This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json) Hash identifier: qNzGUHb0qTl6aTWLhOZ+3OvuWZlQxDaQCjEa3JXD70o= Subject key identifier: 7C:40:16:C9:9A:ED:2C:FB:F3:9D:6F:09:0D:91:8B:33:9A:D6:46:DC Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59 Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959 Certificate serial: 019B31C359871615A14802EB2BC976FFBBDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft Manifest number: 1717 Signing time: Thu 18 Dec 2025 14:00:44 +0000 Manifest this update: Thu 18 Dec 2025 14:00:44 +0000 Manifest next update: Fri 19 Dec 2025 14:00:44 +0000 Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=) 2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: EkPjglkhGlUYXYZ5BRmbSiKGVcBn1KNvGznQCnnpsb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:59:87:16:15:a1:48:02:eb:2b:c9:76:ff:bb:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959 Validity Not Before: Dec 18 14:00:44 2025 GMT Not After : Dec 19 14:00:44 2025 GMT Subject: CN=7c4016c99aed2cfbf39d6f090d918b339ad646dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:69:6b:22:e0:59:0b:c0:8e:fa:62:cf:fb:c6: 70:47:1b:9a:c9:3c:5d:e2:2b:4d:c6:dd:5f:a5:8a: 74:67:44:0d:d4:86:0d:cb:0e:07:0a:7b:18:3a:6a: 8a:dc:a8:42:43:d1:d2:d3:1e:df:82:bd:6d:a6:00: 09:73:f8:de:a9:5e:38:d6:b1:9c:71:34:17:5f:ef: 05:6e:33:58:e9:22:d2:13:1d:ea:f3:77:b1:32:a9: 99:0c:b2:7a:9d:23:05:52:f6:60:13:79:a3:54:1e: 64:a7:69:41:d1:4f:dc:b0:e2:53:98:c3:b0:e5:f3: c1:b7:c5:f9:1a:8d:7d:58:06:f0:e5:d5:91:da:93: 9d:81:0e:96:b5:0e:1d:9b:12:e4:ad:d8:40:78:4a: c8:3b:bf:18:7f:4b:19:9d:63:48:fb:5b:49:27:84: 4d:a7:1f:78:b2:68:6f:54:c0:b6:37:c5:01:03:7a: 85:fc:e4:bd:67:0e:c6:56:87:0b:c6:04:39:cf:a4: 91:8d:43:c3:70:01:c0:5c:22:7e:a1:fc:2d:88:60: df:47:6b:ad:a8:03:51:a5:89:fe:4b:2e:7c:69:f3: 7a:a6:79:7a:2a:3e:23:7b:89:c0:e7:49:31:63:f0: 1a:2e:b8:47:33:07:ee:d5:e2:3e:42:13:7c:7f:35: 7e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:40:16:C9:9A:ED:2C:FB:F3:9D:6F:09:0D:91:8B:33:9A:D6:46:DC X509v3 Authority Key Identifier: keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:1c:89:75:76:1d:2a:56:de:31:49:e5:6a:d7:2f:50:4f:d2: 6d:c7:46:46:04:8c:51:fb:50:b3:2a:32:4c:a9:8e:ca:d7:30: 66:67:f7:7e:ff:4e:1e:d4:5b:26:68:5b:65:3f:1e:d1:3a:13: 47:ea:be:6c:b9:b5:c3:d5:ac:68:38:a7:99:df:57:42:cd:5c: 3a:14:c6:89:45:75:61:71:01:ce:a8:8d:03:5c:ba:c8:bf:93: 92:f5:d7:2e:af:b5:c4:c5:9c:f4:dc:34:27:86:1d:1a:af:f5: 54:af:4d:c9:4f:ab:b5:2d:6f:25:10:a2:52:de:0b:c7:23:d8: 67:13:60:f8:1e:52:e3:92:c7:10:17:a6:42:dd:01:70:d1:1c: 81:ef:5d:10:08:1f:a2:9a:c7:35:32:2d:aa:39:01:2d:09:0a: 2f:e0:28:c6:59:34:ac:d4:51:7e:fb:85:86:94:86:39:ba:38: 17:03:e5:2c:e2:ac:6d:1b:cb:35:05:c2:88:9a:67:25:80:c8: e2:56:10:80:27:78:8a:36:cb:0c:db:bf:27:86:b4:5b:eb:ff: 32:12:f6:70:db:fc:4a:f4:4f:2a:70:2e:f0:11:f1:dc:e7:74: f2:5a:81:1c:93:ef:ee:d5:52:3a:25:fc:fd:6c:7b:b5:53:9c: c1:07:57:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw1mHFhWhSALrK8l2/7vcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNTdmNTQ0ZjUzZjM1ZDhkMmU3M2NiMjk2NWI0ZjRkN2Qw MjI5NTkwHhcNMjUxMjE4MTQwMDQ0WhcNMjUxMjE5MTQwMDQ0WjAzMTEwLwYDVQQD Eyg3YzQwMTZjOTlhZWQyY2ZiZjM5ZDZmMDkwZDkxOGIzMzlhZDY0NmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmlrIuBZC8CO+mLP+8ZwRxuayTxd 4itNxt1fpYp0Z0QN1IYNyw4HCnsYOmqK3KhCQ9HS0x7fgr1tpgAJc/jeqV441rGc cTQXX+8FbjNY6SLSEx3q83exMqmZDLJ6nSMFUvZgE3mjVB5kp2lB0U/csOJTmMOw 5fPBt8X5Go19WAbw5dWR2pOdgQ6WtQ4dmxLkrdhAeErIO78Yf0sZnWNI+1tJJ4RN px94smhvVMC2N8UBA3qF/OS9Zw7GVocLxgQ5z6SRjUPDcAHAXCJ+ofwtiGDfR2ut qANRpYn+Sy58afN6pnl6Kj4je4nA50kxY/AaLrhHMwfu1eI+QhN8fzV+/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxAFsma7Sz7851vCQ2RizOa1kbcMB8GA1UdIwQY MBaAFLBX9UT1PzXY0uc8spZbT019AilZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgt NGVhN2ExYWU5OGRlLzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgtNGVhN2ExYWU5OGRl LzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRyJdXYd KlbeMUnlatcvUE/SbcdGRgSMUftQsyoyTKmOytcwZmf3fv9OHtRbJmhbZT8e0ToT R+q+bLm1w9WsaDinmd9XQs1cOhTGiUV1YXEBzqiNA1y6yL+TkvXXLq+1xMWc9Nw0 J4YdGq/1VK9NyU+rtS1vJRCiUt4LxyPYZxNg+B5S45LHEBemQt0BcNEcge9dEAgf oprHNTItqjkBLQkKL+Aoxlk0rNRRfvuFhpSGObo4FwPlLOKsbRvLNQXCiJpnJYDI 4lYQgCd4ijbLDNu/J4a0W+v/MhL2cNv8SvRPKnAu8BHx3Od08lqBHJPv7tVSOiX8 /Wx7tVOcwQdXVw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:29:00 2025 by rpki-client