This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json) Hash identifier: iR+MTbJKPqfdCh7tKtieqPXDu6KJcQClMezveWwGn+g= Subject key identifier: BC:37:0C:FE:8F:72:C9:A5:90:15:11:8A:09:18:D8:36:9F:15:B9:DB Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea Certificate serial: 019B0F3740DE73FB7E4BEBEBF2C4CE279181 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft Manifest number: 1703 Signing time: Thu 11 Dec 2025 21:00:37 +0000 Manifest this update: Thu 11 Dec 2025 21:00:37 +0000 Manifest next update: Fri 12 Dec 2025 21:00:37 +0000 Files and hashes: 1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=) 2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: WvAtWCC+DNc1f40F9WracI/lKXjwN+W749TbF2wl7+w=) 3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:40:de:73:fb:7e:4b:eb:eb:f2:c4:ce:27:91:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea Validity Not Before: Dec 11 21:00:37 2025 GMT Not After : Dec 12 21:00:37 2025 GMT Subject: CN=bc370cfe8f72c9a59015118a0918d8369f15b9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:0e:ef:5a:9e:d2:b6:88:c3:87:d5:32:5e: a5:88:59:3b:36:ad:2e:73:83:35:d3:22:c7:d1:d1: cc:92:d5:fb:db:ab:d2:85:08:6e:4e:f8:d9:85:86: d0:66:5a:8d:31:d5:74:77:47:ae:38:ea:d2:48:dc: 17:cf:00:99:93:b3:bb:c5:17:f4:22:5e:c0:70:49: 08:27:ca:aa:2f:77:42:5b:00:ac:49:76:36:b0:0c: 71:cd:dd:84:21:0f:3a:65:dc:59:fb:c5:1c:7e:5e: d1:ca:ef:83:34:8d:bf:86:db:55:ae:d6:97:aa:69: c1:42:ec:c4:6a:73:0c:a0:da:01:fb:42:f8:05:05: 21:50:67:c4:df:42:97:e1:3c:dc:44:9d:26:5e:ff: d3:14:3f:93:ab:32:4c:ab:9b:a0:bd:80:99:55:4d: d3:ec:f2:8a:91:48:2d:b9:c0:49:f6:b5:75:76:4d: f7:6e:e0:64:15:2f:94:70:08:1c:83:cf:24:f0:3d: 7c:83:3d:37:bf:0b:c8:ed:f9:23:17:63:b2:60:84: 47:11:b4:c5:8c:df:63:66:f6:a2:63:9b:b2:2f:e3: 02:7c:ee:be:b3:96:59:71:6c:ba:78:bb:15:5c:05: 0e:d9:7c:3a:05:80:5c:ad:c9:de:86:d4:0f:9c:f2: a0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:37:0C:FE:8F:72:C9:A5:90:15:11:8A:09:18:D8:36:9F:15:B9:DB X509v3 Authority Key Identifier: keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:66:90:60:fe:8e:ad:d6:70:bd:48:56:3a:bc:26:41:71:1b: a8:3d:4c:e9:1c:53:56:04:90:d3:9c:87:45:04:a1:9e:36:da: 34:d6:90:7f:85:68:66:9d:b7:33:db:9b:ce:56:f2:aa:39:68: 20:91:35:20:b5:f8:5a:4d:b2:24:c0:fa:81:ec:ab:c7:13:f7: 5e:f3:15:94:d2:fc:04:2a:06:36:a2:02:e7:81:9a:00:be:ef: 3a:b7:d3:ea:5c:0a:ff:3c:e5:eb:5e:ab:97:af:42:f5:f6:71: fc:61:6f:f5:5f:f3:cb:03:e0:91:7e:75:7b:23:19:2b:77:19: 53:12:36:24:32:ca:51:ab:ce:7b:a5:0f:9f:7d:c1:b2:16:e2: 39:67:9c:0e:20:18:60:c9:ed:2b:7c:55:a5:f8:75:83:32:0f: c8:ed:f2:56:96:de:80:10:e3:31:79:8c:1b:20:8e:5e:22:b2: f0:87:7f:74:de:b9:c6:f6:db:ba:3d:0d:94:2f:1b:e6:d8:f2: b8:c8:19:06:19:4a:e3:6a:8a:1e:7e:7e:f0:08:1e:28:85:a9: f2:d2:d8:de:6e:6c:4f:f9:e6:ec:81:74:6c:ac:3c:e6:95:dc: 53:ab:69:92:8c:24:f9:cf:f6:d7:2a:6c:18:8e:69:a4:08:af: 5d:b0:34:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN0Dec/t+S+vr8sTOJ5GBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YzdmOGU5MWI4MWZlNjQ4NzMwN2M1MjI2ZWIwNDRmOTIz OTZjZWEwHhcNMjUxMjExMjEwMDM3WhcNMjUxMjEyMjEwMDM3WjAzMTEwLwYDVQQD EyhiYzM3MGNmZThmNzJjOWE1OTAxNTExOGEwOTE4ZDgzNjlmMTViOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNwO71qe0raIw4fVMl6liFk7Nq0u c4M10yLH0dHMktX726vShQhuTvjZhYbQZlqNMdV0d0euOOrSSNwXzwCZk7O7xRf0 Il7AcEkIJ8qqL3dCWwCsSXY2sAxxzd2EIQ86ZdxZ+8Ucfl7Ryu+DNI2/httVrtaX qmnBQuzEanMMoNoB+0L4BQUhUGfE30KX4TzcRJ0mXv/TFD+TqzJMq5ugvYCZVU3T 7PKKkUgtucBJ9rV1dk33buBkFS+UcAgcg88k8D18gz03vwvI7fkjF2OyYIRHEbTF jN9jZvaiY5uyL+MCfO6+s5ZZcWy6eLsVXAUO2Xw6BYBcrcnehtQPnPKgWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLw3DP6PcsmlkBURigkY2DafFbnbMB8GA1UdIwQY MBaAFHTH+Okbgf5khzB8UibrBE+SOWzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEt OGI2NGY3YzNhNzZlLzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEtOGI2NGY3YzNhNzZl LzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2aQYP6O rdZwvUhWOrwmQXEbqD1M6RxTVgSQ05yHRQShnjbaNNaQf4VoZp23M9ubzlbyqjlo IJE1ILX4Wk2yJMD6geyrxxP3XvMVlNL8BCoGNqIC54GaAL7vOrfT6lwK/zzl616r l69C9fZx/GFv9V/zywPgkX51eyMZK3cZUxI2JDLKUavOe6UPn33BshbiOWecDiAY YMntK3xVpfh1gzIPyO3yVpbegBDjMXmMGyCOXiKy8Id/dN65xvbbuj0NlC8b5tjy uMgZBhlK42qKHn5+8AgeKIWp8tLY3m5sT/nm7IF0bKw85pXcU6tpkowk+c/21yps GI5ppAivXbA02Q== -----END CERTIFICATE-----Generated at Fri Dec 12 04:00:02 2025 by rpki-client