This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json) Hash identifier: aLjrBRc3+A4cZjFdU8gM+sHlTytDP4lNpRzmkoFNbPc= Subject key identifier: 48:9F:E2:E4:84:05:08:87:8E:1F:91:1A:0D:94:88:BC:65:56:B9:01 Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1 Certificate serial: 019B2889B829717C3070C237E61653AE4163 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft Manifest number: 10D7 Signing time: Tue 16 Dec 2025 19:01:12 +0000 Manifest this update: Tue 16 Dec 2025 19:01:12 +0000 Manifest next update: Wed 17 Dec 2025 19:01:12 +0000 Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: CbJG/KQFyx1lTp70xj4gO6R2S4VBQaT0x1ZxsWhFZHY=) 2: KFGuuWvhGKXdRFWCPjT6bIvxr90.roa (hash: 5mNeMpLOgDP2WV53iNWD9JlTcJDz19nCtSLYypdRdgA=) 3: NLn-NADuc0yAyX0f_4G1dKCqIP8.roa (hash: dkLXs7qu9ok1KeNheDJk9SO+sT7GSZT5TJ1FucBWHfg=) 4: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:89:b8:29:71:7c:30:70:c2:37:e6:16:53:ae:41:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1 Validity Not Before: Dec 16 19:01:12 2025 GMT Not After : Dec 17 19:01:12 2025 GMT Subject: CN=489fe2e4840508878e1f911a0d9488bc6556b901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:6f:64:27:ad:ae:2e:0c:c0:4b:8f:73:43: 15:a5:f4:52:90:b9:a6:63:9c:fc:cf:e8:0c:0c:96: c7:39:a5:30:f6:4e:df:29:7c:e6:fe:c4:6c:01:dc: da:0b:0b:f8:ad:15:63:a0:8a:a8:7d:e2:e2:f9:5e: fd:52:07:3c:d1:08:f6:19:49:2d:16:70:57:43:bb: 23:d2:a6:86:26:8f:8c:93:0f:72:61:a5:46:2d:41: e3:c5:8f:7a:59:67:41:12:a9:9a:8f:32:a4:f5:9e: 17:0c:11:08:86:e2:9f:43:cc:57:f3:f7:26:4a:8d: a6:3e:57:a7:aa:49:92:3c:36:0f:01:18:16:17:e9: 66:82:fc:75:79:05:14:db:5f:72:c8:23:b9:4e:1c: 86:12:ee:e5:f8:54:b0:68:a2:a2:a5:32:fc:64:c8: 08:ab:05:0d:47:06:52:91:30:51:35:95:ab:d3:01: 89:59:fc:95:76:4a:e2:12:f4:cf:a3:ec:11:f3:54: b1:e1:ab:a8:b4:e8:93:02:8c:2f:b1:e6:78:a3:72: c5:2f:e3:46:08:04:64:7c:28:e7:c8:ee:67:f9:e7: 9e:06:b7:00:32:a9:25:ca:0f:38:a3:5f:e6:14:8f: 11:39:ba:01:1c:fb:4a:1f:26:0f:22:f7:bb:b1:da: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9F:E2:E4:84:05:08:87:8E:1F:91:1A:0D:94:88:BC:65:56:B9:01 X509v3 Authority Key Identifier: keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8d:5c:40:5e:a3:77:07:a1:2b:7e:1a:a9:d5:b5:72:d9:b6: 69:d1:68:fa:52:9e:88:39:24:2f:48:58:8a:e6:69:c1:95:55: 56:78:28:0c:93:d7:5c:c4:89:e3:c9:b5:60:36:54:05:b1:89: 9f:33:e3:0a:e5:6a:59:4c:04:47:00:f7:2e:5b:76:90:b4:f1: 56:09:1b:b2:34:f5:93:0c:e2:a8:02:67:f1:ff:f5:38:6a:9f: 38:50:c2:92:92:93:74:cb:e3:18:45:88:b7:55:2a:c1:ff:81: 3e:3f:18:a3:06:91:be:63:ae:ef:2c:30:d0:84:fd:59:60:c3: 4e:0f:b4:8c:dd:e7:36:c6:d1:53:9b:fb:8c:5b:71:6f:c2:72: 39:84:59:6c:38:3a:96:4a:f4:6e:23:5c:18:b4:fb:a3:f1:44: 28:c9:db:60:6f:9e:08:13:14:11:d6:90:54:78:e4:41:e7:fd: ce:3f:ab:c6:ea:f1:c0:66:0b:24:80:ac:7f:82:85:ae:28:45: cd:06:75:7a:6b:37:f0:64:c3:ff:40:4c:21:c4:83:3d:a5:f5: 6f:12:ab:5d:0f:e4:9e:cf:fd:c5:5b:bb:41:3a:2b:a1:f5:f8: dd:b3:cf:c8:e7:ec:d5:90:05:d0:95:12:69:7b:1c:e1:51:e3: a5:34:38:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoibgpcXwwcMI35hZTrkFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGYyNDVlYWQ5OTgwZDJiMzk1MzM3ODJmNjVkNzU2NmQw NDYyZDEwHhcNMjUxMjE2MTkwMTEyWhcNMjUxMjE3MTkwMTEyWjAzMTEwLwYDVQQD Eyg0ODlmZTJlNDg0MDUwODg3OGUxZjkxMWEwZDk0ODhiYzY1NTZiOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPRvZCetri4MwEuPc0MVpfRSkLmm Y5z8z+gMDJbHOaUw9k7fKXzm/sRsAdzaCwv4rRVjoIqofeLi+V79Ugc80Qj2GUkt FnBXQ7sj0qaGJo+Mkw9yYaVGLUHjxY96WWdBEqmajzKk9Z4XDBEIhuKfQ8xX8/cm So2mPlenqkmSPDYPARgWF+lmgvx1eQUU219yyCO5ThyGEu7l+FSwaKKipTL8ZMgI qwUNRwZSkTBRNZWr0wGJWfyVdkriEvTPo+wR81Sx4auotOiTAowvseZ4o3LFL+NG CARkfCjnyO5n+eeeBrcAMqklyg84o1/mFI8ROboBHPtKHyYPIve7sdp8YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEif4uSEBQiHjh+RGg2UiLxlVrkBMB8GA1UdIwQY MBaAFCHfJF6tmYDSs5UzeC9l11ZtBGLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQt MGVjNTIzNWQ0ZTlmLzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZjdkNmEtNDU5Mi00MDBiLWFkZTQtMGVjNTIzNWQ0ZTlm LzEvSWQ4a1hxMlpnTkt6bFRONEwyWFhWbTBFWXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIo1cQF6j dwehK34aqdW1ctm2adFo+lKeiDkkL0hYiuZpwZVVVngoDJPXXMSJ48m1YDZUBbGJ nzPjCuVqWUwERwD3Llt2kLTxVgkbsjT1kwziqAJn8f/1OGqfOFDCkpKTdMvjGEWI t1Uqwf+BPj8YowaRvmOu7yww0IT9WWDDTg+0jN3nNsbRU5v7jFtxb8JyOYRZbDg6 lkr0biNcGLT7o/FEKMnbYG+eCBMUEdaQVHjkQef9zj+rxurxwGYLJICsf4KFrihF zQZ1ems38GTD/0BMIcSDPaX1bxKrXQ/kns/9xVu7QTorofX43bPPyOfs1ZAF0JUS aXsc4VHjpTQ4tw== -----END CERTIFICATE-----Generated at Tue Dec 16 21:36:17 2025 by rpki-client