This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json) Hash identifier: XeDZpnB94fpgijF/U2JGSu5vDSpAPx6e7k2BmWQ7Tkw= Subject key identifier: 99:B8:57:B1:2C:EF:A9:FC:5C:8A:2B:81:D7:9C:DE:D3:37:C6:04:CA Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019B05C73D4B8BB884DABE8D239C025EA789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft Manifest number: 116E Signing time: Wed 10 Dec 2025 01:01:41 +0000 Manifest this update: Wed 10 Dec 2025 01:01:41 +0000 Manifest next update: Thu 11 Dec 2025 01:01:41 +0000 Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=) 2: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: khzmuDERxfb2Vy3ZjPhHjk1l0R1ulhovCw4EKy1MwZg=) 3: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=) 4: p35nG8WnKus4OTOs7KI5F65sYzo.roa (hash: RVbXfLYb/+mFr+HMiMKT1IcR5Oe18VB+slW6Nc/dCTU=) 5: pcXYlaDPwjog7iEv3SU8SnXzBAo.roa (hash: /AdWWJb1IqZ42mmM/SvQrc5HCBK96OSXdfXnx0nlkCw=) 6: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=) 7: ySapTfZYgbxoEK957EhqmLLUXOc.roa (hash: PiAUqrCpwQjO/wsILlIaOLs415SXxFD6K/JzPp3q6ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c7:3d:4b:8b:b8:84:da:be:8d:23:9c:02:5e:a7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Dec 10 01:01:41 2025 GMT Not After : Dec 11 01:01:41 2025 GMT Subject: CN=99b857b12cefa9fc5c8a2b81d79cded337c604ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:33:4f:6f:1c:8b:95:66:87:fe:65:7d:56: 0b:07:87:a8:b6:a7:ea:d5:2c:73:c6:1d:d3:c3:50: 39:e4:cb:c2:12:27:25:10:87:c9:9d:9d:58:17:bd: b2:97:5e:c6:d6:4c:87:cc:88:bf:33:6b:b8:27:0a: 5d:2f:14:4b:3f:2e:97:7b:a9:a5:93:12:42:89:f3: c3:ee:cc:5b:22:5e:7b:4f:7d:7d:87:6a:b7:97:1e: 87:1a:ad:48:07:89:19:4d:84:29:ee:1b:a2:ad:72: 04:bb:3c:45:1f:d3:78:68:51:9b:3e:9e:d9:70:3a: 83:16:0a:6f:0d:f7:7e:0d:e6:b3:ad:3a:68:98:ba: 8e:fa:9a:0c:f5:27:1e:37:da:5d:1c:4a:84:9d:f1: bf:bf:b6:6b:4d:9d:e7:11:71:24:32:fe:3a:8e:14: 2d:d0:21:d7:44:68:8b:21:41:12:a4:5c:10:83:f9: fa:f0:cc:3c:1a:db:9e:66:dc:d7:bc:e1:e1:6f:73: 08:6e:3c:31:43:02:7e:6b:8d:c0:17:8b:34:fa:94: e3:e2:5f:29:d1:30:65:22:39:40:0c:cf:f1:16:3e: de:1a:db:9d:ef:53:46:55:76:40:2f:02:ea:91:2d: 86:f1:04:bc:5c:3a:24:8b:28:00:e4:cc:8e:ed:ee: 44:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B8:57:B1:2C:EF:A9:FC:5C:8A:2B:81:D7:9C:DE:D3:37:C6:04:CA X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8e:bf:4a:4c:15:91:a7:d4:62:60:16:0e:2e:bf:ad:e7:ac: 71:15:ca:b9:ec:ab:57:9a:52:9d:db:f0:97:ed:d4:3d:fd:a9: b0:a9:a4:2d:07:4b:d1:af:08:1f:a9:3e:a5:d1:b1:1f:b0:40: 92:e7:a0:21:eb:6d:40:af:f6:20:5e:0a:f6:d0:19:c6:45:d3: 5e:68:ea:26:32:84:05:a7:ac:62:db:e7:9c:0f:0e:41:f9:cf: d1:58:18:3c:96:64:6b:06:79:9a:87:cc:9b:77:1a:fd:62:8a: e4:0a:ff:6e:82:20:9e:b9:eb:f9:5e:91:0d:f6:f6:0c:11:e9: cb:c5:ee:6b:0b:ef:a1:1b:76:7b:b5:2f:a9:64:ea:00:b3:a4: 8f:88:2f:c1:45:79:a7:b8:27:2e:2f:37:fa:d7:2b:da:33:5c: 10:52:e8:09:f9:1e:2b:97:79:66:55:6b:af:eb:39:2d:dd:9c: 08:45:65:50:e9:44:a1:a2:9e:93:2c:5b:5c:02:2e:39:38:e1: 12:e7:e2:99:c7:bd:be:37:e5:76:3f:1d:4f:88:e8:26:41:7f: d7:bc:a9:76:ba:cd:ba:0c:0c:43:a2:0b:d6:32:2b:a7:18:2f: ff:06:d1:04:d8:34:2b:18:73:28:3f:3c:06:5e:21:cf:7b:87: 60:e2:21:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxz1Li7iE2r6NI5wCXqeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjUxMjEwMDEwMTQxWhcNMjUxMjExMDEwMTQxWjAzMTEwLwYDVQQD Eyg5OWI4NTdiMTJjZWZhOWZjNWM4YTJiODFkNzljZGVkMzM3YzYwNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1EzT28ci5Vmh/5lfVYLB4eotqfq 1Sxzxh3Tw1A55MvCEiclEIfJnZ1YF72yl17G1kyHzIi/M2u4JwpdLxRLPy6Xe6ml kxJCifPD7sxbIl57T319h2q3lx6HGq1IB4kZTYQp7huirXIEuzxFH9N4aFGbPp7Z cDqDFgpvDfd+DeazrTpomLqO+poM9SceN9pdHEqEnfG/v7ZrTZ3nEXEkMv46jhQt 0CHXRGiLIUESpFwQg/n68Mw8GtueZtzXvOHhb3MIbjwxQwJ+a43AF4s0+pTj4l8p 0TBlIjlADM/xFj7eGtud71NGVXZALwLqkS2G8QS8XDokiygA5MyO7e5EPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJm4V7Es76n8XIorgdec3tM3xgTKMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY6/SkwV kafUYmAWDi6/reescRXKueyrV5pSndvwl+3UPf2psKmkLQdL0a8IH6k+pdGxH7BA kuegIettQK/2IF4K9tAZxkXTXmjqJjKEBaesYtvnnA8OQfnP0VgYPJZkawZ5mofM m3ca/WKK5Ar/boIgnrnr+V6RDfb2DBHpy8XuawvvoRt2e7UvqWTqALOkj4gvwUV5 p7gnLi83+tcr2jNcEFLoCfkeK5d5ZlVrr+s5Ld2cCEVlUOlEoaKekyxbXAIuOTjh Eufimce9vjfldj8dT4joJkF/17ypdrrNugwMQ6IL1jIrpxgv/wbRBNg0KxhzKD88 Bl4hz3uHYOIhOg== -----END CERTIFICATE-----Generated at Wed Dec 10 05:40:05 2025 by rpki-client