This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json) Hash identifier: muuqkWnyd9Xn0q8bC2CnoMnouOpY4d1bVNMiknXEMRM= Subject key identifier: 87:60:13:55:26:C2:91:39:2C:36:15:B6:77:7B:F6:A9:DF:1D:02:08 Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Certificate serial: 019B3FB603850699EF4E27320291DABA81B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft Manifest number: 14A0 Signing time: Sun 21 Dec 2025 07:00:51 +0000 Manifest this update: Sun 21 Dec 2025 07:00:51 +0000 Manifest next update: Mon 22 Dec 2025 07:00:51 +0000 Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: TgdVE5Yemb1KoYPiGcdqIMHd1mRcxTnneztQKvvRhLU=) 2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=) 3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=) 4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:03:85:06:99:ef:4e:27:32:02:91:da:ba:81:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Validity Not Before: Dec 21 07:00:51 2025 GMT Not After : Dec 22 07:00:51 2025 GMT Subject: CN=8760135526c291392c3615b6777bf6a9df1d0208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:79:d8:1a:e1:69:49:88:ef:ed:e3:f7:92:0d: 76:f0:dc:ad:aa:2d:1c:a6:89:3d:5f:11:7d:b5:15: 80:dc:c8:14:8c:76:59:0c:1a:58:cc:85:f0:24:ef: 00:46:3f:99:a8:61:74:06:d4:9a:8f:eb:bb:64:a8: 4b:84:f7:41:e1:dc:35:37:7d:ae:56:10:26:06:3e: 25:50:5d:45:5a:71:18:57:40:7d:a8:39:b7:09:49: fd:1c:61:ee:d5:d1:4d:d3:94:0f:16:b4:a5:52:02: ed:96:a2:d6:55:a0:4d:08:b9:1e:ed:12:cb:58:5d: 91:4b:94:f8:7b:5f:f0:9c:2b:4c:31:87:d9:b0:f2: e8:38:4e:5e:a5:3c:34:54:7d:29:c3:a8:2d:c1:9c: b0:90:fd:34:bf:83:3a:0e:1c:df:40:e2:d6:1a:32: 44:c9:2b:b7:aa:72:46:da:d0:8f:3b:37:39:ae:37: 2c:77:02:4a:da:d9:d6:dc:28:4e:b9:a9:87:88:7c: 3f:38:7d:4d:da:ce:41:a5:aa:a6:07:09:88:f6:2f: 9a:a7:52:76:92:91:22:f3:1a:e6:a2:3f:4f:96:9b: cd:ae:0f:a7:37:69:a2:f3:0d:c9:76:d4:bc:14:2a: e5:a5:8c:46:37:52:21:9a:61:be:2c:65:46:13:45: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:60:13:55:26:C2:91:39:2C:36:15:B6:77:7B:F6:A9:DF:1D:02:08 X509v3 Authority Key Identifier: keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:45:ac:10:70:7a:63:a6:ec:ec:7e:c9:ad:f2:07:10:c6:de: 5e:62:54:0c:c6:de:cf:b4:19:4e:b1:e5:e3:06:b3:df:3e:02: 88:b7:39:12:03:18:cd:0e:7d:da:ab:55:89:55:ab:02:6d:60: 80:97:09:9b:8f:37:d9:4b:61:0e:e0:b3:ca:9e:a4:80:de:90: 24:d4:99:8a:4c:18:7c:22:26:4b:2c:74:1b:c1:68:79:f9:ea: 5c:c5:16:91:52:af:b0:47:7f:f0:bf:0e:dc:19:1e:30:4c:30: 51:66:38:e7:9d:33:13:ec:2d:92:d9:46:f9:52:1c:87:ec:ca: af:0d:cb:93:b9:92:9c:34:46:2a:55:01:3d:d8:53:9a:fa:08: e8:8a:55:2f:c1:4c:6b:fd:3d:3e:f7:0c:60:53:80:c3:41:bb: 7d:ef:08:49:e4:43:0f:88:fb:9c:e4:5c:d7:5c:a9:07:51:f0: 1e:43:50:8b:cf:92:4d:0b:5b:ed:0b:6a:83:a6:1a:05:f6:4e: 0c:9a:3e:07:59:f6:11:4c:a7:a4:46:78:12:17:61:51:40:92: 98:c2:40:c2:bf:96:80:57:17:1d:f2:96:d9:fb:9e:11:a2:e9: c2:4b:92:4f:09:b2:aa:e1:c5:cc:15:80:aa:cc:82:74:00:da: 76:da:d3:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tgOFBpnvTicyApHauoG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDc3YWJmMGEyN2VkZTg4NmZiYzQyNDEzZDdhODljMjI2 YjExZmEwHhcNMjUxMjIxMDcwMDUxWhcNMjUxMjIyMDcwMDUxWjAzMTEwLwYDVQQD Eyg4NzYwMTM1NTI2YzI5MTM5MmMzNjE1YjY3NzdiZjZhOWRmMWQwMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXnYGuFpSYjv7eP3kg128Nytqi0c pok9XxF9tRWA3MgUjHZZDBpYzIXwJO8ARj+ZqGF0BtSaj+u7ZKhLhPdB4dw1N32u VhAmBj4lUF1FWnEYV0B9qDm3CUn9HGHu1dFN05QPFrSlUgLtlqLWVaBNCLke7RLL WF2RS5T4e1/wnCtMMYfZsPLoOE5epTw0VH0pw6gtwZywkP00v4M6DhzfQOLWGjJE ySu3qnJG2tCPOzc5rjcsdwJK2tnW3ChOuamHiHw/OH1N2s5BpaqmBwmI9i+ap1J2 kpEi8xrmoj9PlpvNrg+nN2mi8w3JdtS8FCrlpYxGN1IhmmG+LGVGE0WAjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdgE1UmwpE5LDYVtnd79qnfHQIIMB8GA1UdIwQY MBaAFAxHer8KJ+3ohvvEJBPXqJwiaxH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTct MThmNGY2NmE1MGEwLzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTctMThmNGY2NmE1MGEw LzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkWsEHB6 Y6bs7H7JrfIHEMbeXmJUDMbez7QZTrHl4waz3z4CiLc5EgMYzQ592qtViVWrAm1g gJcJm4832UthDuCzyp6kgN6QJNSZikwYfCImSyx0G8FoefnqXMUWkVKvsEd/8L8O 3BkeMEwwUWY4550zE+wtktlG+VIch+zKrw3Lk7mSnDRGKlUBPdhTmvoI6IpVL8FM a/09PvcMYFOAw0G7fe8ISeRDD4j7nORc11ypB1HwHkNQi8+STQtb7Qtqg6YaBfZO DJo+B1n2EUynpEZ4EhdhUUCSmMJAwr+WgFcXHfKW2fueEaLpwkuSTwmyquHFzBWA qsyCdADadtrT9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 09:52:52 2025 by rpki-client