This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft File: _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json) Hash identifier: UeIv3XrV4IQDau/bQGpQIF+hBYvU2Qu+Oi9ZUjBCQbY= Subject key identifier: C5:FA:43:7C:5A:78:E0:8F:56:C1:34:33:9C:A6:88:8D:00:E6:C6:87 Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Certificate serial: 019AF2ADCC104A913AAC52E9B343F937F0D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft Manifest number: 1126 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: MWUNq-ftYkXKNHhiuPmUDR8aNAY.roa (hash: sRHJK0hHdEHRSKSboElSRlINRVoo+ylHVvGY64QPq+U=) 2: XWI8UOsSBKLk-uPWG5IIm7lO5T0.roa (hash: wdsMuB8ozKSUOKmJcSdKQImpm/V8CgY5mxXeyIgvzhE=) 3: XZNvs4P6cEV3kqSeAChYJB2sLl8.roa (hash: g9CiDmAcRp9vEbDCpFa+vtYpHitX7GCMzN75HJigDyc=) 4: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: PbLyyBmWhMTVlKBHHxCK0ipqvCcIah5zS6nrZAdNaso=) 5: i7s_rOXOS6kYX0sDFEqFGZad-XM.roa (hash: /n5dO1dlOLjxt3g9xlSAiuAp1pYED4+r3AwngO41LLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cc:10:4a:91:3a:ac:52:e9:b3:43:f9:37:f0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=c5fa437c5a78e08f56c134339ca6888d00e6c687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:0c:3d:80:63:1d:5d:bc:87:11:3f:fe:ed: 0f:2c:bf:fd:b3:3a:20:7b:08:0e:5f:58:df:0a:4a: f5:1d:fa:f0:1b:73:cc:e9:38:cb:20:37:e0:37:ec: 4a:db:a4:8e:d2:ba:b8:3d:01:99:38:25:1a:38:e4: ac:bf:0e:33:23:8d:0b:8a:1d:c7:d9:1b:d3:3a:a4: db:13:db:11:6f:61:c1:d9:a4:13:3c:39:27:55:af: 26:f4:06:de:45:e6:97:92:96:2f:b6:c5:e4:ea:2f: 4b:d4:79:b4:f4:ea:d2:9b:a0:79:d6:ca:e5:a9:24: cd:6b:5f:ef:21:f5:ed:0b:3d:aa:eb:80:60:4e:25: 88:94:83:5d:08:18:3a:5d:f2:e7:47:e7:71:20:da: 99:b7:2a:09:78:90:76:46:14:70:60:83:75:6c:72: 7e:d0:d1:f9:fa:24:99:19:f1:aa:86:ff:db:d1:ea: d7:92:8a:6f:26:b2:fe:0b:a0:5a:fa:01:6e:3c:aa: 98:91:d8:04:09:b1:e6:d7:00:02:fd:47:0c:a9:0f: a7:fe:1a:6e:6f:c0:13:c0:f3:7a:57:20:29:dd:4a: 5e:c7:89:35:a0:66:1f:4f:af:86:89:32:71:f1:1b: f3:74:37:63:0a:0d:6a:d2:d6:33:2d:c3:72:9c:ab: 3d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FA:43:7C:5A:78:E0:8F:56:C1:34:33:9C:A6:88:8D:00:E6:C6:87 X509v3 Authority Key Identifier: keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:8e:ab:5a:ff:04:29:fb:dc:6b:44:87:3e:2e:8e:fb:2c:1f: 21:fd:77:ae:cc:55:f7:10:e7:c2:ad:04:82:d0:b3:3c:95:7e: 4f:c9:82:f9:f8:4b:dd:12:e9:dd:68:34:e8:91:95:3e:20:50: f0:65:95:9d:5e:05:d2:57:87:c7:8a:03:98:00:6d:70:5f:c8: 24:88:7f:85:1b:06:43:7d:6b:78:70:51:9e:53:77:ca:bb:8d: e9:9c:ce:77:cc:ea:92:49:c3:0e:6d:60:c1:e7:c0:2d:ab:52: a3:b0:c9:85:8e:9d:ef:da:6e:4c:ce:ca:37:2f:aa:b4:50:77: c3:03:5c:39:49:37:e3:6c:42:4e:8c:6b:9a:73:d4:b9:1f:c0: dd:ff:b3:0c:7f:57:18:4b:0a:46:66:7c:c6:ca:c5:6c:8f:52: fb:4b:14:83:1e:60:a0:81:3f:14:23:95:b8:79:10:e4:f1:56: 1d:5a:54:57:d8:6c:36:e1:a7:44:cf:e7:4a:ab:e6:b5:b9:5b: 47:f1:0f:3e:3b:84:4a:e1:0a:9c:09:b5:c1:c4:82:eb:53:e6: 99:f4:78:c7:7d:ff:c7:be:78:9e:ba:f2:b6:d6:85:cf:03:83: a9:fc:53:21:68:10:40:73:17:9e:6c:f2:a9:7d:72:67:50:1a: 96:f9:11:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcwQSpE6rFLps0P5N/DZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5 ZTBhNTEwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EyhjNWZhNDM3YzVhNzhlMDhmNTZjMTM0MzM5Y2E2ODg4ZDAwZTZjNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB0MPYBjHV28hxE//u0PLL/9szog ewgOX1jfCkr1HfrwG3PM6TjLIDfgN+xK26SO0rq4PQGZOCUaOOSsvw4zI40Lih3H 2RvTOqTbE9sRb2HB2aQTPDknVa8m9AbeReaXkpYvtsXk6i9L1Hm09OrSm6B51srl qSTNa1/vIfXtCz2q64BgTiWIlINdCBg6XfLnR+dxINqZtyoJeJB2RhRwYIN1bHJ+ 0NH5+iSZGfGqhv/b0erXkopvJrL+C6Ba+gFuPKqYkdgECbHm1wAC/UcMqQ+n/hpu b8ATwPN6VyAp3Upex4k1oGYfT6+GiTJx8RvzdDdjCg1q0tYzLcNynKs90wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX6Q3xaeOCPVsE0M5ymiI0A5saHMB8GA1UdIwQY MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt YWYxY2MyMzE3ZTM5LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5 LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5o6rWv8E Kfvca0SHPi6O+ywfIf13rsxV9xDnwq0EgtCzPJV+T8mC+fhL3RLp3Wg06JGVPiBQ 8GWVnV4F0leHx4oDmABtcF/IJIh/hRsGQ31reHBRnlN3yruN6ZzOd8zqkknDDm1g wefALatSo7DJhY6d79puTM7KNy+qtFB3wwNcOUk342xCToxrmnPUuR/A3f+zDH9X GEsKRmZ8xsrFbI9S+0sUgx5goIE/FCOVuHkQ5PFWHVpUV9hsNuGnRM/nSqvmtblb R/EPPjuESuEKnAm1wcSC61PmmfR4x33/x754nrryttaFzwODqfxTIWgQQHMXnmzy qX1yZ1AalvkRgA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:39 2025 by rpki-client