This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json) Hash identifier: s50SaaTfxLulmyzz5eMeP+mIniuAYMcxUqYRTvDGa7Y= Subject key identifier: EC:BB:7B:71:6A:F2:AF:41:F7:BA:15:DF:91:72:7F:15:52:A7:D1:E5 Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456 Certificate serial: 019B37FC6BB989860709EE5FB9F66D9C4543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft Manifest number: 1285 Signing time: Fri 19 Dec 2025 19:00:48 +0000 Manifest this update: Fri 19 Dec 2025 19:00:48 +0000 Manifest next update: Sat 20 Dec 2025 19:00:48 +0000 Files and hashes: 1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=) 2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=) 3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=) 4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: MQ1OGCUqznegOMZ/SO2qYere5WKYEdgOiRM66GkhFrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:6b:b9:89:86:07:09:ee:5f:b9:f6:6d:9c:45:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456 Validity Not Before: Dec 19 19:00:48 2025 GMT Not After : Dec 20 19:00:48 2025 GMT Subject: CN=ecbb7b716af2af41f7ba15df91727f1552a7d1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:eb:8c:79:51:45:30:67:70:d3:4d:c4:09: df:9e:f7:41:13:43:83:b7:1b:6b:66:2d:72:32:9e: 85:53:00:98:75:0e:37:30:7f:4f:ac:1b:08:f3:4a: 2b:8c:d4:5a:35:92:c1:69:3d:84:fb:cc:2f:89:91: d8:55:06:9d:24:bb:09:8e:d1:8a:b6:58:80:c2:2d: 49:46:f0:d1:cc:4e:bf:bc:8f:31:6a:59:ce:8b:1d: e9:8a:c1:6e:48:86:06:c2:6a:2e:e5:e3:a8:1b:04: 01:75:76:6b:39:27:a1:8f:b5:c3:db:82:d7:f9:63: 70:d3:c5:21:34:5e:ac:ce:aa:48:8e:11:9f:4c:8c: b8:2c:b7:20:96:e9:1c:46:a0:a3:5f:d4:77:68:10: 7f:7c:0d:86:fe:40:cf:1d:68:30:97:4a:5e:35:54: 4d:7a:1a:d6:2e:08:29:76:f3:61:85:97:c4:ec:8a: 2a:be:35:ae:d0:28:8c:e7:82:eb:03:fd:2e:a6:74: 05:48:41:c8:be:4b:f3:51:69:24:65:be:ff:fb:0a: 87:60:60:c4:36:c5:91:44:6a:8f:56:c5:bd:65:9c: ab:d9:06:87:90:21:56:2f:74:24:e3:db:8e:38:1e: 8d:45:5e:ab:49:4a:96:90:95:ae:0a:c7:d9:95:91: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BB:7B:71:6A:F2:AF:41:F7:BA:15:DF:91:72:7F:15:52:A7:D1:E5 X509v3 Authority Key Identifier: keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ae:7a:bf:26:42:a5:bd:4c:b8:9a:38:ce:d8:ce:c6:14:7a: 64:b1:0e:97:10:89:46:05:b4:61:ca:fb:36:47:b1:95:cf:39: 82:ed:f3:c8:a4:92:47:2a:e0:79:6c:cc:7a:6b:0d:11:5b:fd: 92:21:87:c4:a1:a0:b6:65:53:fe:99:69:b7:6e:7c:92:2f:b2: f3:fd:0b:e4:61:41:58:97:5f:a5:75:4c:7a:b2:89:09:ba:cb: 50:6c:30:28:df:b1:4a:61:30:cd:bc:c5:d3:70:d8:86:e5:f7: 53:8e:ce:79:fa:b3:9a:17:a7:87:f8:d5:42:3c:61:b6:41:2f: 1d:51:36:16:b4:95:23:51:5b:77:d3:8f:ea:db:9f:84:a5:ed: d4:8e:d4:ee:cc:41:a8:04:8c:49:c9:54:e9:d3:08:11:70:58: 01:df:41:89:24:6a:15:06:3e:d2:bd:2e:52:bc:69:61:10:10: 2e:6c:f8:a2:83:35:76:1f:9a:c0:1a:28:15:f8:a7:d0:c4:00: 5f:72:15:88:13:10:38:b0:52:4c:65:d8:e8:66:32:55:a4:3b: 32:f5:24:19:73:ae:77:52:55:b3:df:94:7d:94:0a:53:52:fe: 26:d4:4c:2b:8c:01:be:bf:3c:87:e4:3b:c3:e4:5d:30:cb:5b: f3:d0:5d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Gu5iYYHCe5fufZtnEVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh NTk0NTYwHhcNMjUxMjE5MTkwMDQ4WhcNMjUxMjIwMTkwMDQ4WjAzMTEwLwYDVQQD EyhlY2JiN2I3MTZhZjJhZjQxZjdiYTE1ZGY5MTcyN2YxNTUyYTdkMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhHrjHlRRTBncNNNxAnfnvdBE0OD txtrZi1yMp6FUwCYdQ43MH9PrBsI80orjNRaNZLBaT2E+8wviZHYVQadJLsJjtGK tliAwi1JRvDRzE6/vI8xalnOix3pisFuSIYGwmou5eOoGwQBdXZrOSehj7XD24LX +WNw08UhNF6szqpIjhGfTIy4LLcglukcRqCjX9R3aBB/fA2G/kDPHWgwl0peNVRN ehrWLggpdvNhhZfE7IoqvjWu0CiM54LrA/0upnQFSEHIvkvzUWkkZb7/+wqHYGDE NsWRRGqPVsW9ZZyr2QaHkCFWL3Qk49uOOB6NRV6rSUqWkJWuCsfZlZE00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy7e3Fq8q9B97oV35FyfxVSp9HlMB8GA1UdIwQY MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt NGQyMmM2YjViMWZlLzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq56vyZC pb1MuJo4ztjOxhR6ZLEOlxCJRgW0Ycr7Nkexlc85gu3zyKSSRyrgeWzMemsNEVv9 kiGHxKGgtmVT/plpt258ki+y8/0L5GFBWJdfpXVMerKJCbrLUGwwKN+xSmEwzbzF 03DYhuX3U47Oefqzmhenh/jVQjxhtkEvHVE2FrSVI1Fbd9OP6tufhKXt1I7U7sxB qASMSclU6dMIEXBYAd9BiSRqFQY+0r0uUrxpYRAQLmz4ooM1dh+awBooFfin0MQA X3IViBMQOLBSTGXY6GYyVaQ7MvUkGXOud1JVs9+UfZQKU1L+JtRMK4wBvr88h+Q7 w+RdMMtb89BdMg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:48:55 2025 by rpki-client