This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json) Hash identifier: uQcsT8OhQ76yiPDuSD0lnvUeVfHdeqV5G9HebdaywjE= Subject key identifier: EF:95:38:9B:F8:D3:41:58:24:21:25:6E:F2:85:20:1B:E9:E0:C9:EC Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3 Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3 Certificate serial: 019B3D5A23ED694AB17FEFEA29F8AFA5AC97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft Manifest number: 136F Signing time: Sat 20 Dec 2025 20:01:16 +0000 Manifest this update: Sat 20 Dec 2025 20:01:16 +0000 Manifest next update: Sun 21 Dec 2025 20:01:16 +0000 Files and hashes: 1: Dx1gAqycGcxk0c3DOzDhmsNycjk.roa (hash: DxcHYS8M2M1yYvT8l/4w2YI9cemThALPivyuAHPlg0M=) 2: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: Jp4i+30UU9YggVg9jso4HQi/nmSJsiamep+aJ1cDn5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:23:ed:69:4a:b1:7f:ef:ea:29:f8:af:a5:ac:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3 Validity Not Before: Dec 20 20:01:16 2025 GMT Not After : Dec 21 20:01:16 2025 GMT Subject: CN=ef95389bf8d341582421256ef285201be9e0c9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:7e:54:19:43:9e:b0:de:ce:1a:2f:98:16: 06:3d:70:75:8e:35:ea:64:bd:62:4f:91:1d:d1:3e: 08:8b:bb:90:15:2a:83:17:f8:1f:83:6e:0a:f3:e3: 9f:30:ef:7c:5d:ed:1c:f1:6b:67:13:d4:19:4d:92: 84:84:77:79:20:2c:e5:ae:a8:5c:d7:2f:90:39:5d: 8e:e0:59:4f:c9:14:b8:a4:bf:a2:1f:1c:10:86:cb: b8:aa:1f:7f:d7:52:70:fe:ed:ed:9a:3d:6f:db:96: 43:4d:20:ba:db:eb:6b:a4:36:d0:ff:46:21:86:03: 47:0b:e4:4c:f8:df:83:a4:d0:ea:24:9e:62:b1:66: 75:e5:b4:6d:17:72:df:a7:ed:e2:b7:c7:05:59:96: aa:f7:44:dd:fd:46:5c:cb:40:fe:0b:e7:84:f1:b5: c9:f8:72:77:02:d6:74:47:0f:f1:aa:ab:c9:c2:f8: a0:e7:f1:45:a3:81:99:30:3d:7c:1e:f2:4b:0f:5c: d8:d8:56:47:77:b5:5b:ac:30:ba:e3:22:42:2a:cd: e9:5a:b6:c6:05:8d:f9:b3:d3:b6:50:dd:80:62:64: eb:ad:87:50:6d:9f:a5:09:83:15:84:2c:e2:01:d6: 7d:5e:b5:d4:1f:2d:45:fa:32:66:23:67:a6:c3:9e: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:95:38:9B:F8:D3:41:58:24:21:25:6E:F2:85:20:1B:E9:E0:C9:EC X509v3 Authority Key Identifier: keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3b:d2:4d:e7:c9:ee:d3:54:b0:ce:a0:95:f1:e4:da:8b:8c: 30:d6:7b:a6:7a:c5:da:b7:a4:3a:fc:ab:43:be:65:30:c6:fe: 1b:f0:14:54:66:fe:b6:35:42:48:4f:f2:5d:96:5c:4b:57:71: c4:95:f0:d4:4b:22:9a:41:60:54:42:e9:35:98:1d:bd:40:e0: dd:27:ab:01:de:e4:56:56:4c:18:32:49:1c:a9:9d:fa:c5:85: 31:29:36:c1:9f:24:0a:6f:ca:a0:dc:14:62:fb:05:56:dc:06: de:37:f8:b6:ac:94:52:25:af:01:a6:2a:88:ae:45:6d:eb:b2: fe:2d:9d:70:ea:3a:8a:20:21:fa:4c:1f:dc:37:1c:55:bc:8d: a6:06:fa:6d:26:e4:47:f8:a8:f7:71:4d:ae:81:21:95:b4:71: a4:97:83:c7:73:a9:c5:2b:f0:6a:df:a1:6e:24:c2:8d:8b:03: eb:74:a8:2c:dc:1f:26:39:5b:be:7d:5d:7a:30:76:a3:7a:8e: df:b3:e3:b7:e0:57:ec:51:f5:69:12:bb:38:0b:85:49:3d:9a: b3:27:22:82:ad:24:2d:df:c4:5c:e4:04:08:74:c5:31:15:12: 19:46:0a:91:f4:54:56:6d:12:8b:89:f7:ee:76:58:4d:cb:f2: 60:6f:26:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WiPtaUqxf+/qKfivpayXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODBiNzcxMGIxMzk4NDQyNzVjOWRlOWM4ZTc2NGViNjQy ZTE4YzMwHhcNMjUxMjIwMjAwMTE2WhcNMjUxMjIxMjAwMTE2WjAzMTEwLwYDVQQD EyhlZjk1Mzg5YmY4ZDM0MTU4MjQyMTI1NmVmMjg1MjAxYmU5ZTBjOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLp+VBlDnrDezhovmBYGPXB1jjXq ZL1iT5Ed0T4Ii7uQFSqDF/gfg24K8+OfMO98Xe0c8WtnE9QZTZKEhHd5ICzlrqhc 1y+QOV2O4FlPyRS4pL+iHxwQhsu4qh9/11Jw/u3tmj1v25ZDTSC62+trpDbQ/0Yh hgNHC+RM+N+DpNDqJJ5isWZ15bRtF3Lfp+3it8cFWZaq90Td/UZcy0D+C+eE8bXJ +HJ3AtZ0Rw/xqqvJwvig5/FFo4GZMD18HvJLD1zY2FZHd7VbrDC64yJCKs3pWrbG BY35s9O2UN2AYmTrrYdQbZ+lCYMVhCziAdZ9XrXUHy1F+jJmI2emw54h2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+VOJv400FYJCElbvKFIBvp4MnsMB8GA1UdIwQY MBaAFP+At3ELE5hEJ1yd6cjnZOtkLhjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQt MTMzZWZmNzg0NDJiLzEvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOGEwYTUtYjE4NS00OWE1LTg1YWQtMTMzZWZmNzg0NDJi LzEvXzRDM2NRc1RtRVFuWEozcHlPZGs2MlF1R01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjvSTefJ 7tNUsM6glfHk2ouMMNZ7pnrF2rekOvyrQ75lMMb+G/AUVGb+tjVCSE/yXZZcS1dx xJXw1EsimkFgVELpNZgdvUDg3SerAd7kVlZMGDJJHKmd+sWFMSk2wZ8kCm/KoNwU YvsFVtwG3jf4tqyUUiWvAaYqiK5Fbeuy/i2dcOo6iiAh+kwf3DccVbyNpgb6bSbk R/io93FNroEhlbRxpJeDx3OpxSvwat+hbiTCjYsD63SoLNwfJjlbvn1dejB2o3qO 37Pjt+BX7FH1aRK7OAuFST2asycigq0kLd/EXOQECHTFMRUSGUYKkfRUVm0Si4n3 7nZYTcvyYG8mBg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:08:49 2025 by rpki-client