This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft File: rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json) Hash identifier: JqaDWUqkceDWoNQjsIMcsqJ5PTkjdCA0q9DhEHIwyTA= Subject key identifier: A2:A5:FD:ED:13:DC:63:53:78:34:64:1E:EB:2E:06:0C:DD:24:DC:AF Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Certificate serial: 019B1D2A1F2F2EBAAFEC26A261D0291FB09F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft Manifest number: 0B39 Signing time: Sun 14 Dec 2025 14:00:58 +0000 Manifest this update: Sun 14 Dec 2025 14:00:58 +0000 Manifest next update: Mon 15 Dec 2025 14:00:58 +0000 Files and hashes: 1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=) 2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=) 3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=) 4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: UIee8BjDQ+iSW4ZQH+dfBBytZeE/DGPf14NHvpmu41w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:1f:2f:2e:ba:af:ec:26:a2:61:d0:29:1f:b0:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Validity Not Before: Dec 14 14:00:58 2025 GMT Not After : Dec 15 14:00:58 2025 GMT Subject: CN=a2a5fded13dc63537834641eeb2e060cdd24dcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:2a:fd:83:bf:35:e5:ea:cf:6d:fd:34:1e: 15:e5:55:c3:40:46:4a:28:d3:01:4d:91:97:a0:75: 78:73:7f:51:ca:06:9c:9d:9d:ea:5c:a4:0f:7b:dc: 4a:40:72:d1:09:e0:6c:eb:6b:24:ea:6f:6f:f6:16: a1:71:ae:a3:6e:da:49:8e:dc:f7:57:1a:12:cc:99: 7a:c4:2e:85:27:97:eb:d1:0a:a3:bb:fc:1d:aa:e9: cf:1c:e1:c8:b6:7e:35:72:d6:70:93:13:61:cf:8c: a7:ac:b8:a3:6b:03:2e:7d:61:10:59:38:c4:3a:c1: f7:ca:60:f1:36:7d:91:09:93:55:6a:6c:25:c4:97: e5:10:40:74:4e:33:a0:00:cb:63:48:2f:92:19:bb: 80:e5:03:15:7e:25:ad:62:68:1b:a0:25:e1:df:8f: 76:64:59:03:07:db:a5:1c:bc:56:79:5b:ad:89:9c: c8:1c:c8:dc:f3:0b:5d:05:8c:3b:92:10:5f:46:08: 3e:53:c7:20:65:bf:fe:61:64:0b:89:48:f4:94:85: 40:8e:96:a7:64:84:15:cd:0b:84:40:c9:15:94:6e: a7:05:ee:bf:2d:fc:90:be:6e:b8:7b:78:a2:d0:72: ee:80:42:7d:b1:e0:12:22:d6:ee:58:9e:4f:48:b1: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A5:FD:ED:13:DC:63:53:78:34:64:1E:EB:2E:06:0C:DD:24:DC:AF X509v3 Authority Key Identifier: keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:60:f5:ed:c3:48:6c:14:88:54:7e:01:7a:94:3b:8f:ae:a2: 32:d2:b4:53:59:3c:94:06:fa:e8:c9:e9:ce:76:e8:37:40:60: 8b:3e:bf:8e:2a:22:59:3c:b5:8a:4a:e6:c6:b0:a8:6a:c0:7a: eb:fc:b7:73:99:d5:19:a1:d0:0e:a6:15:07:37:44:4a:9e:0c: f4:02:a5:36:79:ce:c9:0f:d9:19:17:8d:82:8b:4e:9a:ba:54: 36:6b:1f:b6:d2:f1:bd:f7:ea:cd:93:09:9c:eb:d5:22:ea:fe: d9:66:42:7b:fd:59:22:c4:a2:66:2b:4c:b1:23:ba:11:1d:69: 47:64:a4:f2:c8:34:49:de:ea:e6:77:ee:ad:34:f4:96:f0:92: 1c:5b:b4:01:80:d1:43:72:da:7f:85:c2:e8:6a:62:44:3a:2d: 0a:7e:d1:57:5c:45:25:03:f8:9f:65:43:87:d8:d9:82:7f:19: 99:0c:59:33:38:ca:e7:1f:93:7b:af:41:71:42:75:bb:da:88: a1:8e:94:32:85:c4:0a:97:e1:ec:cc:be:3d:d2:10:e0:71:c8: e4:d4:d7:c4:06:ae:c6:61:7d:8e:a7:fb:b2:41:f9:08:55:59: d0:9f:0a:dd:23:f0:68:2d:a4:d0:24:cc:fe:03:2b:93:15:5b: dc:6a:49:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKh8vLrqv7CaiYdApH7CfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2 NWRhNDUwHhcNMjUxMjE0MTQwMDU4WhcNMjUxMjE1MTQwMDU4WjAzMTEwLwYDVQQD EyhhMmE1ZmRlZDEzZGM2MzUzNzgzNDY0MWVlYjJlMDYwY2RkMjRkY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zgq/YO/NeXqz239NB4V5VXDQEZK KNMBTZGXoHV4c39RygacnZ3qXKQPe9xKQHLRCeBs62sk6m9v9hahca6jbtpJjtz3 VxoSzJl6xC6FJ5fr0Qqju/wdqunPHOHItn41ctZwkxNhz4ynrLijawMufWEQWTjE OsH3ymDxNn2RCZNVamwlxJflEEB0TjOgAMtjSC+SGbuA5QMVfiWtYmgboCXh3492 ZFkDB9ulHLxWeVutiZzIHMjc8wtdBYw7khBfRgg+U8cgZb/+YWQLiUj0lIVAjpan ZIQVzQuEQMkVlG6nBe6/LfyQvm64e3ii0HLugEJ9seASItbuWJ5PSLEBSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKl/e0T3GNTeDRkHusuBgzdJNyvMB8GA1UdIwQY MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt NTU1ZjNmMThlNTRmLzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmD17cNI bBSIVH4BepQ7j66iMtK0U1k8lAb66MnpznboN0Bgiz6/jioiWTy1ikrmxrCoasB6 6/y3c5nVGaHQDqYVBzdESp4M9AKlNnnOyQ/ZGReNgotOmrpUNmsfttLxvffqzZMJ nOvVIur+2WZCe/1ZIsSiZitMsSO6ER1pR2Sk8sg0Sd7q5nfurTT0lvCSHFu0AYDR Q3Laf4XC6GpiRDotCn7RV1xFJQP4n2VDh9jZgn8ZmQxZMzjK5x+Te69BcUJ1u9qI oY6UMoXECpfh7My+PdIQ4HHI5NTXxAauxmF9jqf7skH5CFVZ0J8K3SPwaC2k0CTM /gMrkxVb3GpJNA== -----END CERTIFICATE-----Generated at Sun Dec 14 22:01:49 2025 by rpki-client