This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json) Hash identifier: gPRPKIanI6h6qKQXkvRjPnj/X7VWeQkiz4w4wy2Dj0k= Subject key identifier: F3:31:D4:D4:2F:7F:D1:AB:44:A6:21:74:24:84:E2:3E:5E:9B:0C:6A Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8 Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8 Certificate serial: 019B3B6B46F6B10986E1593B26EE9A5F6DD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft Manifest number: 0A6D Signing time: Sat 20 Dec 2025 11:00:44 +0000 Manifest this update: Sat 20 Dec 2025 11:00:44 +0000 Manifest next update: Sun 21 Dec 2025 11:00:44 +0000 Files and hashes: 1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=) 2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: GC0U8HGthqD2B60AW1Bgrw8rzBNe6ekBu7rncfMLmHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:46:f6:b1:09:86:e1:59:3b:26:ee:9a:5f:6d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8 Validity Not Before: Dec 20 11:00:44 2025 GMT Not After : Dec 21 11:00:44 2025 GMT Subject: CN=f331d4d42f7fd1ab44a621742484e23e5e9b0c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:79:fe:e7:44:a7:8a:bb:18:22:e9:3e:40: d6:2c:da:c0:6b:a7:3a:a9:81:16:4d:95:fa:31:73: 21:58:c5:1f:29:8e:03:0b:a3:fc:7c:27:ec:df:15: b4:f1:bc:21:56:c4:0d:4b:e5:4b:12:73:c6:20:f1: e7:a3:89:6a:3a:31:42:4c:d6:3e:98:01:f2:c7:11: a9:f1:a1:46:81:af:12:2c:0e:56:08:71:51:97:d5: 4d:50:74:b8:9a:37:3b:83:7f:23:d5:af:1b:0b:9f: 78:01:53:5f:f3:10:42:9c:78:ea:e9:7c:bd:e6:05: 4d:88:05:89:78:94:28:bb:6f:95:9b:11:11:94:e3: 2e:f3:86:de:cf:0b:02:12:0b:8e:c0:93:6c:f7:dc: 96:c1:4d:9a:24:f5:5b:79:9a:ae:74:08:bf:00:a8: 2b:24:72:48:a1:57:eb:78:e9:55:96:9b:ea:84:4d: 65:3c:6e:cd:0a:9a:05:c7:93:49:6a:de:4f:10:c0: 9c:75:ca:dc:03:c5:42:97:dc:71:8b:9d:8b:7a:20: a3:14:70:b5:7f:1e:e2:d9:45:44:5f:d8:6f:23:9b: 44:72:78:8a:78:13:c8:66:7b:3b:4f:e8:bd:31:f4: 45:2f:2a:96:de:df:e0:77:4f:d6:48:8e:ba:4d:22: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:31:D4:D4:2F:7F:D1:AB:44:A6:21:74:24:84:E2:3E:5E:9B:0C:6A X509v3 Authority Key Identifier: keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:95:d6:7a:0a:9a:75:ec:e4:cd:eb:91:8a:a6:16:d0:ac:48: 6a:2f:95:99:da:34:2f:69:d9:32:12:c8:a5:b1:0c:1d:f4:76: 97:a9:a8:4f:42:d1:a4:68:d3:9a:bc:f2:a4:14:cf:13:78:8d: 76:85:46:ac:ad:31:46:7d:bb:5e:47:2c:d0:ba:dc:f9:dd:02: da:aa:dc:e5:50:2e:3e:60:cc:f7:4b:3a:09:f7:45:0e:24:56: ee:7b:b8:8e:b1:ab:e2:c8:72:c8:9d:57:d7:f0:5f:a4:1a:e9: 6b:88:1c:b2:fa:3e:0f:0d:d2:7e:4a:5d:43:36:df:2f:d5:ae: df:2d:ae:ea:77:95:6c:28:99:38:6f:87:73:b6:93:f8:d7:e5: 23:df:c9:bc:0d:6c:63:00:02:66:0c:49:0b:7d:00:f8:3b:62: 91:3c:5f:43:ce:62:4f:4f:7b:fd:e6:1b:a1:d2:ba:4f:4f:8d: 30:6f:5c:34:69:c6:b9:3d:60:c9:54:62:cd:ce:10:52:c3:c4: fc:45:24:48:60:c3:95:c4:db:69:56:8d:ec:15:c9:1a:1e:f2: 45:91:61:7f:41:ce:3a:04:08:fc:ba:e3:0e:03:e2:c0:df:a8: 7b:a0:bb:dd:c1:4a:ce:16:90:72:93:70:50:72:d1:a3:a3:12: ee:78:da:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a0b2sQmG4Vk7Ju6aX23VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjdhYjNmMWE5M2U3MTRmMzA3NGEwNWQ4NmZjY2UyMjA2 MzA1YTgwHhcNMjUxMjIwMTEwMDQ0WhcNMjUxMjIxMTEwMDQ0WjAzMTEwLwYDVQQD EyhmMzMxZDRkNDJmN2ZkMWFiNDRhNjIxNzQyNDg0ZTIzZTVlOWIwYzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsud5/udEp4q7GCLpPkDWLNrAa6c6 qYEWTZX6MXMhWMUfKY4DC6P8fCfs3xW08bwhVsQNS+VLEnPGIPHno4lqOjFCTNY+ mAHyxxGp8aFGga8SLA5WCHFRl9VNUHS4mjc7g38j1a8bC594AVNf8xBCnHjq6Xy9 5gVNiAWJeJQou2+VmxERlOMu84bezwsCEguOwJNs99yWwU2aJPVbeZqudAi/AKgr JHJIoVfreOlVlpvqhE1lPG7NCpoFx5NJat5PEMCcdcrcA8VCl9xxi52LeiCjFHC1 fx7i2UVEX9hvI5tEcniKeBPIZns7T+i9MfRFLyqW3t/gd0/WSI66TSJYFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMx1NQvf9GrRKYhdCSE4j5emwxqMB8GA1UdIwQY MBaAFKz3qz8ak+cU8wdKBdhvzOIgYwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMt YWQ0M2NjZDdhYWU4LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMtYWQ0M2NjZDdhYWU4 LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZXWegqa dezkzeuRiqYW0KxIai+Vmdo0L2nZMhLIpbEMHfR2l6moT0LRpGjTmrzypBTPE3iN doVGrK0xRn27Xkcs0Lrc+d0C2qrc5VAuPmDM90s6CfdFDiRW7nu4jrGr4shyyJ1X 1/BfpBrpa4gcsvo+Dw3SfkpdQzbfL9Wu3y2u6neVbCiZOG+Hc7aT+NflI9/JvA1s YwACZgxJC30A+DtikTxfQ85iT097/eYbodK6T0+NMG9cNGnGuT1gyVRizc4QUsPE /EUkSGDDlcTbaVaN7BXJGh7yRZFhf0HOOgQI/LrjDgPiwN+oe6C73cFKzhaQcpNw UHLRo6MS7njahA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:49:46 2025 by rpki-client