This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json) Hash identifier: IH/ui+M7wbzkHAJVcv+wdjZsSpxIYR7DYHYbFjcisbA= Subject key identifier: 72:78:3F:52:3A:45:77:84:85:A8:AF:9B:E8:70:70:7D:2B:03:4C:A0 Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e Certificate serial: 019B3BD92270C6FE4C2FDC1EF4A36A1EF656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft Manifest number: 08A2 Signing time: Sat 20 Dec 2025 13:00:44 +0000 Manifest this update: Sat 20 Dec 2025 13:00:44 +0000 Manifest next update: Sun 21 Dec 2025 13:00:44 +0000 Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: NwfqL5cbAsIolklJh/0cPCYeH1QaHb1msCfkBaehHV8=) 2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:22:70:c6:fe:4c:2f:dc:1e:f4:a3:6a:1e:f6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e Validity Not Before: Dec 20 13:00:44 2025 GMT Not After : Dec 21 13:00:44 2025 GMT Subject: CN=72783f523a45778485a8af9be870707d2b034ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:0f:e3:8d:29:c9:9c:4e:d0:6e:48:85:11: b2:f1:92:5d:3c:9c:4e:aa:d0:b1:44:e7:e4:b8:62: 3e:7d:4c:7c:db:9a:ff:9d:68:c0:34:3c:35:24:89: 66:a2:7d:d4:1a:a6:a9:eb:74:38:7a:86:ff:dd:ec: 3a:21:49:fd:2f:b1:29:3e:7e:f1:d6:9f:70:c9:72: f0:2e:d6:90:bf:9c:11:28:f5:7b:c2:bf:c1:22:ad: 37:df:5c:c9:99:04:df:b6:fc:e6:e6:a0:89:e2:64: 83:0b:08:d6:52:56:b6:bc:d0:2a:f8:c3:c6:1f:28: e1:09:cd:9a:4a:2f:3d:f9:71:c2:91:bf:54:27:3f: a3:9a:ab:c7:92:40:19:69:fd:83:67:4b:43:4b:01: a0:52:42:66:04:18:19:f8:1b:6a:5f:ae:46:97:de: e1:0e:76:70:10:6e:03:dc:e6:ef:30:9b:9e:10:3e: 35:f1:f8:b6:ff:fc:4a:fc:03:24:3c:c9:22:3d:ce: 21:64:dd:2e:04:04:58:9f:1f:18:ee:92:d4:2e:a1: 6a:6c:c1:45:49:79:9c:4a:c2:55:a1:d7:c9:4c:5c: 8d:87:98:07:90:8d:33:9d:31:3c:c6:28:bd:65:c1: 1c:f5:dd:e1:5c:be:9d:63:b3:9e:a8:b0:d9:28:b5: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:78:3F:52:3A:45:77:84:85:A8:AF:9B:E8:70:70:7D:2B:03:4C:A0 X509v3 Authority Key Identifier: keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:df:39:ba:9a:b3:3e:ac:f2:b7:47:21:35:78:25:57:e2:0b: 1f:ef:8f:02:ab:aa:fa:bf:3f:53:22:ee:fe:68:0b:29:a7:ec: b3:da:10:44:bb:c5:a5:1e:34:5d:b8:de:e8:f5:50:66:04:a0: aa:1f:57:82:88:0d:8c:9a:7b:f2:0d:19:dd:d4:fa:82:73:8d: ea:3f:ce:9c:24:5b:b6:21:60:50:61:86:d5:75:68:b9:4d:5e: 4b:24:c4:45:69:38:3f:7f:59:f4:e6:7c:df:7a:de:6d:a8:59: 5d:14:29:f3:ee:15:77:91:e9:ff:2b:6e:45:7f:f8:e7:07:3c: 37:83:0d:53:64:7e:7e:f5:02:06:7b:5d:21:16:a9:db:13:5c: fa:83:52:2e:47:60:88:45:be:78:00:d8:14:50:84:4b:60:5e: 42:4f:b7:01:70:d9:9b:cc:c6:3e:8d:13:45:9a:a2:d5:70:65: 7f:ea:e8:90:9a:12:fa:6e:15:8b:97:c8:3b:c1:da:fd:c7:0b: 9e:1d:91:ec:64:b2:bc:bf:db:ff:93:55:93:4e:74:90:ff:55: 2f:a5:2f:a8:ea:e7:49:c2:5d:8f:07:5a:bf:e8:ba:f7:d6:15: 8f:98:f8:f7:c0:db:2f:fc:10:65:66:56:ef:01:51:11:e0:74: b8:5f:5a:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72SJwxv5ML9we9KNqHvZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZjIzNTdhNDFmNGU1OTBiYTYyZTc3MWQyMDU0ZTAwOGUw ZWQ5MWUwHhcNMjUxMjIwMTMwMDQ0WhcNMjUxMjIxMTMwMDQ0WjAzMTEwLwYDVQQD Eyg3Mjc4M2Y1MjNhNDU3Nzg0ODVhOGFmOWJlODcwNzA3ZDJiMDM0Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVUP440pyZxO0G5IhRGy8ZJdPJxO qtCxROfkuGI+fUx825r/nWjANDw1JIlmon3UGqap63Q4eob/3ew6IUn9L7EpPn7x 1p9wyXLwLtaQv5wRKPV7wr/BIq0331zJmQTftvzm5qCJ4mSDCwjWUla2vNAq+MPG HyjhCc2aSi89+XHCkb9UJz+jmqvHkkAZaf2DZ0tDSwGgUkJmBBgZ+BtqX65Gl97h DnZwEG4D3ObvMJueED418fi2//xK/AMkPMkiPc4hZN0uBARYnx8Y7pLULqFqbMFF SXmcSsJVodfJTFyNh5gHkI0znTE8xii9ZcEc9d3hXL6dY7OeqLDZKLUCPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJ4P1I6RXeEhaivm+hwcH0rA0ygMB8GA1UdIwQY MBaAFADyNXpB9OWQumLncdIFTgCODtkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjIt NWUwZmE5NGJjMzcwLzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81ZDgwMGEtOTFkMC00YmUxLTkyMjItNWUwZmE5NGJjMzcw LzEvQVBJMWVrSDA1WkM2WXVkeDBnVk9BSTRPMlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAut85upqz Pqzyt0chNXglV+ILH++PAquq+r8/UyLu/mgLKafss9oQRLvFpR40Xbje6PVQZgSg qh9XgogNjJp78g0Z3dT6gnON6j/OnCRbtiFgUGGG1XVouU1eSyTERWk4P39Z9OZ8 33rebahZXRQp8+4Vd5Hp/ytuRX/45wc8N4MNU2R+fvUCBntdIRap2xNc+oNSLkdg iEW+eADYFFCES2BeQk+3AXDZm8zGPo0TRZqi1XBlf+rokJoS+m4Vi5fIO8Ha/ccL nh2R7GSyvL/b/5NVk050kP9VL6UvqOrnScJdjwdav+i699YVj5j498DbL/wQZWZW 7wFREeB0uF9a9A== -----END CERTIFICATE-----Generated at Sat Dec 20 21:34:12 2025 by rpki-client