This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft File: 61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json) Hash identifier: enPxDg8nEGsZ3kMsKae5erSMhKoqyeDVA57AkUtjuoE= Subject key identifier: 14:0C:8A:2E:D2:B5:C9:92:F6:90:68:3B:82:C5:72:66:63:F8:EE:15 Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd Certificate serial: 019B3D90DBC38E3288C3549115855BC1DB8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft Manifest number: 1120 Signing time: Sat 20 Dec 2025 21:01:02 +0000 Manifest this update: Sat 20 Dec 2025 21:01:02 +0000 Manifest next update: Sun 21 Dec 2025 21:01:02 +0000 Files and hashes: 1: 3_QRkvTEzwiirbhpb0T3V_2izNc.roa (hash: N+lALA5g7kIFrL03X02AjWc41oSbCZ57MAU8accAf2s=) 2: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: 4Pm0gsqJWDKB2OAT/J1gvYCNUy7POs+7V2TPZ7wP6sk=) 3: avVrdRPNFcMtwTGR2Zab9qIvEIs.roa (hash: B8YMI/WajLnQclAWhZ2JVb5JaRJxPn4UkZ5gdPRrKXc=) 4: mARrkrwsqa1zI7AhCz1jPRrG0vo.roa (hash: C+xoqI6HQRyi4NnP7UQyN6SMsDYwAgRtq1ezQKEfRkk=) 5: rZbO86eytPEeDbetTKr54j6r3Z8.roa (hash: 5exZuL7jEPQWQmctjdNF8XDDonlOlxCAx0iHOR3SFFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:db:c3:8e:32:88:c3:54:91:15:85:5b:c1:db:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd Validity Not Before: Dec 20 21:01:02 2025 GMT Not After : Dec 21 21:01:02 2025 GMT Subject: CN=140c8a2ed2b5c992f690683b82c5726663f8ee15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:90:37:69:78:0a:b2:cc:4b:c6:53:b2:52: 88:5f:e4:25:7f:a0:09:5c:b0:5f:dd:48:d3:ca:24: 41:b3:f9:96:ed:96:be:5c:16:40:f1:c4:73:cd:5e: 8c:ab:46:ef:3c:88:c3:ca:7a:b6:37:0f:bd:d7:80: fd:1d:35:11:44:e8:b4:a0:b3:01:51:cf:4a:c3:89: 7f:e1:61:73:f5:54:a8:4d:b8:b6:52:23:3c:75:d3: 61:7b:e6:93:ff:65:59:b2:b9:ec:ab:2f:90:fa:ed: 73:bb:80:7c:1a:e9:9f:c0:70:35:d7:bd:e1:50:0a: ae:c6:41:27:b7:2a:2b:56:26:41:bc:0b:cf:ce:36: ab:f4:13:7d:ce:1f:48:60:66:56:ba:f4:ee:61:be: fe:05:96:65:a0:c7:2c:38:bd:9d:4e:06:e9:f5:a5: 15:54:86:4d:17:4c:14:0e:76:75:ad:68:fb:f6:cd: ac:25:0f:6a:65:25:b1:4e:15:99:57:cf:3f:e1:e5: 9b:ee:56:09:37:ef:9e:8d:ef:e9:e2:c6:9d:ef:4c: ab:4f:0c:0e:61:24:87:ec:c5:ba:f9:2e:8a:4b:7a: 7a:b0:b8:76:56:91:60:0a:85:c6:f4:46:0e:c1:04: 06:60:fe:54:36:99:76:aa:b0:13:fd:f2:f5:a7:dc: 2e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0C:8A:2E:D2:B5:C9:92:F6:90:68:3B:82:C5:72:66:63:F8:EE:15 X509v3 Authority Key Identifier: keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:84:d5:66:91:4f:78:26:39:34:c9:be:0f:09:33:48:c5:97: cd:0c:f1:5c:6f:c8:0f:72:40:8e:a0:1b:d5:c1:3a:5d:01:df: 64:7c:ab:2a:55:2f:20:13:5c:d2:17:61:38:0d:96:18:28:c2: c5:b4:26:36:27:4a:b6:cc:48:b9:df:04:01:25:e8:5d:66:e1: cf:f5:98:ae:60:78:99:2e:ac:d4:a8:f0:8b:4c:89:2d:62:29: 2c:b6:c5:48:14:f1:1e:e4:61:ac:c9:f2:a3:9e:1a:d2:18:d1: 4c:f1:a2:c1:0e:fb:04:10:d2:d4:8b:88:df:2f:0c:f0:fe:b1: 5f:b1:57:83:03:84:1b:34:61:89:9b:cf:0f:ff:fd:5c:df:e7: 1a:92:42:a6:07:21:b4:c6:17:4f:2a:46:7a:c6:27:50:97:d7: 6c:97:60:a0:a1:70:3a:c4:69:ef:96:40:da:bb:5c:1a:2a:0f: 9f:20:b1:e6:8a:23:ec:b2:02:bf:fc:ca:65:6f:23:92:19:b2: 73:83:8d:c7:36:43:5d:d2:b4:02:f9:b3:94:0c:2e:02:d6:c9: 07:67:50:e6:31:b8:c2:3e:41:28:4a:78:06:76:f7:bd:63:18: 2f:6b:e8:49:75:93:f5:dc:90:0b:98:6e:41:d4:dc:42:65:e0: 02:73:1b:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNvDjjKIw1SRFYVbwduNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl MzIyZGQwHhcNMjUxMjIwMjEwMTAyWhcNMjUxMjIxMjEwMTAyWjAzMTEwLwYDVQQD EygxNDBjOGEyZWQyYjVjOTkyZjY5MDY4M2I4MmM1NzI2NjYzZjhlZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzOQN2l4CrLMS8ZTslKIX+Qlf6AJ XLBf3UjTyiRBs/mW7Za+XBZA8cRzzV6Mq0bvPIjDynq2Nw+914D9HTURROi0oLMB Uc9Kw4l/4WFz9VSoTbi2UiM8ddNhe+aT/2VZsrnsqy+Q+u1zu4B8GumfwHA1173h UAquxkEntyorViZBvAvPzjar9BN9zh9IYGZWuvTuYb7+BZZloMcsOL2dTgbp9aUV VIZNF0wUDnZ1rWj79s2sJQ9qZSWxThWZV88/4eWb7lYJN++eje/p4sad70yrTwwO YSSH7MW6+S6KS3p6sLh2VpFgCoXG9EYOwQQGYP5UNpl2qrAT/fL1p9wuNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQMii7StcmS9pBoO4LFcmZj+O4VMB8GA1UdIwQY MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt NTlmYzczZDYwMzIyLzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoTVZpFP eCY5NMm+DwkzSMWXzQzxXG/ID3JAjqAb1cE6XQHfZHyrKlUvIBNc0hdhOA2WGCjC xbQmNidKtsxIud8EASXoXWbhz/WYrmB4mS6s1Kjwi0yJLWIpLLbFSBTxHuRhrMny o54a0hjRTPGiwQ77BBDS1IuI3y8M8P6xX7FXgwOEGzRhiZvPD//9XN/nGpJCpgch tMYXTypGesYnUJfXbJdgoKFwOsRp75ZA2rtcGioPnyCx5ooj7LICv/zKZW8jkhmy c4ONxzZDXdK0AvmzlAwuAtbJB2dQ5jG4wj5BKEp4Bnb3vWMYL2voSXWT9dyQC5hu QdTcQmXgAnMbvw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:46:11 2025 by rpki-client