This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: t62qv3X4S5+qUECHnG3f+prXM+kp7BH9gkeihCSAtyA= Subject key identifier: 1F:C2:D8:EE:7F:82:ED:81:E2:B8:FF:8C:25:27:E3:53:86:46:14:77 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019B51853DA9530B60B107175CAC16B443DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 17B0 Signing time: Wed 24 Dec 2025 18:00:45 +0000 Manifest this update: Wed 24 Dec 2025 18:00:45 +0000 Manifest next update: Thu 25 Dec 2025 18:00:45 +0000 Files and hashes: 1: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 2: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 3: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 4: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 5: VHd5a_VapfxG7J2dY8XaTIvUAnI.roa (hash: qmUiIRsWjUguSkm/l6NKSA85XaSwk7dvLg/NHHYCogc=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: p0b61Ty9ymLubIIBiVwSPSMMXFyymItXfxjHy3yVlzM=) 9: iB5O2Dv_O9SgoFmPn7K4puMBzos.roa (hash: K+etiy0pRWQK1jSmyGFXzRfY6HxDEmZPOQqgSoVB5WI=) 10: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 11: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 12: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:3d:a9:53:0b:60:b1:07:17:5c:ac:16:b4:43:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Dec 24 18:00:45 2025 GMT Not After : Dec 25 18:00:45 2025 GMT Subject: CN=1fc2d8ee7f82ed81e2b8ff8c2527e35386461477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:05:86:dd:16:be:84:6c:d0:90:ba:82:98: 18:b2:22:b3:c7:c5:cc:20:94:24:dd:50:f6:ed:27: 24:db:e4:25:f9:d5:6a:18:54:f0:e8:10:41:97:de: 59:11:b6:a4:4c:ae:a7:ba:d5:bf:80:17:71:41:3a: b7:b8:84:f6:d3:2a:db:94:46:d2:81:bf:43:df:26: 16:9b:dd:36:3d:da:67:ee:8c:23:93:b2:1a:92:2e: e0:52:ac:e9:a2:17:37:83:41:12:2f:4e:02:13:eb: 84:00:fa:ad:0f:d6:96:f1:d5:f5:00:a5:e0:22:2b: fe:22:0c:fc:53:fd:f3:97:c7:0d:23:73:76:76:96: 76:ae:6b:97:e4:f5:58:0c:42:b1:24:f7:67:94:59: 7b:1f:d9:07:b7:27:92:8c:50:8b:77:a2:00:2d:a0: 7b:03:5f:42:57:22:66:15:04:df:67:6d:99:68:4c: 14:66:b6:4f:4d:51:80:d2:b7:d8:e8:e2:98:ef:bf: 2f:78:08:7d:52:18:c0:a6:6f:f5:dd:13:b7:d2:ec: ac:aa:ec:ea:a6:9f:2d:ce:f3:b7:1c:93:6a:e2:b9: 94:47:46:1e:cd:fb:fd:5a:3e:4d:de:c6:bc:3e:1c: 3c:4c:87:ea:01:57:bc:62:28:8f:ed:76:d5:4a:7b: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C2:D8:EE:7F:82:ED:81:E2:B8:FF:8C:25:27:E3:53:86:46:14:77 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:11:df:7f:02:d2:b4:10:a0:33:1a:f4:1a:a5:7d:47:8e:1c: b4:de:a1:46:2c:6e:e9:4f:85:47:2c:23:0e:cd:35:b8:6e:4f: 63:d2:a3:32:2d:e3:80:f3:8c:a7:da:af:1c:8c:b6:a1:d7:8f: 45:d7:44:ee:6f:a5:11:f7:cc:d3:e1:ca:6f:fc:d4:56:52:38: 89:c8:c8:04:41:48:ef:9d:2e:b1:5c:b8:80:9b:f6:d8:53:77: 8e:cd:10:e8:af:34:e5:e1:1e:af:87:e5:3c:6d:4a:e2:3d:a0: bd:44:d0:99:a2:d7:eb:5f:ab:ee:33:cd:13:29:45:31:88:63: e7:df:98:e0:04:9a:a1:d9:a5:d1:59:b4:31:70:ee:b0:a7:f4: 1a:6f:bc:c7:58:67:68:6e:84:bb:73:f0:bb:ed:11:ae:a5:90: f5:2a:aa:4c:82:c9:2d:99:d6:e5:3d:ab:51:26:38:57:4f:9a: 7d:de:ff:09:6f:1c:d0:cf:e5:30:25:45:98:db:0c:f1:48:d6: 51:89:7a:03:f6:d0:13:c4:24:54:d1:05:b3:19:e0:02:21:96: e1:f1:a7:5b:ef:c7:a4:fc:90:85:5f:da:86:e1:c1:49:07:97: 8d:5b:7a:78:de:8e:74:c7:ba:cf:7e:ed:e6:e1:7a:ce:b8:59: d7:e4:70:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhT2pUwtgsQcXXKwWtEPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUxMjI0MTgwMDQ1WhcNMjUxMjI1MTgwMDQ1WjAzMTEwLwYDVQQD EygxZmMyZDhlZTdmODJlZDgxZTJiOGZmOGMyNTI3ZTM1Mzg2NDYxNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eAFht0WvoRs0JC6gpgYsiKzx8XM IJQk3VD27Sck2+Ql+dVqGFTw6BBBl95ZEbakTK6nutW/gBdxQTq3uIT20yrblEbS gb9D3yYWm902Pdpn7owjk7Iaki7gUqzpohc3g0ESL04CE+uEAPqtD9aW8dX1AKXg Iiv+Igz8U/3zl8cNI3N2dpZ2rmuX5PVYDEKxJPdnlFl7H9kHtyeSjFCLd6IALaB7 A19CVyJmFQTfZ22ZaEwUZrZPTVGA0rfY6OKY778veAh9UhjApm/13RO30uysquzq pp8tzvO3HJNq4rmUR0Yezfv9Wj5N3sa8Phw8TIfqAVe8YiiP7XbVSnvM9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/C2O5/gu2B4rj/jCUn41OGRhR3MB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBHffwLS tBCgMxr0GqV9R44ctN6hRixu6U+FRywjDs01uG5PY9KjMi3jgPOMp9qvHIy2odeP RddE7m+lEffM0+HKb/zUVlI4icjIBEFI750usVy4gJv22FN3js0Q6K805eEer4fl PG1K4j2gvUTQmaLX61+r7jPNEylFMYhj59+Y4ASaodml0Vm0MXDusKf0Gm+8x1hn aG6Eu3Pwu+0RrqWQ9SqqTILJLZnW5T2rUSY4V0+afd7/CW8c0M/lMCVFmNsM8UjW UYl6A/bQE8QkVNEFsxngAiGW4fGnW+/HpPyQhV/ahuHBSQeXjVt6eN6OdMe6z37t 5uF6zrhZ1+RwXQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:12 2025 by rpki-client