This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft File: rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json) Hash identifier: lnrPxWS/dYHwxDKYD0Q7yUSjFL1SsoUoeIkDiu7LOq4= Subject key identifier: 01:24:F5:2B:F2:F1:A5:79:DF:FD:CB:B4:CF:96:18:A5:56:00:A0:6C Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Certificate serial: 019B668CF7F43974859A05FE1B7CFEBADE3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft Manifest number: 0B5F Signing time: Sun 28 Dec 2025 20:01:13 +0000 Manifest this update: Sun 28 Dec 2025 20:01:13 +0000 Manifest next update: Mon 29 Dec 2025 20:01:13 +0000 Files and hashes: 1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=) 2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=) 3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=) 4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: Z6ON8Uz8IQRyTxYNx4tWNC1JZcNvqHRGGP62PcS3O0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:f7:f4:39:74:85:9a:05:fe:1b:7c:fe:ba:de:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Validity Not Before: Dec 28 20:01:13 2025 GMT Not After : Dec 29 20:01:13 2025 GMT Subject: CN=0124f52bf2f1a579dffdcbb4cf9618a55600a06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:26:f6:8d:97:62:73:43:29:cf:f3:b7:e1: 0d:ea:70:03:d3:47:91:9e:e6:f2:e0:81:e0:3e:9a: 70:46:d2:1d:15:c5:32:47:ad:84:db:9c:79:f3:8f: 9c:54:ed:a8:0c:2b:1d:5f:32:ac:46:bf:88:86:6c: ce:ae:96:d8:63:0c:4b:6d:ef:96:34:92:1d:7a:a0: c5:a1:45:0f:3e:37:4d:4f:7d:33:af:84:33:4f:dd: db:91:c1:91:5f:db:92:3c:e9:90:6e:fa:4d:69:93: cf:2a:25:39:15:03:6b:fd:b8:5b:a4:a8:25:85:b7: 3b:f9:50:03:ef:b3:8f:da:3d:b3:a0:b1:6c:30:89: d8:46:ac:d4:47:7e:05:0f:cd:c1:bb:15:b4:b1:ab: cb:7f:1d:62:e4:8f:63:84:cf:70:6b:3a:16:4b:3c: 26:23:cb:79:c4:40:15:c1:02:2b:51:c6:b0:7d:59: b5:f7:7c:03:cf:ba:5b:ad:a2:17:90:c5:bd:20:f3: b2:e5:eb:58:87:a8:f0:e1:1d:fb:ac:e3:f4:8a:32: 8f:33:49:25:7d:71:db:06:08:ff:4a:f6:46:e2:25: 09:94:3d:c7:e3:69:58:c8:63:fb:56:46:a7:e9:f4: c7:99:6f:84:a7:3c:11:36:a2:38:d3:4b:af:e4:bd: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:24:F5:2B:F2:F1:A5:79:DF:FD:CB:B4:CF:96:18:A5:56:00:A0:6C X509v3 Authority Key Identifier: keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:36:de:bf:25:32:0a:bc:7d:81:42:8d:46:d6:73:93:d6:e4: e2:42:88:5a:e4:35:9c:a7:83:0a:c1:3b:a1:d2:90:26:62:8a: bb:04:b4:9b:64:4d:22:34:dc:bc:fb:f7:f1:c2:06:eb:ef:46: 75:a3:9b:fc:88:46:ee:f2:ac:ff:5e:07:ff:fc:5e:82:21:5e: c4:09:2c:40:ff:1e:e1:c4:b4:f6:ae:74:24:53:14:11:82:4a: c4:32:52:67:3a:e2:eb:16:cb:84:f2:fb:01:cd:58:96:9c:c0: 78:cc:69:fd:96:76:99:b0:79:f1:34:46:a6:ca:24:d5:9e:d2: 06:7e:a1:14:a0:84:ef:ad:6b:56:50:6e:86:65:ff:c7:c0:3c: ec:e7:31:07:c7:36:b7:11:1b:38:2f:b4:6f:cd:4f:4e:a3:87: 0b:d4:10:1f:d2:4b:fa:c7:38:c9:f2:1a:cf:d4:00:0e:5d:1d: 95:e1:0e:ce:c3:1f:f9:a9:86:cc:f2:f8:75:ba:ae:10:3d:bb: fa:36:36:1b:54:c4:6b:a0:e7:c5:34:fd:d1:a0:e7:74:17:17: bd:c4:e9:48:a3:6d:c0:af:47:74:12:71:ff:00:c9:43:50:b4: 9f:15:fb:94:d8:08:31:38:b8:8d:68:2a:2f:7e:a0:b4:42:dd: 9b:23:95:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjPf0OXSFmgX+G3z+ut4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2 NWRhNDUwHhcNMjUxMjI4MjAwMTEzWhcNMjUxMjI5MjAwMTEzWjAzMTEwLwYDVQQD EygwMTI0ZjUyYmYyZjFhNTc5ZGZmZGNiYjRjZjk2MThhNTU2MDBhMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBom9o2XYnNDKc/zt+EN6nAD00eR nuby4IHgPppwRtIdFcUyR62E25x584+cVO2oDCsdXzKsRr+IhmzOrpbYYwxLbe+W NJIdeqDFoUUPPjdNT30zr4QzT93bkcGRX9uSPOmQbvpNaZPPKiU5FQNr/bhbpKgl hbc7+VAD77OP2j2zoLFsMInYRqzUR34FD83BuxW0savLfx1i5I9jhM9wazoWSzwm I8t5xEAVwQIrUcawfVm193wDz7pbraIXkMW9IPOy5etYh6jw4R37rOP0ijKPM0kl fXHbBgj/SvZG4iUJlD3H42lYyGP7Vkan6fTHmW+EpzwRNqI400uv5L3wqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEk9Svy8aV53/3LtM+WGKVWAKBsMB8GA1UdIwQY MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt NTU1ZjNmMThlNTRmLzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODbevyUy Crx9gUKNRtZzk9bk4kKIWuQ1nKeDCsE7odKQJmKKuwS0m2RNIjTcvPv38cIG6+9G daOb/IhG7vKs/14H//xegiFexAksQP8e4cS09q50JFMUEYJKxDJSZzri6xbLhPL7 Ac1YlpzAeMxp/ZZ2mbB58TRGpsok1Z7SBn6hFKCE761rVlBuhmX/x8A87OcxB8c2 txEbOC+0b81PTqOHC9QQH9JL+sc4yfIaz9QADl0dleEOzsMf+amGzPL4dbquED27 +jY2G1TEa6DnxTT90aDndBcXvcTpSKNtwK9HdBJx/wDJQ1C0nxX7lNgIMTi4jWgq L36gtELdmyOVKA== -----END CERTIFICATE-----Generated at Sun Dec 28 22:13:08 2025 by rpki-client