:fe:9b:c7:ac:47: 4d:30:a4:f8:38:a5:02:d1:ae:46:66:79:a8:86:40: 1c:42:4e:a3:2a:10:b4:98:ac:be:b0:d9:76:d5:a2: 4a:f0:47:9c:b9:c7:a6:b2:46:85:ee:0b:3d:6d:01: 48:c8:67:6b:14:25:33:f3:44:b9:91:4d:0a:bd:35: cc:d4:2e:8d:92:25:9b:f3:ac:b9:f1:78:17:2c:ba: 4b:dc:25:e2:f0:72:3c:e5:c0:01:74:cf:6a:b0:9f: 03:d6:a9:da:6a:38:fa:9e:ee:62:85:07:7a:90:69: 30:47:34:34:5a:74:b7:19:7c:47:0d:54:3c:73:98: 3e:f2:d6:64:76:e6:ef:4e:bf:d3:1e:da:f5:b6:48: 88:14:47:cc:07:1a:81:00:80:c0:f5:92:f8:f2:84: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F7:26:F7:9B:11:E8:D8:0A:39:65:C2:E2:7E:AD:F4:0F:70:97:41 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c6:63:d1:f8:1a:f0:c2:94:63:48:83:3c:5f:57:c4:f5:75: 4b:01:14:c9:77:dd:5d:1e:d8:da:6a:3c:3d:21:87:a0:e6:0e: ae:7b:f8:a2:d1:5a:65:c6:6c:2a:fb:ce:3f:55:ef:7f:5f:b2: 0f:c0:4c:3c:87:e6:7c:55:f4:fc:38:f8:3c:47:29:3a:63:22: fc:16:a2:bf:f4:18:8a:44:cc:c5:f5:f9:4e:2e:31:c1:2f:bc: 25:39:55:4f:a1:e6:3e:71:45:f8:1e:c1:47:b4:e5:f1:c7:ec: 63:13:a7:b8:30:73:ba:4b:5a:81:37:cd:c7:50:bd:a8:16:b2: 8d:3f:f2:db:a5:65:dc:69:8b:6b:a7:18:3b:9c:3b:a4:ce:73: 44:16:67:89:01:10:67:f3:95:bb:b6:ba:d8:9c:8a:69:60:9e: 04:45:6b:83:8a:67:18:34:1a:7e:9a:86:69:7e:e1:bc:b3:50: b6:7e:90:87:98:a1:f3:1d:63:09:67:9e:b7:95:b5:41:eb:b3: 4e:81:80:72:e5:0f:62:bf:2b:63:f5:3f:5c:a1:fe:15:33:14: a1:af:a2:8e:df:99:55:b2:03:b5:e4:7f:e8:3b:b4:ca:79:43: f6:eb:b6:60:17:cb:5d:f4:c0:33:dc:21:12:81:76:ac:bf:ba: 36:96:6b:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D71UDOeuu186PY1YLPnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjUxMjIwMDAwMTMxWhcNMjUxMjIxMDAwMTMxWjAzMTEwLwYDVQQD Eyg3YWY3MjZmNzliMTFlOGQ4MGEzOTY1YzJlMjdlYWRmNDBmNzA5NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hjRZxbNSDdY4MK4IJvZ4qKDhb9H a90xl22cIbOWnG8qF+akrvIrv/BEPOz0XO9QWfGUPYGE+QA/0fWvfknd5eknKw8r E/XQP7eWiVD5mX7aaLz+WVjiBHnxdxbF52sUCe71/pvHrEdNMKT4OKUC0a5GZnmo hkAcQk6jKhC0mKy+sNl21aJK8EecucemskaF7gs9bQFIyGdrFCUz80S5kU0KvTXM 1C6NkiWb86y58XgXLLpL3CXi8HI85cABdM9qsJ8D1qnaajj6nu5ihQd6kGkwRzQ0 WnS3GXxHDVQ8c5g+8tZkdubvTr/THtr1tkiIFEfMBxqBAIDA9ZL48oTX2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr3JvebEejYCjllwuJ+rfQPcJdBMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMZj0fga 8MKUY0iDPF9XxPV1SwEUyXfdXR7Y2mo8PSGHoOYOrnv4otFaZcZsKvvOP1Xvf1+y D8BMPIfmfFX0/Dj4PEcpOmMi/Baiv/QYikTMxfX5Ti4xwS+8JTlVT6HmPnFF+B7B R7Tl8cfsYxOnuDBzuktagTfNx1C9qBayjT/y26Vl3GmLa6cYO5w7pM5zRBZniQEQ Z/OVu7a62JyKaWCeBEVrg4pnGDQafpqGaX7hvLNQtn6Qh5ih8x1jCWeet5W1Qeuz ToGAcuUPYr8rY/U/XKH+FTMUoa+ijt+ZVbIDteR/6Du0ynlD9uu2YBfLXfTAM9wh EoF2rL+6NpZrlQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:48:46 2025 by rpki-client