This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json) Hash identifier: tyPsisyvr7yuZZrXaLvzGqHLtwqFpXgXPbkWOlUIqwY= Subject key identifier: B8:A3:B3:7B:E6:D7:2F:E7:FF:E5:12:EE:85:CB:3B:6C:3B:4A:62:6C Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Certificate serial: 019B330D411F2326871AFA999FF6C2798451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft Manifest number: 1796 Signing time: Thu 18 Dec 2025 20:01:05 +0000 Manifest this update: Thu 18 Dec 2025 20:01:05 +0000 Manifest next update: Fri 19 Dec 2025 20:01:05 +0000 Files and hashes: 1: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (hash: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=) 2: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=) 3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=) 4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: uWlHVoVx3Vk31971lWw/mDQbEbE3N5UItO+fWAeobT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:41:1f:23:26:87:1a:fa:99:9f:f6:c2:79:84:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Validity Not Before: Dec 18 20:01:05 2025 GMT Not After : Dec 19 20:01:05 2025 GMT Subject: CN=b8a3b37be6d72fe7ffe512ee85cb3b6c3b4a626c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:10:73:96:30:e3:68:22:cf:98:c7:34:cf:61: 0a:7b:63:35:21:d2:33:51:1e:a7:a9:fc:68:2b:d1: a3:2c:9b:ce:06:b5:ea:4e:b1:5c:ff:76:cb:b7:ad: ff:f7:17:43:80:9c:14:92:63:ad:b9:9d:a6:b3:68: 30:90:26:cd:ec:a2:a0:6d:f0:8c:17:5b:f5:2c:50: 78:f8:16:1a:1a:22:36:5e:6c:1d:0b:ff:2c:10:ff: bb:48:38:f6:02:5c:62:bc:9f:f9:81:d9:bd:b2:e3: b2:ea:da:8a:71:bf:a4:aa:a0:d6:25:98:44:13:bd: 9b:81:a5:88:8f:df:ca:b5:ee:c9:0a:f3:cf:c1:c8: e3:0d:fa:dc:2b:83:31:ca:6d:97:d1:bf:69:b5:0d: 97:ab:cc:da:2c:d0:7e:74:1e:6a:c9:4e:53:59:52: 58:60:bf:88:23:6e:9a:cb:4e:b1:d3:c6:9a:00:6e: d5:75:12:d9:46:ae:8e:b4:79:af:55:82:4b:09:cd: f4:3c:5b:9a:93:2a:cb:3b:3f:ac:00:68:95:d6:62: 8a:3d:67:cc:4d:18:3e:ea:06:56:3a:e6:fb:93:82: a4:e5:4d:47:03:3f:83:ca:23:45:05:c5:49:b2:aa: 98:49:27:7d:00:50:e1:9f:2c:3e:6e:23:60:a4:aa: 72:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A3:B3:7B:E6:D7:2F:E7:FF:E5:12:EE:85:CB:3B:6C:3B:4A:62:6C X509v3 Authority Key Identifier: keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c0:c0:ea:db:65:08:0e:71:19:13:27:1e:43:4f:18:bc:db: 70:14:fa:d0:7c:8d:b1:a1:ed:49:65:44:58:fa:78:e1:16:d0: 4d:82:0f:aa:85:9a:cc:99:e7:ce:73:7c:73:84:57:1e:cb:4c: e9:11:96:28:44:4f:32:c5:40:f8:df:ea:b2:e7:10:aa:34:2b: 3c:49:5e:a9:e5:5e:33:1a:82:f8:e6:2e:f8:61:65:8e:bf:ac: 79:42:f5:0d:9f:d5:b0:af:0a:6a:c6:85:b2:74:1b:dc:dd:cb: c8:49:e7:49:82:eb:67:a4:b5:fe:48:e7:1d:56:c2:ce:59:1c: 41:6b:46:44:71:b0:80:30:c5:3f:e1:76:ac:3d:c3:6b:75:00: 9f:2f:50:d6:ff:18:c0:e8:b1:17:6a:1c:80:3a:14:0f:7d:fb: 0f:f9:99:6e:b1:dc:fc:ca:ca:ac:5b:90:c0:cf:b1:3f:b9:96: ab:ce:a6:4e:39:7b:5b:5f:a3:e3:b2:5b:8f:50:90:cc:9d:59: e6:40:aa:32:17:33:2c:c7:57:25:14:6c:82:fe:a8:cd:ae:20: 84:45:80:73:a8:88:c7:e1:6d:bf:40:ff:08:21:a6:c4:f4:8f: 5a:95:60:0b:a9:89:1d:20:ed:36:3f:f2:50:7b:56:4b:7d:c7: 56:6d:70:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDUEfIyaHGvqZn/bCeYRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz NThlMjMwHhcNMjUxMjE4MjAwMTA1WhcNMjUxMjE5MjAwMTA1WjAzMTEwLwYDVQQD EyhiOGEzYjM3YmU2ZDcyZmU3ZmZlNTEyZWU4NWNiM2I2YzNiNGE2MjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BBzljDjaCLPmMc0z2EKe2M1IdIz UR6nqfxoK9GjLJvOBrXqTrFc/3bLt63/9xdDgJwUkmOtuZ2ms2gwkCbN7KKgbfCM F1v1LFB4+BYaGiI2XmwdC/8sEP+7SDj2AlxivJ/5gdm9suOy6tqKcb+kqqDWJZhE E72bgaWIj9/Kte7JCvPPwcjjDfrcK4Mxym2X0b9ptQ2Xq8zaLNB+dB5qyU5TWVJY YL+II26ay06x08aaAG7VdRLZRq6OtHmvVYJLCc30PFuakyrLOz+sAGiV1mKKPWfM TRg+6gZWOub7k4Kk5U1HAz+DyiNFBcVJsqqYSSd9AFDhnyw+biNgpKpypwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLijs3vm1y/n/+US7oXLO2w7SmJsMB8GA1UdIwQY MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt NzdjMTA0ODQyMmQ4LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4 LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsDA6ttl CA5xGRMnHkNPGLzbcBT60HyNsaHtSWVEWPp44RbQTYIPqoWazJnnznN8c4RXHstM 6RGWKERPMsVA+N/qsucQqjQrPEleqeVeMxqC+OYu+GFljr+seUL1DZ/VsK8KasaF snQb3N3LyEnnSYLrZ6S1/kjnHVbCzlkcQWtGRHGwgDDFP+F2rD3Da3UAny9Q1v8Y wOixF2ocgDoUD337D/mZbrHc/MrKrFuQwM+xP7mWq86mTjl7W1+j47Jbj1CQzJ1Z 5kCqMhczLMdXJRRsgv6oza4ghEWAc6iIx+Ftv0D/CCGmxPSPWpVgC6mJHSDtNj/y UHtWS33HVm1wwg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:34:20 2025 by rpki-client