This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json) Hash identifier: Fz8/dAujYfZfDfXXJ4Q3lWHyS74n9R//GtCOOt53+yI= Subject key identifier: 17:FF:6F:F2:D1:05:A8:4B:39:27:A3:4A:60:48:39:EB:40:0F:B3:FF Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b Certificate serial: 019B4324DD29C17E82D25027D255E072C7A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft Manifest number: 0EB0 Signing time: Sun 21 Dec 2025 23:00:47 +0000 Manifest this update: Sun 21 Dec 2025 23:00:47 +0000 Manifest next update: Mon 22 Dec 2025 23:00:47 +0000 Files and hashes: 1: AOhn7xhM2kSUfRAFFhvDCxU-O20.roa (hash: 1VAhBGtFhGjWFmWSsORfWNgJJ1LUT2F54ZQ/3ep5zho=) 2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: G1e/f870TJrKlBPuL6XFsp9Goi0qPIYiKYC1xGZKzVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:dd:29:c1:7e:82:d2:50:27:d2:55:e0:72:c7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b Validity Not Before: Dec 21 23:00:47 2025 GMT Not After : Dec 22 23:00:47 2025 GMT Subject: CN=17ff6ff2d105a84b3927a34a604839eb400fb3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:e3:04:5c:96:5d:01:78:60:a1:79:f4:20: d2:0c:f6:6e:68:c8:e4:39:62:f6:d6:9b:ec:74:90: 15:ba:14:91:c6:f5:3d:2a:6c:fb:72:9e:a7:66:aa: 19:5c:d8:8e:9c:01:66:bd:9a:74:53:dc:08:58:11: 41:6f:55:bd:fd:1d:08:bf:94:49:f3:65:de:cc:fb: ec:00:3c:18:d4:41:06:51:3b:59:bd:c4:9a:ad:81: f1:e5:71:fb:af:f5:0e:2f:ea:b8:39:9d:12:04:7d: 86:93:42:2c:70:ac:66:f0:46:4d:4a:c4:de:56:ea: f0:76:20:96:4d:e9:95:cf:c1:dc:8c:07:f6:92:0c: 53:40:0f:9e:89:fb:60:35:e3:95:9c:13:98:ee:42: 19:d6:a9:b0:31:8c:3b:b0:8e:5d:21:95:67:e4:5a: 6a:b8:26:00:49:8d:97:16:25:5d:be:22:18:75:de: 80:62:87:aa:44:e3:cd:dd:fb:c7:c3:1c:fd:07:2f: 18:0e:c5:2b:9f:2d:00:58:48:32:ba:b8:45:7c:ab: bd:71:2b:d7:d6:d6:a6:ac:a8:d2:ec:f7:6f:4f:17: 03:d6:69:2d:9e:d9:63:4b:1d:50:23:de:d3:fa:12: 29:23:79:dc:79:1f:b5:02:92:ef:0f:d1:5a:6b:a5: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FF:6F:F2:D1:05:A8:4B:39:27:A3:4A:60:48:39:EB:40:0F:B3:FF X509v3 Authority Key Identifier: keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:cd:56:72:26:7a:24:6a:7d:8b:98:1b:87:f3:6b:f9:2e:bd: 9b:ef:8e:c9:b9:80:72:67:f2:fa:1f:b5:93:4f:2f:3f:d9:a8: 86:80:6a:45:82:e5:26:ef:51:10:52:49:3e:2f:53:cd:cc:af: 9e:ce:42:b1:e1:58:4b:59:ba:d5:62:6a:1f:65:86:5a:1a:3e: aa:b9:be:ec:fc:39:35:4d:f1:0f:9d:74:03:33:3f:23:c6:22: 0b:f1:0d:92:e0:08:cc:b2:e4:03:dd:0c:c6:4d:be:76:d8:41: 4f:a0:e7:b7:fb:69:6b:39:1f:b0:ac:ea:87:ba:2f:64:88:47: af:96:65:c8:70:6b:1f:11:48:d3:c0:5f:74:4b:8b:73:4e:49: 42:de:9c:f9:04:b8:61:97:61:55:3e:11:e1:36:84:88:69:5e: 23:36:35:a2:aa:e5:ce:49:fa:ed:43:d5:98:69:6c:58:22:fc: 7d:e2:00:2c:69:16:be:2e:ce:6c:05:4f:c0:5a:fa:c6:eb:ef: 92:2e:7e:32:2a:35:18:a9:4d:f5:ba:98:41:ba:d6:8a:cd:90: 68:ef:7a:56:63:7a:ea:47:c9:ee:e0:de:34:9f:33:d1:bb:61: 9e:57:5c:dc:12:59:bf:24:ef:59:c7:26:8f:d2:3f:0c:a1:26: d9:d2:e9:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJN0pwX6C0lAn0lXgcseiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZmJiY2UyYzIwODBmODFmNWEwZjk4ZjI3OTIyOTgyNmRl NDg1MGIwHhcNMjUxMjIxMjMwMDQ3WhcNMjUxMjIyMjMwMDQ3WjAzMTEwLwYDVQQD EygxN2ZmNmZmMmQxMDVhODRiMzkyN2EzNGE2MDQ4MzllYjQwMGZiM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hrjBFyWXQF4YKF59CDSDPZuaMjk OWL21pvsdJAVuhSRxvU9Kmz7cp6nZqoZXNiOnAFmvZp0U9wIWBFBb1W9/R0Iv5RJ 82XezPvsADwY1EEGUTtZvcSarYHx5XH7r/UOL+q4OZ0SBH2Gk0IscKxm8EZNSsTe VurwdiCWTemVz8HcjAf2kgxTQA+eiftgNeOVnBOY7kIZ1qmwMYw7sI5dIZVn5Fpq uCYASY2XFiVdviIYdd6AYoeqROPN3fvHwxz9By8YDsUrny0AWEgyurhFfKu9cSvX 1tamrKjS7PdvTxcD1mktntljSx1QI97T+hIpI3nceR+1ApLvD9Faa6UQeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf/b/LRBahLOSejSmBIOetAD7P/MB8GA1UdIwQY MBaAFHf7vOLCCA+B9aD5jyeSKYJt5IULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZWQ3MzktMjc1NC00NDBmLTk1NDYt M2FhMjdkZjQ3NTIxLzEvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xZWQ3MzktMjc1NC00NDBmLTk1NDYtM2FhMjdkZjQ3NTIx LzEvZF91ODRzSUlENEgxb1BtUEo1SXBnbTNraFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfs1WciZ6 JGp9i5gbh/Nr+S69m++OybmAcmfy+h+1k08vP9mohoBqRYLlJu9REFJJPi9Tzcyv ns5CseFYS1m61WJqH2WGWho+qrm+7Pw5NU3xD510AzM/I8YiC/ENkuAIzLLkA90M xk2+dthBT6Dnt/tpazkfsKzqh7ovZIhHr5ZlyHBrHxFI08BfdEuLc05JQt6c+QS4 YZdhVT4R4TaEiGleIzY1oqrlzkn67UPVmGlsWCL8feIALGkWvi7ObAVPwFr6xuvv ki5+Mio1GKlN9bqYQbrWis2QaO96VmN66kfJ7uDeNJ8z0bthnldc3BJZvyTvWccm j9I/DKEm2dLpoQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:44:03 2025 by rpki-client