This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: IPJ/NhXue3aP7BcR/Uah16nPQnCGrBClu4t6Fz88HwQ= Subject key identifier: 0F:66:32:31:8E:69:C8:7E:F8:15:4E:F5:13:F9:0B:AF:C2:16:B7:B8 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019B360DF72E696C6A6EC7D8A1C3EB335815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 0F9C Signing time: Fri 19 Dec 2025 10:00:43 +0000 Manifest this update: Fri 19 Dec 2025 10:00:43 +0000 Manifest next update: Sat 20 Dec 2025 10:00:43 +0000 Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=) 2: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=) 3: 7-RqEu_RBz9mfOLDtCp7Hvp-HNA.roa (hash: VgV4hIvu8+OJHYszRf2pjeepXfzTOT8zOwDWfq2EnHU=) 4: 9ybQ34e8dEmBjQ6HOBBKZDyyZdQ.roa (hash: cdlCSuNwjoKBSHjatuM6HP4m/AWkOkUbKPwUi14aP4g=) 5: GYn3-F2uO_h2EHGbW3621tL76oU.roa (hash: /RXXjZL0Nfv6I7oI+hupErcQ8bgbLDwmluOriUWccuY=) 6: HnAH4hdPwphL9pnrJM2oi5WzFjM.roa (hash: SKK/yufvQ72Law3tDBhQYqMJ7CuB7oHAbYb1kLK3rog=) 7: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=) 8: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: vD3T1gMvnOwSGEpGC833wu8hsicRcEYATzg/5hHneH0=) 9: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=) 10: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=) 11: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0d:f7:2e:69:6c:6a:6e:c7:d8:a1:c3:eb:33:58:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Dec 19 10:00:43 2025 GMT Not After : Dec 20 10:00:43 2025 GMT Subject: CN=0f6632318e69c87ef8154ef513f90bafc216b7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:04:8c:ff:bc:18:0e:53:5b:58:8c:42:fb: 11:92:1a:87:74:9c:b3:75:90:75:48:ad:50:ec:59: 48:14:84:ed:e0:a2:a0:42:ef:f2:63:85:21:d0:5f: b9:46:aa:e9:af:7d:71:e5:e9:84:bb:00:0b:2d:fb: 35:8f:ac:65:88:8c:36:a4:5a:70:1a:71:b2:00:9a: ef:6d:46:7d:2b:9b:a3:68:34:d5:3d:4c:ed:0e:81: 79:c0:1b:24:e1:4d:31:d2:a3:87:8e:44:65:75:55: 38:bb:3f:d3:ac:86:a9:c9:c4:76:c6:6e:ec:36:3c: 4c:dd:f6:d4:c8:3c:2a:08:02:51:5e:6a:91:da:3d: 6a:d9:41:24:a6:09:6e:36:96:7b:09:25:f5:c3:67: 58:88:75:3e:32:bc:d1:13:78:61:5e:cb:9b:0e:9c: 02:ed:39:43:32:eb:ff:91:0d:b5:e7:87:e6:77:4e: 95:f1:6e:63:c2:5b:19:86:b4:71:be:10:3b:b6:4a: 89:98:59:1e:7d:c5:ab:de:34:31:37:63:50:ee:61: 60:ce:ea:90:94:b1:de:9c:61:a4:14:3e:17:a6:bd: 6f:f7:62:61:26:93:88:cc:f4:eb:0d:30:40:e8:d6: a6:df:4a:4b:46:b1:9f:dd:97:20:95:e4:57:99:e6: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:66:32:31:8E:69:C8:7E:F8:15:4E:F5:13:F9:0B:AF:C2:16:B7:B8 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ef:f4:c0:80:43:bf:97:e7:f4:f9:73:69:8a:75:71:23:dc: 89:7f:c3:36:10:99:67:82:03:e2:e8:58:3d:a3:7f:07:f9:2d: 7e:f7:de:49:5f:ec:0e:bd:1f:c8:cf:15:1a:e2:74:39:0f:de: f7:64:84:fa:d2:e9:87:fb:17:8c:0e:c6:83:72:bf:d8:af:2a: 58:61:9e:fa:6e:ca:85:c1:da:f5:92:7f:46:78:1d:96:4f:03: 8a:7a:a2:d6:e3:d5:33:b7:72:8a:6d:46:33:fa:a5:f4:ca:b7: 9d:12:2a:bd:76:e5:af:87:23:ce:79:8c:a9:86:6e:1c:a2:45: 5c:45:e9:ea:70:5b:0b:a2:3d:9a:94:4e:b9:b7:e1:f2:3a:fa: 0a:08:34:d7:0c:3d:99:e4:02:5e:8c:96:9e:a6:d0:2b:d3:26: 0a:8a:69:a7:fa:6d:47:ab:28:46:21:0a:95:ef:aa:bb:cc:a2: 14:96:ca:ad:ab:2a:ca:b0:5e:4f:30:ba:db:36:b9:93:4b:f4: cd:03:59:91:9b:ab:6d:d8:9a:8d:8c:e3:27:9d:36:99:21:f6: a1:d7:af:b7:c1:ff:42:e5:e4:7b:1e:6b:df:72:77:46:56:74: 42:7c:de:08:fc:89:53:01:79:93:9b:a3:ff:f3:83:12:d2:8c: 39:60:ab:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DfcuaWxqbsfYocPrM1gVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjUxMjE5MTAwMDQzWhcNMjUxMjIwMTAwMDQzWjAzMTEwLwYDVQQD EygwZjY2MzIzMThlNjljODdlZjgxNTRlZjUxM2Y5MGJhZmMyMTZiN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7MEjP+8GA5TW1iMQvsRkhqHdJyz dZB1SK1Q7FlIFITt4KKgQu/yY4Uh0F+5Rqrpr31x5emEuwALLfs1j6xliIw2pFpw GnGyAJrvbUZ9K5ujaDTVPUztDoF5wBsk4U0x0qOHjkRldVU4uz/TrIapycR2xm7s NjxM3fbUyDwqCAJRXmqR2j1q2UEkpgluNpZ7CSX1w2dYiHU+MrzRE3hhXsubDpwC 7TlDMuv/kQ2154fmd06V8W5jwlsZhrRxvhA7tkqJmFkefcWr3jQxN2NQ7mFgzuqQ lLHenGGkFD4Xpr1v92JhJpOIzPTrDTBA6Nam30pLRrGf3ZcgleRXmeZvMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9mMjGOach++BVO9RP5C6/CFre4MB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALe/0wIBD v5fn9PlzaYp1cSPciX/DNhCZZ4ID4uhYPaN/B/ktfvfeSV/sDr0fyM8VGuJ0OQ/e 92SE+tLph/sXjA7Gg3K/2K8qWGGe+m7KhcHa9ZJ/Rngdlk8Dinqi1uPVM7dyim1G M/ql9Mq3nRIqvXblr4cjznmMqYZuHKJFXEXp6nBbC6I9mpROubfh8jr6Cgg01ww9 meQCXoyWnqbQK9MmCoppp/ptR6soRiEKle+qu8yiFJbKrasqyrBeTzC62za5k0v0 zQNZkZurbdiajYzjJ502mSH2odevt8H/QuXkex5r33J3RlZ0QnzeCPyJUwF5k5uj //ODEtKMOWCrKw== -----END CERTIFICATE-----Generated at Fri Dec 19 19:51:55 2025 by rpki-client