This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json) Hash identifier: ItAwtOEs1Q1eJLgRUWWvH2Fs/wuTFNPgXtXpe5Xjunc= Subject key identifier: E5:91:E0:8A:2E:1E:09:34:5A:A4:36:EE:28:24:44:A8:C9:EB:D6:D4 Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Certificate serial: 019B1B052409CD202F41F0DF5B36F3EA022A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft Manifest number: 148D Signing time: Sun 14 Dec 2025 04:01:20 +0000 Manifest this update: Sun 14 Dec 2025 04:01:20 +0000 Manifest next update: Mon 15 Dec 2025 04:01:20 +0000 Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: VyXozE0U44RlZj4qjki2kjfFTNP/D4JGrcLiQpKm2Tk=) 2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=) 3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=) 4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:24:09:cd:20:2f:41:f0:df:5b:36:f3:ea:02:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa Validity Not Before: Dec 14 04:01:20 2025 GMT Not After : Dec 15 04:01:20 2025 GMT Subject: CN=e591e08a2e1e09345aa436ee282444a8c9ebd6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6b:68:4b:d2:50:b9:c7:5c:99:9d:df:9b:16: ca:cf:c9:a0:2d:1f:f7:41:5e:14:62:93:b9:c3:cc: 01:e0:fd:dd:2f:ee:68:91:03:ef:1e:90:1f:53:e7: 74:26:ee:28:cc:7b:2d:2e:28:33:bd:1c:2d:af:65: 88:71:f3:6d:8b:36:5b:d7:08:fc:6d:8c:6c:b4:e4: e0:02:ec:89:f4:90:23:9f:5b:05:fb:61:af:f0:8f: f4:5b:f6:b2:36:bd:0a:0e:48:c1:67:34:79:75:b2: dc:2f:ec:44:a3:aa:2f:a1:49:73:29:a1:ba:c1:40: 0c:27:36:df:8d:92:aa:c5:c5:75:1c:11:65:d2:d0: 61:fb:ac:eb:0f:64:95:1e:21:83:b4:af:0e:40:d3: e0:00:a4:ac:70:99:13:54:d1:6d:13:ef:00:b0:b9: 23:56:b2:76:d1:89:cf:e2:93:a4:2f:73:63:dc:11: eb:08:48:64:6b:ca:78:34:ce:7f:a4:28:42:80:54: 81:fd:2a:38:0f:38:f2:20:18:d8:e1:b4:18:4e:65: 67:8f:c5:b0:8c:0a:bd:06:e3:e5:07:7a:cf:05:58: b7:e6:cc:ed:0e:3b:0a:9f:d8:a7:60:59:ee:53:80: 03:fb:32:9c:fe:31:f9:fd:65:12:66:5a:2d:a2:9b: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:E0:8A:2E:1E:09:34:5A:A4:36:EE:28:24:44:A8:C9:EB:D6:D4 X509v3 Authority Key Identifier: keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ae:3f:36:76:0f:ea:f2:e0:d6:5e:a8:6f:69:70:53:c7:91: 53:8b:2c:11:0b:6b:2b:2d:38:29:69:b9:3e:3f:9d:66:40:ae: ee:ac:24:b2:86:d8:38:dc:92:bf:9d:c4:d7:cf:5d:5e:37:c7: a1:b3:99:97:ba:99:85:18:ca:7b:7d:af:2b:c6:01:61:51:a9: 6b:19:58:c5:a5:dd:b4:1f:cf:25:64:7e:2c:63:b6:1f:4f:5a: df:4e:a3:6b:76:97:8b:3e:75:db:96:af:13:d5:fa:19:88:2a: 52:da:47:12:d2:9f:18:f5:54:f5:03:e6:8a:2a:27:7e:5b:e0: ad:cb:81:c6:07:0a:2b:2c:a6:77:4e:e7:49:97:cb:9d:23:16: 75:98:a7:4f:02:a5:04:0e:e5:90:36:8f:05:2a:8e:82:ff:81: 70:c3:9d:48:38:5e:ea:7e:85:23:99:7e:55:ad:cb:3e:23:f8: 6c:4e:16:d3:2a:16:18:88:11:80:eb:3b:c6:70:09:ed:59:cb: 21:d8:31:b2:00:2a:13:d2:f6:b5:0c:81:6c:05:55:d8:4a:77: b7:95:e7:a3:16:5c:29:09:71:8c:f2:d1:aa:55:aa:1c:a7:ca: 3e:59:fd:d6:7f:87:cd:fe:0c:0d:35:21:2d:90:d8:59:55:83: 66:7c:e6:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBSQJzSAvQfDfWzbz6gIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDc3YWJmMGEyN2VkZTg4NmZiYzQyNDEzZDdhODljMjI2 YjExZmEwHhcNMjUxMjE0MDQwMTIwWhcNMjUxMjE1MDQwMTIwWjAzMTEwLwYDVQQD EyhlNTkxZTA4YTJlMWUwOTM0NWFhNDM2ZWUyODI0NDRhOGM5ZWJkNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WtoS9JQucdcmZ3fmxbKz8mgLR/3 QV4UYpO5w8wB4P3dL+5okQPvHpAfU+d0Ju4ozHstLigzvRwtr2WIcfNtizZb1wj8 bYxstOTgAuyJ9JAjn1sF+2Gv8I/0W/ayNr0KDkjBZzR5dbLcL+xEo6ovoUlzKaG6 wUAMJzbfjZKqxcV1HBFl0tBh+6zrD2SVHiGDtK8OQNPgAKSscJkTVNFtE+8AsLkj VrJ20YnP4pOkL3Nj3BHrCEhka8p4NM5/pChCgFSB/So4DzjyIBjY4bQYTmVnj8Ww jAq9BuPlB3rPBVi35sztDjsKn9inYFnuU4AD+zKc/jH5/WUSZlotopt8LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWR4IouHgk0WqQ27igkRKjJ69bUMB8GA1UdIwQY MBaAFAxHer8KJ+3ohvvEJBPXqJwiaxH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTct MThmNGY2NmE1MGEwLzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTctMThmNGY2NmE1MGEw LzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABK4/NnYP 6vLg1l6ob2lwU8eRU4ssEQtrKy04KWm5Pj+dZkCu7qwksobYONySv53E189dXjfH obOZl7qZhRjKe32vK8YBYVGpaxlYxaXdtB/PJWR+LGO2H09a306ja3aXiz5125av E9X6GYgqUtpHEtKfGPVU9QPmiionflvgrcuBxgcKKyymd07nSZfLnSMWdZinTwKl BA7lkDaPBSqOgv+BcMOdSDhe6n6FI5l+Va3LPiP4bE4W0yoWGIgRgOs7xnAJ7VnL IdgxsgAqE9L2tQyBbAVV2Ep3t5XnoxZcKQlxjPLRqlWqHKfKPln91n+Hzf4MDTUh LZDYWVWDZnzmaA== -----END CERTIFICATE-----Generated at Sun Dec 14 05:28:41 2025 by rpki-client