This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json) Hash identifier: F30ep3FjIRJeFU0JSxQUij8qeL4PxeQd+Ykdfx1qnTg= Subject key identifier: B7:10:5D:99:68:9C:39:F4:E0:A0:F5:47:F2:EC:BD:2B:DE:CA:2D:BA Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Certificate serial: 019B123873ED3AD30D02D93B2ABE7260DE7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft Manifest number: 1785 Signing time: Fri 12 Dec 2025 11:00:48 +0000 Manifest this update: Fri 12 Dec 2025 11:00:48 +0000 Manifest next update: Sat 13 Dec 2025 11:00:48 +0000 Files and hashes: 1: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (hash: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=) 2: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=) 3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=) 4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: bEO2bRLOahO+jVcwWeqOc3JdqhtwRWIK0oxM/qchm60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:73:ed:3a:d3:0d:02:d9:3b:2a:be:72:60:de:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23 Validity Not Before: Dec 12 11:00:48 2025 GMT Not After : Dec 13 11:00:48 2025 GMT Subject: CN=b7105d99689c39f4e0a0f547f2ecbd2bdeca2dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:e0:f3:f5:46:d7:72:a6:e4:43:c6:f7:7e: 57:86:c5:89:f1:29:71:82:e1:83:6a:2a:58:be:1f: 29:85:ac:26:f0:0a:6c:44:0f:7b:81:4d:78:e2:f5: cc:c3:19:fe:f6:f2:72:63:7c:43:7e:21:be:95:06: ad:0d:ae:c6:5f:ad:f9:02:b7:a9:f1:97:8c:31:5e: 53:3d:eb:63:1e:f4:66:4e:b7:0a:4b:bc:43:bb:f4: 75:dd:13:60:82:28:71:b4:44:eb:3f:af:f2:2a:50: 73:77:eb:b3:1d:db:4f:1a:1f:79:eb:79:c4:fd:25: c5:75:11:03:c4:5b:38:1b:f7:d0:39:01:23:39:dd: d7:be:21:a7:10:4e:49:9d:9d:35:22:90:53:a8:04: cf:78:e7:89:a7:76:b5:bf:d9:8e:11:60:78:cb:67: 59:55:00:d9:73:8a:cf:66:2b:e6:bb:c8:ac:7f:64: 97:30:5b:36:0a:bf:56:31:1a:7f:bf:d4:51:6b:4b: 13:b3:3c:fc:4a:95:e4:f2:7b:c2:71:a0:d7:59:d8: 34:8f:90:b0:92:38:7e:ec:8f:98:cd:4b:30:48:01: ea:bd:e9:44:17:3b:48:53:71:81:a4:04:01:61:ff: 31:97:2c:31:28:04:17:05:5a:75:53:85:33:c1:71: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:10:5D:99:68:9C:39:F4:E0:A0:F5:47:F2:EC:BD:2B:DE:CA:2D:BA X509v3 Authority Key Identifier: keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:55:56:9c:44:11:f1:cd:a5:bc:c5:0d:71:9f:ad:a8:b5:e1: 4f:6d:1f:73:d4:99:af:f5:6c:a9:1b:8a:03:b7:d4:70:57:ce: 49:a5:a4:0a:30:a5:6a:7c:3c:9a:d7:0c:6b:c3:35:ab:38:a1: 65:69:bf:2f:41:b1:ab:2a:d0:cd:be:20:cb:81:57:b6:92:a2: 0a:14:bb:17:3a:f8:c0:af:e1:86:ca:c6:02:88:17:25:98:58: 16:9b:45:3a:b9:fb:ba:59:ca:e5:52:79:dc:02:0a:b0:44:52: af:32:f8:f5:1c:de:c4:93:31:55:e4:ea:fe:35:1f:b3:6a:ed: 11:3c:e9:bb:5d:49:84:50:59:14:0e:40:fa:3c:76:3c:3e:43: 45:52:56:f6:a5:25:b9:67:ad:0b:69:43:77:23:80:02:a3:e5: c4:cc:90:6b:c2:25:23:21:58:67:4b:e9:b7:2e:c9:1d:3d:9e: d2:e8:39:73:f8:33:be:f1:b3:3f:4d:95:9c:f4:59:6f:a4:e9: 76:1c:c4:cb:9d:54:8e:a9:25:e0:37:0e:a0:72:99:3e:74:8a: 28:74:22:54:bc:19:38:b0:65:ab:77:79:17:7a:2d:e5:69:33: b3:e7:8b:d2:ff:a0:f4:f6:e3:08:a1:ed:e1:38:e9:7a:38:a2: 63:c2:4b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOHPtOtMNAtk7Kr5yYN5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz NThlMjMwHhcNMjUxMjEyMTEwMDQ4WhcNMjUxMjEzMTEwMDQ4WjAzMTEwLwYDVQQD EyhiNzEwNWQ5OTY4OWMzOWY0ZTBhMGY1NDdmMmVjYmQyYmRlY2EyZGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqurg8/VG13Km5EPG935XhsWJ8Slx guGDaipYvh8phawm8ApsRA97gU144vXMwxn+9vJyY3xDfiG+lQatDa7GX635Arep 8ZeMMV5TPetjHvRmTrcKS7xDu/R13RNggihxtETrP6/yKlBzd+uzHdtPGh9563nE /SXFdREDxFs4G/fQOQEjOd3XviGnEE5JnZ01IpBTqATPeOeJp3a1v9mOEWB4y2dZ VQDZc4rPZivmu8isf2SXMFs2Cr9WMRp/v9RRa0sTszz8SpXk8nvCcaDXWdg0j5Cw kjh+7I+YzUswSAHqvelEFztIU3GBpAQBYf8xlywxKAQXBVp1U4UzwXG9pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcQXZlonDn04KD1R/LsvSveyi26MB8GA1UdIwQY MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt NzdjMTA0ODQyMmQ4LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4 LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVVWnEQR 8c2lvMUNcZ+tqLXhT20fc9SZr/VsqRuKA7fUcFfOSaWkCjClanw8mtcMa8M1qzih ZWm/L0GxqyrQzb4gy4FXtpKiChS7Fzr4wK/hhsrGAogXJZhYFptFOrn7ulnK5VJ5 3AIKsERSrzL49RzexJMxVeTq/jUfs2rtETzpu11JhFBZFA5A+jx2PD5DRVJW9qUl uWetC2lDdyOAAqPlxMyQa8IlIyFYZ0vpty7JHT2e0ug5c/gzvvGzP02VnPRZb6Tp dhzEy51Ujqkl4DcOoHKZPnSKKHQiVLwZOLBlq3d5F3ot5Wkzs+eL0v+g9PbjCKHt 4TjpejiiY8JL9A== -----END CERTIFICATE-----Generated at Fri Dec 12 17:05:35 2025 by rpki-client