This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft File: Ra868WfDt1lCmCfQ8LeGDN8czqY.mft (raw, json) Hash identifier: pEpnEDprlETo/0HN9GGXBkeCefgDomoKN7R4L1Koidk= Subject key identifier: B3:B5:73:48:77:59:5D:F9:8F:88:EC:BF:46:63:70:45:E8:18:B6:D6 Authority key identifier: 45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6 Certificate issuer: /CN=45af3af167c3b759429827d0f0b7860cdf1ccea6 Certificate serial: 019B5A1ABAF8795FC5EA8D8843AC9E4FFF2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft Manifest number: 0E Signing time: Fri 26 Dec 2025 10:00:59 +0000 Manifest this update: Fri 26 Dec 2025 10:00:59 +0000 Manifest next update: Sat 27 Dec 2025 10:00:59 +0000 Files and hashes: 1: 2-cPca3BQbteLewWctZgGhiU1wY.roa (hash: lZf+VCaw3A3O31xvuWWNxHL6ORv1qapam84PvDjDlBM=) 2: Ra868WfDt1lCmCfQ8LeGDN8czqY.crl (hash: fQae9ISuqEIj6/LY5SXttEoig2pr2FzSD+EpSY3Fo9E=) 3: VCWBfoKrWWkzFJ_z0Uqkl5tqGCE.asa (hash: QJPQvnGP6JgqgsggAhK1tFaR42Tpp8Mfq5dK7EmGgjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:ba:f8:79:5f:c5:ea:8d:88:43:ac:9e:4f:ff:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45af3af167c3b759429827d0f0b7860cdf1ccea6 Validity Not Before: Dec 26 10:00:59 2025 GMT Not After : Dec 27 10:00:59 2025 GMT Subject: CN=b3b5734877595df98f88ecbf46637045e818b6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c8:70:2b:88:35:44:87:90:71:cf:1c:90:de: 64:d7:e6:73:75:25:ad:49:5f:a3:74:a9:16:4d:11: 67:c1:98:91:7f:df:13:26:c5:6a:94:6d:ef:52:bf: 06:11:75:eb:1f:ec:58:45:84:6f:94:25:83:92:c5: 27:5e:b1:3b:43:e2:41:0f:8f:c0:9a:9c:e5:52:5e: 05:b9:50:4d:8f:61:e3:7a:f7:a3:d6:22:f5:6d:61: 40:f7:b6:73:85:a6:b5:12:4b:c9:b9:c9:7e:62:f9: 73:45:c9:47:d6:82:8f:bf:23:82:13:00:82:f2:58: d4:40:b2:83:d1:a4:e7:72:33:1c:dc:0a:8f:f2:28: 46:d1:65:6a:f3:70:79:da:94:cb:1f:4e:20:eb:3b: a9:0e:89:6c:94:ab:b0:c6:6d:bb:e5:5d:24:83:bd: b1:0a:d6:b8:f6:ae:89:4d:f0:79:c3:f1:db:69:8b: 63:ac:97:f6:45:46:6d:7c:b3:ba:4f:4f:f5:c5:60: b2:92:1d:76:a5:61:b2:c7:e8:e8:15:8c:c2:1a:58: ee:e1:83:a3:bc:72:dc:0b:b6:aa:d2:15:2b:aa:24: c4:0a:95:30:e0:bb:0e:72:b1:30:48:56:e7:b7:10: 23:f4:c5:31:d7:6f:b1:57:1c:fb:e0:6c:45:40:c1: 32:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B5:73:48:77:59:5D:F9:8F:88:EC:BF:46:63:70:45:E8:18:B6:D6 X509v3 Authority Key Identifier: keyid:45:AF:3A:F1:67:C3:B7:59:42:98:27:D0:F0:B7:86:0C:DF:1C:CE:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra868WfDt1lCmCfQ8LeGDN8czqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/240c2a-1ebb-4844-8414-6697e40b0903/1/Ra868WfDt1lCmCfQ8LeGDN8czqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5c:b8:41:d9:b1:c6:63:6a:50:f1:34:ec:d1:4b:7d:07:95: 0a:ce:10:9d:c2:22:cd:e3:6d:36:41:52:32:98:e9:c0:37:13: e0:87:fb:4a:75:fd:8d:58:32:75:77:e5:1e:53:99:43:cc:56: 41:e9:58:dc:ee:e3:b8:88:93:65:92:3f:aa:38:25:a0:39:50: df:84:33:d1:1a:b2:d9:9a:e3:11:0a:5b:ef:75:5a:5b:d3:97: 9e:e4:9e:e0:d2:46:ab:3d:ca:3b:ee:55:28:c8:34:5b:89:95: 62:ed:00:fb:de:56:e2:94:4e:14:67:cf:ea:f0:e8:38:bb:d7: a3:a6:35:e7:f7:b6:6d:22:0f:64:74:bc:88:14:28:4c:4c:a7: 3c:cd:d7:c3:2b:60:2a:55:a2:93:fc:10:2e:0a:b9:19:70:9d: 51:13:82:94:8f:95:67:2b:5b:9e:79:a5:0e:81:eb:e6:0c:b4: a9:c7:b6:35:00:1a:1f:02:cc:e4:7b:eb:ea:2d:0b:e4:7d:95: 87:2c:c4:74:81:55:c8:bf:c4:ec:fb:c4:a4:69:80:0a:27:a9: 48:37:3f:bb:57:86:43:c4:7c:01:e8:29:0b:81:aa:90:a5:7d: 59:d4:93:af:4a:89:12:9e:ef:5f:06:6d:30:f8:38:ab:9d:a0: cd:3e:5b:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGrr4eV/F6o2IQ6yeT/8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWYzYWYxNjdjM2I3NTk0Mjk4MjdkMGYwYjc4NjBjZGYx Y2NlYTYwHhcNMjUxMjI2MTAwMDU5WhcNMjUxMjI3MTAwMDU5WjAzMTEwLwYDVQQD EyhiM2I1NzM0ODc3NTk1ZGY5OGY4OGVjYmY0NjYzNzA0NWU4MThiNmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18hwK4g1RIeQcc8ckN5k1+ZzdSWt SV+jdKkWTRFnwZiRf98TJsVqlG3vUr8GEXXrH+xYRYRvlCWDksUnXrE7Q+JBD4/A mpzlUl4FuVBNj2Hjevej1iL1bWFA97Zzhaa1EkvJucl+YvlzRclH1oKPvyOCEwCC 8ljUQLKD0aTncjMc3AqP8ihG0WVq83B52pTLH04g6zupDolslKuwxm275V0kg72x Cta49q6JTfB5w/HbaYtjrJf2RUZtfLO6T0/1xWCykh12pWGyx+joFYzCGlju4YOj vHLcC7aq0hUrqiTECpUw4LsOcrEwSFbntxAj9MUx12+xVxz74GxFQMEyyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLO1c0h3WV35j4jsv0ZjcEXoGLbWMB8GA1UdIwQY MBaAFEWvOvFnw7dZQpgn0PC3hgzfHM6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yNDBjMmEtMWViYi00ODQ0LTg0MTQt NjY5N2U0MGIwOTAzLzEvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yNDBjMmEtMWViYi00ODQ0LTg0MTQtNjY5N2U0MGIwOTAz LzEvUmE4NjhXZkR0MWxDbUNmUThMZUdETjhjenFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVy4Qdmx xmNqUPE07NFLfQeVCs4QncIizeNtNkFSMpjpwDcT4If7SnX9jVgydXflHlOZQ8xW QelY3O7juIiTZZI/qjgloDlQ34Qz0Rqy2ZrjEQpb73VaW9OXnuSe4NJGqz3KO+5V KMg0W4mVYu0A+95W4pROFGfP6vDoOLvXo6Y15/e2bSIPZHS8iBQoTEynPM3Xwytg KlWik/wQLgq5GXCdUROClI+VZytbnnmlDoHr5gy0qce2NQAaHwLM5Hvr6i0L5H2V hyzEdIFVyL/E7PvEpGmACiepSDc/u1eGQ8R8AegpC4GqkKV9WdSTr0qJEp7vXwZt MPg4q52gzT5b8w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:12 2025 by rpki-client