This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft File: dF5kPQIextIbR1rkYN3tz35rP2Y.mft (raw, json) Hash identifier: XVkz6rYs/GwMvQ3j/qRs+3Xn+z7CZ64UTIP/t6EiKJk= Subject key identifier: 97:24:25:34:F7:26:8F:AD:F6:3D:93:83:5C:E7:EB:1D:96:25:99:8E Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66 Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66 Certificate serial: 019B3456B2D0FD2D23D302F2F442A89220DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft Manifest number: 0755 Signing time: Fri 19 Dec 2025 02:00:55 +0000 Manifest this update: Fri 19 Dec 2025 02:00:55 +0000 Manifest next update: Sat 20 Dec 2025 02:00:55 +0000 Files and hashes: 1: 1hVW1hVDzUMh4lZ8GR7cUAl7v8M.roa (hash: /ppjOJyvYU9AU0zUdXonk4kTMm986gK2/zEUEbCwwMQ=) 2: dF5kPQIextIbR1rkYN3tz35rP2Y.crl (hash: HWUdJeFwckqw7s4bDomVwpb0bOmqEDHQ0Zg+Qlmillc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:b2:d0:fd:2d:23:d3:02:f2:f4:42:a8:92:20:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66 Validity Not Before: Dec 19 02:00:55 2025 GMT Not After : Dec 20 02:00:55 2025 GMT Subject: CN=97242534f7268fadf63d93835ce7eb1d9625998e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b3:a8:80:48:96:c1:ca:86:2c:fe:9f:a2:57: 86:6a:81:b8:7f:d9:96:90:a5:20:af:cc:29:e8:f4: 09:b5:ef:50:83:66:04:65:15:e7:78:57:12:8d:dd: 85:43:30:14:e6:84:2d:3f:3a:c7:a9:95:48:2e:0e: 04:09:58:af:ad:c4:9f:96:8a:d0:78:2c:bf:07:1f: a4:82:2c:7b:db:df:3d:e7:91:93:7b:d2:b4:0e:c8: 0b:0d:6c:96:03:f7:35:6d:d6:84:65:c9:f1:a9:e4: 54:df:cc:8f:08:38:c2:09:04:67:df:09:e6:65:b3: 69:77:2e:4c:9e:e2:56:cf:1a:ec:03:b9:23:92:9c: 16:bc:2c:27:1f:60:f5:12:86:74:11:02:1d:6e:0f: af:d6:2a:79:8b:e7:4f:1f:e5:04:5f:44:cb:03:d9: 03:c6:cd:36:7b:8d:c1:cf:d1:72:56:6b:cc:63:e6: 53:99:62:d6:0f:43:48:03:33:7a:1b:1c:df:e6:69: f6:09:3e:a5:59:b4:f5:ec:fc:fa:e5:cc:99:68:59: 80:cf:01:c6:36:8e:7c:41:32:ab:1a:cf:07:e7:67: 51:9a:46:11:35:73:f5:38:c2:14:a5:21:71:3d:47: fe:fa:90:10:33:72:2d:b3:00:e3:51:c6:79:ff:f8: cc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:24:25:34:F7:26:8F:AD:F6:3D:93:83:5C:E7:EB:1D:96:25:99:8E X509v3 Authority Key Identifier: keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a0:4e:0c:a6:73:ee:e2:60:a7:76:6e:13:b2:9a:00:84:f8: fd:95:d3:16:80:f0:be:7d:47:49:a3:87:56:5c:a7:60:39:4d: 20:68:dd:b4:2a:81:f6:9f:a5:00:9b:4b:5b:f6:1b:3e:2e:ec: 55:bf:32:b8:c0:76:0c:9d:9b:9b:60:72:75:54:34:a0:d6:c0: 2f:18:67:70:71:7d:c3:07:33:3a:69:cc:68:44:3d:b9:34:b2: eb:eb:c2:ea:ad:00:d8:f9:2e:67:ee:33:f4:66:cf:66:d8:4b: f8:3f:f4:8a:40:d1:fc:a9:06:01:8e:2f:56:26:fa:5e:64:19: df:c5:e8:a1:a7:02:fc:60:92:e0:c1:27:63:d3:59:5c:9e:0a: b1:71:98:e7:5e:11:83:a5:aa:a8:69:4a:17:bd:9a:53:0a:ce: 89:99:51:5d:5e:00:39:68:04:e3:2d:8b:62:8f:f6:0a:70:78: 3f:b4:7b:7a:36:33:bb:9e:e9:67:7a:1e:89:46:5b:8c:b8:a4: ee:66:66:56:fb:e8:95:c0:b1:a7:33:5c:58:fa:95:a1:e4:64: 43:ef:c0:fc:25:75:5c:e2:ca:45:f2:7d:84:eb:37:e5:0e:20: a0:da:ab:7b:28:93:e6:b4:be:e7:74:a7:c0:12:ae:91:55:e4: a3:47:cf:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VrLQ/S0j0wLy9EKokiDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NWU2NDNkMDIxZWM2ZDIxYjQ3NWFlNDYwZGRlZGNmN2U2 YjNmNjYwHhcNMjUxMjE5MDIwMDU1WhcNMjUxMjIwMDIwMDU1WjAzMTEwLwYDVQQD Eyg5NzI0MjUzNGY3MjY4ZmFkZjYzZDkzODM1Y2U3ZWIxZDk2MjU5OThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LOogEiWwcqGLP6foleGaoG4f9mW kKUgr8wp6PQJte9Qg2YEZRXneFcSjd2FQzAU5oQtPzrHqZVILg4ECVivrcSflorQ eCy/Bx+kgix7298955GTe9K0DsgLDWyWA/c1bdaEZcnxqeRU38yPCDjCCQRn3wnm ZbNpdy5MnuJWzxrsA7kjkpwWvCwnH2D1EoZ0EQIdbg+v1ip5i+dPH+UEX0TLA9kD xs02e43Bz9FyVmvMY+ZTmWLWD0NIAzN6Gxzf5mn2CT6lWbT17Pz65cyZaFmAzwHG No58QTKrGs8H52dRmkYRNXP1OMIUpSFxPUf++pAQM3ItswDjUcZ5//jMAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJckJTT3Jo+t9j2Tg1zn6x2WJZmOMB8GA1UdIwQY MBaAFHReZD0CHsbSG0da5GDd7c9+az9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTkt YTk1YWVmOWM5MWQ5LzEvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80ZGE1ZDUtMzE1Mi00ZjU0LWEwYTktYTk1YWVmOWM5MWQ5 LzEvZEY1a1BRSWV4dEliUjFya1lOM3R6MzVyUDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaBODKZz 7uJgp3ZuE7KaAIT4/ZXTFoDwvn1HSaOHVlynYDlNIGjdtCqB9p+lAJtLW/YbPi7s Vb8yuMB2DJ2bm2BydVQ0oNbALxhncHF9wwczOmnMaEQ9uTSy6+vC6q0A2PkuZ+4z 9GbPZthL+D/0ikDR/KkGAY4vVib6XmQZ38XooacC/GCS4MEnY9NZXJ4KsXGY514R g6WqqGlKF72aUwrOiZlRXV4AOWgE4y2LYo/2CnB4P7R7ejYzu57pZ3oeiUZbjLik 7mZmVvvolcCxpzNcWPqVoeRkQ+/A/CV1XOLKRfJ9hOs35Q4goNqreyiT5rS+53Sn wBKukVXko0fPGQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:44:54 2025 by rpki-client