This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: ZbUapHq747kdb64qbF8Rz3VuXBQy3vEnGcf43J6J66g= Subject key identifier: 11:0B:61:84:FD:D6:C0:AC:FD:A2:92:44:87:9A:7F:BF:5D:9D:48:3B Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B416D3B304ACC2C0A094B8914099F7D04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 13D1 Signing time: Sun 21 Dec 2025 15:00:36 +0000 Manifest this update: Sun 21 Dec 2025 15:00:36 +0000 Manifest next update: Mon 22 Dec 2025 15:00:36 +0000 Files and hashes: 1: 0SnEDSu2fch50mXfNCrgepjBXHI.roa (hash: An4Aho4+/IQv1xSA0visBRO6r1aot3IcatgSZ0mIirs=) 2: 1-C-0JGDbp3Otc_z0iBBVBpQZuq4.roa (hash: YGNYUtklrL1awHGcBtsuKJFxwbJZ7yDvoZ7r6abN1Jo=) 3: 4cYZBaSCfKx4xdTyV36QiAtkYH8.roa (hash: 4TbdTxLmlk8EX546dkAWoaHsA8UX5a3+NdKi5edH1kY=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: b7tVyKThYM24aL/YUfKkRSUxm9Nr0UHoM8+SeL8tWL0=) 5: AWwB3GgQDwD00EgOo5atllstI4U.roa (hash: S6JrTk1EmXyUpf5YlJERc0FCke2WXpzsoCr6ctdY7oU=) 6: Aej3vuUOOh-hnVT2y79YY5m8mGY.roa (hash: fppWr1w65j8oBsq8Zfr0PlchmfA3JUP+aptwGmIlnY8=) 7: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=) 8: MFAu_EkZR9MwbcpihXf0lGT3Oj0.roa (hash: WEpqD2HenxO1czzoy8AAi1Bn9drMpoolp5aMUMbqwNs=) 9: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=) 10: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=) 11: aQ3kSZGYrFWGAxsW5cMfgI6PR2k.roa (hash: WV200zuYmYOFQxibHNHmLysdFj/S1kHqxW3IuzyrxUs=) 12: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=) 13: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=) 14: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=) 15: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=) 16: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=) 17: yedI6EpedZ28jyB60XNo0uK6oF8.roa (hash: hWsq9urJIZSeMGg4SgxXz+gEuiBCoRbdm4v/CAFQ2CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:3b:30:4a:cc:2c:0a:09:4b:89:14:09:9f:7d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Dec 21 15:00:36 2025 GMT Not After : Dec 22 15:00:36 2025 GMT Subject: CN=110b6184fdd6c0acfda29244879a7fbf5d9d483b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:1e:84:69:6d:37:8c:fb:54:a7:98:b9:de: 80:30:7b:5f:3d:42:a8:92:5e:94:e8:f3:53:90:e8: ab:bf:e0:f3:99:26:bd:c2:fa:65:e9:9e:1f:21:18: 28:da:60:76:c4:3a:4c:cc:78:a8:40:f1:ee:9d:8f: 8b:72:ea:66:81:0a:d4:c2:57:35:ec:59:95:e5:7f: b1:70:0a:5f:46:23:69:70:6a:cd:3f:37:a3:1e:b6: 05:38:ad:e9:0e:e1:15:1e:4f:60:48:d4:c4:b7:35: f6:bd:54:0e:28:5a:d1:6d:99:69:a9:ec:2a:50:44: 55:96:ea:e5:ca:ef:66:d8:10:68:87:e3:0e:d8:07: 65:0e:50:a5:25:1e:ac:9e:da:cf:ad:c0:9b:a6:e0: ea:ac:94:19:14:07:85:0e:14:56:1e:65:4b:23:75: 58:f8:8e:b1:b7:df:a1:82:3e:50:ed:4f:9e:bc:bd: ed:f5:1a:17:9b:1a:ec:bd:10:9a:3a:fa:73:36:c3: 9e:12:1a:39:d7:c0:77:59:f4:05:36:ba:7f:b6:9a: b7:eb:52:5d:00:9a:b7:22:3d:aa:4d:81:59:25:17: 52:df:f8:11:24:5d:65:31:75:de:4a:70:81:30:af: 98:27:85:0d:00:7a:9c:42:6c:3c:ca:54:47:73:50: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0B:61:84:FD:D6:C0:AC:FD:A2:92:44:87:9A:7F:BF:5D:9D:48:3B X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:12:ca:b6:fa:34:24:a0:cf:8b:66:6e:d3:94:3a:77:c4:94: 29:95:9b:9e:d4:66:57:62:8d:ef:c0:d3:f1:65:03:a0:de:c4: 7c:4a:5d:dc:fb:79:05:f9:38:f5:96:63:20:aa:10:d7:ee:09: fb:43:bc:c6:d5:1c:6e:67:9e:b3:7c:1b:dd:db:cb:23:c2:de: fb:9b:c3:c3:84:e1:11:a3:45:cf:36:d3:03:5f:b1:68:95:f5: e0:43:79:fb:ea:46:c6:b1:e3:05:0f:ac:09:5e:34:3d:a3:f1: 62:1c:cb:75:d1:50:cf:c8:4b:69:6d:1b:1c:84:a3:f0:e0:2e: 8a:ea:2b:1d:a4:dc:c0:3a:7d:d0:a7:2f:19:39:b7:64:df:14: 10:98:97:ba:f8:94:b2:8f:11:a2:3f:74:90:1a:37:f9:1a:fe: ac:46:7d:c9:03:06:49:63:91:85:9b:fc:9b:05:ef:f2:5d:51: f4:7c:dd:4a:04:55:d8:c1:20:37:94:a5:31:45:b2:58:61:a5: 92:18:83:2d:3b:a2:59:55:9c:bb:1e:af:f1:cf:07:ba:41:e9: de:fe:2f:55:25:e2:1a:68:e4:fb:79:a1:0c:cb:bd:79:4f:10: 2b:d8:fd:61:00:e9:48:87:65:27:76:ad:d0:5e:75:fb:2b:97: f9:b7:e5:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbTswSswsCglLiRQJn30EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjUxMjIxMTUwMDM2WhcNMjUxMjIyMTUwMDM2WjAzMTEwLwYDVQQD EygxMTBiNjE4NGZkZDZjMGFjZmRhMjkyNDQ4NzlhN2ZiZjVkOWQ0ODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhIehGltN4z7VKeYud6AMHtfPUKo kl6U6PNTkOirv+DzmSa9wvpl6Z4fIRgo2mB2xDpMzHioQPHunY+LcupmgQrUwlc1 7FmV5X+xcApfRiNpcGrNPzejHrYFOK3pDuEVHk9gSNTEtzX2vVQOKFrRbZlpqewq UERVlurlyu9m2BBoh+MO2AdlDlClJR6sntrPrcCbpuDqrJQZFAeFDhRWHmVLI3VY +I6xt9+hgj5Q7U+evL3t9RoXmxrsvRCaOvpzNsOeEho518B3WfQFNrp/tpq361Jd AJq3Ij2qTYFZJRdS3/gRJF1lMXXeSnCBMK+YJ4UNAHqcQmw8ylRHc1DoPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBELYYT91sCs/aKSRIeaf79dnUg7MB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORLKtvo0 JKDPi2Zu05Q6d8SUKZWbntRmV2KN78DT8WUDoN7EfEpd3Pt5Bfk49ZZjIKoQ1+4J +0O8xtUcbmees3wb3dvLI8Le+5vDw4ThEaNFzzbTA1+xaJX14EN5++pGxrHjBQ+s CV40PaPxYhzLddFQz8hLaW0bHISj8OAuiuorHaTcwDp90KcvGTm3ZN8UEJiXuviU so8Roj90kBo3+Rr+rEZ9yQMGSWORhZv8mwXv8l1R9HzdSgRV2MEgN5SlMUWyWGGl khiDLTuiWVWcux6v8c8HukHp3v4vVSXiGmjk+3mhDMu9eU8QK9j9YQDpSIdlJ3at 0F51+yuX+bflkQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:46:09 2025 by rpki-client