This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json) Hash identifier: aaD6+7KtMLRSKEczEHkFCW3JIfgatFZA3HRfNtFq1e8= Subject key identifier: 2E:AB:0D:AB:0B:B8:B7:8E:65:00:9B:7E:8E:28:DE:E8:3D:00:62:4B Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1 Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1 Certificate serial: 019B5CADC353DB5B4B1B39A384ECC37D2F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft Manifest number: 125F Signing time: Fri 26 Dec 2025 22:00:50 +0000 Manifest this update: Fri 26 Dec 2025 22:00:50 +0000 Manifest next update: Sat 27 Dec 2025 22:00:50 +0000 Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=) 2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: 9YShh6CiWNtZoRVcUbuaRHQR62WWVUKyny21XBN6X0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:c3:53:db:5b:4b:1b:39:a3:84:ec:c3:7d:2f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1 Validity Not Before: Dec 26 22:00:50 2025 GMT Not After : Dec 27 22:00:50 2025 GMT Subject: CN=2eab0dab0bb8b78e65009b7e8e28dee83d00624b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:3a:8a:ab:ff:5a:4d:b0:1f:83:92:3f:29: c9:34:e7:70:91:fe:8d:41:2e:8b:59:26:47:1d:30: 20:4b:40:99:13:9f:96:18:88:34:d0:03:cc:b9:4d: 45:c7:22:59:49:e0:83:a6:30:4a:16:ab:9c:b2:44: 31:85:70:ef:09:eb:13:4a:6d:e6:8c:0f:2d:e1:f5: 06:6e:aa:9f:e9:d1:2b:fe:21:b7:73:cd:70:96:59: 21:2d:87:e5:d1:6b:4c:c8:2c:2f:09:d1:e1:d0:25: 9b:b4:19:8a:1f:d2:5f:72:d2:4e:1c:7b:11:a5:59: 89:f7:38:30:fa:23:b1:9c:5a:1c:30:f9:7e:bc:1a: 84:99:f6:6b:77:7c:e9:24:1e:7d:bb:49:74:1a:be: 16:d7:bb:45:0a:0a:ba:5a:3f:be:3c:a5:78:72:53: 09:86:c1:f7:43:fa:f2:32:3d:ae:93:c3:64:ca:72: 72:1e:9f:11:31:9c:ad:53:56:99:3a:bb:3f:37:67: ed:06:2f:22:48:6c:b2:7e:e6:4e:20:19:7a:af:3a: 0b:64:00:91:b3:fa:13:0d:26:ed:91:62:ba:6e:70: 70:2a:54:c8:ba:88:d0:03:21:35:98:cd:e0:ce:cc: c9:c5:4d:97:85:96:2f:0a:fe:b1:1e:4e:4a:84:8a: 66:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AB:0D:AB:0B:B8:B7:8E:65:00:9B:7E:8E:28:DE:E8:3D:00:62:4B X509v3 Authority Key Identifier: keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:aa:b6:25:a3:61:ef:14:35:a6:15:be:9c:4b:3c:b2:f7:53: 67:d9:8f:f5:bc:66:20:75:80:ec:b5:10:64:a4:cf:b1:7e:46: 40:d7:8c:86:c7:16:d2:ba:41:be:e8:57:0a:29:9c:16:18:09: 05:8b:d0:89:fa:81:8b:1d:1a:c6:41:6d:76:41:96:06:e6:34: c5:26:cf:ae:b5:df:61:fa:bc:99:a1:c5:11:1a:7f:3a:a1:9a: 72:ef:61:f1:30:58:62:67:a7:0f:b7:72:3a:40:c8:b6:ba:ee: 7c:49:0d:84:2b:90:03:d2:f4:f1:5e:21:9f:cb:86:17:dd:f8: 53:8d:aa:60:a9:08:4c:4b:7e:48:c0:74:7a:90:69:6a:98:47: 37:b8:1b:36:c8:65:66:eb:af:f5:2d:43:33:71:bc:23:bd:8f: 33:3e:ff:66:7b:0a:9e:8f:28:89:85:6c:4d:a7:aa:4d:33:f6: 14:ff:93:fa:bd:60:73:fa:9a:e2:f5:1c:24:af:ba:43:b0:ec: 37:b7:04:d7:4e:73:04:d7:76:16:3d:b4:44:ef:58:91:2f:c0: 74:7d:a9:ce:d3:c3:2e:b7:89:15:93:d8:71:56:aa:75:a0:39: 22:e2:23:34:aa:1e:88:49:1b:2f:9b:4c:fb:b9:cd:90:57:c3: ad:d9:aa:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrcNT21tLGzmjhOzDfS9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNWRmZGI2ZTFkOTNjMDkyODIzZGU5NmJkZDdjODhiYmMz NmExZDEwHhcNMjUxMjI2MjIwMDUwWhcNMjUxMjI3MjIwMDUwWjAzMTEwLwYDVQQD EygyZWFiMGRhYjBiYjhiNzhlNjUwMDliN2U4ZTI4ZGVlODNkMDA2MjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EU6iqv/Wk2wH4OSPynJNOdwkf6N QS6LWSZHHTAgS0CZE5+WGIg00APMuU1FxyJZSeCDpjBKFqucskQxhXDvCesTSm3m jA8t4fUGbqqf6dEr/iG3c81wllkhLYfl0WtMyCwvCdHh0CWbtBmKH9JfctJOHHsR pVmJ9zgw+iOxnFocMPl+vBqEmfZrd3zpJB59u0l0Gr4W17tFCgq6Wj++PKV4clMJ hsH3Q/ryMj2uk8NkynJyHp8RMZytU1aZOrs/N2ftBi8iSGyyfuZOIBl6rzoLZACR s/oTDSbtkWK6bnBwKlTIuojQAyE1mM3gzszJxU2XhZYvCv6xHk5KhIpmhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6rDasLuLeOZQCbfo4o3ug9AGJLMB8GA1UdIwQY MBaAFHxd/bbh2TwJKCPelr3XyIu8NqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDct ZDE4OGM4MDg1MzA1LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDctZDE4OGM4MDg1MzA1 LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6q2JaNh 7xQ1phW+nEs8svdTZ9mP9bxmIHWA7LUQZKTPsX5GQNeMhscW0rpBvuhXCimcFhgJ BYvQifqBix0axkFtdkGWBuY0xSbPrrXfYfq8maHFERp/OqGacu9h8TBYYmenD7dy OkDItrrufEkNhCuQA9L08V4hn8uGF934U42qYKkITEt+SMB0epBpaphHN7gbNshl Zuuv9S1DM3G8I72PMz7/ZnsKno8oiYVsTaeqTTP2FP+T+r1gc/qa4vUcJK+6Q7Ds N7cE105zBNd2Fj20RO9YkS/AdH2pztPDLreJFZPYcVaqdaA5IuIjNKoeiEkbL5tM +7nNkFfDrdmqUg== -----END CERTIFICATE-----Generated at Sat Dec 27 04:04:27 2025 by rpki-client