This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft File: rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json) Hash identifier: VLvAaeQP/EIQ59kbHLFTEHVFDLRQ13F5nfbw/jAVsi8= Subject key identifier: 2B:BD:A0:CD:C7:AC:83:52:34:C2:E2:F3:24:14:AE:5B:31:51:B4:06 Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de Certificate serial: 019AF50AF5D31EC54200CA82CF2EB1E131D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft Manifest number: 1724 Signing time: Sat 06 Dec 2025 19:02:07 +0000 Manifest this update: Sat 06 Dec 2025 19:02:07 +0000 Manifest next update: Sun 07 Dec 2025 19:02:07 +0000 Files and hashes: 1: 8eCmueBEOSsAwO1CHji1gE-_3LI.roa (hash: l5xAz+doohGBqrtfOFmej8JqC0mnQVYKQDeIBm1ToAM=) 2: DtvFUItZKqyAuC0qVO7xK12HQO0.roa (hash: z+RXHMTUA/r+jPrvwbj//4T8rVTRPjeJiPQfneeOdNs=) 3: J5Nzje0wm67y5K6t3cH8za4h1d0.roa (hash: qpAZrfLDKqU9NwWz286x02NAvGgP6kk6hcqmLvVKz8c=) 4: klr8zXHLn6mli5IxFQr4R9FyMV0.roa (hash: I+JofOB+oo9ML4ISV8ODtPvO84Ef+x27qR0wwlNvvJ8=) 5: q0Eds_oIDCgE88gdpI6r4kp33h8.roa (hash: sqISDzfU6JYm1UcY8Gcz5wDK5BeEeTVU67gC4Pg+KUk=) 6: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: xmpNg6vwfKMZTV1pH0zlt7Chaj7M6w688M72RmScwbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:f5:d3:1e:c5:42:00:ca:82:cf:2e:b1:e1:31:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf910f36291c3c224ddb596d956543197f163de Validity Not Before: Dec 6 19:02:07 2025 GMT Not After : Dec 7 19:02:07 2025 GMT Subject: CN=2bbda0cdc7ac835234c2e2f32414ae5b3151b406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:eb:36:cd:5f:9d:01:0d:16:4c:60:2e:88: 9d:2a:20:0c:33:4e:eb:24:c9:4c:9a:02:ec:5a:8f: 2e:d1:c2:82:92:62:26:b8:a1:44:98:6d:43:dd:58: 4c:47:7c:7f:54:a3:16:f1:f5:d6:61:1f:e6:a5:08: f8:3c:c4:85:d3:c1:5a:4b:ac:a8:82:ed:f4:7e:06: b8:d4:fc:f9:7b:99:ed:4f:ac:72:a1:1b:9e:b5:a0: 75:fe:e9:71:e6:fc:02:d0:4b:b3:47:9d:3b:70:89: 13:5c:50:d5:66:5b:23:9e:1f:63:ea:68:aa:8c:f5: e9:05:0c:b1:a8:b1:33:dc:ee:10:0d:05:02:42:83: 07:cc:f6:ff:d4:79:41:e5:56:bc:98:89:0a:68:3a: 9c:91:d5:18:a1:64:5e:3e:7b:58:43:a8:d0:48:8e: de:aa:06:eb:e1:68:d2:1c:8c:c6:07:b2:a4:0e:9e: 49:fe:43:40:3e:f1:a6:3e:2f:73:e7:1a:d3:60:4c: 61:68:92:26:b6:8b:c0:26:e0:db:f5:da:cd:b6:90: e7:73:8a:9f:b7:21:0f:4d:07:fb:80:77:3f:16:06: 21:ab:79:83:c7:58:53:0e:0f:ef:bd:e1:48:ba:03: b3:af:90:b6:e3:78:b9:91:86:0b:00:11:be:13:88: 70:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BD:A0:CD:C7:AC:83:52:34:C2:E2:F3:24:14:AE:5B:31:51:B4:06 X509v3 Authority Key Identifier: keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:eb:74:fa:86:64:f9:e9:c0:25:22:59:09:47:85:87:60:cb: 5a:9c:3c:a2:f4:63:a9:72:c6:e7:c0:d8:85:01:ed:cc:9a:3d: ed:50:7f:cb:da:30:87:60:f7:6e:24:a3:9c:51:7e:8a:81:2d: 72:e7:60:19:9a:e0:28:2c:6e:71:94:bd:31:14:b4:f7:aa:27: 01:99:17:ea:ea:25:93:84:4b:fb:5f:b8:04:b7:fa:dd:80:ca: 4c:b3:78:df:77:73:1a:b4:ae:ab:8d:04:4c:3f:2c:1d:77:a4: 3f:5b:b2:d4:d5:33:98:37:e9:8d:43:bc:8f:93:fc:cb:14:1d: f1:43:a4:af:09:14:74:c9:ec:59:ab:7c:7b:82:5b:5c:4c:4d: 10:aa:60:bc:92:1e:6d:40:af:e8:fd:9c:59:59:d5:95:0f:94: 48:b6:83:f4:61:75:de:a5:ae:14:5b:c8:8a:81:39:0f:8c:97: 25:44:ad:a3:4e:8b:05:d4:38:6f:56:63:05:4c:54:0b:cd:75: 70:b6:96:20:13:d9:92:1a:75:7e:5a:0d:53:2a:c8:8d:da:67: 87:75:ae:9f:2d:9e:8a:1c:a9:26:af:ab:fe:f1:64:ee:e0:7d: bd:2f:60:08:89:b2:9d:b9:42:fb:e7:1a:ac:cc:7f:77:d7:57: 63:05:1c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CvXTHsVCAMqCzy6x4THUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm MTYzZGUwHhcNMjUxMjA2MTkwMjA3WhcNMjUxMjA3MTkwMjA3WjAzMTEwLwYDVQQD EygyYmJkYTBjZGM3YWM4MzUyMzRjMmUyZjMyNDE0YWU1YjMxNTFiNDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhvrNs1fnQENFkxgLoidKiAMM07r JMlMmgLsWo8u0cKCkmImuKFEmG1D3VhMR3x/VKMW8fXWYR/mpQj4PMSF08FaS6yo gu30fga41Pz5e5ntT6xyoRuetaB1/ulx5vwC0EuzR507cIkTXFDVZlsjnh9j6miq jPXpBQyxqLEz3O4QDQUCQoMHzPb/1HlB5Va8mIkKaDqckdUYoWRePntYQ6jQSI7e qgbr4WjSHIzGB7KkDp5J/kNAPvGmPi9z5xrTYExhaJImtovAJuDb9drNtpDnc4qf tyEPTQf7gHc/FgYhq3mDx1hTDg/vveFIugOzr5C243i5kYYLABG+E4hwxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCu9oM3HrINSNMLi8yQUrlsxUbQGMB8GA1UdIwQY MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt ZDNiNThmNjk4MTQ4LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4 LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAket0+oZk +enAJSJZCUeFh2DLWpw8ovRjqXLG58DYhQHtzJo97VB/y9owh2D3biSjnFF+ioEt cudgGZrgKCxucZS9MRS096onAZkX6uolk4RL+1+4BLf63YDKTLN433dzGrSuq40E TD8sHXekP1uy1NUzmDfpjUO8j5P8yxQd8UOkrwkUdMnsWat8e4JbXExNEKpgvJIe bUCv6P2cWVnVlQ+USLaD9GF13qWuFFvIioE5D4yXJUSto06LBdQ4b1ZjBUxUC811 cLaWIBPZkhp1floNUyrIjdpnh3Wuny2eihypJq+r/vFk7uB9vS9gCImynblC++ca rMx/d9dXYwUc+A== -----END CERTIFICATE-----Generated at Sun Dec 7 05:29:26 2025 by rpki-client