This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: JqFBhUbED1yn3bQBKrEbiM2LCa+5YxImUpkRi3yTmAY= Subject key identifier: B2:DE:A7:DD:6E:13:DB:1E:08:3C:A5:96:F6:9C:E2:33:74:B7:AD:6C Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019B3B6BC45E70380A7BB060E512209856B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 17B1 Signing time: Sat 20 Dec 2025 11:01:16 +0000 Manifest this update: Sat 20 Dec 2025 11:01:16 +0000 Manifest next update: Sun 21 Dec 2025 11:01:16 +0000 Files and hashes: 1: 1-PS1jNNnBTwv-jHREhAP6k3ZYVo.roa (hash: VbVgqlFoHkyju8r4K3BXcUNoSiGbG+MwtSpHjzaMklA=) 2: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 3: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: y/n/fEMpH35serk10IXzo4fG7JWlZqoT3YSY3BU6KJg=) 4: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 5: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 6: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 7: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 8: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 9: ZYZn-5YwBHa46UGZ7YpzFXkXV2c.roa (hash: nysaKplSjq7+66zMvup13xDe5hG/XF/iaG+ccwRnc48=) 10: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 11: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 12: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 13: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:c4:5e:70:38:0a:7b:b0:60:e5:12:20:98:56:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Dec 20 11:01:16 2025 GMT Not After : Dec 21 11:01:16 2025 GMT Subject: CN=b2dea7dd6e13db1e083ca596f69ce23374b7ad6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:dd:34:eb:19:95:1b:ed:96:64:46:e8:98: a5:5c:4b:ab:1b:1b:9c:a1:4c:a8:60:7a:ca:3d:cb: 5f:20:65:75:a7:7e:6c:6b:1c:8b:ba:32:14:bf:65: f1:19:cc:ba:5b:72:59:ed:54:1c:f8:d8:90:eb:bf: fc:e2:e9:33:db:19:a6:9d:76:67:9a:98:e4:4f:f5: ed:82:2f:3d:fd:44:0d:19:d7:10:50:57:12:3e:05: ad:ee:2f:84:63:b8:60:85:3e:c0:79:b8:40:36:05: 2e:1d:57:4d:d8:55:2f:50:fc:28:47:8d:a1:9a:9f: 55:8f:a8:bf:d5:21:f8:4b:5d:38:1a:82:1c:da:c2: 18:65:b2:04:60:59:c7:17:55:4b:d7:18:1a:01:7a: 88:08:e2:55:08:55:46:00:84:41:47:d2:35:00:3b: aa:bc:c2:76:cf:06:79:4e:6f:b0:45:59:00:bb:af: 03:1b:1c:67:4b:58:3b:a3:f2:6a:b9:8f:f0:09:7a: bc:24:f8:6f:2b:1f:28:b1:86:01:61:74:7b:79:88: e5:59:b1:3f:75:c5:f0:3e:78:f9:4e:c4:be:1b:7d: 19:7b:ef:d4:1f:b1:71:54:ec:ef:1f:81:a8:25:9c: d8:82:2f:a4:dc:72:cf:f7:d2:2a:ba:8d:c5:0c:ce: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DE:A7:DD:6E:13:DB:1E:08:3C:A5:96:F6:9C:E2:33:74:B7:AD:6C X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:80:98:e4:3c:d2:78:ac:ec:96:47:21:68:fb:79:ea:4c:1e: 58:13:43:dd:fd:ca:f0:ab:ee:6f:00:d6:70:15:6b:80:3a:88: 48:71:c6:2f:66:2c:86:2f:ca:9e:3f:c7:93:88:87:d0:8d:96: bf:51:3f:ce:2b:2c:68:3a:a4:2c:d5:2d:44:b4:ea:a5:80:06: 0a:ea:d4:0f:f4:e7:0c:07:c2:5e:20:ca:dd:59:17:7a:1b:f4: c9:86:8c:d1:ef:7b:21:a4:60:00:cb:5d:84:5d:8b:bd:4a:84: a9:11:45:ca:da:6b:09:fc:29:43:4e:76:c9:98:c9:cb:63:a9: e5:1d:71:f9:e8:58:3a:ed:90:e0:ab:44:8d:d5:5a:29:51:9e: b3:79:12:c4:a3:85:f2:64:bc:02:1a:ec:a7:c8:64:e5:9a:1e: a3:77:db:1c:da:53:88:24:f0:ef:5e:f6:3b:25:b5:9f:42:09: ab:07:2f:28:75:5f:bb:96:f7:79:1a:d1:30:6f:63:85:f4:b6: f0:5f:86:1d:fd:21:66:66:31:d8:32:b8:cc:23:30:d7:17:0d: 73:b2:7d:32:38:1e:f5:54:5a:c8:7d:69:92:b3:00:19:52:f0: 69:92:ee:c9:b5:71:55:b0:53:20:30:69:4f:0d:f9:84:37:8a: ea:23:46:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a8RecDgKe7Bg5RIgmFayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUxMjIwMTEwMTE2WhcNMjUxMjIxMTEwMTE2WjAzMTEwLwYDVQQD EyhiMmRlYTdkZDZlMTNkYjFlMDgzY2E1OTZmNjljZTIzMzc0YjdhZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEPdNOsZlRvtlmRG6JilXEurGxuc oUyoYHrKPctfIGV1p35saxyLujIUv2XxGcy6W3JZ7VQc+NiQ67/84ukz2xmmnXZn mpjkT/Xtgi89/UQNGdcQUFcSPgWt7i+EY7hghT7AebhANgUuHVdN2FUvUPwoR42h mp9Vj6i/1SH4S104GoIc2sIYZbIEYFnHF1VL1xgaAXqICOJVCFVGAIRBR9I1ADuq vMJ2zwZ5Tm+wRVkAu68DGxxnS1g7o/JquY/wCXq8JPhvKx8osYYBYXR7eYjlWbE/ dcXwPnj5TsS+G30Ze+/UH7FxVOzvH4GoJZzYgi+k3HLP99Iquo3FDM42zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLep91uE9seCDyllvac4jN0t61sMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4CY5DzS eKzslkchaPt56kweWBND3f3K8KvubwDWcBVrgDqISHHGL2Yshi/Knj/Hk4iH0I2W v1E/zissaDqkLNUtRLTqpYAGCurUD/TnDAfCXiDK3VkXehv0yYaM0e97IaRgAMtd hF2LvUqEqRFFytprCfwpQ052yZjJy2Op5R1x+ehYOu2Q4KtEjdVaKVGes3kSxKOF 8mS8Ahrsp8hk5Zoeo3fbHNpTiCTw7172OyW1n0IJqwcvKHVfu5b3eRrRMG9jhfS2 8F+GHf0hZmYx2DK4zCMw1xcNc7J9Mjge9VRayH1pkrMAGVLwaZLuybVxVbBTIDBp Tw35hDeK6iNGtw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:57:40 2025 by rpki-client