This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json) Hash identifier: 5qng6W7iexgv+ZHJOiTmhrk7TsFfldc4wWb96WsWkoQ= Subject key identifier: 3C:DE:A2:61:1D:48:37:19:A6:E3:D5:B3:5A:5D:9D:EC:1B:4D:34:EE Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56 Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956 Certificate serial: 019B5A88A5744ECCD6D4CDF080502F97ED96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 12:01:03 +0000 Manifest this update: Fri 26 Dec 2025 12:01:03 +0000 Manifest next update: Sat 27 Dec 2025 12:01:03 +0000 Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=) 2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: oRB1umdg4X9o1Lg6MqhgN4qyS8VN4Tfx/FXa35eDHWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:a5:74:4e:cc:d6:d4:cd:f0:80:50:2f:97:ed:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956 Validity Not Before: Dec 26 12:01:03 2025 GMT Not After : Dec 27 12:01:03 2025 GMT Subject: CN=3cdea2611d483719a6e3d5b35a5d9dec1b4d34ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:07:33:01:ae:1f:ad:ed:c2:9b:51:24:c5: 82:9a:90:85:6b:af:ed:f9:41:0b:9a:78:f7:ee:99: 6d:a9:df:78:ae:f7:24:b0:e4:e6:8a:da:53:f2:cb: e2:c0:7c:42:89:50:75:61:7a:d3:da:44:1d:b7:9f: 78:94:30:40:29:5d:db:42:c3:cc:89:42:f7:44:0e: 0b:a6:29:df:14:0e:89:25:58:90:16:d9:c8:6e:f5: 24:7c:64:31:e5:ee:25:08:d3:dd:30:d1:e5:73:0a: d0:a8:3a:ce:c2:0c:51:03:59:22:38:67:dd:55:d1: 83:99:e4:d0:8a:34:54:cd:7d:e1:26:28:db:95:c3: 9b:88:e2:c0:8c:97:e3:04:23:30:43:83:40:7f:27: 88:a1:98:c7:80:d1:98:74:f3:7b:aa:97:8f:bb:89: 84:45:f3:da:9d:68:d7:98:de:33:e7:c9:8c:8f:47: 10:fb:aa:5b:64:63:eb:d0:3f:80:10:6c:4e:f0:70: de:f7:3d:d0:00:bd:e8:24:96:40:ce:2f:85:74:e2: d1:be:ef:a2:d2:6f:91:4a:ee:10:27:42:50:47:ba: 79:1b:db:46:c0:2f:a9:8c:8b:2b:3c:20:18:26:a9: 4b:d6:ce:03:1a:09:61:f2:fd:07:b0:62:d0:9a:45: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DE:A2:61:1D:48:37:19:A6:E3:D5:B3:5A:5D:9D:EC:1B:4D:34:EE X509v3 Authority Key Identifier: keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:63:22:cc:20:15:c0:c1:f3:98:c2:51:e6:8a:f3:b3:17:98: 04:ec:64:4a:dd:b0:53:c3:90:23:88:68:03:f4:37:8a:f9:1c: 03:ee:3c:90:64:e8:07:79:31:bf:9e:83:7b:2f:9e:b0:c7:2b: 64:8d:80:56:7f:84:c6:8f:cf:50:7b:9e:71:e0:1b:87:c1:37: ef:66:23:aa:82:02:18:a8:53:e5:d0:0b:18:c2:8d:67:8a:2a: 85:64:e0:7f:24:a6:6d:7e:9a:ba:0e:a0:8e:80:b6:75:35:e5: bd:e5:9c:e1:2b:d1:89:dc:92:36:08:85:e1:21:bc:58:32:a8: 26:a7:e2:e6:73:4d:ba:5e:92:c8:48:4b:24:83:f8:2a:e4:65: a4:34:f6:02:3d:39:69:e7:bf:35:18:04:12:8f:b9:cd:95:fd: ca:90:00:9a:f1:38:b4:ca:19:7b:18:19:d9:9a:a9:db:fe:57: bf:34:1d:ff:7b:25:1c:52:65:55:30:ca:65:90:d6:76:0d:71: c0:24:80:e8:4c:8b:da:fe:20:1e:f5:cd:9b:78:ff:67:d4:5c: 2f:66:9f:b9:1d:f5:60:98:01:9d:9c:37:37:35:46:78:73:f0: df:fa:47:7f:15:f5:18:c4:89:43:0c:82:02:7a:a2:d7:ba:10: 98:a4:08:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKV0TszW1M3wgFAvl+2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZGNjZTkxMDAwNDUxNDk0YzQzYzE1ZDE3MmRhMmViOWQ1 Yjc5NTYwHhcNMjUxMjI2MTIwMTAzWhcNMjUxMjI3MTIwMTAzWjAzMTEwLwYDVQQD EygzY2RlYTI2MTFkNDgzNzE5YTZlM2Q1YjM1YTVkOWRlYzFiNGQzNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnoHMwGuH63twptRJMWCmpCFa6/t +UELmnj37pltqd94rvcksOTmitpT8sviwHxCiVB1YXrT2kQdt594lDBAKV3bQsPM iUL3RA4LpinfFA6JJViQFtnIbvUkfGQx5e4lCNPdMNHlcwrQqDrOwgxRA1kiOGfd VdGDmeTQijRUzX3hJijblcObiOLAjJfjBCMwQ4NAfyeIoZjHgNGYdPN7qpePu4mE RfPanWjXmN4z58mMj0cQ+6pbZGPr0D+AEGxO8HDe9z3QAL3oJJZAzi+FdOLRvu+i 0m+RSu4QJ0JQR7p5G9tGwC+pjIsrPCAYJqlL1s4DGglh8v0HsGLQmkV1rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzeomEdSDcZpuPVs1pdnewbTTTuMB8GA1UdIwQY MBaAFJDczpEABFFJTEPBXRctouudW3lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MWZkYmItOGJhMi00YjdlLTk4MGYt ZWU2MGIwZGRiZGFhLzEva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81MWZkYmItOGJhMi00YjdlLTk4MGYtZWU2MGIwZGRiZGFh LzEva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmMizCAV wMHzmMJR5orzsxeYBOxkSt2wU8OQI4hoA/Q3ivkcA+48kGToB3kxv56Dey+esMcr ZI2AVn+Exo/PUHueceAbh8E372YjqoICGKhT5dALGMKNZ4oqhWTgfySmbX6aug6g joC2dTXlveWc4SvRidySNgiF4SG8WDKoJqfi5nNNul6SyEhLJIP4KuRlpDT2Aj05 aee/NRgEEo+5zZX9ypAAmvE4tMoZexgZ2Zqp2/5XvzQd/3slHFJlVTDKZZDWdg1x wCSA6EyL2v4gHvXNm3j/Z9RcL2afuR31YJgBnZw3NzVGeHPw3/pHfxX1GMSJQwyC Anqi17oQmKQIQA== -----END CERTIFICATE-----Generated at Fri Dec 26 21:02:41 2025 by rpki-client