This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft File: __48efMne-a_MrCqZ5PfjuT8aT8.mft (raw, json) Hash identifier: wsewvaHMzDFgdm2ljLuJLlL0J0eRZxS1RlXOgXvcVMc= Subject key identifier: C5:4F:17:55:94:78:2B:72:71:18:5F:BD:30:84:EC:C3:1B:BA:F8:4E Authority key identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F Certificate issuer: /CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f Certificate serial: 019B59ACD10A63D5B5F52D46B78C68EDDFBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft Manifest number: 02DD Signing time: Fri 26 Dec 2025 08:00:56 +0000 Manifest this update: Fri 26 Dec 2025 08:00:56 +0000 Manifest next update: Sat 27 Dec 2025 08:00:56 +0000 Files and hashes: 1: 0kaaAyo2H1IRNt6Ftj5Xi8qB5D8.roa (hash: vEdWjhFIP+oKICnFyIXPgNR6jJ68k0xMBCGivZ1H4Mc=) 2: __48efMne-a_MrCqZ5PfjuT8aT8.crl (hash: gei3zFSB91TXgG+cvGe+FChcNISLPkcQdVhSn2Esj0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:d1:0a:63:d5:b5:f5:2d:46:b7:8c:68:ed:df:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f Validity Not Before: Dec 26 08:00:56 2025 GMT Not After : Dec 27 08:00:56 2025 GMT Subject: CN=c54f175594782b7271185fbd3084ecc31bbaf84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:b7:4e:db:f1:f4:41:df:9e:53:6c:12:10: b4:1b:2e:d0:c2:fa:e1:91:13:37:8b:69:89:19:84: 0e:f0:af:f5:55:c0:48:5d:6e:e8:1a:02:73:cd:8d: 9f:db:eb:9e:cf:ba:5a:35:e8:e7:5f:56:ff:71:06: c9:5d:e2:da:69:38:56:85:29:97:35:53:03:25:70: 2c:fc:f9:2a:2e:be:38:cf:85:fe:2b:90:83:06:1a: 01:e7:6b:84:8c:b3:e3:5b:08:7a:84:e4:4c:c2:22: ed:86:86:55:52:7d:2c:eb:17:35:64:07:db:b9:82: 14:90:b2:5c:f5:0e:b8:9f:09:90:bf:c0:35:c9:15: be:cc:fe:1a:99:9e:6f:4c:39:10:27:d0:b5:6b:74: ff:59:ac:21:2b:1f:0f:04:c9:46:c1:b2:bb:b8:17: 07:99:b4:32:bf:f7:90:38:87:40:73:90:87:1c:c1: a6:1a:3a:f0:bd:18:73:0d:5a:9e:05:f5:16:10:25: be:d8:fd:a5:76:a8:bd:c2:d3:66:eb:bf:47:cc:82: 66:fd:50:a4:dd:16:4a:4d:12:dd:a2:9d:8d:5f:17: ec:f8:b0:8c:01:e9:5d:e0:ad:e7:66:19:ef:c4:4d: d5:ab:7a:64:a1:19:cc:d8:8c:4b:ea:22:4d:06:18: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4F:17:55:94:78:2B:72:71:18:5F:BD:30:84:EC:C3:1B:BA:F8:4E X509v3 Authority Key Identifier: keyid:FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:92:b8:af:aa:73:38:5e:c4:2a:4c:2d:21:f7:51:0b:b8:c6: f6:bd:0b:35:cf:d8:9c:18:12:af:01:56:9c:20:c2:ae:2f:19: fe:7a:c6:ce:9f:b7:9c:0f:1b:b5:a6:44:73:62:de:cf:32:46: 96:e4:14:6c:e6:36:82:1c:8c:a6:e8:69:1a:a9:a8:3b:46:ed: d3:cd:ab:5d:91:25:96:99:35:63:45:6c:65:35:72:70:6e:9a: 75:a4:16:b7:22:f8:2f:37:dd:92:34:90:7c:44:aa:2a:7e:93: 05:b2:ac:28:a2:c0:04:87:66:62:43:2e:b5:30:f2:e6:13:18: 55:12:35:45:6d:01:63:65:ec:30:e0:5d:12:9f:f7:e7:a7:d4: 8b:d6:17:52:3a:8f:f5:35:81:ec:29:38:3c:96:29:2f:b8:eb: 1e:65:12:2b:3a:80:23:b2:a8:3f:b2:9e:c3:07:cf:46:47:d1: 13:8d:d6:44:87:5d:4b:5a:68:7a:a5:7a:ca:d4:f3:02:16:b4: 59:4c:95:b6:e3:44:d0:e9:16:e1:79:bb:dc:ce:d5:39:d8:b6: 8e:0a:3e:68:fa:a1:c1:d9:3d:2d:18:aa:74:5b:f2:a0:f2:ea: d3:de:ec:1c:31:f9:80:fc:0a:a3:3c:a5:97:63:41:f9:b2:3c: ec:08:ea:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrNEKY9W19S1Gt4xo7d+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZmUzYzc5ZjMyNzdiZTZiZjMyYjBhYTY3OTNkZjhlZTRm YzY5M2YwHhcNMjUxMjI2MDgwMDU2WhcNMjUxMjI3MDgwMDU2WjAzMTEwLwYDVQQD EyhjNTRmMTc1NTk0NzgyYjcyNzExODVmYmQzMDg0ZWNjMzFiYmFmODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPq3Ttvx9EHfnlNsEhC0Gy7Qwvrh kRM3i2mJGYQO8K/1VcBIXW7oGgJzzY2f2+uez7paNejnX1b/cQbJXeLaaThWhSmX NVMDJXAs/PkqLr44z4X+K5CDBhoB52uEjLPjWwh6hORMwiLthoZVUn0s6xc1ZAfb uYIUkLJc9Q64nwmQv8A1yRW+zP4amZ5vTDkQJ9C1a3T/WawhKx8PBMlGwbK7uBcH mbQyv/eQOIdAc5CHHMGmGjrwvRhzDVqeBfUWECW+2P2ldqi9wtNm679HzIJm/VCk 3RZKTRLdop2NXxfs+LCMAeld4K3nZhnvxE3Vq3pkoRnM2IxL6iJNBhiYBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVPF1WUeCtycRhfvTCE7MMbuvhOMB8GA1UdIwQY MBaAFP/+PHnzJ3vmvzKwqmeT347k/Gk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQt ZjIwMjVkN2FlOGJkLzEvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQtZjIwMjVkN2FlOGJk LzEvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5K4r6pz OF7EKkwtIfdRC7jG9r0LNc/YnBgSrwFWnCDCri8Z/nrGzp+3nA8btaZEc2LezzJG luQUbOY2ghyMpuhpGqmoO0bt082rXZEllpk1Y0VsZTVycG6adaQWtyL4LzfdkjSQ fESqKn6TBbKsKKLABIdmYkMutTDy5hMYVRI1RW0BY2XsMOBdEp/356fUi9YXUjqP 9TWB7Ck4PJYpL7jrHmUSKzqAI7KoP7KewwfPRkfRE43WRIddS1poeqV6ytTzAha0 WUyVtuNE0OkW4Xm73M7VOdi2jgo+aPqhwdk9LRiqdFvyoPLq097sHDH5gPwKozyl l2NB+bI87AjqMQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:51 2025 by rpki-client