This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json) Hash identifier: FNxeEPojbtlGdEkbDkdqmldap9uD9SytXdnBz6YFfS0= Subject key identifier: 59:19:4E:6F:06:54:FB:21:32:D1:77:C7:7F:1F:59:E1:05:98:48:B5 Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Certificate serial: 019B5ABFD67AAA993059F049A9C4E70EF54A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft Manifest number: 0F5C Signing time: Fri 26 Dec 2025 13:01:20 +0000 Manifest this update: Fri 26 Dec 2025 13:01:20 +0000 Manifest next update: Sat 27 Dec 2025 13:01:20 +0000 Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: LJm3b9iKXveFdupUoOK7KrGy4aovYPknGzDE5BDCONM=) 2: iNP53awYopMvAC4_B7BQl71kOxY.roa (hash: bB0RVg76/44F7S9NnPgzE3dfYBZqeAvXewkbyz58CrI=) 3: lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa (hash: H6uKA8IXZMicdWaKzhjJe9pvq8QiwubQ+Jp2iPiiq2o=) 4: tO7FKCFax-gtGeKJuusgZ6pHQQ8.roa (hash: o1Lh17vyaKAVv+dEziVl9qAFWYzZNADmVMYgNFzVQxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d6:7a:aa:99:30:59:f0:49:a9:c4:e7:0e:f5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Validity Not Before: Dec 26 13:01:20 2025 GMT Not After : Dec 27 13:01:20 2025 GMT Subject: CN=59194e6f0654fb2132d177c77f1f59e1059848b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:38:ba:10:29:4a:6a:f1:00:98:70:bf:ed: 47:cf:34:43:2a:40:80:8e:62:78:97:31:bf:95:f8: ff:2c:7a:cc:4e:60:c1:80:14:d9:1e:44:28:24:20: 87:f3:f1:a8:6e:3e:3d:d5:60:72:07:55:82:d2:94: a1:fa:7c:d5:d2:93:9b:01:0c:6f:5f:85:1d:fb:37: ad:b0:8d:63:76:16:3b:57:90:cc:5f:10:45:ad:41: 00:17:df:5a:fe:bc:1c:ae:9e:03:aa:83:9c:0f:fe: f8:27:bc:24:5e:13:ba:b2:2c:48:e5:ac:b6:7a:61: ed:1f:16:bd:66:c8:45:64:c9:d7:69:a1:4c:35:35: ed:c4:d7:bc:b8:a0:b3:52:02:b2:1f:86:54:56:f0: ee:29:e5:fa:43:c9:0a:e0:77:7b:ab:c5:d4:23:d6: d0:9a:f4:45:93:18:f1:c9:4d:14:83:2b:4d:81:ce: b4:bd:31:3f:1b:ad:76:44:70:b6:b6:e0:7c:21:22: 5d:ef:fa:b1:23:a5:e6:19:8d:13:fd:dd:a8:32:ee: da:59:dd:8e:b8:6c:f2:82:23:5f:56:19:a2:cf:67: 0c:4a:44:45:f5:6a:cb:84:9d:38:92:93:85:54:ef: 91:06:a0:fc:4d:74:b7:32:d5:28:15:93:94:32:78: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:19:4E:6F:06:54:FB:21:32:D1:77:C7:7F:1F:59:E1:05:98:48:B5 X509v3 Authority Key Identifier: keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7a:c1:f5:2f:98:05:ce:16:72:9e:25:71:bb:d5:1f:c2:8a: a4:59:85:5e:d4:a4:be:62:7a:b4:ab:09:4e:3c:4c:b0:26:22: 0c:b6:74:d1:a9:37:5b:c7:d5:02:7e:60:24:a5:c3:ba:8e:0c: a4:50:44:da:ea:d2:f2:41:9c:8b:a1:38:7c:29:bf:3c:d9:80: 70:6a:a5:f8:66:c3:12:75:e8:b5:d5:c2:2f:ba:4f:67:2b:87: c0:80:ea:05:09:8f:c9:80:5a:4f:9b:06:c9:26:83:39:b2:cc: c0:78:b5:de:91:6b:9f:78:b4:2a:ec:c7:28:95:b6:d8:af:49: 91:63:be:dc:9e:74:1b:34:1b:bc:92:73:cc:18:94:2b:d2:72: 32:11:42:dc:cd:79:f5:20:9b:f3:cb:e0:22:45:c4:d9:e1:f8: ed:7e:ae:0c:28:2c:ac:4c:c2:08:4d:ac:fc:bb:ea:b5:5f:52: e1:65:03:8b:7e:dc:bd:00:24:a5:fa:98:7f:ee:e7:ab:79:25: 49:fa:6b:41:72:66:7a:11:6a:f0:ce:a3:91:4d:b8:64:da:da: 73:a0:b2:33:a8:bf:54:91:7a:dc:ab:e0:d5:eb:be:e8:3d:b3: 36:3c:5d:a7:c0:60:13:97:5a:fa:90:08:6b:6f:04:9d:68:39: 9f:57:d7:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9Z6qpkwWfBJqcTnDvVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1 ZThmNTgwHhcNMjUxMjI2MTMwMTIwWhcNMjUxMjI3MTMwMTIwWjAzMTEwLwYDVQQD Eyg1OTE5NGU2ZjA2NTRmYjIxMzJkMTc3Yzc3ZjFmNTllMTA1OTg0OGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/E4uhApSmrxAJhwv+1HzzRDKkCA jmJ4lzG/lfj/LHrMTmDBgBTZHkQoJCCH8/Gobj491WByB1WC0pSh+nzV0pObAQxv X4Ud+zetsI1jdhY7V5DMXxBFrUEAF99a/rwcrp4DqoOcD/74J7wkXhO6sixI5ay2 emHtHxa9ZshFZMnXaaFMNTXtxNe8uKCzUgKyH4ZUVvDuKeX6Q8kK4Hd7q8XUI9bQ mvRFkxjxyU0UgytNgc60vTE/G612RHC2tuB8ISJd7/qxI6XmGY0T/d2oMu7aWd2O uGzygiNfVhmiz2cMSkRF9WrLhJ04kpOFVO+RBqD8TXS3MtUoFZOUMnhmFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkZTm8GVPshMtF3x38fWeEFmEi1MB8GA1UdIwQY MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt YjU5YzJhYzk1MWNiLzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3rB9S+Y Bc4Wcp4lcbvVH8KKpFmFXtSkvmJ6tKsJTjxMsCYiDLZ00ak3W8fVAn5gJKXDuo4M pFBE2urS8kGci6E4fCm/PNmAcGql+GbDEnXotdXCL7pPZyuHwIDqBQmPyYBaT5sG ySaDObLMwHi13pFrn3i0KuzHKJW22K9JkWO+3J50GzQbvJJzzBiUK9JyMhFC3M15 9SCb88vgIkXE2eH47X6uDCgsrEzCCE2s/LvqtV9S4WUDi37cvQAkpfqYf+7nq3kl SfprQXJmehFq8M6jkU24ZNrac6CyM6i/VJF63Kvg1eu+6D2zNjxdp8BgE5da+pAI a28EnWg5n1fXWw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:59:59 2025 by rpki-client