This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: jdA9pgx0BauuGiXXqIqjc2qvA1RCaGVxHoIhw5qHxmE= Subject key identifier: CD:F6:9E:B8:B4:5F:1C:12:E8:B6:17:91:5A:30:74:2C:6D:C1:B4:48 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019AED1935E9F84995D9437DA62A0635BAF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 13A5 Signing time: Fri 05 Dec 2025 06:00:43 +0000 Manifest this update: Fri 05 Dec 2025 06:00:43 +0000 Manifest next update: Sat 06 Dec 2025 06:00:43 +0000 Files and hashes: 1: 0SnEDSu2fch50mXfNCrgepjBXHI.roa (hash: An4Aho4+/IQv1xSA0visBRO6r1aot3IcatgSZ0mIirs=) 2: 1-C-0JGDbp3Otc_z0iBBVBpQZuq4.roa (hash: YGNYUtklrL1awHGcBtsuKJFxwbJZ7yDvoZ7r6abN1Jo=) 3: 4cYZBaSCfKx4xdTyV36QiAtkYH8.roa (hash: 4TbdTxLmlk8EX546dkAWoaHsA8UX5a3+NdKi5edH1kY=) 4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: UXgBFx2gKecSbzVmWi9MWL3JG+Z6d0VV0nSqQ2hxEZo=) 5: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=) 6: OKnFbF9P91_ZXtKJ3LL2trYGZZA.roa (hash: REsU/w11Yq/eW46cSLfnRZY+9FwY7bx6z/QbRrdcMvw=) 7: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=) 8: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=) 9: aQ3kSZGYrFWGAxsW5cMfgI6PR2k.roa (hash: WV200zuYmYOFQxibHNHmLysdFj/S1kHqxW3IuzyrxUs=) 10: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=) 11: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=) 12: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=) 13: pWCods6SP1-TwrIaXyXEahg6hSk.roa (hash: U/lqxnFFyY4IfL+Wh8Z1AqEVFTTqD0Mud4Ulygu2dBg=) 14: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=) 15: vVFxLsvkYjoi6jLUlY42DeA3xLA.roa (hash: 09k7XEdEjZik9O1l3B30uZBb/57gJQ9H98oYjLTzrsU=) 16: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=) 17: yedI6EpedZ28jyB60XNo0uK6oF8.roa (hash: hWsq9urJIZSeMGg4SgxXz+gEuiBCoRbdm4v/CAFQ2CU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:19:35:e9:f8:49:95:d9:43:7d:a6:2a:06:35:ba:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Dec 5 06:00:43 2025 GMT Not After : Dec 6 06:00:43 2025 GMT Subject: CN=cdf69eb8b45f1c12e8b617915a30742c6dc1b448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a0:17:6a:79:5c:a8:09:b8:83:c9:94:44:bc: e9:f3:d6:fb:d4:9a:2d:59:03:de:46:33:ef:1c:aa: a7:21:60:d2:4e:4c:36:08:2e:2f:b3:c9:ff:14:57: 84:d3:c9:4c:13:3f:dc:50:35:d1:08:07:c6:47:20: bb:7d:96:2d:ee:1b:82:20:b3:80:bf:58:1b:d7:05: c9:74:e2:09:d3:1b:a9:9a:c4:b8:a9:41:f2:ec:58: 8a:25:3d:0c:c3:32:b2:21:06:55:92:e0:79:22:44: aa:5e:66:c2:c9:f1:c2:98:45:af:04:0d:fb:67:70: eb:79:22:0c:f3:30:56:8e:25:74:04:4b:8c:80:24: 72:96:6d:9e:3d:67:24:2b:62:2f:0f:1f:29:4a:68: 0c:65:12:81:61:15:c4:9f:fe:69:9c:ec:fc:4f:ee: 7e:68:df:ea:b3:ee:29:03:87:fd:a5:67:29:ae:5e: 4b:8d:90:8a:2a:32:3d:5b:c4:c1:9e:c3:bc:0e:27: 6e:e3:a2:d2:0c:a7:09:bb:32:27:ae:db:89:15:52: 1e:f9:d4:34:02:71:29:93:9c:76:ab:f9:83:eb:2f: 7e:c6:7e:15:e7:5e:b3:2f:d7:22:bc:f6:b9:43:ad: 98:7b:0e:db:c8:a5:e7:b3:17:c8:04:c1:85:18:bb: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F6:9E:B8:B4:5F:1C:12:E8:B6:17:91:5A:30:74:2C:6D:C1:B4:48 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:8c:8e:9f:7e:e3:af:da:95:8d:a1:a8:ff:8a:d2:49:36:1d: 99:6c:a3:24:15:16:39:72:2f:40:df:3d:1a:15:7e:29:36:ca: c9:77:9e:ac:53:e8:be:44:bf:60:70:30:b4:29:a8:87:1d:b4: 6f:97:df:51:9e:ab:f6:b5:9b:2b:43:b5:99:4c:3a:7a:55:82: 63:f9:63:30:dc:2d:90:8c:d1:ed:d6:3d:5c:1d:15:40:85:3b: 4e:b3:69:4e:d2:f3:77:f4:11:62:6d:e3:cf:6c:82:51:72:44: 15:01:70:f7:25:3c:2f:c4:66:d5:11:0c:1e:b4:63:4c:06:bd: 2a:af:c7:a2:0b:53:b5:33:1a:46:f9:82:13:33:7b:57:1b:c6: 87:30:4a:a1:5b:00:7f:2e:29:53:dd:f7:01:96:28:fd:b7:0c: b3:3e:39:f1:da:ed:fb:13:0a:b9:1a:ac:52:da:eb:f7:8b:8d: e5:5c:9b:52:10:5a:ea:04:e0:b3:57:55:fd:f7:14:80:60:d4: b2:ea:29:69:c8:3f:aa:ed:62:ff:d9:fe:af:34:a0:f3:15:67: 4b:02:f7:32:88:43:d9:3b:86:06:e4:12:47:2e:da:f9:3c:de: 0a:1a:eb:e7:20:4f:03:ca:25:ae:0d:87:3d:de:e7:d5:74:d8: 50:cd:08:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrtGTXp+EmV2UN9pioGNbr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjUxMjA1MDYwMDQzWhcNMjUxMjA2MDYwMDQzWjAzMTEwLwYDVQQD EyhjZGY2OWViOGI0NWYxYzEyZThiNjE3OTE1YTMwNzQyYzZkYzFiNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqAXanlcqAm4g8mURLzp89b71Jot WQPeRjPvHKqnIWDSTkw2CC4vs8n/FFeE08lMEz/cUDXRCAfGRyC7fZYt7huCILOA v1gb1wXJdOIJ0xupmsS4qUHy7FiKJT0MwzKyIQZVkuB5IkSqXmbCyfHCmEWvBA37 Z3DreSIM8zBWjiV0BEuMgCRylm2ePWckK2IvDx8pSmgMZRKBYRXEn/5pnOz8T+5+ aN/qs+4pA4f9pWcprl5LjZCKKjI9W8TBnsO8Didu46LSDKcJuzInrtuJFVIe+dQ0 AnEpk5x2q/mD6y9+xn4V516zL9civPa5Q62Yew7byKXnsxfIBMGFGLsmQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM32nri0XxwS6LYXkVowdCxtwbRIMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0YyOn37j r9qVjaGo/4rSSTYdmWyjJBUWOXIvQN89GhV+KTbKyXeerFPovkS/YHAwtCmohx20 b5ffUZ6r9rWbK0O1mUw6elWCY/ljMNwtkIzR7dY9XB0VQIU7TrNpTtLzd/QRYm3j z2yCUXJEFQFw9yU8L8Rm1REMHrRjTAa9Kq/HogtTtTMaRvmCEzN7VxvGhzBKoVsA fy4pU933AZYo/bcMsz458drt+xMKuRqsUtrr94uN5VybUhBa6gTgs1dV/fcUgGDU suopacg/qu1i/9n+rzSg8xVnSwL3MohD2TuGBuQSRy7a+TzeChrr5yBPA8olrg2H Pd7n1XTYUM0I1Q== -----END CERTIFICATE-----Generated at Fri Dec 5 09:31:10 2025 by rpki-client