This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft File: ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json) Hash identifier: yBmqKF/zKFAY86U0agv59seIomdy+L1O/A9EUNpwdGg= Subject key identifier: 29:2C:FE:FE:B6:A2:DC:56:85:F8:5B:E4:AB:5C:51:2C:E8:62:0B:2B Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a Certificate serial: 019B54866DEB7C16CAA2130C1FB1CE1ACF85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft Manifest number: 14DF Signing time: Thu 25 Dec 2025 08:00:54 +0000 Manifest this update: Thu 25 Dec 2025 08:00:54 +0000 Manifest next update: Fri 26 Dec 2025 08:00:54 +0000 Files and hashes: 1: BS_uFjltIa2QdarHmlrjr-N1lfU.roa (hash: In6YLEFgpwciZfoYuJdlvQqiCYVNTfn1vSODPqF0a14=) 2: KyGy1yiZWdO5Baarc34FhluuX6o.roa (hash: PluDSAEvqHUwzzXaYjhHiEYtCeH5Nq3YEFQLeyKhxg0=) 3: MTuQql9Rh88BHIoSEfi0N5xULhQ.roa (hash: c4KaJbDb+YQM6dcx+R5wyGu53GnRsEWM+y0F8Wui/6Q=) 4: aPIQbORfDqMdRus3FUsayPmmxSc.roa (hash: Bjwo2XfxvG4dmeK0piMxmJc9w9b8pe3Sc6uuX95IjTw=) 5: aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa (hash: Y8Xw4D+ihA3z60B6zW48nfEFoOcri17+Bm+/jPd3INc=) 6: kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa (hash: i5sBmgPlAzgh1HcdG7lTgrd/mdbOcJciFVKfQ5U2fAw=) 7: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: rnB91FJOfNk+QyEw4SlaDTjZT10rw3Aj2lBUfgY0nDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:6d:eb:7c:16:ca:a2:13:0c:1f:b1:ce:1a:cf:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a Validity Not Before: Dec 25 08:00:54 2025 GMT Not After : Dec 26 08:00:54 2025 GMT Subject: CN=292cfefeb6a2dc5685f85be4ab5c512ce8620b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:47:da:82:b6:60:46:c2:39:0e:0a:34:76:51: 89:d5:6e:3a:d0:0d:15:97:6f:91:46:7b:4d:64:4e: f4:39:9e:c5:2e:0a:21:25:23:95:8d:c3:13:15:68: ba:4d:48:42:2f:11:96:ad:d2:e4:97:79:b1:25:3c: 25:94:bb:36:0c:55:8d:6e:18:6a:99:e6:c0:ff:5a: e3:ac:30:2e:2e:fa:2a:be:9c:88:48:60:78:c3:93: b9:c3:17:4c:87:86:c8:25:4f:a0:36:d1:2f:aa:79: a4:be:7b:9b:65:f0:42:32:92:49:99:54:71:fb:7d: cb:49:8a:21:64:d2:0e:77:fd:7f:ca:ea:c0:b7:5d: 9d:bd:75:d9:af:3a:99:6d:bf:a7:1e:f5:29:68:0e: 17:09:42:63:58:96:1d:7c:69:86:38:0c:95:52:9e: 83:f2:af:00:41:3d:c7:5a:eb:d2:23:32:18:d8:6e: 01:1b:0b:3d:16:4a:7d:f6:c1:3d:ad:72:de:0f:78: b1:1f:79:41:e8:bc:cb:c4:af:36:4f:1b:0b:32:92: 4d:07:74:09:8e:50:3d:fd:d0:62:c8:67:96:8b:5b: b9:63:6e:7d:6d:f0:eb:13:80:e2:4b:23:2f:d8:be: fc:33:51:c0:40:1e:38:71:0b:09:fa:c0:4e:d2:dd: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2C:FE:FE:B6:A2:DC:56:85:F8:5B:E4:AB:5C:51:2C:E8:62:0B:2B X509v3 Authority Key Identifier: keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:90:9b:ed:7e:aa:5f:de:15:2e:18:8a:81:2d:d4:6b:8a:2b: bd:e6:bf:67:51:39:05:d6:45:9a:e4:f9:b8:5f:1c:ce:2f:c6: 01:26:58:bb:b6:87:c5:85:72:f6:9f:23:ff:c7:59:6d:5a:9a: 2b:76:76:13:e4:ab:10:4b:d8:68:2a:a7:36:21:6f:1e:ab:29: cc:5e:1f:15:cd:2d:ae:f0:e5:9a:e0:34:43:13:69:2c:94:a7: ab:c4:b6:c6:96:f0:75:2a:e2:49:44:19:66:60:c9:87:d9:d5: ce:99:a7:a2:93:3b:9a:b3:1c:bb:11:9e:8f:0f:33:a0:1e:64: 7a:62:37:72:60:29:72:23:d4:28:ab:7b:c7:00:66:3a:00:e3: 42:fe:a2:6f:8e:33:b0:24:13:d9:93:ce:bf:80:72:33:5c:0b: 4f:87:be:41:21:64:7c:e1:08:78:6d:6d:fc:4f:f2:30:81:97: d6:30:06:ba:97:c5:7c:b2:fa:85:17:3f:a7:c9:21:49:ac:58: 43:e2:dc:1e:d3:3d:b3:d2:7c:7f:e4:b3:b3:18:95:ba:09:3e: 9a:79:67:1f:5c:ee:ac:d8:38:68:b9:c4:2d:f7:c9:fa:fd:98: c8:25:cc:12:dc:28:20:c3:ae:cc:4c:5f:dd:84:fb:14:e8:f4: 3b:01:30:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhm3rfBbKohMMH7HOGs+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4 M2MzOWEwHhcNMjUxMjI1MDgwMDU0WhcNMjUxMjI2MDgwMDU0WjAzMTEwLwYDVQQD EygyOTJjZmVmZWI2YTJkYzU2ODVmODViZTRhYjVjNTEyY2U4NjIwYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kfagrZgRsI5Dgo0dlGJ1W460A0V l2+RRntNZE70OZ7FLgohJSOVjcMTFWi6TUhCLxGWrdLkl3mxJTwllLs2DFWNbhhq mebA/1rjrDAuLvoqvpyISGB4w5O5wxdMh4bIJU+gNtEvqnmkvnubZfBCMpJJmVRx +33LSYohZNIOd/1/yurAt12dvXXZrzqZbb+nHvUpaA4XCUJjWJYdfGmGOAyVUp6D 8q8AQT3HWuvSIzIY2G4BGws9Fkp99sE9rXLeD3ixH3lB6LzLxK82TxsLMpJNB3QJ jlA9/dBiyGeWi1u5Y259bfDrE4DiSyMv2L78M1HAQB44cQsJ+sBO0t1woQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCks/v62otxWhfhb5KtcUSzoYgsrMB8GA1UdIwQY MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt NDk3YmVkZDcxZWI5LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5 LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5Cb7X6q X94VLhiKgS3Ua4orvea/Z1E5BdZFmuT5uF8czi/GASZYu7aHxYVy9p8j/8dZbVqa K3Z2E+SrEEvYaCqnNiFvHqspzF4fFc0trvDlmuA0QxNpLJSnq8S2xpbwdSriSUQZ ZmDJh9nVzpmnopM7mrMcuxGejw8zoB5kemI3cmApciPUKKt7xwBmOgDjQv6ib44z sCQT2ZPOv4ByM1wLT4e+QSFkfOEIeG1t/E/yMIGX1jAGupfFfLL6hRc/p8khSaxY Q+LcHtM9s9J8f+SzsxiVugk+mnlnH1zurNg4aLnELffJ+v2YyCXMEtwoIMOuzExf 3YT7FOj0OwEwng== -----END CERTIFICATE-----Generated at Thu Dec 25 17:28:22 2025 by rpki-client