This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft File: _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json) Hash identifier: kPOXL6Knj7Ok7n/WLJRnwNCYasv6JL0KQE6TEpx+2wU= Subject key identifier: 1B:16:16:75:3F:48:BA:BB:7F:B0:1A:DF:CB:BB:E8:3B:2C:F4:97:7E Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82 Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582 Certificate serial: 019B57F510844AD34912CE3015F982FAC2C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft Manifest number: 15DD Signing time: Fri 26 Dec 2025 00:00:36 +0000 Manifest this update: Fri 26 Dec 2025 00:00:36 +0000 Manifest next update: Sat 27 Dec 2025 00:00:36 +0000 Files and hashes: 1: D477qKV-aPF2n8oBjSmgcuod2kE.roa (hash: pyW25bQPJKBFO/7F+t0bHE29cloxJ5T2+KSGVCTHaws=) 2: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: LnYkQjbD6g/RIsDA7ar+gjgbCG+/AhBtubu/aS/wlp8=) 3: f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa (hash: Gw3xzXZPKuGmrAR2PrIl2quzqApN9VDz3sjokAQjW1Y=) 4: pVTqCR0peatjWSp4Jxs9VZ9aHR0.roa (hash: yjFFs3Sic83blHCl+jWhjWUGXXoo+/pXsN4k7VdljkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:f5:10:84:4a:d3:49:12:ce:30:15:f9:82:fa:c2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582 Validity Not Before: Dec 26 00:00:36 2025 GMT Not After : Dec 27 00:00:36 2025 GMT Subject: CN=1b1616753f48babb7fb01adfcbbbe83b2cf4977e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:55:80:9d:b7:24:77:38:e6:67:1d:51:8b: 27:82:de:b8:15:4f:ac:3c:22:be:23:60:33:41:3c: 0d:46:6f:e4:f9:d2:a3:c3:d9:cb:7d:15:97:12:c2: 5e:61:76:a1:22:32:29:8f:d0:2e:f7:35:2d:ba:77: e7:79:20:87:c0:7d:71:1b:da:f8:66:4c:db:e9:ac: b9:56:34:8f:be:eb:cc:c8:cd:a3:20:df:23:e3:3f: 62:f3:44:fa:2b:60:a9:ad:92:85:d1:b0:73:3a:ae: b0:a3:09:99:03:12:91:ed:bc:00:4d:39:75:89:ab: 3b:25:e8:d7:63:82:ec:ee:76:54:57:40:db:f6:f3: 96:f1:e4:f1:1c:c9:59:d7:09:d3:cd:bd:74:5f:09: 8a:5c:0f:ac:fe:0a:22:69:fc:66:47:3e:9d:f6:65: d4:45:88:6e:47:b3:d7:e8:c3:37:36:81:21:ab:65: 7d:61:07:29:6d:b2:76:ad:f2:3b:8d:b9:4a:7b:bf: 82:98:e1:cd:23:4b:6b:78:77:d9:c3:31:29:a8:fe: f7:09:93:c8:06:0d:2d:08:a2:a7:c7:21:0c:7f:0b: 41:ef:bc:85:58:99:43:1d:7d:31:52:38:b4:c7:a4: 46:37:f0:f7:29:eb:ef:51:36:ac:85:72:62:e3:58: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:16:16:75:3F:48:BA:BB:7F:B0:1A:DF:CB:BB:E8:3B:2C:F4:97:7E X509v3 Authority Key Identifier: keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:51:23:67:6b:04:3d:91:b5:46:10:20:36:49:88:76:98:ca: 3e:28:5a:9e:25:57:f8:c9:24:86:cc:45:13:18:04:5f:37:42: a7:a7:4e:0d:df:91:e6:d9:88:be:97:96:ce:ae:12:b6:45:c5: 6a:4a:a0:b2:70:ec:99:a2:87:3f:b0:0f:64:d0:bf:c5:39:a3: bc:45:77:0f:47:35:cf:02:b2:44:ab:65:af:c4:a6:53:e1:20: 8f:90:ea:37:f0:92:e2:6f:6c:83:e8:80:44:df:d7:2b:28:18: 1b:da:98:4b:c0:38:ab:1f:f8:b1:df:ab:a1:58:47:0b:cf:50: ca:b3:93:57:44:e0:fc:cb:77:42:90:11:1c:75:3d:6b:92:e3: a3:a3:3a:07:f2:93:d7:2f:6c:50:ba:16:9e:46:2b:c7:95:ed: 2c:7b:dd:f0:1f:41:00:f6:e8:56:9d:a9:cd:e1:3a:15:5d:e3: 0f:eb:6a:ac:21:d4:1a:18:e4:ca:a1:6c:1e:38:96:05:4c:77: 97:53:56:27:d3:06:83:ad:f1:18:d6:21:ec:99:01:c9:cd:dd: 82:4f:0b:e4:3d:76:ba:93:d8:2c:a0:e2:50:f5:cd:3b:14:11: f2:4c:43:90:c8:8e:d0:83:a4:d6:09:ce:2e:77:5b:e2:55:73: 03:08:1c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtX9RCEStNJEs4wFfmC+sLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMzU4NzdjYzAzOGJmZmRiOTdiYjNkNmVhMjE2YWI1MmIz YTA1ODIwHhcNMjUxMjI2MDAwMDM2WhcNMjUxMjI3MDAwMDM2WjAzMTEwLwYDVQQD EygxYjE2MTY3NTNmNDhiYWJiN2ZiMDFhZGZjYmJiZTgzYjJjZjQ5NzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/5VgJ23JHc45mcdUYsngt64FU+s PCK+I2AzQTwNRm/k+dKjw9nLfRWXEsJeYXahIjIpj9Au9zUtunfneSCHwH1xG9r4 Zkzb6ay5VjSPvuvMyM2jIN8j4z9i80T6K2CprZKF0bBzOq6wowmZAxKR7bwATTl1 ias7JejXY4Ls7nZUV0Db9vOW8eTxHMlZ1wnTzb10XwmKXA+s/goiafxmRz6d9mXU RYhuR7PX6MM3NoEhq2V9YQcpbbJ2rfI7jblKe7+CmOHNI0treHfZwzEpqP73CZPI Bg0tCKKnxyEMfwtB77yFWJlDHX0xUji0x6RGN/D3KevvUTashXJi41gZWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsWFnU/SLq7f7Aa38u76Dss9Jd+MB8GA1UdIwQY MBaAFPw1h3zAOL/9uXuz1uoharUrOgWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMt OGU2NWIzNDdmMjE4LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMtOGU2NWIzNDdmMjE4 LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVEjZ2sE PZG1RhAgNkmIdpjKPihaniVX+MkkhsxFExgEXzdCp6dODd+R5tmIvpeWzq4StkXF akqgsnDsmaKHP7APZNC/xTmjvEV3D0c1zwKyRKtlr8SmU+Egj5DqN/CS4m9sg+iA RN/XKygYG9qYS8A4qx/4sd+roVhHC89QyrOTV0Tg/Mt3QpARHHU9a5Ljo6M6B/KT 1y9sULoWnkYrx5XtLHvd8B9BAPboVp2pzeE6FV3jD+tqrCHUGhjkyqFsHjiWBUx3 l1NWJ9MGg63xGNYh7JkByc3dgk8L5D12upPYLKDiUPXNOxQR8kxDkMiO0IOk1gnO Lndb4lVzAwgcyQ== -----END CERTIFICATE-----Generated at Fri Dec 26 07:48:40 2025 by rpki-client