This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft File: __48efMne-a_MrCqZ5PfjuT8aT8.mft (raw, json) Hash identifier: wCm9UCoJAt3le5NnEbJMyHbxC3R6cOQyOOK3qZceq4c= Subject key identifier: F6:C2:D7:1A:6F:2D:ED:22:6E:72:82:E3:DC:58:76:71:B5:27:22:6B Authority key identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F Certificate issuer: /CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f Certificate serial: 019B5B9B3BAD4E67DCBBD4AA34B96428748C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft Manifest number: 02DE Signing time: Fri 26 Dec 2025 17:00:58 +0000 Manifest this update: Fri 26 Dec 2025 17:00:58 +0000 Manifest next update: Sat 27 Dec 2025 17:00:58 +0000 Files and hashes: 1: 0kaaAyo2H1IRNt6Ftj5Xi8qB5D8.roa (hash: vEdWjhFIP+oKICnFyIXPgNR6jJ68k0xMBCGivZ1H4Mc=) 2: __48efMne-a_MrCqZ5PfjuT8aT8.crl (hash: si6aCJTp3LBKaw+serIt2M/7UQ9zdO7sIsJ9QoxqTLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9b:3b:ad:4e:67:dc:bb:d4:aa:34:b9:64:28:74:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f Validity Not Before: Dec 26 17:00:58 2025 GMT Not After : Dec 27 17:00:58 2025 GMT Subject: CN=f6c2d71a6f2ded226e7282e3dc587671b527226b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:e1:19:81:ba:f2:33:c5:05:5a:b5:38:2f: 39:34:f4:43:7d:da:d6:c2:f9:f1:f4:f9:5a:1d:bc: ea:b0:c4:29:d3:c5:10:eb:10:59:6f:8f:a0:4e:57: 41:87:e7:94:93:d3:50:1f:91:be:8e:1f:cf:88:ee: db:bf:0d:81:43:c3:9e:73:c3:10:f9:65:30:b4:28: 75:14:a2:a7:b9:db:f3:a9:69:27:f8:20:e9:f6:a4: 25:74:00:56:45:17:01:f8:12:d9:5d:7d:89:a9:f7: f0:26:95:00:8f:3d:31:5c:38:4c:b0:ec:e5:bc:ed: bb:ad:85:1a:d5:e0:f7:34:34:d0:4a:a7:0b:d0:b4: b9:71:6a:b1:a6:da:50:ac:f7:5a:57:db:9c:d1:08: db:cf:d3:49:06:44:f3:3c:2c:86:66:40:8a:0d:9e: dd:f4:23:8e:65:60:d8:7d:33:70:b4:64:ff:0f:3f: b3:f5:ab:77:5e:d8:82:9a:a4:96:fa:00:3e:d2:12: 5c:ee:ef:4c:cd:69:96:c5:0f:7d:bb:2d:d7:18:cd: 4f:24:f1:0a:a7:34:86:48:46:45:70:db:c6:08:3c: a9:76:b4:74:15:64:8a:c7:77:f2:55:ac:84:9a:44: 4f:4c:7d:db:d4:97:02:59:2b:5f:7e:ee:5f:13:f9: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C2:D7:1A:6F:2D:ED:22:6E:72:82:E3:DC:58:76:71:B5:27:22:6B X509v3 Authority Key Identifier: keyid:FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:17:0e:a8:55:e9:fb:17:f2:73:85:3a:9e:1f:ad:aa:22:f3: 80:92:1d:64:a4:4e:48:7e:2c:0c:7e:c5:a2:c2:1e:c6:13:e6: db:9d:20:ef:7a:ae:c4:da:a2:8e:32:a4:1a:38:24:c4:38:2a: ca:49:22:21:fc:a7:44:7b:b7:d6:cf:c1:ce:bd:05:3b:f1:09: 1b:69:69:ce:96:e8:b3:27:28:96:0a:ee:c8:0e:ae:90:8f:30: fe:dc:cc:ab:91:dd:ce:5f:bb:9b:34:55:a5:15:28:8b:fa:c2: 54:b7:80:34:8f:ef:eb:da:6f:2a:86:5c:9c:3d:00:b0:ef:63: 24:c6:59:4b:2f:01:6e:f0:c1:af:72:be:73:9d:0d:a3:f1:4c: 78:cb:c3:89:c5:fe:06:74:60:30:aa:c1:f3:b8:f1:62:92:b2: 33:a6:23:91:92:c1:01:e7:25:b7:ef:63:c4:a5:1f:a7:9a:ea: 10:31:f3:92:8f:92:28:db:de:b4:af:ad:31:50:15:75:a9:2b: a8:8c:ff:04:dd:21:7d:51:6e:c6:5f:fa:74:2a:2c:8e:11:e7: 22:5f:78:a2:7b:11:b2:20:2b:5a:52:39:b7:d4:a4:ae:fc:05: b4:ea:92:c4:0e:c2:2b:8c:db:cd:99:cf:a0:93:7a:c9:c8:52: 46:27:59:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbmzutTmfcu9SqNLlkKHSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZmUzYzc5ZjMyNzdiZTZiZjMyYjBhYTY3OTNkZjhlZTRm YzY5M2YwHhcNMjUxMjI2MTcwMDU4WhcNMjUxMjI3MTcwMDU4WjAzMTEwLwYDVQQD EyhmNmMyZDcxYTZmMmRlZDIyNmU3MjgyZTNkYzU4NzY3MWI1MjcyMjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzHhGYG68jPFBVq1OC85NPRDfdrW wvnx9PlaHbzqsMQp08UQ6xBZb4+gTldBh+eUk9NQH5G+jh/PiO7bvw2BQ8Oec8MQ +WUwtCh1FKKnudvzqWkn+CDp9qQldABWRRcB+BLZXX2JqffwJpUAjz0xXDhMsOzl vO27rYUa1eD3NDTQSqcL0LS5cWqxptpQrPdaV9uc0Qjbz9NJBkTzPCyGZkCKDZ7d 9COOZWDYfTNwtGT/Dz+z9at3XtiCmqSW+gA+0hJc7u9MzWmWxQ99uy3XGM1PJPEK pzSGSEZFcNvGCDypdrR0FWSKx3fyVayEmkRPTH3b1JcCWStffu5fE/kiAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbC1xpvLe0ibnKC49xYdnG1JyJrMB8GA1UdIwQY MBaAFP/+PHnzJ3vmvzKwqmeT347k/Gk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQt ZjIwMjVkN2FlOGJkLzEvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQtZjIwMjVkN2FlOGJk LzEvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhcOqFXp +xfyc4U6nh+tqiLzgJIdZKROSH4sDH7FosIexhPm250g73quxNqijjKkGjgkxDgq ykkiIfynRHu31s/Bzr0FO/EJG2lpzpbosycolgruyA6ukI8w/tzMq5Hdzl+7mzRV pRUoi/rCVLeANI/v69pvKoZcnD0AsO9jJMZZSy8BbvDBr3K+c50No/FMeMvDicX+ BnRgMKrB87jxYpKyM6YjkZLBAeclt+9jxKUfp5rqEDHzko+SKNvetK+tMVAVdakr qIz/BN0hfVFuxl/6dCosjhHnIl94onsRsiArWlI5t9SkrvwFtOqSxA7CK4zbzZnP oJN6ychSRidZrw== -----END CERTIFICATE-----Generated at Sat Dec 27 02:34:43 2025 by rpki-client