This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: 3FOroiFMz80Tiyj4yw9ElmAHCb9DPjx4ftpe4UcfNNo= Subject key identifier: 1F:BC:0D:3B:45:ED:0B:7F:BF:75:80:A0:31:6C:2A:5E:8A:DD:97:6D Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019B367BD138639A67CC1B7393567C5C696D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 17A2 Signing time: Fri 19 Dec 2025 12:00:42 +0000 Manifest this update: Fri 19 Dec 2025 12:00:42 +0000 Manifest next update: Sat 20 Dec 2025 12:00:42 +0000 Files and hashes: 1: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 2: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 3: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 4: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 5: VHd5a_VapfxG7J2dY8XaTIvUAnI.roa (hash: qmUiIRsWjUguSkm/l6NKSA85XaSwk7dvLg/NHHYCogc=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: M3FjWeIrD/pwDOmIads5xH5Oa2tioppctZQDtvc06lw=) 9: iB5O2Dv_O9SgoFmPn7K4puMBzos.roa (hash: K+etiy0pRWQK1jSmyGFXzRfY6HxDEmZPOQqgSoVB5WI=) 10: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 11: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 12: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:d1:38:63:9a:67:cc:1b:73:93:56:7c:5c:69:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Dec 19 12:00:42 2025 GMT Not After : Dec 20 12:00:42 2025 GMT Subject: CN=1fbc0d3b45ed0b7fbf7580a0316c2a5e8add976d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:92:f5:ed:18:56:a6:8f:18:48:80:15:3f: 5b:86:17:b6:2c:27:5b:57:44:5b:a8:df:d7:66:91: 72:f3:5b:df:d0:d6:e9:de:4f:6d:d8:db:9e:18:66: cf:fc:73:03:94:01:d5:4d:b7:9b:29:71:b4:45:f9: 15:80:4f:17:04:fc:af:b0:74:c2:b1:c4:5e:f1:84: 17:95:f9:5b:d3:10:cf:54:7f:60:37:91:82:32:f9: f3:04:23:56:49:93:1a:7a:e3:29:59:f4:24:75:de: 96:8c:8e:77:9a:05:e0:56:66:35:b2:ae:42:3d:72: 1f:f4:b0:77:d6:27:5d:24:cb:ce:e1:aa:d8:78:f5: 65:0b:7b:14:30:f9:d0:8a:da:b3:5e:f6:85:68:03: 34:7e:0b:25:13:c6:70:b7:8a:5f:52:b4:93:1b:21: 3e:d9:4a:98:70:d3:bc:42:2c:ba:35:2b:95:25:d8: 67:e8:e1:a6:0a:8e:0b:e0:83:b7:14:d7:7f:71:40: a7:68:ed:ae:06:40:07:c2:11:f0:9a:5a:0b:3d:68: de:c2:6f:96:43:d6:92:c2:a0:3a:56:a4:5e:e5:ce: 45:bd:a2:f1:64:ac:37:4e:a6:5a:c6:6b:2e:99:2c: 0f:d8:14:b2:83:78:d0:a9:d3:a2:2b:ea:a5:51:13: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BC:0D:3B:45:ED:0B:7F:BF:75:80:A0:31:6C:2A:5E:8A:DD:97:6D X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:73:c2:74:a2:e6:8b:0d:c5:24:2f:80:ed:b8:1a:5e:93:25: b0:96:c9:d3:1d:7d:7c:04:d5:64:2d:3d:f2:5d:de:89:ea:34: 78:5e:fc:2b:6f:97:a2:6a:88:01:0b:ed:26:67:13:48:e1:56: 51:62:64:9f:5b:bc:19:09:60:d8:dd:b4:15:a5:7c:e0:54:0e: 67:96:74:d0:84:9c:62:ce:da:ff:ab:47:4f:14:55:39:55:7c: d3:9b:5f:03:28:96:35:c9:c2:27:71:1b:2a:94:e7:17:c9:25: ea:b9:a1:a8:3a:63:f8:fd:a9:68:1a:17:95:bd:5a:26:37:d1: ab:9f:cd:e5:2d:10:11:45:25:b9:34:1c:d9:8d:2a:79:08:8d: 94:4b:88:19:ad:11:6d:9e:27:e3:75:2c:2f:7c:93:c3:42:2d: c7:4e:6f:e4:10:61:4e:55:78:dd:28:a3:49:ef:6a:4c:ca:c7: ad:7b:f0:8e:23:31:94:65:f3:87:a2:ad:fc:69:54:b2:30:d9: f9:43:ac:d0:8f:f0:be:82:03:4c:e2:7b:9c:e3:84:57:0a:50: a8:af:97:5b:e8:35:0e:c8:c7:68:bf:f2:03:02:23:23:87:f5: f6:ca:43:b6:04:2d:c2:8d:11:4b:42:2a:04:75:a0:1e:a0:bb: ca:0f:67:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e9E4Y5pnzBtzk1Z8XGltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUxMjE5MTIwMDQyWhcNMjUxMjIwMTIwMDQyWjAzMTEwLwYDVQQD EygxZmJjMGQzYjQ1ZWQwYjdmYmY3NTgwYTAzMTZjMmE1ZThhZGQ5NzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuliS9e0YVqaPGEiAFT9bhhe2LCdb V0RbqN/XZpFy81vf0Nbp3k9t2NueGGbP/HMDlAHVTbebKXG0RfkVgE8XBPyvsHTC scRe8YQXlflb0xDPVH9gN5GCMvnzBCNWSZMaeuMpWfQkdd6WjI53mgXgVmY1sq5C PXIf9LB31iddJMvO4arYePVlC3sUMPnQitqzXvaFaAM0fgslE8Zwt4pfUrSTGyE+ 2UqYcNO8Qiy6NSuVJdhn6OGmCo4L4IO3FNd/cUCnaO2uBkAHwhHwmloLPWjewm+W Q9aSwqA6VqRe5c5FvaLxZKw3TqZaxmsumSwP2BSyg3jQqdOiK+qlURNOwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+8DTtF7Qt/v3WAoDFsKl6K3ZdtMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnPCdKLm iw3FJC+A7bgaXpMlsJbJ0x19fATVZC098l3eieo0eF78K2+XomqIAQvtJmcTSOFW UWJkn1u8GQlg2N20FaV84FQOZ5Z00IScYs7a/6tHTxRVOVV805tfAyiWNcnCJ3Eb KpTnF8kl6rmhqDpj+P2paBoXlb1aJjfRq5/N5S0QEUUluTQc2Y0qeQiNlEuIGa0R bZ4n43UsL3yTw0Itx05v5BBhTlV43SijSe9qTMrHrXvwjiMxlGXzh6Kt/GlUsjDZ +UOs0I/wvoIDTOJ7nOOEVwpQqK+XW+g1DsjHaL/yAwIjI4f19spDtgQtwo0RS0Iq BHWgHqC7yg9nPg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:54:43 2025 by rpki-client