This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft File: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json) Hash identifier: ik9vgMHlphsF8Txz+1v61bKS4J0vWyqcEX4sbe4HkSQ= Subject key identifier: 4D:7E:DA:15:36:30:BA:DE:FA:51:4B:EF:8D:10:4D:8B:BF:EA:BF:9A Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f Certificate serial: 019B34C458BE5EFBA9A3A526787E19C263EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 04:00:41 +0000 Manifest this update: Fri 19 Dec 2025 04:00:41 +0000 Manifest next update: Sat 20 Dec 2025 04:00:41 +0000 Files and hashes: 1: 8AgLpzaDL0h1dumVlt3QNUC0b8g.roa (hash: dFMCTzeLz+/t3jrKpnjSyGNljO948X6d0ELCXJMhuAE=) 2: 9DMJzw07rRfF-igR7wqKT9KeDa8.roa (hash: ABLdTL2q0KpCPDDFSNDGIpACFRfb6QE136WIpKW4qXM=) 3: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: QrRZ+9FrfQEmZZ0Ye4Da6bJD87nGEyFv6e98QWO/QaA=) 4: UT0I3-20WjgyE861B6nG5TG1yMk.roa (hash: YUnPY3ov9u17ugGwQgEKlldHoKyzjUpe3RRFSJYdmsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:58:be:5e:fb:a9:a3:a5:26:78:7e:19:c2:63:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f Validity Not Before: Dec 19 04:00:41 2025 GMT Not After : Dec 20 04:00:41 2025 GMT Subject: CN=4d7eda153630badefa514bef8d104d8bbfeabf9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:a1:b1:9d:ae:55:a0:d0:8c:69:54:82:43: 3e:2e:61:0f:b8:ac:cf:64:4e:7d:35:3e:1a:e8:b6: 15:ea:15:be:6d:61:4d:ec:5b:5a:6b:72:58:dd:19: fe:d8:0f:ad:a9:6f:6c:66:bf:7c:b4:26:b2:c2:38: 8a:af:19:cf:68:d3:c4:94:03:4d:f0:fb:1e:b3:43: a7:4c:2d:e8:c5:a5:89:f2:0d:e2:ed:d4:4c:ec:97: cd:6a:7c:34:20:41:e7:f2:78:f4:eb:a5:0f:cf:53: 3c:db:ef:eb:d7:2a:ad:4b:16:dc:51:9c:58:4f:27: ef:af:ff:86:22:e2:81:46:80:12:e6:30:da:20:fe: 04:d7:de:fc:12:eb:a1:35:f5:68:24:af:30:50:a3: d3:72:33:37:5d:58:9e:f8:86:d5:58:ad:50:03:a2: 15:34:e5:c7:af:e1:2f:c0:5a:dc:f3:5c:ec:6b:8a: 53:5e:85:c0:b7:f7:a0:56:49:fe:4e:11:e4:b6:92: db:2b:8c:ac:74:fe:fa:e1:a4:41:0a:7d:19:7b:04: e4:3e:b2:53:cf:b6:c7:62:81:e2:44:e0:fb:46:22: 2c:8a:9d:1b:9d:0e:40:20:88:0d:eb:ff:96:16:17: c8:16:ba:eb:15:a9:07:13:e8:db:3a:57:71:a3:3f: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7E:DA:15:36:30:BA:DE:FA:51:4B:EF:8D:10:4D:8B:BF:EA:BF:9A X509v3 Authority Key Identifier: keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:2a:b9:63:41:ab:c4:32:01:31:c7:b1:00:a5:68:a1:23:dc: 14:98:4f:92:39:6f:fe:2f:8c:1e:7a:27:fc:dc:a1:66:6c:5e: f1:39:1f:dd:a4:9f:0f:04:87:e8:b3:8b:be:79:6a:a9:78:e1: 0a:94:90:ba:6e:33:78:b1:b7:dd:f8:d6:6c:97:8d:b9:1d:89: 6e:b8:cd:be:af:d2:09:03:4a:f2:ec:f8:fb:f2:76:d1:22:bb: 4f:69:80:77:91:96:8d:1e:86:e9:bf:dc:49:0a:af:5e:96:4e: 8d:72:0e:f7:d1:ed:e4:82:e0:ed:3e:1c:88:cc:ac:df:46:05: cd:bc:e9:64:b3:7f:81:cf:01:3d:61:99:fc:47:84:cb:ea:3a: 37:16:60:9b:99:d1:90:5b:54:69:81:9f:2f:64:ae:51:dc:3b: 7d:6b:07:a5:91:7f:4a:74:65:24:7a:76:b6:ae:fa:72:e5:be: 89:c5:04:3b:73:84:bc:5a:d7:d4:76:d8:33:54:2b:80:02:a5: d7:2b:dd:cb:a6:d8:3f:7a:7e:74:fe:4d:29:25:18:b0:13:f2: ad:09:8a:1c:e2:fb:5b:6c:b4:71:71:ed:b8:85:06:02:04:7c: c7:27:a3:5d:d3:94:71:02:ec:20:ce:7e:43:7b:96:44:bd:f4: 54:5e:e9:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xFi+Xvupo6UmeH4ZwmPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTdkNGY1OGFmODRmNTBjZTQyZjEzMjkzZWRlNGFmZjEy ZDE3M2YwHhcNMjUxMjE5MDQwMDQxWhcNMjUxMjIwMDQwMDQxWjAzMTEwLwYDVQQD Eyg0ZDdlZGExNTM2MzBiYWRlZmE1MTRiZWY4ZDEwNGQ4YmJmZWFiZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkyhsZ2uVaDQjGlUgkM+LmEPuKzP ZE59NT4a6LYV6hW+bWFN7Ftaa3JY3Rn+2A+tqW9sZr98tCaywjiKrxnPaNPElANN 8Pses0OnTC3oxaWJ8g3i7dRM7JfNanw0IEHn8nj066UPz1M82+/r1yqtSxbcUZxY Tyfvr/+GIuKBRoAS5jDaIP4E1978EuuhNfVoJK8wUKPTcjM3XVie+IbVWK1QA6IV NOXHr+EvwFrc81zsa4pTXoXAt/egVkn+ThHktpLbK4ysdP764aRBCn0ZewTkPrJT z7bHYoHiROD7RiIsip0bnQ5AIIgN6/+WFhfIFrrrFakHE+jbOldxoz/XLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1+2hU2MLre+lFL740QTYu/6r+aMB8GA1UdIwQY MBaAFBUX1PWK+E9QzkLxMpPt5K/xLRc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQt ZTVmOThkZGFmYzk4LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQtZTVmOThkZGFmYzk4 LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiq5Y0Gr xDIBMcexAKVooSPcFJhPkjlv/i+MHnon/NyhZmxe8Tkf3aSfDwSH6LOLvnlqqXjh CpSQum4zeLG33fjWbJeNuR2JbrjNvq/SCQNK8uz4+/J20SK7T2mAd5GWjR6G6b/c SQqvXpZOjXIO99Ht5ILg7T4ciMys30YFzbzpZLN/gc8BPWGZ/EeEy+o6NxZgm5nR kFtUaYGfL2SuUdw7fWsHpZF/SnRlJHp2tq76cuW+icUEO3OEvFrX1HbYM1QrgAKl 1yvdy6bYP3p+dP5NKSUYsBPyrQmKHOL7W2y0cXHtuIUGAgR8xyejXdOUcQLsIM5+ Q3uWRL30VF7pZg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:00:29 2025 by rpki-client