This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft File: 61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json) Hash identifier: tN/i2fWHPFya1/SQXVCpfZxT/9q8ayAPH3SPZJEH+ag= Subject key identifier: 42:B2:C2:65:63:2B:69:C6:9D:07:45:D0:A3:E9:0A:BA:34:E2:9A:2B Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd Certificate serial: 019B4EF1E88D7AB2714130F4B693430496A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft Manifest number: 1129 Signing time: Wed 24 Dec 2025 06:00:35 +0000 Manifest this update: Wed 24 Dec 2025 06:00:35 +0000 Manifest next update: Thu 25 Dec 2025 06:00:35 +0000 Files and hashes: 1: 3_QRkvTEzwiirbhpb0T3V_2izNc.roa (hash: N+lALA5g7kIFrL03X02AjWc41oSbCZ57MAU8accAf2s=) 2: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: 4e8+E3cKF4S9prcjUTLrptAFhS6b4FkSPHoxStCmDkU=) 3: avVrdRPNFcMtwTGR2Zab9qIvEIs.roa (hash: B8YMI/WajLnQclAWhZ2JVb5JaRJxPn4UkZ5gdPRrKXc=) 4: mARrkrwsqa1zI7AhCz1jPRrG0vo.roa (hash: C+xoqI6HQRyi4NnP7UQyN6SMsDYwAgRtq1ezQKEfRkk=) 5: rZbO86eytPEeDbetTKr54j6r3Z8.roa (hash: 5exZuL7jEPQWQmctjdNF8XDDonlOlxCAx0iHOR3SFFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f1:e8:8d:7a:b2:71:41:30:f4:b6:93:43:04:96:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd Validity Not Before: Dec 24 06:00:35 2025 GMT Not After : Dec 25 06:00:35 2025 GMT Subject: CN=42b2c265632b69c69d0745d0a3e90aba34e29a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:e1:ad:29:18:2a:e3:94:80:01:77:41:bb: 01:58:50:fb:ff:68:c5:9b:d0:72:ac:00:1c:0c:f3: 05:6c:b4:82:03:9f:f4:c4:b3:49:a1:ac:66:fa:4d: 35:39:08:db:e4:70:96:10:2d:47:82:f2:ff:79:76: 6d:dc:14:69:c5:1e:c6:04:88:4b:d4:a3:e7:3c:e1: 89:bd:7d:a0:39:31:66:d7:7b:f3:48:9f:80:8b:87: 94:66:98:1f:05:31:86:1e:6a:c7:00:b5:5e:db:dc: 3d:32:b5:16:c4:e6:5f:ea:60:fd:f4:4f:a2:cc:76: 1a:ae:01:ec:a2:04:99:de:a3:65:36:86:6f:e5:4f: a7:8f:1e:d4:ef:94:ea:7e:c4:7e:ac:a0:41:eb:f5: a2:b9:06:f3:b4:61:fc:53:6f:aa:60:c4:0f:ed:ef: 06:e6:56:49:8c:ca:12:06:97:86:db:12:40:b5:29: 48:25:da:28:4c:7b:54:19:39:39:37:4e:1e:b3:fb: b7:f2:99:40:8a:9b:a2:bd:8d:d8:b0:97:4d:2c:20: 00:07:29:bb:d4:94:c3:87:b2:e2:c3:15:33:dc:39: f0:97:b1:32:94:87:19:88:ee:fd:bf:9e:a5:8a:9a: a2:7f:1d:3f:38:b9:ed:7f:e8:24:57:13:cf:fe:e6: 53:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B2:C2:65:63:2B:69:C6:9D:07:45:D0:A3:E9:0A:BA:34:E2:9A:2B X509v3 Authority Key Identifier: keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ae:d6:73:f8:6c:aa:4f:cd:9a:58:c2:68:bf:84:30:e7:a0: bb:6a:f0:46:3f:7e:a5:40:07:7a:a7:fc:f4:cf:b3:d9:3f:b2: 67:0f:e1:52:5b:2d:a2:ef:d8:07:13:ec:97:2a:17:8b:4b:e3: 4d:27:8b:82:74:96:b4:34:31:e3:5c:52:ad:7c:ec:bf:c3:fe: 2a:d8:23:47:90:b0:be:7e:1c:b5:03:36:ff:50:d0:57:b8:dd: 2b:61:ff:a6:b4:94:c5:6f:20:67:7e:7e:6c:e4:94:a2:a9:f0: c2:ff:0f:35:32:af:47:94:dd:e9:c4:21:d1:3d:1f:86:a1:d1: 88:cd:f0:91:db:ee:5b:cc:2d:41:be:2c:34:de:94:45:12:31: c2:bc:70:14:ba:92:d4:30:44:6a:e2:87:fa:6f:8c:c1:54:60: ee:ad:7d:71:53:cc:17:ec:c9:34:ca:3f:c7:9a:3c:28:6c:a0: 13:96:5b:7c:de:94:29:fd:bb:29:3b:4b:d7:fb:30:f8:c6:8a: 88:7d:43:7b:db:b9:59:df:9a:29:8a:ad:e5:2e:b5:56:c0:dd: 81:44:79:64:49:f4:c8:1d:23:0b:0e:08:71:db:d6:21:87:a3: 3c:3e:49:c6:0c:0e:cd:91:83:70:6c:37:54:a9:66:a0:e6:17: b0:d2:94:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8eiNerJxQTD0tpNDBJakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl MzIyZGQwHhcNMjUxMjI0MDYwMDM1WhcNMjUxMjI1MDYwMDM1WjAzMTEwLwYDVQQD Eyg0MmIyYzI2NTYzMmI2OWM2OWQwNzQ1ZDBhM2U5MGFiYTM0ZTI5YTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvvhrSkYKuOUgAF3QbsBWFD7/2jF m9ByrAAcDPMFbLSCA5/0xLNJoaxm+k01OQjb5HCWEC1HgvL/eXZt3BRpxR7GBIhL 1KPnPOGJvX2gOTFm13vzSJ+Ai4eUZpgfBTGGHmrHALVe29w9MrUWxOZf6mD99E+i zHYargHsogSZ3qNlNoZv5U+njx7U75TqfsR+rKBB6/WiuQbztGH8U2+qYMQP7e8G 5lZJjMoSBpeG2xJAtSlIJdooTHtUGTk5N04es/u38plAipuivY3YsJdNLCAABym7 1JTDh7LiwxUz3Dnwl7EylIcZiO79v56lipqifx0/OLntf+gkVxPP/uZTNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKywmVjK2nGnQdF0KPpCro04porMB8GA1UdIwQY MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt NTlmYzczZDYwMzIyLzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFa7Wc/hs qk/NmljCaL+EMOegu2rwRj9+pUAHeqf89M+z2T+yZw/hUlstou/YBxPslyoXi0vj TSeLgnSWtDQx41xSrXzsv8P+KtgjR5Cwvn4ctQM2/1DQV7jdK2H/prSUxW8gZ35+ bOSUoqnwwv8PNTKvR5Td6cQh0T0fhqHRiM3wkdvuW8wtQb4sNN6URRIxwrxwFLqS 1DBEauKH+m+MwVRg7q19cVPMF+zJNMo/x5o8KGygE5ZbfN6UKf27KTtL1/sw+MaK iH1De9u5Wd+aKYqt5S61VsDdgUR5ZEn0yB0jCw4IcdvWIYejPD5JxgwOzZGDcGw3 VKlmoOYXsNKUnw== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:56 2025 by rpki-client