This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json) Hash identifier: luNTW/rJWw9bwVgw5DrVe62q38cu6NI8xPIlx1Un9yo= Subject key identifier: 52:0F:40:E0:52:D7:2D:BF:D2:BA:2D:A9:66:6C:81:B1:29:5B:99:03 Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92 Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92 Certificate serial: 019B30B0AB877365C56495E624DE4215BFF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 09:00:42 +0000 Manifest this update: Thu 18 Dec 2025 09:00:42 +0000 Manifest next update: Fri 19 Dec 2025 09:00:42 +0000 Files and hashes: 1: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: WqlDl9bDbS3JQJ5CEWhYPy92CNrFn4gjqqJ+7seqexg=) 2: Nu5TRVd26n9AGQYBpz8f5pBcpaw.roa (hash: r28RVbjjIKsfCbL6DnjqYHTKslQLlFbIUqLf6uX2ZKw=) 3: pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa (hash: zFp7HXAJh1CoEp8dhPFuXJ5GjYTeml3rleudA3KDsw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:ab:87:73:65:c5:64:95:e6:24:de:42:15:bf:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92 Validity Not Before: Dec 18 09:00:42 2025 GMT Not After : Dec 19 09:00:42 2025 GMT Subject: CN=520f40e052d72dbfd2ba2da9666c81b1295b9903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:82:4b:72:73:28:f0:63:c5:04:4a:5f:d7: a9:d1:ef:88:bc:c6:f0:42:32:bb:8d:45:b1:e5:8b: 21:24:f0:25:a0:04:5e:f9:f9:2d:43:c7:f8:a9:58: a9:28:fd:d9:3f:19:f8:fa:c5:46:c2:60:b2:1f:c3: 0b:c6:36:d2:85:07:bc:17:90:d3:d9:cb:e4:23:c4: b9:76:d9:a8:4c:ec:19:d3:91:46:e4:7e:84:2c:2e: f6:4a:65:7b:ce:62:d8:2b:e4:ba:c1:40:11:79:70: d2:ba:7d:c1:c0:b2:c1:ea:32:93:3a:67:cf:94:b0: 65:af:86:82:2e:e7:cd:f0:a7:9a:e5:1d:76:a4:27: a0:b8:d1:76:bf:ea:8d:77:a9:59:84:8c:b5:8b:a8: 0b:12:58:24:19:3b:11:1f:18:56:63:21:d3:d6:21: 4a:f4:6f:e1:f9:39:5e:a5:5f:47:ef:3f:d1:3b:f8: e5:01:2f:af:dd:11:dd:ff:25:10:2e:eb:75:d9:71: 29:f8:56:bb:5a:cf:67:70:0c:6b:a9:8a:a8:7c:ae: 7a:9f:cb:3f:a4:4c:08:7b:fd:e3:97:b8:d9:b9:a0: 43:60:cd:5d:6a:46:1d:35:97:11:26:8a:d9:8a:02: 7a:cd:48:69:ee:35:8f:21:ff:ea:4f:a8:a7:22:81: 05:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0F:40:E0:52:D7:2D:BF:D2:BA:2D:A9:66:6C:81:B1:29:5B:99:03 X509v3 Authority Key Identifier: keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7f:bf:3f:ec:47:e6:19:03:4f:c3:2f:2c:3f:3c:3f:9f:9d: 2c:db:6f:f3:97:7c:27:1c:d4:85:55:16:8c:a7:ad:e4:21:0a: ae:54:84:9b:a5:e5:89:fb:c4:4e:76:18:06:48:ee:38:30:1b: 4a:19:b2:cc:2b:78:49:94:0a:6b:94:fb:28:51:a3:9d:b4:27: 75:d4:8f:eb:97:ec:58:27:69:7e:c2:73:6f:00:21:c9:e1:24: d8:34:aa:81:72:d4:a8:71:ea:37:e3:2b:1f:5a:5b:9b:15:00: 05:62:55:32:18:80:36:a0:05:d4:d9:aa:89:8c:0d:2d:a2:17: 11:8d:2a:18:06:8b:f3:59:0c:52:b5:3d:30:3a:83:be:1b:fb: c8:50:a0:47:4e:f4:f6:c1:dc:15:51:ff:40:61:50:dd:b4:17: c9:91:cf:f6:a3:55:fe:25:5e:c6:70:a7:8f:10:9f:ea:f8:6f: 39:87:10:a3:17:d4:f0:c0:2c:7f:ce:28:94:86:21:3d:be:da: e0:9c:e8:e8:47:2f:2c:cf:b0:b1:c6:2b:de:78:64:e7:b6:75: 7e:fb:ce:e5:bb:88:06:05:cd:62:61:75:50:e9:16:aa:c1:b4: e6:f5:a3:54:bf:73:b3:e1:7d:c6:da:a9:77:cc:e8:f3:84:2a: 17:47:6c:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsKuHc2XFZJXmJN5CFb/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3 ZWVhOTIwHhcNMjUxMjE4MDkwMDQyWhcNMjUxMjE5MDkwMDQyWjAzMTEwLwYDVQQD Eyg1MjBmNDBlMDUyZDcyZGJmZDJiYTJkYTk2NjZjODFiMTI5NWI5OTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKeCS3JzKPBjxQRKX9ep0e+IvMbw QjK7jUWx5YshJPAloARe+fktQ8f4qVipKP3ZPxn4+sVGwmCyH8MLxjbShQe8F5DT 2cvkI8S5dtmoTOwZ05FG5H6ELC72SmV7zmLYK+S6wUAReXDSun3BwLLB6jKTOmfP lLBlr4aCLufN8Kea5R12pCeguNF2v+qNd6lZhIy1i6gLElgkGTsRHxhWYyHT1iFK 9G/h+TlepV9H7z/RO/jlAS+v3RHd/yUQLut12XEp+Fa7Ws9ncAxrqYqofK56n8s/ pEwIe/3jl7jZuaBDYM1dakYdNZcRJorZigJ6zUhp7jWPIf/qT6inIoEFzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIPQOBS1y2/0rotqWZsgbEpW5kDMB8GA1UdIwQY MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt ZjQzYWEyNzAwM2M1LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1 LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFH+/P+xH 5hkDT8MvLD88P5+dLNtv85d8JxzUhVUWjKet5CEKrlSEm6XlifvETnYYBkjuODAb ShmyzCt4SZQKa5T7KFGjnbQnddSP65fsWCdpfsJzbwAhyeEk2DSqgXLUqHHqN+Mr H1pbmxUABWJVMhiANqAF1NmqiYwNLaIXEY0qGAaL81kMUrU9MDqDvhv7yFCgR070 9sHcFVH/QGFQ3bQXyZHP9qNV/iVexnCnjxCf6vhvOYcQoxfU8MAsf84olIYhPb7a 4Jzo6EcvLM+wscYr3nhk57Z1fvvO5buIBgXNYmF1UOkWqsG05vWjVL9zs+F9xtqp d8zo84QqF0dsfg== -----END CERTIFICATE-----Generated at Thu Dec 18 14:36:31 2025 by rpki-client