This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft File: _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json) Hash identifier: lf7JkdBPk1Od3Ggq0nEslIlMQfcWVLFwTDXqGwQy0lI= Subject key identifier: 8E:80:4E:4A:59:2E:A8:CF:46:8D:5F:5C:4A:7C:7B:0F:96:38:06:41 Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82 Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582 Certificate serial: 019B3EDA9B8BDF29FCCFF85FEDB71BBF64B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft Manifest number: 15D0 Signing time: Sun 21 Dec 2025 03:01:12 +0000 Manifest this update: Sun 21 Dec 2025 03:01:12 +0000 Manifest next update: Mon 22 Dec 2025 03:01:12 +0000 Files and hashes: 1: D477qKV-aPF2n8oBjSmgcuod2kE.roa (hash: pyW25bQPJKBFO/7F+t0bHE29cloxJ5T2+KSGVCTHaws=) 2: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: W8uZYTIX1oYZ7K1FN76K4w0vSdOs0URWO70piYWggb4=) 3: f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa (hash: Gw3xzXZPKuGmrAR2PrIl2quzqApN9VDz3sjokAQjW1Y=) 4: pVTqCR0peatjWSp4Jxs9VZ9aHR0.roa (hash: yjFFs3Sic83blHCl+jWhjWUGXXoo+/pXsN4k7VdljkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:9b:8b:df:29:fc:cf:f8:5f:ed:b7:1b:bf:64:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582 Validity Not Before: Dec 21 03:01:12 2025 GMT Not After : Dec 22 03:01:12 2025 GMT Subject: CN=8e804e4a592ea8cf468d5f5c4a7c7b0f96380641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:ee:a8:53:af:6b:d0:be:52:5b:3a:78:ad: c9:d1:89:4f:44:28:e0:cf:e6:6a:6e:6b:47:d7:10: 95:60:67:48:1b:61:e9:a8:78:78:7b:f0:43:dc:c8: 76:22:d3:70:d3:d6:51:70:03:68:51:d3:f6:64:ae: 4b:6d:f6:37:41:1f:13:d6:39:5e:29:79:17:1f:84: 44:e3:02:ff:e7:f3:a9:65:2e:e9:46:2b:b8:a3:23: eb:a4:6a:1c:69:8b:fb:37:c6:a3:86:12:c3:6d:49: a1:3d:3a:3a:a1:07:d9:a7:fe:d3:96:08:92:f9:1c: 0c:39:69:88:dc:55:99:17:26:8f:75:83:17:7e:9c: 9f:7f:2c:b3:0e:11:42:6c:93:2e:51:70:a9:5f:9e: d5:83:94:37:2e:e3:7d:64:ec:a1:fa:8b:71:87:d3: 70:a9:92:cc:84:35:ab:2c:c9:20:74:bb:ee:71:6c: fe:8e:e0:74:04:56:39:07:97:6b:89:03:1b:55:44: 7b:7c:85:97:67:4c:53:24:6c:89:21:e7:e1:6e:7c: 1c:24:12:38:69:2e:56:55:ae:d0:06:f4:5d:74:a1: 67:b4:6f:53:3c:5a:15:d0:f5:21:53:27:5e:7f:90: b6:99:ae:54:05:8a:e7:63:b3:64:15:8a:d1:c5:84: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:80:4E:4A:59:2E:A8:CF:46:8D:5F:5C:4A:7C:7B:0F:96:38:06:41 X509v3 Authority Key Identifier: keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e1:4a:fc:d9:63:cd:12:fe:12:f1:91:cc:a2:67:f0:b8:7a: db:27:90:03:d8:56:3f:b6:0c:40:bc:92:ed:e8:0d:8c:01:f5: 5a:76:4f:29:29:96:70:89:de:21:3b:fd:2d:d2:86:45:63:40: b2:46:61:78:21:40:7e:e2:96:0d:f6:bf:01:08:6e:78:9c:7a: 39:3f:4c:d0:cf:6d:74:dc:9e:d0:6e:28:47:69:6d:0b:36:f2: 8d:36:89:47:36:e9:b0:27:ae:12:3b:f0:3a:3e:f5:c2:7e:55: a5:39:1a:61:b5:08:cf:44:ed:26:8c:e9:a5:56:b9:13:64:b8: 80:21:73:9d:0a:8c:a7:cd:37:c0:f8:60:d3:e2:74:b2:3c:56: 6c:68:33:1a:d1:cb:cd:63:2c:cf:7a:00:e7:2c:71:9d:82:cd: 64:15:86:db:8e:f0:81:1f:e9:6c:d8:f2:5a:b4:4d:f8:05:fd: d2:84:ac:2d:fa:38:10:72:59:59:53:30:ed:cb:bb:67:1a:82: 58:61:4e:c3:c1:fd:ee:3a:72:e2:0d:ce:82:55:1c:5f:d5:59: e1:e8:e5:6f:3a:b8:d1:4f:91:dc:51:e7:26:19:f1:54:db:78: a7:f5:b6:c2:74:d7:7c:59:ff:5f:0e:c9:17:72:a7:41:c1:f5: b6:d7:dc:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2puL3yn8z/hf7bcbv2S0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMzU4NzdjYzAzOGJmZmRiOTdiYjNkNmVhMjE2YWI1MmIz YTA1ODIwHhcNMjUxMjIxMDMwMTEyWhcNMjUxMjIyMDMwMTEyWjAzMTEwLwYDVQQD Eyg4ZTgwNGU0YTU5MmVhOGNmNDY4ZDVmNWM0YTdjN2IwZjk2MzgwNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf3uqFOva9C+Uls6eK3J0YlPRCjg z+ZqbmtH1xCVYGdIG2HpqHh4e/BD3Mh2ItNw09ZRcANoUdP2ZK5LbfY3QR8T1jle KXkXH4RE4wL/5/OpZS7pRiu4oyPrpGocaYv7N8ajhhLDbUmhPTo6oQfZp/7TlgiS +RwMOWmI3FWZFyaPdYMXfpyffyyzDhFCbJMuUXCpX57Vg5Q3LuN9ZOyh+otxh9Nw qZLMhDWrLMkgdLvucWz+juB0BFY5B5driQMbVUR7fIWXZ0xTJGyJIefhbnwcJBI4 aS5WVa7QBvRddKFntG9TPFoV0PUhUydef5C2ma5UBYrnY7NkFYrRxYQctQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6ATkpZLqjPRo1fXEp8ew+WOAZBMB8GA1UdIwQY MBaAFPw1h3zAOL/9uXuz1uoharUrOgWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMt OGU2NWIzNDdmMjE4LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMtOGU2NWIzNDdmMjE4 LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+FK/Nlj zRL+EvGRzKJn8Lh62yeQA9hWP7YMQLyS7egNjAH1WnZPKSmWcIneITv9LdKGRWNA skZheCFAfuKWDfa/AQhueJx6OT9M0M9tdNye0G4oR2ltCzbyjTaJRzbpsCeuEjvw Oj71wn5VpTkaYbUIz0TtJozppVa5E2S4gCFznQqMp803wPhg0+J0sjxWbGgzGtHL zWMsz3oA5yxxnYLNZBWG247wgR/pbNjyWrRN+AX90oSsLfo4EHJZWVMw7cu7ZxqC WGFOw8H97jpy4g3OglUcX9VZ4ejlbzq40U+R3FHnJhnxVNt4p/W2wnTXfFn/Xw7J F3KnQcH1ttfcPw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:40 2025 by rpki-client