This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft File: fUFb7iIlhfLRqvv_unlQMaRRKcc.mft (raw, json) Hash identifier: 4Z7JgCVHE8LT1HOzt5CDIotESbEq2S04KaAt31qp0s8= Subject key identifier: B5:1F:05:81:E7:49:AE:C0:89:78:66:B0:17:FA:0A:FD:98:0E:52:EC Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 Certificate issuer: /CN=7d415bee222585f2d1aafbffba795031a45129c7 Certificate serial: 019B5AF6ADE4CEA8B131947F583A207BFEEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft Manifest number: 9E Signing time: Fri 26 Dec 2025 14:01:14 +0000 Manifest this update: Fri 26 Dec 2025 14:01:14 +0000 Manifest next update: Sat 27 Dec 2025 14:01:14 +0000 Files and hashes: 1: JUVcVjdBtjPI8y-f9rnNibK8zkY.roa (hash: 6oXfkYV491tM7NL0VRDyyRr5CGy7QuBKlofPdnTMl/U=) 2: az7D72m3aRzcMGuqVgsus2HYPJI.asa (hash: UYH2LQP6yhA1ucYPAXvinazn/8R7Ym8Hnb5ZSwGQQiU=) 3: fUFb7iIlhfLRqvv_unlQMaRRKcc.crl (hash: 7ngFnwgglBtuySSUePm+4vXfXU2gGWmXFSNA7BbuFfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:ad:e4:ce:a8:b1:31:94:7f:58:3a:20:7b:fe:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7 Validity Not Before: Dec 26 14:01:14 2025 GMT Not After : Dec 27 14:01:14 2025 GMT Subject: CN=b51f0581e749aec0897866b017fa0afd980e52ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:45:39:97:53:a6:55:5e:33:c1:19:a0:7b: 5c:c3:8e:9e:3f:16:23:62:5b:39:cf:3d:57:3c:68: 43:5a:e0:35:53:9b:5e:14:ac:68:b1:0a:f9:06:2a: fe:6e:95:3b:f5:41:d5:b5:1b:87:d9:3b:5f:99:bc: 73:2a:3c:9c:db:2d:6a:e5:96:17:0b:f9:29:da:fd: 60:56:68:3f:80:4d:4e:38:b1:44:ab:51:9d:a8:71: 5e:b9:68:26:49:f1:f5:8a:15:0f:f5:60:7c:02:94: 00:9b:8e:c2:e9:86:c9:19:19:05:bd:f1:7b:f5:db: b1:05:b1:8e:44:31:ca:2f:ad:3e:3c:a3:9c:44:da: 1c:dd:ee:46:c8:47:3d:9c:56:3e:2a:de:5c:69:33: ad:3e:e3:bc:5b:23:42:23:a4:54:e9:3c:f8:7c:74: e5:29:57:a3:98:c0:ce:5f:42:a1:7a:7a:00:ce:67: cb:09:54:8f:5c:d6:27:42:a3:5d:c8:48:d6:aa:a5: 34:21:86:33:97:1c:06:77:d5:7b:5d:89:bc:d7:50: 21:4d:cf:b6:eb:58:e4:89:80:9b:cb:e1:3e:5d:06: 30:63:49:39:4b:97:09:88:62:bc:90:58:7b:43:b6: e4:6a:f8:44:43:57:84:4b:c8:49:90:10:2b:b8:a7: 48:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1F:05:81:E7:49:AE:C0:89:78:66:B0:17:FA:0A:FD:98:0E:52:EC X509v3 Authority Key Identifier: keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:de:c0:ee:46:d6:44:2c:da:94:f5:3b:b8:87:66:f4:1d:7a: f0:fe:7d:a8:f4:9d:1b:38:ff:f7:4a:b2:5e:30:24:4e:04:2b: 53:87:4e:94:a0:aa:e7:0d:51:dd:e9:40:58:bc:44:d1:9e:45: 05:94:78:4f:b6:d8:7c:a1:5c:cb:65:e5:d2:1b:64:e8:04:13: 7f:d8:db:cf:f5:ec:84:bb:9c:bb:66:00:01:a7:c3:d5:08:a0: c4:c0:d9:f4:cd:18:c2:24:8d:99:89:ce:1f:1a:5c:7b:6f:31: e4:2f:72:63:05:f5:b9:1f:4b:20:43:e0:2a:1d:4c:39:7d:d5: 27:be:20:51:9f:6c:f3:71:d3:15:5c:61:46:44:07:69:75:e6: 59:da:68:52:16:c7:7d:de:6f:ce:ca:32:f7:43:54:d2:90:8f: 1b:7b:7f:d1:96:75:b5:9e:36:0f:8d:ef:53:4b:89:ee:a9:f7: 2d:4f:78:4f:36:2e:0b:1e:80:dc:40:47:9f:4d:41:c4:f3:8f: b2:ed:d3:8a:0c:92:c2:08:7d:9f:26:f7:71:03:62:b3:63:b8: 58:ad:f5:ae:1a:f2:49:83:25:ea:a9:60:a5:69:21:a5:ed:d6: 29:e2:1e:c7:37:e9:29:a3:18:1e:c0:54:58:18:37:a9:b1:64: b2:0d:6f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9q3kzqixMZR/WDoge/7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDE1YmVlMjIyNTg1ZjJkMWFhZmJmZmJhNzk1MDMxYTQ1 MTI5YzcwHhcNMjUxMjI2MTQwMTE0WhcNMjUxMjI3MTQwMTE0WjAzMTEwLwYDVQQD EyhiNTFmMDU4MWU3NDlhZWMwODk3ODY2YjAxN2ZhMGFmZDk4MGU1MmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkFFOZdTplVeM8EZoHtcw46ePxYj Yls5zz1XPGhDWuA1U5teFKxosQr5Bir+bpU79UHVtRuH2TtfmbxzKjyc2y1q5ZYX C/kp2v1gVmg/gE1OOLFEq1GdqHFeuWgmSfH1ihUP9WB8ApQAm47C6YbJGRkFvfF7 9duxBbGORDHKL60+PKOcRNoc3e5GyEc9nFY+Kt5caTOtPuO8WyNCI6RU6Tz4fHTl KVejmMDOX0KhenoAzmfLCVSPXNYnQqNdyEjWqqU0IYYzlxwGd9V7XYm811AhTc+2 61jkiYCby+E+XQYwY0k5S5cJiGK8kFh7Q7bkavhEQ1eES8hJkBAruKdImQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUfBYHnSa7AiXhmsBf6Cv2YDlLsMB8GA1UdIwQY MBaAFH1BW+4iJYXy0ar7/7p5UDGkUSnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQt MmNkNGJmMjdiNjdkLzEvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQtMmNkNGJmMjdiNjdk LzEvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5t7A7kbW RCzalPU7uIdm9B168P59qPSdGzj/90qyXjAkTgQrU4dOlKCq5w1R3elAWLxE0Z5F BZR4T7bYfKFcy2Xl0htk6AQTf9jbz/XshLucu2YAAafD1QigxMDZ9M0YwiSNmYnO Hxpce28x5C9yYwX1uR9LIEPgKh1MOX3VJ74gUZ9s83HTFVxhRkQHaXXmWdpoUhbH fd5vzsoy90NU0pCPG3t/0ZZ1tZ42D43vU0uJ7qn3LU94TzYuCx6A3EBHn01BxPOP su3TigySwgh9nyb3cQNis2O4WK31rhrySYMl6qlgpWkhpe3WKeIexzfpKaMYHsBU WBg3qbFksg1v0g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:01 2025 by rpki-client