This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft File: 61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json) Hash identifier: C3ayWJ/sFIQyOnZTNRKDCzsPLxFLvM0OZqyuG+lf0L8= Subject key identifier: F4:89:E1:04:A5:90:9C:C0:46:A7:8A:64:F8:FB:FD:0F:17:03:D3:0C Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd Certificate serial: 019B3BA2AE85C2B1C65A3953BF7DA098E49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft Manifest number: 111F Signing time: Sat 20 Dec 2025 12:01:15 +0000 Manifest this update: Sat 20 Dec 2025 12:01:15 +0000 Manifest next update: Sun 21 Dec 2025 12:01:15 +0000 Files and hashes: 1: 3_QRkvTEzwiirbhpb0T3V_2izNc.roa (hash: N+lALA5g7kIFrL03X02AjWc41oSbCZ57MAU8accAf2s=) 2: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: joDCc+wRNNSyQ7Zej6sP+fV9VAf7UML+eDu/jF7cUQ8=) 3: avVrdRPNFcMtwTGR2Zab9qIvEIs.roa (hash: B8YMI/WajLnQclAWhZ2JVb5JaRJxPn4UkZ5gdPRrKXc=) 4: mARrkrwsqa1zI7AhCz1jPRrG0vo.roa (hash: C+xoqI6HQRyi4NnP7UQyN6SMsDYwAgRtq1ezQKEfRkk=) 5: rZbO86eytPEeDbetTKr54j6r3Z8.roa (hash: 5exZuL7jEPQWQmctjdNF8XDDonlOlxCAx0iHOR3SFFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:ae:85:c2:b1:c6:5a:39:53:bf:7d:a0:98:e4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd Validity Not Before: Dec 20 12:01:15 2025 GMT Not After : Dec 21 12:01:15 2025 GMT Subject: CN=f489e104a5909cc046a78a64f8fbfd0f1703d30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:9d:e9:06:c6:4a:41:cf:7f:6e:00:cb:73: 15:82:24:d0:61:d4:f8:45:30:88:6c:3b:0e:0f:aa: ef:63:9e:7b:7b:e2:09:aa:45:47:ec:bb:61:95:ee: 4c:e9:b4:4e:af:2b:b9:83:7c:f8:8c:ea:4d:5b:3f: c1:c5:a1:87:31:01:95:f8:20:5f:84:e7:7f:18:de: 3f:a3:45:00:d4:df:b0:d4:4b:b0:14:40:b4:6e:80: 94:47:04:b4:56:de:1a:7a:7a:62:73:89:7a:e2:32: 13:ad:7a:20:27:75:4f:17:b4:e7:5a:9f:69:95:21: 04:b4:af:18:10:7c:6c:d2:6c:af:72:6f:c7:ea:5a: 00:8f:60:79:e1:54:c3:12:ef:07:20:17:ed:51:18: d2:78:e6:cc:ee:81:e5:5b:4a:72:97:1a:dc:74:b2: ad:df:cd:d8:36:da:cb:a6:56:b2:ec:8b:cd:d6:df: 20:b2:33:de:7e:66:4a:2d:e8:fc:fa:11:69:aa:e7: 52:5e:88:40:a3:fe:b4:2d:c3:0c:9b:73:f0:e0:60: 85:37:8e:e2:81:af:e1:57:f7:f6:7d:6a:c8:09:98: 71:4d:c6:aa:49:22:7e:c9:27:9b:f3:18:a3:6d:d3: b9:ae:a3:2f:d1:64:68:2a:0c:6c:42:ba:68:2a:99: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:89:E1:04:A5:90:9C:C0:46:A7:8A:64:F8:FB:FD:0F:17:03:D3:0C X509v3 Authority Key Identifier: keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f0:58:05:20:ed:85:b0:7a:2f:f7:47:52:4f:07:0a:e3:3e: c3:69:e3:9c:69:09:10:82:b9:4d:a9:75:a6:05:82:e4:0e:d7: 0e:a8:b9:7e:40:aa:fc:30:de:97:85:1f:f5:6d:b7:65:52:7a: 22:0d:2f:af:72:74:36:8c:92:9d:5a:21:c9:5c:d9:a2:e1:66: 17:b6:6d:d6:d7:a3:76:3f:74:73:6f:28:c4:db:c9:cf:59:68: b7:6b:01:d2:4f:83:2c:49:e8:03:ac:93:af:57:ec:57:d6:3d: 48:f7:26:e4:68:45:e1:07:d3:b4:35:d9:b8:ec:c0:95:c3:8a: 59:af:2e:4a:c4:bf:a5:29:29:96:23:02:f1:81:2d:4d:0b:58: 69:2f:bc:d0:d0:e9:68:03:99:e1:a5:bc:39:a8:75:a9:d1:f0: df:34:b4:c2:78:ed:3b:a5:a0:36:0c:f0:27:38:3e:c1:8b:68: 82:93:bd:88:9b:15:82:48:f8:e9:c7:1e:24:f8:78:4b:b2:40: 76:cf:6a:ed:c8:d5:7f:d1:a7:b3:46:96:ff:ca:52:e5:da:a8: a9:fb:8f:94:1e:da:31:e0:e7:14:c2:54:22:5e:27:ea:c8:75: c8:ab:47:47:df:b8:50:39:1a:0c:2d:91:30:09:94:01:0c:8e: 44:f3:8f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oq6FwrHGWjlTv32gmOSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl MzIyZGQwHhcNMjUxMjIwMTIwMTE1WhcNMjUxMjIxMTIwMTE1WjAzMTEwLwYDVQQD EyhmNDg5ZTEwNGE1OTA5Y2MwNDZhNzhhNjRmOGZiZmQwZjE3MDNkMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFKd6QbGSkHPf24Ay3MVgiTQYdT4 RTCIbDsOD6rvY557e+IJqkVH7Lthle5M6bROryu5g3z4jOpNWz/BxaGHMQGV+CBf hOd/GN4/o0UA1N+w1EuwFEC0boCURwS0Vt4aenpic4l64jITrXogJ3VPF7TnWp9p lSEEtK8YEHxs0myvcm/H6loAj2B54VTDEu8HIBftURjSeObM7oHlW0pylxrcdLKt 383YNtrLplay7IvN1t8gsjPefmZKLej8+hFpqudSXohAo/60LcMMm3Pw4GCFN47i ga/hV/f2fWrICZhxTcaqSSJ+ySeb8xijbdO5rqMv0WRoKgxsQrpoKpnDUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSJ4QSlkJzARqeKZPj7/Q8XA9MMMB8GA1UdIwQY MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt NTlmYzczZDYwMzIyLzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvBYBSDt hbB6L/dHUk8HCuM+w2njnGkJEIK5Tal1pgWC5A7XDqi5fkCq/DDel4Uf9W23ZVJ6 Ig0vr3J0NoySnVohyVzZouFmF7Zt1tejdj90c28oxNvJz1lot2sB0k+DLEnoA6yT r1fsV9Y9SPcm5GhF4QfTtDXZuOzAlcOKWa8uSsS/pSkpliMC8YEtTQtYaS+80NDp aAOZ4aW8Oah1qdHw3zS0wnjtO6WgNgzwJzg+wYtogpO9iJsVgkj46cceJPh4S7JA ds9q7cjVf9Gns0aW/8pS5dqoqfuPlB7aMeDnFMJUIl4n6sh1yKtHR9+4UDkaDC2R MAmUAQyORPOPrw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:18 2025 by rpki-client