This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: h0W7g0tseqDXR0jsfAmnym1d3S+v7uxiTbJESIaKB7M= Subject key identifier: CE:A1:F7:82:7F:09:76:1C:21:D9:AF:66:2E:1F:88:C7:63:A1:45:8A Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B3D59E3ABDECDB719A00DA82E32E4368C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 17E6 Signing time: Sat 20 Dec 2025 20:00:59 +0000 Manifest this update: Sat 20 Dec 2025 20:00:59 +0000 Manifest next update: Sun 21 Dec 2025 20:00:59 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 4YpVbO9HFvvq74shOPQXNaG5KS0.roa (hash: bVpCtuoPNa1SZMwszxLRHo7H9I6mu3GeU6NgJiv+OkM=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: Jx7Zy-NW88qIjubdbnfsP6WvkeM.roa (hash: GC9kGCOxPDmQCJoGza3DVhBvvCLswzv831ifgYwZVo8=) 7: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 9: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 10: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: 27KGrivu6cBcjMp2nMGyc8CtD4N3AmrubkucDBdIjEg=) 12: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 13: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 14: kJYpVxtVyfv4dwbVg4WNh0NM0_w.roa (hash: wZE3vmAhLe9i25qjRpSrq5TNgZ7FBQQ+/m7aI5d1gmY=) 15: lSE1obQ59T94JWyP17qNbBJ8Mi4.roa (hash: //1SxIcij8D7RTJOSo9c6uRC0w9XN7/ELpwWy3gm8m8=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e3:ab:de:cd:b7:19:a0:0d:a8:2e:32:e4:36:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Dec 20 20:00:59 2025 GMT Not After : Dec 21 20:00:59 2025 GMT Subject: CN=cea1f7827f09761c21d9af662e1f88c763a1458a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:50:6d:b2:88:c7:cc:a9:57:4b:54:19:9e: 40:bc:2d:8a:e5:31:38:70:5a:ca:ca:c5:a4:a9:20: fa:48:c1:ec:eb:d8:8e:df:a7:17:d6:f4:54:c9:3f: 04:50:71:12:93:25:f7:0a:50:c4:c7:d5:e0:38:f0: e7:40:1d:d8:cf:15:69:87:ae:22:b8:f1:5e:bd:54: a3:3a:cf:38:64:b5:16:42:b1:63:e1:2e:97:b6:b8: e5:ff:8f:10:21:4a:d2:7b:e4:d7:0f:18:35:32:ba: 48:19:46:1a:6c:ca:68:95:78:f9:8c:92:4c:ca:4a: a8:f4:7a:25:1f:1d:e3:5d:0f:d5:b8:cb:bb:3d:7d: 6b:d5:ab:5a:78:5d:09:c1:01:2a:2c:53:c1:bd:43: 9e:0b:f6:0e:0e:04:03:f8:18:38:d2:b9:2e:eb:a7: 1c:7d:d2:b2:fb:7a:f4:98:3e:10:23:ad:de:5d:f6: 66:bf:c6:db:95:79:48:dd:14:99:4f:b1:55:ed:22: 36:ac:b3:8b:4a:0b:81:92:aa:9d:60:b9:a2:b4:61: 1b:f6:27:c5:b9:5a:ad:be:d5:40:df:0b:12:ce:4c: 09:ce:79:f6:32:49:e0:ac:95:67:1b:5c:0a:1b:ff: 02:0b:56:5c:0b:2f:cd:b2:57:1b:c8:19:52:fc:df: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A1:F7:82:7F:09:76:1C:21:D9:AF:66:2E:1F:88:C7:63:A1:45:8A X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e1:28:fb:5e:fb:5b:47:f6:e4:c9:a8:1d:c0:f4:ae:1c:2c: c4:bb:ce:8c:7e:cb:73:ea:3b:50:03:b5:43:67:e9:81:30:b8: da:33:3f:e8:37:74:f7:0c:6d:38:29:a2:09:ee:46:10:2f:13: 80:f6:df:74:e0:a6:d8:16:02:83:bc:38:34:5d:10:9f:a1:d2: 0d:73:f4:3c:67:65:d3:82:27:94:8a:9d:0f:4c:57:37:b5:c9: a1:a4:48:d0:05:3d:9f:5c:27:61:74:e7:f9:ec:1f:10:3b:d1: 09:7e:b8:5b:2e:e3:fe:3b:d3:2b:7c:42:39:24:b6:8f:50:7d: 31:54:1a:fa:cd:6a:c0:39:12:79:09:11:68:ff:3d:fa:86:18: 92:5d:06:7b:cd:c0:43:95:ad:36:8d:e5:f5:53:a2:8c:cb:a2: cc:20:b1:3c:de:c8:36:33:d1:bf:7e:29:d8:7d:4d:07:99:b8: 2d:ed:ea:43:a3:59:28:c1:78:97:4f:84:5d:4f:39:a5:77:ca: d8:5a:dd:21:a1:21:85:81:4b:89:08:0d:5d:e7:22:e4:7b:5f: 05:56:8a:c8:ab:fc:00:32:7e:68:d1:6e:14:93:97:14:20:e3: 4f:b6:21:75:ef:0e:53:85:32:c7:8b:ea:e5:39:a1:92:7d:51: a4:5c:00:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WeOr3s23GaANqC4y5DaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUxMjIwMjAwMDU5WhcNMjUxMjIxMjAwMDU5WjAzMTEwLwYDVQQD EyhjZWExZjc4MjdmMDk3NjFjMjFkOWFmNjYyZTFmODhjNzYzYTE0NThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDVQbbKIx8ypV0tUGZ5AvC2K5TE4 cFrKysWkqSD6SMHs69iO36cX1vRUyT8EUHESkyX3ClDEx9XgOPDnQB3YzxVph64i uPFevVSjOs84ZLUWQrFj4S6Xtrjl/48QIUrSe+TXDxg1MrpIGUYabMpolXj5jJJM ykqo9HolHx3jXQ/VuMu7PX1r1ataeF0JwQEqLFPBvUOeC/YODgQD+Bg40rku66cc fdKy+3r0mD4QI63eXfZmv8bblXlI3RSZT7FV7SI2rLOLSguBkqqdYLmitGEb9ifF uVqtvtVA3wsSzkwJznn2MkngrJVnG1wKG/8CC1ZcCy/NslcbyBlS/N+g7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6h94J/CXYcIdmvZi4fiMdjoUWKMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuEo+177 W0f25MmoHcD0rhwsxLvOjH7Lc+o7UAO1Q2fpgTC42jM/6Dd09wxtOCmiCe5GEC8T gPbfdOCm2BYCg7w4NF0Qn6HSDXP0PGdl04InlIqdD0xXN7XJoaRI0AU9n1wnYXTn +ewfEDvRCX64Wy7j/jvTK3xCOSS2j1B9MVQa+s1qwDkSeQkRaP89+oYYkl0Ge83A Q5WtNo3l9VOijMuizCCxPN7INjPRv34p2H1NB5m4Le3qQ6NZKMF4l0+EXU85pXfK 2FrdIaEhhYFLiQgNXeci5HtfBVaKyKv8ADJ+aNFuFJOXFCDjT7Yhde8OU4Uyx4vq 5Tmhkn1RpFwApg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:54:05 2025 by rpki-client