This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json) Hash identifier: oDtAtgyL+qTHriMNdeC/XCFABkz7NorOvFlawTgWunk= Subject key identifier: 14:13:57:95:DF:78:86:00:13:81:BA:EE:4C:8D:9C:3B:E9:B3:69:72 Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Certificate serial: 019B31C3A4A00AE4BCC10F19652BAF0BEE82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft Manifest number: 134D Signing time: Thu 18 Dec 2025 14:01:03 +0000 Manifest this update: Thu 18 Dec 2025 14:01:03 +0000 Manifest next update: Fri 19 Dec 2025 14:01:03 +0000 Files and hashes: 1: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=) 2: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=) 3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: 2QJ+OP6jqlAYzU51NX9VLIEutdOXB7DX+m1HiFxsky0=) 4: EiLZXNFLeYaMBuVG79qI9-lFpJ0.roa (hash: pWVGRhAAESPBnV3t2uHYBiBVbQwsb0r95XhCGXUNPKk=) 5: pjH39R69sTwNHovgBG7mjRi0zDA.roa (hash: ///nC0KLmONlIJKYPkTb/i0CXtnKWaQJex/id87l6FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:a4:a0:0a:e4:bc:c1:0f:19:65:2b:af:0b:ee:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Validity Not Before: Dec 18 14:01:03 2025 GMT Not After : Dec 19 14:01:03 2025 GMT Subject: CN=14135795df7886001381baee4c8d9c3be9b36972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:ba:d9:2f:36:6b:cd:26:d0:8e:47:48:a1: 21:5f:23:b7:0e:23:90:dc:db:17:6c:07:e0:04:6b: 23:7a:7f:9a:1e:06:06:6e:aa:19:9c:cc:c5:9d:6c: c3:b1:bc:21:fe:4d:de:39:4c:9f:4d:3e:e1:d7:ca: 3b:f1:14:34:5d:6a:fa:38:4e:ca:93:dc:8e:18:a1: ac:cd:ee:6e:46:e3:dd:cd:13:54:52:ca:b2:2b:bf: 4e:15:53:0f:cc:b9:23:b0:d0:ef:ee:98:46:b8:c0: 9c:ae:21:11:f8:f4:29:08:40:c1:28:0c:78:a2:d5: 34:45:85:ce:90:9e:7e:14:d4:9a:22:58:b8:6e:36: 2d:02:5a:88:10:86:ac:c8:76:dd:51:7b:0c:f1:0c: ff:19:4b:cf:6a:ad:8c:0e:58:86:da:76:ff:8c:47: 5c:2d:6c:55:1e:db:43:75:9c:ee:ca:16:ae:73:86: 38:11:c4:30:80:f3:cf:a0:24:d0:ae:f8:9e:be:12: ae:cd:42:c6:60:4d:34:36:53:59:c8:ee:ac:6d:65: 1b:f2:d6:a1:5d:2d:f6:ec:7a:fb:e9:de:85:56:7a: ff:61:97:1b:c7:89:1e:b6:62:13:48:34:b7:ec:98: 1e:66:35:66:61:fe:84:18:62:09:33:18:46:90:e4: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:13:57:95:DF:78:86:00:13:81:BA:EE:4C:8D:9C:3B:E9:B3:69:72 X509v3 Authority Key Identifier: keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:31:05:62:b8:29:bb:5a:87:20:2f:9f:b9:68:cb:5f:f8:dd: 01:01:45:60:f5:80:0d:81:2f:61:68:b1:6a:ba:88:91:20:8c: 85:28:d3:ca:3c:7b:10:fd:a8:18:69:82:52:d8:3d:38:d6:21: 77:98:ca:26:19:97:06:e5:97:5e:e1:1e:e8:06:81:fc:02:40: dc:fc:e7:a9:73:65:53:24:26:d5:68:12:be:5e:2e:c1:5f:99: 27:b1:e3:99:15:a6:22:24:c9:1e:9c:d0:6f:1d:59:69:e1:ed: 38:38:bc:88:fb:e7:d6:95:87:18:de:3d:6f:4c:28:f2:be:82: 8d:3f:2a:42:36:2b:11:e0:a7:54:57:d9:68:f5:86:5a:28:dd: 75:b3:fc:57:23:56:c8:25:35:f9:89:5e:95:fc:c6:f4:58:93: 5a:ed:98:4f:c8:af:8f:ec:04:cb:46:8b:d0:e3:42:28:cc:78: a6:af:8e:52:59:7a:d6:94:f5:d7:4e:26:99:ad:3d:30:4f:32: 71:02:98:45:bb:c7:c4:e1:3b:ed:aa:4a:63:74:f8:77:7c:e4: a3:ed:39:b8:a7:98:e1:c0:f9:71:81:2a:cf:bd:0c:68:0a:47: 71:9c:cb:09:3e:97:0c:73:e2:35:fa:fe:1e:20:96:f7:b0:06: 95:a4:91:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw6SgCuS8wQ8ZZSuvC+6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5 YjA5MzYwHhcNMjUxMjE4MTQwMTAzWhcNMjUxMjE5MTQwMTAzWjAzMTEwLwYDVQQD EygxNDEzNTc5NWRmNzg4NjAwMTM4MWJhZWU0YzhkOWMzYmU5YjM2OTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbu62S82a80m0I5HSKEhXyO3DiOQ 3NsXbAfgBGsjen+aHgYGbqoZnMzFnWzDsbwh/k3eOUyfTT7h18o78RQ0XWr6OE7K k9yOGKGsze5uRuPdzRNUUsqyK79OFVMPzLkjsNDv7phGuMCcriER+PQpCEDBKAx4 otU0RYXOkJ5+FNSaIli4bjYtAlqIEIasyHbdUXsM8Qz/GUvPaq2MDliG2nb/jEdc LWxVHttDdZzuyhauc4Y4EcQwgPPPoCTQrvievhKuzULGYE00NlNZyO6sbWUb8tah XS327Hr76d6FVnr/YZcbx4ketmITSDS37JgeZjVmYf6EGGIJMxhGkORE5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQTV5XfeIYAE4G67kyNnDvps2lyMB8GA1UdIwQY MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt OTk2MTg5ZjljZTE0LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0 LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjEFYrgp u1qHIC+fuWjLX/jdAQFFYPWADYEvYWixarqIkSCMhSjTyjx7EP2oGGmCUtg9ONYh d5jKJhmXBuWXXuEe6AaB/AJA3PznqXNlUyQm1WgSvl4uwV+ZJ7HjmRWmIiTJHpzQ bx1ZaeHtODi8iPvn1pWHGN49b0wo8r6CjT8qQjYrEeCnVFfZaPWGWijddbP8VyNW yCU1+YlelfzG9FiTWu2YT8ivj+wEy0aL0ONCKMx4pq+OUll61pT1104mma09ME8y cQKYRbvHxOE77apKY3T4d3zko+05uKeY4cD5cYEqz70MaApHcZzLCT6XDHPiNfr+ HiCW97AGlaSRLw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:54:21 2025 by rpki-client