This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json) Hash identifier: Oynebd1sLXGIQqxDCXm1Tz0eqpD6z3KLsp8rhDS2Kf8= Subject key identifier: EE:51:A5:CA:95:05:26:CD:8B:23:B8:75:4A:AE:6D:EA:94:AD:A4:AA Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0 Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0 Certificate serial: 019B4D3A96F28C4CB1C608B736BD9958B916 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft Manifest number: 0EA4 Signing time: Tue 23 Dec 2025 22:00:43 +0000 Manifest this update: Tue 23 Dec 2025 22:00:43 +0000 Manifest next update: Wed 24 Dec 2025 22:00:43 +0000 Files and hashes: 1: BRx8YXqDNB1GFUFqyh6QeZ00QCQ.roa (hash: o3eKIyn+wElbYPzG51u2wAS6yMUVN8sHDDwj5Rm2E/Q=) 2: VbwtiBX2ms4ySWY9SuuxQ_e54iU.roa (hash: k9pKrx75Mce4A5zPehz4672JfRhT62oujRsmOrrbRnk=) 3: W_LcH2rarIjndbdlJP8dn2zg91I.roa (hash: ABTtDVp9Hfq4kC7VPzIn0vf/HFoFzUVcLY2Iv5yLp7M=) 4: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: wcN9jMKFBPrdbWFiyGHOBYkbDJvOhKnchIJ9pR/pzvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:96:f2:8c:4c:b1:c6:08:b7:36:bd:99:58:b9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0 Validity Not Before: Dec 23 22:00:43 2025 GMT Not After : Dec 24 22:00:43 2025 GMT Subject: CN=ee51a5ca950526cd8b23b8754aae6dea94ada4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:d9:45:0d:56:e0:0e:4c:a6:16:01:fa:58: dd:29:23:8d:74:dd:97:4b:37:19:07:d0:f3:88:5c: b1:a7:e4:28:9a:33:41:04:b5:0a:86:eb:fe:bc:8e: 1c:ad:af:10:f6:f2:96:70:5c:41:01:b0:f0:a2:98: d3:ad:5e:ac:95:a7:69:ad:66:36:e8:bd:b4:27:4a: 49:cc:c3:f1:9c:e3:eb:03:5d:71:8a:f0:4b:5b:8e: 4f:03:4c:65:a1:e2:bd:d9:19:1c:4d:af:c7:27:c3: 98:67:9e:6b:0c:bf:80:98:28:34:05:f7:64:0e:2d: b2:1b:6f:5d:8a:bc:0f:1c:48:75:0d:33:9b:7c:d8: 68:c6:d0:4b:58:df:f3:74:37:ef:24:5b:76:af:b0: bb:d4:fd:8c:78:97:7f:bf:27:47:80:5b:d7:af:38: 93:29:af:b8:58:a4:84:a8:e8:55:16:d9:68:12:57: 0a:63:0e:5b:8e:04:90:a9:6c:5e:9a:c7:5a:47:ea: 98:36:61:25:8c:f4:c3:2d:7c:1d:02:a4:21:ee:67: 94:b1:64:1c:86:2c:d2:88:e0:90:4b:a6:c2:f0:63: 44:17:63:f8:0e:9a:91:a2:1a:01:6d:4a:15:76:38: de:bc:b4:bf:2c:77:ff:56:c4:43:64:b7:0d:cb:61: e9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:51:A5:CA:95:05:26:CD:8B:23:B8:75:4A:AE:6D:EA:94:AD:A4:AA X509v3 Authority Key Identifier: keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:16:a8:db:50:79:ed:50:ec:0a:bd:2e:0b:f8:06:d2:9f:78: 4e:50:19:f5:7a:eb:20:10:ae:88:e8:ac:a8:c2:46:1b:fe:79: db:cb:e3:dd:11:f2:18:ac:32:ef:9c:98:28:67:42:ea:e4:56: ff:e8:84:88:c3:0b:f2:d8:6c:c7:1f:85:5e:b6:5e:5f:63:2a: f7:01:4a:2d:05:a2:2b:ff:f4:94:fb:80:f5:15:75:75:20:97: 7a:75:19:dd:5e:21:2e:dc:20:7b:ca:2e:e1:f6:bf:3b:c8:0b: cc:7d:1e:29:af:67:b0:cd:d5:e2:22:80:0f:52:39:c2:31:2c: 7d:25:fb:64:93:9d:f6:af:2c:d4:26:79:fc:f7:a6:d6:6b:9c: ef:4c:39:8c:32:e8:f1:7b:5c:36:d8:e4:7c:4a:17:e0:ff:61: 99:69:ea:7d:17:c5:24:b9:07:5e:ab:7c:2c:83:29:c6:52:12: 9c:03:87:16:da:63:d8:d3:6d:16:07:f3:35:a3:47:73:73:fc: c4:68:d9:94:3d:b4:80:38:0e:85:54:0e:64:14:cc:92:03:52: 0e:97:d1:0d:78:12:5b:23:aa:33:29:98:c2:0d:c0:e1:92:b7: f4:a4:69:bc:5d:4d:ab:3c:90:13:35:be:0c:9e:8e:04:75:22: 94:a6:6b:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOpbyjEyxxgi3Nr2ZWLkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw OTRkYTAwHhcNMjUxMjIzMjIwMDQzWhcNMjUxMjI0MjIwMDQzWjAzMTEwLwYDVQQD EyhlZTUxYTVjYTk1MDUyNmNkOGIyM2I4NzU0YWFlNmRlYTk0YWRhNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/LZRQ1W4A5MphYB+ljdKSONdN2X SzcZB9DziFyxp+QomjNBBLUKhuv+vI4cra8Q9vKWcFxBAbDwopjTrV6sladprWY2 6L20J0pJzMPxnOPrA11xivBLW45PA0xloeK92RkcTa/HJ8OYZ55rDL+AmCg0Bfdk Di2yG29dirwPHEh1DTObfNhoxtBLWN/zdDfvJFt2r7C71P2MeJd/vydHgFvXrziT Ka+4WKSEqOhVFtloElcKYw5bjgSQqWxemsdaR+qYNmEljPTDLXwdAqQh7meUsWQc hizSiOCQS6bC8GNEF2P4DpqRohoBbUoVdjjevLS/LHf/VsRDZLcNy2HpGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5RpcqVBSbNiyO4dUqubeqUraSqMB8GA1UdIwQY MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt NmRjMWY1NjAzMWViLzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxao21B5 7VDsCr0uC/gG0p94TlAZ9XrrIBCuiOisqMJGG/5528vj3RHyGKwy75yYKGdC6uRW /+iEiMML8thsxx+FXrZeX2Mq9wFKLQWiK//0lPuA9RV1dSCXenUZ3V4hLtwge8ou 4fa/O8gLzH0eKa9nsM3V4iKAD1I5wjEsfSX7ZJOd9q8s1CZ5/Pem1muc70w5jDLo 8XtcNtjkfEoX4P9hmWnqfRfFJLkHXqt8LIMpxlISnAOHFtpj2NNtFgfzNaNHc3P8 xGjZlD20gDgOhVQOZBTMkgNSDpfRDXgSWyOqMymYwg3A4ZK39KRpvF1NqzyQEzW+ DJ6OBHUilKZrBQ== -----END CERTIFICATE-----Generated at Wed Dec 24 00:29:55 2025 by rpki-client