This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: DkNedJ7bbqd/IaA8JWK5pWgi5A4hdQfc2yyqnqVGGGo= Subject key identifier: F7:56:23:C6:E4:54:1F:94:91:25:1A:ED:0C:5E:86:D7:F5:D1:E8:FA Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019B1C175821D8E720918DD2C752FD96B52D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 177E Signing time: Sun 14 Dec 2025 09:00:50 +0000 Manifest this update: Sun 14 Dec 2025 09:00:50 +0000 Manifest next update: Mon 15 Dec 2025 09:00:50 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 7: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: LxV25suwv3d0WQpG4LttHF28wChZG1spBjmcAIE+I9c=) 8: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 9: arUx83U6Rs8RCtwXktznkMkqaeo.roa (hash: /Mq8aZt5VBCKdcfiOWBzO8I3YwDfcvujikTvBE5ca1M=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:58:21:d8:e7:20:91:8d:d2:c7:52:fd:96:b5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Dec 14 09:00:50 2025 GMT Not After : Dec 15 09:00:50 2025 GMT Subject: CN=f75623c6e4541f9491251aed0c5e86d7f5d1e8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:61:ad:0b:27:71:09:10:25:71:d3:37:fe:c9: a4:97:6b:a1:8a:a5:13:6e:18:fe:bd:5e:52:5b:ad: f0:58:d5:f3:6d:ce:74:a6:36:e2:52:0a:ab:b2:93: 0c:a3:93:5d:63:0a:35:fa:c5:94:da:0b:a5:8c:2a: 6f:0a:9d:29:f8:4e:38:1a:cf:1d:54:d8:42:36:61: 1a:9e:46:de:7d:2d:e2:c4:fa:8e:98:db:16:83:89: a1:f4:31:64:7a:96:f8:ed:56:fb:c2:0e:07:35:33: 6c:1c:cf:4d:19:e6:91:ce:a2:84:a7:91:8a:06:e2: fa:e4:95:c2:29:19:0f:91:02:fc:51:75:cf:b9:73: 44:a9:21:61:53:04:a0:59:d9:14:7e:7d:2e:cb:b8: 4d:e4:07:0d:b5:85:76:bc:30:41:20:24:b4:a9:33: 11:a7:b1:fd:4b:a9:53:f3:35:25:3d:3b:d8:e9:c0: 25:dd:39:41:8d:d5:26:c8:14:d4:0c:10:b0:71:bf: 18:ea:36:1a:b8:66:b2:e1:11:f5:4a:93:40:de:7a: 0a:a4:23:b9:f5:fe:38:4f:ae:c7:f8:37:c4:61:0c: 17:d5:36:aa:18:0e:44:a8:b2:a6:9e:57:a1:e7:a8: 79:d8:91:4e:ad:c7:1a:4c:05:53:e3:5a:86:73:66: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:56:23:C6:E4:54:1F:94:91:25:1A:ED:0C:5E:86:D7:F5:D1:E8:FA X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d0:8c:32:ef:38:ef:55:3c:8a:5c:03:5b:c8:2b:4a:a8:79: 5f:ec:81:f8:99:96:88:3e:c0:2d:0b:eb:5e:4e:96:d1:e7:62: a3:c1:bc:2f:d6:b8:62:6b:2a:7f:71:af:e6:ba:de:96:37:af: 6a:a7:a4:67:7e:d0:b3:f1:58:ab:d9:2b:31:49:ce:95:ed:0f: 0f:92:51:06:82:39:3a:a4:8c:a6:a1:b8:1e:4a:ee:40:3b:6a: c3:8e:7e:33:0a:44:b2:77:bb:df:c0:26:13:13:77:d2:d7:7d: 6e:71:65:6d:3b:05:d2:c1:cd:95:5b:16:9f:4b:2d:69:73:10: 70:cf:d2:c3:a2:8c:16:cc:1d:0a:8c:e2:fa:ec:17:6a:d1:50: 06:5b:4e:1d:f7:23:78:42:b4:5e:54:c4:ed:a8:f9:d5:d8:24: 91:cf:f5:f1:54:6c:04:20:3a:52:a0:33:b4:a9:7c:56:13:2a: b9:37:71:75:35:1f:22:78:d2:51:c3:cb:0d:f5:4f:44:1d:66: 6f:2b:24:11:a8:7f:aa:1c:c1:4d:d9:42:c9:8a:ff:41:22:77: 5a:b2:f9:f9:9f:10:76:6d:c7:d1:7b:ec:0c:25:ee:22:a7:86: 26:3a:8e:e3:65:53:77:14:9e:3e:ce:e6:1c:74:52:f0:ce:1b: df:50:07:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF1gh2OcgkY3Sx1L9lrUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUxMjE0MDkwMDUwWhcNMjUxMjE1MDkwMDUwWjAzMTEwLwYDVQQD EyhmNzU2MjNjNmU0NTQxZjk0OTEyNTFhZWQwYzVlODZkN2Y1ZDFlOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32GtCydxCRAlcdM3/smkl2uhiqUT bhj+vV5SW63wWNXzbc50pjbiUgqrspMMo5NdYwo1+sWU2guljCpvCp0p+E44Gs8d VNhCNmEankbefS3ixPqOmNsWg4mh9DFkepb47Vb7wg4HNTNsHM9NGeaRzqKEp5GK BuL65JXCKRkPkQL8UXXPuXNEqSFhUwSgWdkUfn0uy7hN5AcNtYV2vDBBICS0qTMR p7H9S6lT8zUlPTvY6cAl3TlBjdUmyBTUDBCwcb8Y6jYauGay4RH1SpNA3noKpCO5 9f44T67H+DfEYQwX1TaqGA5EqLKmnleh56h52JFOrccaTAVT41qGc2Zg4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdWI8bkVB+UkSUa7Qxehtf10ej6MB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNCMMu84 71U8ilwDW8grSqh5X+yB+JmWiD7ALQvrXk6W0edio8G8L9a4Ymsqf3Gv5rreljev aqekZ37Qs/FYq9krMUnOle0PD5JRBoI5OqSMpqG4HkruQDtqw45+MwpEsne738Am ExN30td9bnFlbTsF0sHNlVsWn0staXMQcM/Sw6KMFswdCozi+uwXatFQBltOHfcj eEK0XlTE7aj51dgkkc/18VRsBCA6UqAztKl8VhMquTdxdTUfInjSUcPLDfVPRB1m byskEah/qhzBTdlCyYr/QSJ3WrL5+Z8Qdm3H0XvsDCXuIqeGJjqO42VTdxSePs7m HHRS8M4b31AHCQ== -----END CERTIFICATE-----Generated at Sun Dec 14 14:46:01 2025 by rpki-client