This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft File: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json) Hash identifier: ggOdvnzt+6hlQlFTRyTTgGdHiAiIbSdLQyV9vLSyVCU= Subject key identifier: 42:4B:7F:DA:6A:46:85:A7:A2:F9:6C:99:59:A9:7A:F1:DA:9B:B5:ED Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Certificate serial: 019B206219904057A66A798FF13EF70731CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft Manifest number: 11E0 Signing time: Mon 15 Dec 2025 05:00:58 +0000 Manifest this update: Mon 15 Dec 2025 05:00:58 +0000 Manifest next update: Tue 16 Dec 2025 05:00:58 +0000 Files and hashes: 1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: ch8Vi9pA8g0a8RJxI3x/qd7KYbj0lyCjmNkObgPv2w0=) 2: AY8IrrzWhOI4edGB_Tl_2NFsPT4.roa (hash: uiO1qHM3dqC6uI/IPIfdOOSGwVI3hRDJi3/ZtYOJrsc=) 3: gnq-AR8Xd72mcm6lbFMDArBc5CM.roa (hash: 9S2hc504KDha1WUQXHo7oEPqtD/gvge/SWCBJIRS81w=) 4: hq906rq-ZUJ1rsRNyLa6JRxlY-c.roa (hash: W24B5y3blRSexP4/ZgUhUaITtqn0pVBgRqtpx/ttccY=) 5: k2zVIiwdTRAvcuIEhqj4cmMmGVQ.roa (hash: f6fiju9NCn/GwpDLcVhQnZ97ECOZ0vtJQ1vpuQYEjA4=) 6: uhJ-XIVNq77fWXsLmAjcO82hF0c.roa (hash: /Yf7GSbjy7jBNyAQCFoiblzDBo0DTRvflVo58Ipv4OQ=) 7: xENVRuP5uKqGbiuyJdR6-8GlIEE.roa (hash: Lt6FxlNVVzKwTUuuYwOrC8tiEKNsKK8scI+0fsrZ7WU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:19:90:40:57:a6:6a:79:8f:f1:3e:f7:07:31:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Validity Not Before: Dec 15 05:00:58 2025 GMT Not After : Dec 16 05:00:58 2025 GMT Subject: CN=424b7fda6a4685a7a2f96c9959a97af1da9bb5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:ac:54:05:0a:73:ed:fb:62:be:2a:5d:35: c7:5a:ad:59:10:5d:58:23:e2:ac:a8:db:0f:ef:0c: 77:47:81:e4:ab:4e:b4:72:20:db:bb:f8:9c:a4:6c: d3:6c:83:01:be:dc:53:2d:64:55:b0:30:81:65:20: fb:8c:b3:85:b3:9a:de:78:64:f7:6c:03:24:08:22: 4b:47:bb:ca:bb:43:ad:ec:1c:d0:fc:cb:2d:2a:68: 98:0a:78:57:d1:02:d6:58:35:96:84:15:07:b6:27: 46:75:e7:1a:e6:33:a9:3b:f9:ee:32:c1:d8:cc:75: ef:95:54:b5:c3:26:28:a6:99:0e:97:36:f8:bd:21: a2:2e:43:eb:a6:1f:08:77:5e:29:86:12:68:00:52: 0c:37:1b:2b:10:76:9c:d5:e1:f1:cc:9e:8c:2a:14: 77:ac:bb:5e:91:aa:68:87:cf:2a:85:9e:12:c4:e2: 66:be:e3:78:f0:cc:47:75:b6:8f:e2:39:bc:80:c5: 73:43:a7:d1:e5:60:f2:dc:e2:38:af:91:43:f8:5f: a2:63:45:a0:55:7e:6c:70:ff:a2:8d:15:af:b7:e5: d9:9e:a0:46:7a:6d:26:8a:81:c6:ee:70:11:f5:68: 09:a7:87:fd:c0:40:22:df:9d:76:1b:b7:15:ce:ce: 4c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4B:7F:DA:6A:46:85:A7:A2:F9:6C:99:59:A9:7A:F1:DA:9B:B5:ED X509v3 Authority Key Identifier: keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:86:aa:72:1a:53:0c:2d:09:3b:e4:60:7e:19:6e:57:3f:a8: 76:cc:f8:35:63:27:69:43:b9:5a:da:28:93:51:d0:28:b4:d9: ba:84:17:62:82:b7:a2:05:a1:88:f3:09:34:f8:c7:7c:3c:0f: bd:b0:dc:84:79:6e:1e:96:eb:71:bd:99:97:a4:f9:e3:ae:8c: bc:2c:42:97:4c:e9:97:fd:5e:33:7c:bb:8c:87:75:8a:cf:e6: cc:37:7d:25:5f:c7:d4:1f:70:8d:80:eb:0e:37:ea:61:19:75: e2:bd:13:f0:91:74:9a:76:cc:5a:1f:8f:5a:7f:8c:b7:9d:23: b0:ca:4d:8b:2a:e7:cd:86:86:5e:10:34:ac:05:fb:d6:8b:f4: 42:2b:c5:1c:91:2e:f9:77:0c:86:a4:6f:f8:ba:94:b2:2f:84: 7e:38:4d:a8:56:b7:c0:60:f6:d8:c3:eb:17:71:a1:a6:3e:f9: ba:f7:30:be:04:cf:95:85:36:6f:ac:67:93:7f:8e:9b:89:ae: 38:cc:0a:92:67:8d:07:2a:ca:60:ff:2f:dd:4d:13:07:46:a2: 78:cf:20:0c:b2:20:87:07:d6:7a:db:50:04:ac:e0:56:0f:d0: ff:0e:5a:35:0c:16:9a:3c:d8:02:fc:7a:11:84:03:5b:b0:45: b2:17:2f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYhmQQFemanmP8T73BzHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy NDhlMTQwHhcNMjUxMjE1MDUwMDU4WhcNMjUxMjE2MDUwMDU4WjAzMTEwLwYDVQQD Eyg0MjRiN2ZkYTZhNDY4NWE3YTJmOTZjOTk1OWE5N2FmMWRhOWJiNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqmsVAUKc+37Yr4qXTXHWq1ZEF1Y I+KsqNsP7wx3R4Hkq060ciDbu/icpGzTbIMBvtxTLWRVsDCBZSD7jLOFs5reeGT3 bAMkCCJLR7vKu0Ot7BzQ/MstKmiYCnhX0QLWWDWWhBUHtidGdeca5jOpO/nuMsHY zHXvlVS1wyYoppkOlzb4vSGiLkPrph8Id14phhJoAFIMNxsrEHac1eHxzJ6MKhR3 rLtekapoh88qhZ4SxOJmvuN48MxHdbaP4jm8gMVzQ6fR5WDy3OI4r5FD+F+iY0Wg VX5scP+ijRWvt+XZnqBGem0mioHG7nAR9WgJp4f9wEAi3512G7cVzs5M9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJLf9pqRoWnovlsmVmpevHam7XtMB8GA1UdIwQY MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2 LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIaqchpT DC0JO+RgfhluVz+odsz4NWMnaUO5Wtook1HQKLTZuoQXYoK3ogWhiPMJNPjHfDwP vbDchHluHpbrcb2Zl6T5466MvCxCl0zpl/1eM3y7jId1is/mzDd9JV/H1B9wjYDr DjfqYRl14r0T8JF0mnbMWh+PWn+Mt50jsMpNiyrnzYaGXhA0rAX71ov0QivFHJEu +XcMhqRv+LqUsi+EfjhNqFa3wGD22MPrF3Ghpj75uvcwvgTPlYU2b6xnk3+Om4mu OMwKkmeNByrKYP8v3U0TB0aieM8gDLIghwfWettQBKzgVg/Q/w5aNQwWmjzYAvx6 EYQDW7BFshcvuA== -----END CERTIFICATE-----Generated at Mon Dec 15 15:34:07 2025 by rpki-client