This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: aHrRely/cmzOTVMfIdbELSh9HjAK03KMor0mZK3xj/Q= Subject key identifier: 63:99:BB:88:25:5A:08:0D:8F:BD:56:44:3E:A4:B7:88:FC:8D:4D:9C Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019B1C858234F24C1B374463D6CEA5058ADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0E2A Signing time: Sun 14 Dec 2025 11:01:10 +0000 Manifest this update: Sun 14 Dec 2025 11:01:10 +0000 Manifest next update: Mon 15 Dec 2025 11:01:10 +0000 Files and hashes: 1: 2khmlmeoDFv-IkGAU0fd4l5TW0o.roa (hash: //AXHj3BbLc0Rt/YZOfWjdKHckn7lMqZx1vw7h/B5lI=) 2: ALbLP8TjT8ZiaC0tUbYyF60YWMU.roa (hash: PHPbB9U1X5V4HGNYYoVlhslI99ykG2RAXT7JZqb/PSg=) 3: L2_Tbp4YwSPyuAKModBbxLXZMDo.roa (hash: /Z9XGoMEp/hyna2qe+ypVXlugIzccNoN9B5IRO6pFkA=) 4: LWSqwNRamd4T2aXAGNeoHEw16v4.roa (hash: 2VelgWDfA/M8pcmLdqdPQ+X9lXF40JhHxEYFA/QbMhY=) 5: Sxy6K7e73qOvfCbb9KneoPvXeRI.roa (hash: IE71fGGjPNEzI1bTXZSPWcPLR3j32S+b4osxDkIoySw=) 6: XHtpEQoraqRFRPdlAEW9sCe6_rY.roa (hash: soXr8YiLhiu6P10YvfCxOODOvjvRErlJJgNef/tqi0c=) 7: YstluQtHpzLnfC3TPFU1_RVo3Kc.roa (hash: VlPhCkrTX50LxfOpD/LlEhXnetd1Xvpjb8V/y67yZIU=) 8: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=) 9: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=) 10: alg23em52u81qKf3TWMm9rQtp00.crl (hash: a6yn+5QxKs6nqDS0PxwK42VGs0VnqfnSEhK7T5/oEX8=) 11: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=) 12: sDzFLWFWjnjwDB0s4FiwnR63uuM.roa (hash: +go4Rvkjelbo++GLMIn1ydGUqWYnv/glBen5MVVmYBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:82:34:f2:4c:1b:37:44:63:d6:ce:a5:05:8a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Dec 14 11:01:10 2025 GMT Not After : Dec 15 11:01:10 2025 GMT Subject: CN=6399bb88255a080d8fbd56443ea4b788fc8d4d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:a3:71:e3:29:c5:1c:bd:9f:1a:59:58:2d: a1:30:4f:ab:3a:71:9c:02:41:00:af:2d:0e:5a:dc: 54:0e:2f:69:13:d8:7f:e1:99:4d:8c:ec:ea:45:f0: 6f:0a:4f:b0:12:d5:ac:d8:5b:c1:4e:48:b0:9a:74: b0:1a:0a:78:e3:5e:de:de:f3:6f:ab:9a:46:47:5e: 72:67:3e:33:44:c1:b7:26:d1:07:89:41:da:15:d8: 01:c8:9c:a3:40:6b:be:b7:2c:f8:f1:c3:2c:7a:3b: 34:bf:67:5d:29:49:bc:82:63:6f:c2:9c:40:d6:6c: 3d:7a:10:6b:5b:a0:2d:23:e2:94:6e:64:c4:0d:51: 9d:d3:85:5d:b7:f5:af:0a:ef:52:6f:84:6a:92:70: 25:f1:99:3e:ec:45:f0:64:69:a6:00:b7:2b:49:5d: 5d:e4:bd:3e:49:38:5c:d9:3c:1f:0a:3e:d1:f3:f0: 11:fc:f4:fd:92:0f:f5:1c:8e:90:69:a6:56:5e:64: 99:da:f1:10:df:d0:66:3d:ab:75:17:11:21:0b:96: c0:56:e1:44:12:1c:dd:8b:58:4e:e3:ab:7a:18:49: 7f:67:44:e3:78:fe:dc:7d:f2:fe:9e:d7:25:32:c5: 47:3b:01:9c:bf:4b:a7:df:ea:e4:61:42:76:5f:03: 45:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:99:BB:88:25:5A:08:0D:8F:BD:56:44:3E:A4:B7:88:FC:8D:4D:9C X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:08:e9:95:44:e7:09:6e:ac:6b:71:a5:0a:8d:98:ee:4f:65: 07:9c:4f:ed:67:54:af:f8:d1:0b:03:20:75:bd:84:c2:41:3e: 06:b0:70:fa:da:a2:f7:d4:27:f9:5b:e4:98:5c:3d:27:d4:92: e7:df:98:49:b9:f5:05:5c:0e:16:c3:28:05:b0:57:6e:59:a0: 4c:37:64:47:fb:48:79:6b:4b:9c:72:69:13:1e:30:0b:d4:44: 5a:eb:c1:6b:28:d4:78:e8:03:61:32:4f:b9:92:fa:44:9d:d6: d2:97:56:8c:a6:80:02:05:28:aa:44:db:53:eb:46:a9:d1:35: 74:81:77:e1:f8:ef:8e:ff:0e:9f:7f:f7:88:1c:a1:f3:c8:b9: d8:05:63:8a:81:bc:04:97:7f:1f:18:e5:c1:cf:a7:3a:21:17: 94:c3:d7:12:02:02:31:15:33:a4:5d:db:1c:e3:da:1d:13:3c: a7:4c:bf:0d:39:ce:51:29:d9:bd:ca:64:72:66:f3:26:e9:8f: 4f:e6:9e:a8:f6:ec:6b:06:a1:5c:89:89:f1:10:4e:26:dc:71: 35:bb:7f:a6:fb:4c:c3:be:20:fc:bd:bd:45:df:06:72:87:11: 18:cf:f3:86:16:cc:ab:b5:28:88:25:e8:08:90:99:a5:69:f1: 9d:02:9b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschYI08kwbN0Rj1s6lBYrbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjUxMjE0MTEwMTEwWhcNMjUxMjE1MTEwMTEwWjAzMTEwLwYDVQQD Eyg2Mzk5YmI4ODI1NWEwODBkOGZiZDU2NDQzZWE0Yjc4OGZjOGQ0ZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVGjceMpxRy9nxpZWC2hME+rOnGc AkEAry0OWtxUDi9pE9h/4ZlNjOzqRfBvCk+wEtWs2FvBTkiwmnSwGgp4417e3vNv q5pGR15yZz4zRMG3JtEHiUHaFdgByJyjQGu+tyz48cMsejs0v2ddKUm8gmNvwpxA 1mw9ehBrW6AtI+KUbmTEDVGd04Vdt/WvCu9Sb4RqknAl8Zk+7EXwZGmmALcrSV1d 5L0+SThc2TwfCj7R8/AR/PT9kg/1HI6QaaZWXmSZ2vEQ39BmPat1FxEhC5bAVuFE Ehzdi1hO46t6GEl/Z0TjeP7cffL+ntclMsVHOwGcv0un3+rkYUJ2XwNFHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOZu4glWggNj71WRD6kt4j8jU2cMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAjplUTn CW6sa3GlCo2Y7k9lB5xP7WdUr/jRCwMgdb2EwkE+BrBw+tqi99Qn+VvkmFw9J9SS 59+YSbn1BVwOFsMoBbBXblmgTDdkR/tIeWtLnHJpEx4wC9REWuvBayjUeOgDYTJP uZL6RJ3W0pdWjKaAAgUoqkTbU+tGqdE1dIF34fjvjv8On3/3iByh88i52AVjioG8 BJd/Hxjlwc+nOiEXlMPXEgICMRUzpF3bHOPaHRM8p0y/DTnOUSnZvcpkcmbzJumP T+aeqPbsawahXImJ8RBOJtxxNbt/pvtMw74g/L29Rd8GcocRGM/zhhbMq7UoiCXo CJCZpWnxnQKbhw== -----END CERTIFICATE-----Generated at Sun Dec 14 19:11:53 2025 by rpki-client