This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json) Hash identifier: TGG2o94R7C+Bj/B4TWQ8ycJfmV4C+mZQ0aqfjNO9WnQ= Subject key identifier: F8:F7:88:58:E8:E4:87:F2:A4:CC:15:28:03:A9:C2:48:6C:22:4E:2E Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456 Certificate serial: 019B39EAC4655D2AD17F74536A1178E6CA9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft Manifest number: 1286 Signing time: Sat 20 Dec 2025 04:00:45 +0000 Manifest this update: Sat 20 Dec 2025 04:00:45 +0000 Manifest next update: Sun 21 Dec 2025 04:00:45 +0000 Files and hashes: 1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=) 2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=) 3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=) 4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: itoTL+iAkUvHyjcGKHVLLTldkbXMtm8TlK39Awk6yWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:c4:65:5d:2a:d1:7f:74:53:6a:11:78:e6:ca:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456 Validity Not Before: Dec 20 04:00:45 2025 GMT Not After : Dec 21 04:00:45 2025 GMT Subject: CN=f8f78858e8e487f2a4cc152803a9c2486c224e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:e0:c3:eb:45:a9:7f:66:6a:24:67:b1:76: 54:32:60:ab:44:d8:92:69:61:66:fc:75:34:a6:b1: 3d:41:9b:fb:a3:68:73:27:8f:db:da:6d:15:01:94: a2:66:47:b2:d8:94:c5:7c:f7:7e:15:a5:38:6b:26: df:55:7a:85:e5:df:d6:9d:cf:a8:db:4c:0b:94:42: 12:5f:cd:34:82:fa:71:d4:3b:de:0a:1c:cb:55:e8: a5:6e:3a:ed:02:8f:7a:da:7d:5d:ea:fa:ba:33:ec: fb:e7:4a:6a:32:b4:87:b7:f5:71:37:0c:e7:83:71: bd:65:68:f9:6d:8c:8c:7c:8a:19:2b:04:7f:d4:88: 07:c9:f3:20:91:f7:15:1b:8f:e1:e1:47:d8:7d:93: 3f:19:81:41:28:36:05:b9:82:4b:c3:ae:f5:fa:70: de:26:20:8a:6d:d0:0a:84:cf:93:02:b2:1c:2f:dc: 38:48:bd:f8:56:ae:02:74:2f:95:ec:98:34:e8:b8: 7e:89:99:66:cb:ae:6a:2c:c8:b2:b6:9a:25:cf:60: ac:8b:76:5e:34:2d:6f:a1:c8:0d:bd:95:51:da:5a: d7:1d:cc:cb:3d:cf:86:d9:61:f4:45:ca:c5:09:bc: ed:15:99:bb:37:7b:63:c1:9a:b1:2f:c8:46:0a:df: b4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F7:88:58:E8:E4:87:F2:A4:CC:15:28:03:A9:C2:48:6C:22:4E:2E X509v3 Authority Key Identifier: keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5c:8c:ee:0f:90:f5:04:2f:79:7a:c1:98:5c:15:06:43:98: 5a:5a:6b:cc:42:de:5a:2b:67:f4:07:19:5f:1f:63:b4:10:93: 15:ba:3e:05:2d:1c:41:65:77:08:9d:78:96:cc:a2:37:03:c7: 57:6a:c5:13:98:28:5f:29:a0:8f:0c:39:02:7d:a8:c8:09:73: 05:d7:13:0f:34:e9:b2:0a:10:16:bf:96:a9:b9:24:90:54:47: 6a:e3:ee:ec:c1:c6:47:47:7c:d0:da:fa:70:fa:43:b7:0a:80: b5:b0:7a:92:bd:46:55:a3:23:7d:25:15:0a:94:ef:dc:be:9e: e7:8c:62:b9:b8:23:ef:9c:cc:a4:75:25:3f:48:96:9c:f9:b8: c3:b9:0b:09:37:7b:ef:66:3b:a4:76:e8:bb:03:bc:18:09:46: 85:80:84:5f:9d:a1:fd:a6:f8:00:4c:fc:1a:7a:a8:9d:be:31: b7:cf:79:d0:95:4f:2b:25:b5:72:b5:48:ba:e5:a1:fd:20:94: 55:54:49:7c:d2:20:59:b3:f8:f9:0b:69:0e:88:21:51:82:62: 24:57:b7:d0:a9:08:b8:a6:79:5f:5b:9f:86:14:58:da:83:5b: 67:6c:97:33:8f:46:77:68:11:f3:e0:ec:48:77:ed:a4:4a:5e: 45:59:cb:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56sRlXSrRf3RTahF45sqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh NTk0NTYwHhcNMjUxMjIwMDQwMDQ1WhcNMjUxMjIxMDQwMDQ1WjAzMTEwLwYDVQQD EyhmOGY3ODg1OGU4ZTQ4N2YyYTRjYzE1MjgwM2E5YzI0ODZjMjI0ZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGXgw+tFqX9maiRnsXZUMmCrRNiS aWFm/HU0prE9QZv7o2hzJ4/b2m0VAZSiZkey2JTFfPd+FaU4aybfVXqF5d/Wnc+o 20wLlEISX800gvpx1DveChzLVeilbjrtAo962n1d6vq6M+z750pqMrSHt/VxNwzn g3G9ZWj5bYyMfIoZKwR/1IgHyfMgkfcVG4/h4UfYfZM/GYFBKDYFuYJLw671+nDe JiCKbdAKhM+TArIcL9w4SL34Vq4CdC+V7Jg06Lh+iZlmy65qLMiytpolz2Csi3Ze NC1vocgNvZVR2lrXHczLPc+G2WH0RcrFCbztFZm7N3tjwZqxL8hGCt+0WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPj3iFjo5IfypMwVKAOpwkhsIk4uMB8GA1UdIwQY MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt NGQyMmM2YjViMWZlLzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlyM7g+Q 9QQveXrBmFwVBkOYWlprzELeWitn9AcZXx9jtBCTFbo+BS0cQWV3CJ14lsyiNwPH V2rFE5goXymgjww5An2oyAlzBdcTDzTpsgoQFr+WqbkkkFRHauPu7MHGR0d80Nr6 cPpDtwqAtbB6kr1GVaMjfSUVCpTv3L6e54xiubgj75zMpHUlP0iWnPm4w7kLCTd7 72Y7pHbouwO8GAlGhYCEX52h/ab4AEz8Gnqonb4xt8950JVPKyW1crVIuuWh/SCU VVRJfNIgWbP4+QtpDoghUYJiJFe30KkIuKZ5X1ufhhRY2oNbZ2yXM49Gd2gR8+Ds SHftpEpeRVnL7g== -----END CERTIFICATE-----Generated at Sat Dec 20 06:04:44 2025 by rpki-client