This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json) Hash identifier: /dsU0dPw9dEf2ghp9UI1e9SvHp48+pO7EpKjFE+WlK4= Subject key identifier: 99:6D:DB:92:18:12:A7:16:AC:36:1E:EF:33:43:68:69:84:6E:D8:79 Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68 Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68 Certificate serial: 019B5ABF83808086282736C88F35F365F28B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft Manifest number: 0103 Signing time: Fri 26 Dec 2025 13:00:58 +0000 Manifest this update: Fri 26 Dec 2025 13:00:58 +0000 Manifest next update: Sat 27 Dec 2025 13:00:58 +0000 Files and hashes: 1: BWjBHV7GLQYm_kFe7UVHpUwAkcY.roa (hash: KmHgJDlPkXFpo1uiCXVfBs7N0PdhXHFV0wyXs4DH/BA=) 2: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: 61HMNjh22AdhK+mKPgD5prOm2v3AbjwixaRQv+FtTwo=) 3: aWHN7cid-zTZ52WnzGCmExJ4Zdg.roa (hash: MGV2Z9M1at0wNrbd7sJUTfzjsFPuLQEHyaT+MULw+wQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:83:80:80:86:28:27:36:c8:8f:35:f3:65:f2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68 Validity Not Before: Dec 26 13:00:58 2025 GMT Not After : Dec 27 13:00:58 2025 GMT Subject: CN=996ddb921812a716ac361eef33436869846ed879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:e3:73:ce:a6:73:84:1c:a1:fc:51:f9:b9: 5e:34:68:f3:95:c0:d3:76:a0:0f:e9:9a:17:73:a3: 5b:7e:60:fd:e4:e2:ac:86:ad:5a:77:28:b2:4c:de: 8d:30:77:5d:77:73:f7:55:15:b7:87:fa:b1:c2:33: cd:c3:c3:7a:d3:1b:af:ce:fb:27:ad:5b:68:f9:d8: 26:9f:d9:88:54:88:9c:64:c3:fd:b8:0b:5b:bf:2b: 5e:87:e6:c1:60:d8:2e:17:ea:92:79:27:ed:b6:99: 20:10:27:7b:a8:e2:a4:bb:7f:ec:47:58:a8:d7:75: 88:5e:dc:b0:aa:54:24:a8:8e:62:b3:ed:91:0a:01: 6b:b5:54:db:0a:6d:17:d5:14:0b:dc:d6:36:21:13: 10:82:e8:c1:93:eb:2b:ad:f4:40:55:0e:c0:b2:18: 3c:02:6e:c8:d8:5d:ea:01:7e:d7:09:b9:ec:10:1e: a8:85:8b:1c:64:e4:32:1c:a6:a3:8c:af:3b:c7:48: 3b:a5:fc:e4:d1:e1:f0:c2:21:53:3b:ca:a1:c6:39: aa:2a:68:44:fd:a1:41:f3:3c:08:19:e9:40:71:60: a9:a3:f5:08:06:58:de:d3:91:3b:d8:9a:7f:df:f2: 93:6e:5e:54:9a:7a:8e:3e:c2:cf:73:73:48:4a:f5: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6D:DB:92:18:12:A7:16:AC:36:1E:EF:33:43:68:69:84:6E:D8:79 X509v3 Authority Key Identifier: keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e8:2b:c7:a0:75:5e:ed:10:0e:49:da:55:3a:04:89:b3:84: f7:e3:89:6d:b7:8e:bd:d0:ca:b9:4b:d8:67:d9:cb:7a:32:9e: 00:c3:72:f1:7b:a5:79:40:e5:52:84:8d:7f:e5:90:4b:4a:2d: 82:14:5e:76:b3:f8:b3:75:c3:0e:14:d7:c4:63:3a:9e:e6:39: 09:33:58:5c:5a:a1:34:b7:74:9a:72:e4:92:61:63:2b:39:a4: ef:d2:da:c4:5d:b6:76:7d:96:e3:1a:c2:76:98:89:a4:7f:17: 6a:8b:ee:16:01:77:8d:de:ce:3c:e0:6d:60:de:fa:6b:8c:04: 3b:61:6d:67:2c:59:08:60:bf:1a:03:91:52:35:04:60:50:29: 9d:42:aa:32:3c:b8:68:34:2b:30:ed:c4:26:4b:1f:4c:7b:6d: 2e:61:a7:75:70:04:3d:5e:bd:9d:cf:87:75:b1:92:8d:a2:e7: b7:3b:bf:17:60:30:2d:05:d1:69:28:49:a9:d9:6b:d9:45:44: 17:fe:4c:f4:a0:ae:7a:d3:97:28:b6:55:b5:9a:6b:7c:65:8c: 65:22:1e:0d:18:e6:e5:db:7c:58:5a:2c:18:e3:48:a4:85:ba: 9b:b3:60:db:57:97:c0:72:37:45:c0:76:60:90:6d:a9:d0:bf: a7:13:a3:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav4OAgIYoJzbIjzXzZfKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTIzOTFlMGFkMmU2NDRjZmUyZGFkNzYyMTExZDc1N2Y1 ODVmNjgwHhcNMjUxMjI2MTMwMDU4WhcNMjUxMjI3MTMwMDU4WjAzMTEwLwYDVQQD Eyg5OTZkZGI5MjE4MTJhNzE2YWMzNjFlZWYzMzQzNjg2OTg0NmVkODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmfjc86mc4QcofxR+bleNGjzlcDT dqAP6ZoXc6NbfmD95OKshq1adyiyTN6NMHddd3P3VRW3h/qxwjPNw8N60xuvzvsn rVto+dgmn9mIVIicZMP9uAtbvyteh+bBYNguF+qSeSfttpkgECd7qOKku3/sR1io 13WIXtywqlQkqI5is+2RCgFrtVTbCm0X1RQL3NY2IRMQgujBk+srrfRAVQ7Ashg8 Am7I2F3qAX7XCbnsEB6ohYscZOQyHKajjK87x0g7pfzk0eHwwiFTO8qhxjmqKmhE /aFB8zwIGelAcWCpo/UIBlje05E72Jp/3/KTbl5UmnqOPsLPc3NISvWLtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlt25IYEqcWrDYe7zNDaGmEbth5MB8GA1UdIwQY MBaAFBdSOR4K0uZEz+La12IRHXV/WF9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzkt MzlkYTY2MDJjNDMwLzEvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzktMzlkYTY2MDJjNDMw LzEvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROgrx6B1 Xu0QDknaVToEibOE9+OJbbeOvdDKuUvYZ9nLejKeAMNy8XuleUDlUoSNf+WQS0ot ghRedrP4s3XDDhTXxGM6nuY5CTNYXFqhNLd0mnLkkmFjKzmk79LaxF22dn2W4xrC dpiJpH8XaovuFgF3jd7OPOBtYN76a4wEO2FtZyxZCGC/GgORUjUEYFApnUKqMjy4 aDQrMO3EJksfTHttLmGndXAEPV69nc+HdbGSjaLntzu/F2AwLQXRaShJqdlr2UVE F/5M9KCuetOXKLZVtZprfGWMZSIeDRjm5dt8WFosGONIpIW6m7Ng21eXwHI3RcB2 YJBtqdC/pxOjxw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:03:16 2025 by rpki-client