This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json) Hash identifier: hOJzi7gRBBx0sDexwYEU4QWkpG46W9sTQYpEf72f8M8= Subject key identifier: FF:A0:51:63:E3:14:9B:81:2A:4F:84:0E:68:20:22:CB:B5:B3:A4:07 Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59 Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959 Certificate serial: 019B3F4803AFF1BED6DE957123490195716E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft Manifest number: 171E Signing time: Sun 21 Dec 2025 05:00:42 +0000 Manifest this update: Sun 21 Dec 2025 05:00:42 +0000 Manifest next update: Mon 22 Dec 2025 05:00:42 +0000 Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=) 2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: tOJwMlakHJNbZWxxV7d8HtCTRIbY81tK/am9ofSKMQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:03:af:f1:be:d6:de:95:71:23:49:01:95:71:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959 Validity Not Before: Dec 21 05:00:42 2025 GMT Not After : Dec 22 05:00:42 2025 GMT Subject: CN=ffa05163e3149b812a4f840e682022cbb5b3a407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:0a:ce:5e:43:78:f8:d8:8d:5a:e2:2a:37: f9:90:8c:37:39:56:68:36:88:83:4d:de:1c:28:19: b5:12:6f:0f:9c:25:5c:38:50:fc:d4:6a:40:b3:5c: f5:96:de:3d:92:99:c7:d2:93:59:c3:cb:1d:fb:0f: bb:a0:26:9d:4e:62:c9:7f:c1:47:a7:aa:49:38:38: d9:09:f6:82:0a:2e:12:cd:d9:4e:e5:bd:de:fa:76: e0:0f:f4:5b:c2:6a:a4:74:d6:9e:2d:ac:f7:9c:4d: 2a:22:58:f3:15:dc:77:15:e3:af:4c:95:27:37:27: bf:12:ad:04:aa:e7:8e:8a:3f:ec:0e:7f:34:61:8c: 4c:03:63:b7:96:ea:e1:cb:2e:96:05:9d:ac:1c:c2: 9d:45:24:23:3e:dd:d5:6c:fa:e6:28:0b:20:9d:cb: e2:d2:3e:7e:98:f6:f0:31:88:bd:a0:e3:0e:ae:1c: b8:93:4f:60:1d:bc:25:65:12:e0:ec:e7:7b:3b:46: c3:25:08:a7:29:f8:eb:2a:30:ed:bb:f2:15:dc:ed: 85:e2:a0:d3:59:bd:1a:9f:95:4a:4f:6c:f0:f0:d8: 85:11:90:d7:03:82:b2:73:6a:9e:30:ff:94:d1:7c: c6:d8:3c:08:ba:a8:ab:c8:c8:52:d9:45:76:f2:64: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:51:63:E3:14:9B:81:2A:4F:84:0E:68:20:22:CB:B5:B3:A4:07 X509v3 Authority Key Identifier: keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1d:b1:d3:a9:d8:1f:50:a9:79:51:39:30:1d:b8:02:62:7c: 75:b5:cc:43:c4:d3:8a:93:4c:18:70:2b:29:dd:1b:bc:c1:20: b6:c3:86:b1:cc:90:7f:5a:5d:a6:3b:03:75:e5:a5:83:3d:81: 3c:c2:97:e3:d9:cd:ee:64:8a:e6:bd:e8:8c:9d:14:5b:86:dd: 87:9b:d3:b1:c3:51:f5:d4:54:7f:29:50:85:78:eb:2b:85:44: 51:1f:71:25:b4:c3:43:54:c7:ff:16:e0:47:ca:e8:82:66:51: fe:81:7e:d8:c1:2e:9d:97:66:58:2a:39:aa:e7:53:b5:e5:30: a5:30:97:eb:38:f1:16:43:b7:20:da:dc:34:26:e8:13:07:23: 72:c7:bf:21:99:0d:ab:38:45:6d:4a:84:88:60:fb:6a:6a:fa: 1d:6e:02:e7:16:68:93:32:e6:a2:58:f1:c2:8c:76:9c:35:9b: 86:7e:0f:11:00:3d:ad:f8:cf:64:a8:d7:a4:70:72:91:79:16: 8f:8a:d7:cb:1b:88:c7:e1:66:08:c7:28:41:fa:c8:c8:e9:ad: 1d:af:3e:94:61:e4:be:c4:3c:f9:d2:62:c8:ab:fa:da:41:14: 45:a6:18:47:f0:31:ef:c4:1f:a8:4e:51:fc:83:18:0f:2f:74: a3:eb:cb:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SAOv8b7W3pVxI0kBlXFuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNTdmNTQ0ZjUzZjM1ZDhkMmU3M2NiMjk2NWI0ZjRkN2Qw MjI5NTkwHhcNMjUxMjIxMDUwMDQyWhcNMjUxMjIyMDUwMDQyWjAzMTEwLwYDVQQD EyhmZmEwNTE2M2UzMTQ5YjgxMmE0Zjg0MGU2ODIwMjJjYmI1YjNhNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMsKzl5DePjYjVriKjf5kIw3OVZo NoiDTd4cKBm1Em8PnCVcOFD81GpAs1z1lt49kpnH0pNZw8sd+w+7oCadTmLJf8FH p6pJODjZCfaCCi4SzdlO5b3e+nbgD/RbwmqkdNaeLaz3nE0qIljzFdx3FeOvTJUn Nye/Eq0EqueOij/sDn80YYxMA2O3lurhyy6WBZ2sHMKdRSQjPt3VbPrmKAsgncvi 0j5+mPbwMYi9oOMOrhy4k09gHbwlZRLg7Od7O0bDJQinKfjrKjDtu/IV3O2F4qDT Wb0an5VKT2zw8NiFEZDXA4Kyc2qeMP+U0XzG2DwIuqiryMhS2UV28mT2ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+gUWPjFJuBKk+EDmggIsu1s6QHMB8GA1UdIwQY MBaAFLBX9UT1PzXY0uc8spZbT019AilZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgt NGVhN2ExYWU5OGRlLzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgtNGVhN2ExYWU5OGRl LzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB2x06nY H1CpeVE5MB24AmJ8dbXMQ8TTipNMGHArKd0bvMEgtsOGscyQf1pdpjsDdeWlgz2B PMKX49nN7mSK5r3ojJ0UW4bdh5vTscNR9dRUfylQhXjrK4VEUR9xJbTDQ1TH/xbg R8rogmZR/oF+2MEunZdmWCo5qudTteUwpTCX6zjxFkO3INrcNCboEwcjcse/IZkN qzhFbUqEiGD7amr6HW4C5xZokzLmoljxwox2nDWbhn4PEQA9rfjPZKjXpHBykXkW j4rXyxuIx+FmCMcoQfrIyOmtHa8+lGHkvsQ8+dJiyKv62kEURaYYR/Ax78QfqE5R /IMYDy90o+vL2g== -----END CERTIFICATE-----Generated at Sun Dec 21 07:20:56 2025 by rpki-client