This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json) Hash identifier: drd0gQL0lBk9ueMXAV1Nfk3aeddiq9i8oaRM97j1PPc= Subject key identifier: E5:3E:67:86:69:85:B6:5C:4E:A3:6E:2F:65:44:B2:3E:51:EA:B5:29 Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9 Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9 Certificate serial: 019B59767C410C6CAF13F1A1DA61DA207FF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft Manifest number: 172A Signing time: Fri 26 Dec 2025 07:01:35 +0000 Manifest this update: Fri 26 Dec 2025 07:01:35 +0000 Manifest next update: Sat 27 Dec 2025 07:01:35 +0000 Files and hashes: 1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=) 2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: NdezfpCAA8yMhsUCufemdDLrADVU5pJf37aVH1fIVzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:7c:41:0c:6c:af:13:f1:a1:da:61:da:20:7f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9 Validity Not Before: Dec 26 07:01:35 2025 GMT Not After : Dec 27 07:01:35 2025 GMT Subject: CN=e53e67866985b65c4ea36e2f6544b23e51eab529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:fb:f7:40:15:ef:cd:51:8c:26:8c:c3:1f: 26:73:1c:53:fb:4a:1b:7c:f5:0d:f6:f1:8c:9d:e8: ee:90:21:90:ad:64:c9:e0:90:45:8a:d6:82:f2:49: 37:dc:0c:dd:56:b5:c9:6a:41:c6:a0:ea:8a:87:88: 3b:2d:7d:81:78:20:5b:1f:6d:51:48:6a:b3:ed:fc: 93:b9:fa:9f:92:9c:00:6d:57:21:b6:4c:6a:8c:a1: 46:5b:c0:fa:08:6f:af:eb:0f:13:52:44:0f:bf:5b: b4:92:ca:a4:0e:fb:37:b6:71:67:e9:25:16:dd:68: 29:a0:f7:53:e3:39:30:43:10:52:a0:d6:cc:34:ae: 48:de:dc:f9:38:f6:47:06:94:3d:db:98:3f:b1:92: cd:1b:32:b0:2c:95:92:29:25:44:5d:33:64:54:8c: 64:70:a0:35:cc:a9:05:4a:6b:d2:0e:2d:72:75:3c: fd:76:bf:0f:6b:e7:6d:6c:1c:7a:5e:83:03:71:64: a1:55:c1:f7:fb:e9:27:60:4d:f9:bd:85:a0:49:5d: 37:a8:1e:37:29:d9:dd:50:3b:3e:a1:27:91:2d:76: cc:0a:41:c5:54:45:b8:1b:61:8a:a8:48:6d:00:22: f8:57:a7:89:c2:ec:d6:d0:fe:49:ff:c3:9b:58:5c: 25:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3E:67:86:69:85:B6:5C:4E:A3:6E:2F:65:44:B2:3E:51:EA:B5:29 X509v3 Authority Key Identifier: keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:58:5b:10:86:2b:b6:27:b6:1f:e3:1a:97:9c:8e:e5:bb:aa: 39:9d:6d:aa:5c:fd:b5:78:74:3c:bf:68:c1:a3:1a:9e:b7:1d: c8:82:5d:1b:44:7a:53:70:f1:a2:1d:91:d7:9a:ce:0c:18:69: 70:3f:40:1b:00:f4:00:84:50:de:62:9e:7c:fd:6d:9a:06:be: 01:cc:28:41:55:69:e0:88:41:b4:ac:91:d1:b1:91:9f:be:c3: 43:7a:d1:77:bb:a2:f2:4e:ae:7f:3d:18:9b:3d:e2:63:0a:95: a1:7b:cd:65:79:ff:9a:6e:fc:c7:b4:bf:29:84:d8:25:ca:1e: 84:2b:0f:d6:54:41:8d:08:a0:5f:4c:d6:88:e2:58:91:cb:19: 06:2d:ae:ef:41:27:e3:be:e4:3f:0a:79:7e:6b:3e:44:19:ea: 7c:30:4f:06:31:fa:ef:75:ab:69:34:bd:dd:16:58:1e:34:70: 49:4c:d9:00:87:03:a6:7c:34:2e:c5:bf:d3:39:c4:bc:33:eb: 8d:ea:93:ab:5c:23:cf:e6:fa:c9:a7:9c:66:3b:27:e3:24:a5: 49:b2:e7:41:51:cd:bb:fa:db:12:ca:a1:54:22:2d:fb:aa:65: 75:1d:68:4f:0e:48:be:e4:ce:f5:59:b4:38:5f:1d:86:ec:1c: a9:0f:98:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdnxBDGyvE/Gh2mHaIH/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2 NGJmYzkwHhcNMjUxMjI2MDcwMTM1WhcNMjUxMjI3MDcwMTM1WjAzMTEwLwYDVQQD EyhlNTNlNjc4NjY5ODViNjVjNGVhMzZlMmY2NTQ0YjIzZTUxZWFiNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbX790AV781RjCaMwx8mcxxT+0ob fPUN9vGMnejukCGQrWTJ4JBFitaC8kk33AzdVrXJakHGoOqKh4g7LX2BeCBbH21R SGqz7fyTufqfkpwAbVchtkxqjKFGW8D6CG+v6w8TUkQPv1u0ksqkDvs3tnFn6SUW 3WgpoPdT4zkwQxBSoNbMNK5I3tz5OPZHBpQ925g/sZLNGzKwLJWSKSVEXTNkVIxk cKA1zKkFSmvSDi1ydTz9dr8Pa+dtbBx6XoMDcWShVcH3++knYE35vYWgSV03qB43 KdndUDs+oSeRLXbMCkHFVEW4G2GKqEhtACL4V6eJwuzW0P5J/8ObWFwlMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOU+Z4ZphbZcTqNuL2VEsj5R6rUpMB8GA1UdIwQY MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt ZWNjZDY2NWYxZjAzLzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVhbEIYr tie2H+Mal5yO5buqOZ1tqlz9tXh0PL9owaManrcdyIJdG0R6U3Dxoh2R15rODBhp cD9AGwD0AIRQ3mKefP1tmga+AcwoQVVp4IhBtKyR0bGRn77DQ3rRd7ui8k6ufz0Y mz3iYwqVoXvNZXn/mm78x7S/KYTYJcoehCsP1lRBjQigX0zWiOJYkcsZBi2u70En 477kPwp5fms+RBnqfDBPBjH673WraTS93RZYHjRwSUzZAIcDpnw0LsW/0znEvDPr jeqTq1wjz+b6yaecZjsn4ySlSbLnQVHNu/rbEsqhVCIt+6pldR1oTw5IvuTO9Vm0 OF8dhuwcqQ+YiA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:00 2025 by rpki-client