This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: ab74EubaoLtWThQ8ZkRWQf9H8fTq9OyUD6G9xU8qyqg= Subject key identifier: 36:64:7D:FE:96:BF:58:6B:CA:D1:1C:84:09:93:7D:0B:76:EB:29:3D Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B3B6C0BD49120B40D48F5F39DD451CACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 17E5 Signing time: Sat 20 Dec 2025 11:01:35 +0000 Manifest this update: Sat 20 Dec 2025 11:01:35 +0000 Manifest next update: Sun 21 Dec 2025 11:01:35 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 4YpVbO9HFvvq74shOPQXNaG5KS0.roa (hash: bVpCtuoPNa1SZMwszxLRHo7H9I6mu3GeU6NgJiv+OkM=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: Jx7Zy-NW88qIjubdbnfsP6WvkeM.roa (hash: GC9kGCOxPDmQCJoGza3DVhBvvCLswzv831ifgYwZVo8=) 7: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 9: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 10: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: yP69LPgEwbZMpkv/rTmqmnATDRn+FCcxJJjqHlpLhl4=) 12: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 13: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 14: kJYpVxtVyfv4dwbVg4WNh0NM0_w.roa (hash: wZE3vmAhLe9i25qjRpSrq5TNgZ7FBQQ+/m7aI5d1gmY=) 15: lSE1obQ59T94JWyP17qNbBJ8Mi4.roa (hash: //1SxIcij8D7RTJOSo9c6uRC0w9XN7/ELpwWy3gm8m8=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6c:0b:d4:91:20:b4:0d:48:f5:f3:9d:d4:51:ca:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Dec 20 11:01:35 2025 GMT Not After : Dec 21 11:01:35 2025 GMT Subject: CN=36647dfe96bf586bcad11c8409937d0b76eb293d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:0b:08:7a:a5:bd:99:2c:1a:b7:f4:07:a1: 4b:48:1b:2f:2c:b5:77:33:3c:2e:ee:be:56:c0:6f: 64:14:23:5c:e3:cc:b6:05:3d:2a:2f:d7:2a:cc:b0: 64:39:0d:f2:25:62:aa:44:e6:57:e3:00:ed:e7:4d: 2b:a7:38:98:9c:36:d9:0c:55:74:02:38:b0:49:82: 4c:8a:70:59:af:17:d3:97:9b:7d:67:bb:75:9f:57: 2c:58:82:45:92:85:00:06:27:24:05:58:5b:7b:73: 06:eb:8f:fa:f1:62:6f:30:97:05:5d:4c:2e:1e:22: 44:c0:a5:e6:f7:8d:90:00:2a:0d:79:a4:a6:b2:df: 7e:0a:50:f9:38:ed:73:88:67:90:3b:d7:31:1f:9c: c1:a3:49:74:87:69:b2:dd:4f:76:d6:5c:06:dc:85: 4f:99:6c:f9:73:5d:61:4c:61:4e:26:a9:60:6b:20: 77:00:c2:3b:5c:a4:40:71:40:6c:5e:7c:d9:d0:77: 17:d4:ab:7f:22:79:49:42:e9:15:17:7a:59:55:dd: 38:6c:be:b7:84:b5:db:35:b9:f3:fb:76:6b:ff:95: 25:a1:aa:b5:c0:1a:0c:80:33:2f:9c:13:91:7d:f3: e1:de:15:9f:06:d5:4a:04:98:9d:17:cd:c3:4d:20: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:7D:FE:96:BF:58:6B:CA:D1:1C:84:09:93:7D:0B:76:EB:29:3D X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bd:af:9a:b6:7c:cb:79:20:0c:3b:6b:42:ec:ba:f6:ae:d6: 85:04:ff:25:ea:f1:4a:95:3a:75:8d:4a:d9:b7:04:a1:a4:0e: 0f:1b:40:d8:6b:56:72:95:2f:c9:fa:c8:1c:c6:7d:4c:f6:d1: 78:34:28:2a:bd:37:b0:49:4d:02:b5:1e:99:48:7f:1c:ae:56: e2:ac:06:45:4e:db:1a:df:5f:57:82:e4:1e:67:fa:57:12:85: 70:c0:0d:2e:7e:14:f6:15:1c:db:12:74:20:1e:68:ea:fb:b3: f1:1d:69:cc:c0:f1:be:ae:9b:fe:69:e9:c6:15:1f:18:6a:97: de:16:74:8a:59:3e:6f:61:a9:6b:64:9a:eb:49:ed:b1:77:9e: 5a:23:37:7b:5d:38:64:39:5e:cd:e1:52:d8:c8:ad:89:6c:99: 3a:cb:52:a6:ca:1e:35:40:9a:af:76:e3:3d:7a:f9:16:11:73: ad:36:96:58:67:b0:bb:57:c2:45:bd:19:d3:d9:f0:77:f6:d1: 47:b7:a5:1f:bb:d7:05:c5:16:5b:c7:8f:99:83:c6:a4:f6:a7: 58:99:7e:84:c7:6f:60:48:63:c2:78:d5:0b:b9:58:12:86:2c: ea:0b:a7:e3:d9:7b:88:93:5b:43:5b:49:60:e5:87:d1:8e:2d: bd:d6:bf:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7bAvUkSC0DUj1853UUcrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUxMjIwMTEwMTM1WhcNMjUxMjIxMTEwMTM1WjAzMTEwLwYDVQQD EygzNjY0N2RmZTk2YmY1ODZiY2FkMTFjODQwOTkzN2QwYjc2ZWIyOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AYLCHqlvZksGrf0B6FLSBsvLLV3 Mzwu7r5WwG9kFCNc48y2BT0qL9cqzLBkOQ3yJWKqROZX4wDt500rpziYnDbZDFV0 AjiwSYJMinBZrxfTl5t9Z7t1n1csWIJFkoUABickBVhbe3MG64/68WJvMJcFXUwu HiJEwKXm942QACoNeaSmst9+ClD5OO1ziGeQO9cxH5zBo0l0h2my3U921lwG3IVP mWz5c11hTGFOJqlgayB3AMI7XKRAcUBsXnzZ0HcX1Kt/InlJQukVF3pZVd04bL63 hLXbNbnz+3Zr/5Uloaq1wBoMgDMvnBORffPh3hWfBtVKBJidF83DTSAzuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZkff6Wv1hrytEchAmTfQt26yk9MB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu72vmrZ8 y3kgDDtrQuy69q7WhQT/JerxSpU6dY1K2bcEoaQODxtA2GtWcpUvyfrIHMZ9TPbR eDQoKr03sElNArUemUh/HK5W4qwGRU7bGt9fV4LkHmf6VxKFcMANLn4U9hUc2xJ0 IB5o6vuz8R1pzMDxvq6b/mnpxhUfGGqX3hZ0ilk+b2Gpa2Sa60ntsXeeWiM3e104 ZDlezeFS2MitiWyZOstSpsoeNUCar3bjPXr5FhFzrTaWWGewu1fCRb0Z09nwd/bR R7elH7vXBcUWW8ePmYPGpPanWJl+hMdvYEhjwnjVC7lYEoYs6gun49l7iJNbQ1tJ YOWH0Y4tvda/wg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:27:15 2025 by rpki-client