This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: Y/nAUNAlggiJV+B+U50WoflVywJoWz/FvFrbRMBy1xs= Subject key identifier: C9:9A:4E:11:B8:6F:73:EE:E4:63:5F:6D:90:70:A0:3B:2E:76:F3:BE Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B432556130AC3A249177F3BBB9D020206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 17E9 Signing time: Sun 21 Dec 2025 23:01:18 +0000 Manifest this update: Sun 21 Dec 2025 23:01:18 +0000 Manifest next update: Mon 22 Dec 2025 23:01:18 +0000 Files and hashes: 1: 0HACyBUxgNOKSEcXcfPHI7LfmIg.roa (hash: wqTJepcUODfu+UsDaT3UCXuLJcUfFBmEBfdq4N3Rg18=) 2: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (hash: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=) 3: 4YpVbO9HFvvq74shOPQXNaG5KS0.roa (hash: bVpCtuoPNa1SZMwszxLRHo7H9I6mu3GeU6NgJiv+OkM=) 4: 8YFjhJllAvnuj7iLErGij7HrSXA.roa (hash: Jhl/M/KE8hoNx5Qk80x4cpNTjAEwV+xL9n1btN845EY=) 5: CkYxOCFcXglZibNQBz57XM7xS7k.roa (hash: tPE6/6y5+L8gtSA/0lIV1hRfNlGi7fzBLSET7NYUXhQ=) 6: Jx7Zy-NW88qIjubdbnfsP6WvkeM.roa (hash: GC9kGCOxPDmQCJoGza3DVhBvvCLswzv831ifgYwZVo8=) 7: L2ou3KYC7aOW9h4MkxvmRdF9-XM.roa (hash: HdnRHq9xsHsffUN6vf8PfjK/qp0rtSAt5eAQOAgASLA=) 8: Qx6qMFrufEPZv8mWu9XgjLsLMB8.roa (hash: P/r3/JxO1CdcEUxJoGOxAQuq95icEB2m2qPK3qHqs10=) 9: WoZoEuE3OARNKqVJ9taXo2-Zt8M.roa (hash: Sn/ecsmLImTPn1yvBagjjq/XB8omW7tpmekWgI2yuFs=) 10: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (hash: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: m3mkxICSSfgdh7qgo8E1iR0ltvhfACvgUPQZLDYOSqw=) 12: bboBBp1tKqS0RC4vsgwoBCmEwqY.roa (hash: 74uXCligXDCEvZU13I/aaPCJJzSMTM22JuT1PuhmBlQ=) 13: cTcEU6BZVDHzKsGmYrYFuehVnmw.roa (hash: Wt8W9AEoHsxpxFYj5Y9GGKvIgV+LkMQs3tuB0PH0H4Q=) 14: kJYpVxtVyfv4dwbVg4WNh0NM0_w.roa (hash: wZE3vmAhLe9i25qjRpSrq5TNgZ7FBQQ+/m7aI5d1gmY=) 15: lSE1obQ59T94JWyP17qNbBJ8Mi4.roa (hash: //1SxIcij8D7RTJOSo9c6uRC0w9XN7/ELpwWy3gm8m8=) 16: xCt-3I4HSr25MhC8BMd2thevgVU.roa (hash: sZUNm0dz+rTstayb8zMPvmRuDI0MPNSTCMqD12A4Oww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:56:13:0a:c3:a2:49:17:7f:3b:bb:9d:02:02:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Dec 21 23:01:18 2025 GMT Not After : Dec 22 23:01:18 2025 GMT Subject: CN=c99a4e11b86f73eee4635f6d9070a03b2e76f3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:9f:9a:00:5d:a1:12:e8:4a:7c:42:1a:f9: 7d:2b:15:c0:21:d5:d5:f8:ef:dc:06:1e:db:61:e9: 14:f9:1f:ac:6f:dd:05:7f:f7:e7:d5:39:9f:90:73: 54:e3:5e:22:be:1e:7d:24:db:7a:01:07:8c:36:23: 13:ba:cf:90:fc:dc:8f:ad:c0:aa:40:4a:4b:e7:5a: 18:2b:9f:1c:8b:81:3f:b2:29:66:86:d3:48:61:a3: a0:18:c9:5b:be:24:79:e0:f0:b9:91:4b:3f:a1:b9: 76:7d:8b:6f:cd:95:a8:3e:b1:d8:0a:e2:8e:1d:2c: 75:09:b5:92:5f:33:af:03:23:0e:ed:19:14:ad:de: ab:ed:b6:1d:73:6e:b0:9c:87:a2:5d:8d:7f:03:71: 09:e6:75:c5:79:b5:2e:a3:53:b3:a0:10:cb:e1:0c: 00:0c:e0:a3:f7:51:89:0d:bb:99:6a:ac:72:03:9d: 9f:c3:2d:5f:14:cc:3f:44:7e:dc:6f:2a:4b:65:8d: 34:65:d3:3a:17:fb:24:e1:fa:9a:f9:0c:ea:a6:4f: f2:17:c0:e4:1c:8d:ae:8d:5a:1a:29:65:17:3d:ad: 69:37:4f:47:fa:45:83:bd:14:8e:cd:f8:d6:e6:36: 7c:5c:bd:f1:a7:3d:b6:dc:0e:c3:b5:6f:b7:a2:7f: f1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9A:4E:11:B8:6F:73:EE:E4:63:5F:6D:90:70:A0:3B:2E:76:F3:BE X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:c2:97:76:1c:94:16:39:41:49:64:b0:4b:0a:17:4d:6c:2b: a6:01:91:d2:d3:fd:0d:6a:2c:cb:a9:ae:d5:a8:ff:72:f1:01: 04:8f:4a:ae:89:bd:27:f2:60:b1:68:62:cd:ee:81:65:c6:fb: 28:68:4d:47:9b:f9:a1:91:35:f5:98:26:26:93:4e:f2:3a:cf: 87:5c:db:24:74:80:f1:1f:23:ef:75:e5:c3:37:cb:bf:0d:05: cb:5f:f9:97:fe:1a:94:6e:34:0a:02:4c:8a:10:b2:c2:11:39: 9f:8d:eb:a5:f5:07:b0:79:84:23:c4:b3:3e:98:2e:81:34:51: 08:24:c6:2c:1a:ad:d2:24:d8:df:40:31:f8:53:a1:8e:29:c8: af:16:f4:35:72:28:e9:dc:24:aa:18:73:ef:c6:8f:e1:c8:b8: f6:1e:56:20:b2:d7:bf:14:c1:04:3e:5c:6c:41:8a:40:7e:49: 99:0c:55:fa:0c:9e:51:18:ac:c9:b5:4d:21:f9:fd:5b:10:f5: d7:57:50:bd:a0:28:01:08:05:28:75:70:e8:32:71:93:12:8b: 0a:4c:28:5e:55:f6:f5:d7:f5:9c:2a:82:38:66:9e:41:07:5b: c9:73:da:a0:7d:d5:05:7c:93:aa:eb:03:9b:e4:2b:97:78:ec: d1:47:5c:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJVYTCsOiSRd/O7udAgIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjUxMjIxMjMwMTE4WhcNMjUxMjIyMjMwMTE4WjAzMTEwLwYDVQQD EyhjOTlhNGUxMWI4NmY3M2VlZTQ2MzVmNmQ5MDcwYTAzYjJlNzZmM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQifmgBdoRLoSnxCGvl9KxXAIdXV +O/cBh7bYekU+R+sb90Ff/fn1TmfkHNU414ivh59JNt6AQeMNiMTus+Q/NyPrcCq QEpL51oYK58ci4E/silmhtNIYaOgGMlbviR54PC5kUs/obl2fYtvzZWoPrHYCuKO HSx1CbWSXzOvAyMO7RkUrd6r7bYdc26wnIeiXY1/A3EJ5nXFebUuo1OzoBDL4QwA DOCj91GJDbuZaqxyA52fwy1fFMw/RH7cbypLZY00ZdM6F/sk4fqa+Qzqpk/yF8Dk HI2ujVoaKWUXPa1pN09H+kWDvRSOzfjW5jZ8XL3xpz223A7DtW+3on/xcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMmaThG4b3Pu5GNfbZBwoDsudvO+MB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA68KXdhyU FjlBSWSwSwoXTWwrpgGR0tP9DWosy6mu1aj/cvEBBI9Krom9J/JgsWhize6BZcb7 KGhNR5v5oZE19ZgmJpNO8jrPh1zbJHSA8R8j73XlwzfLvw0Fy1/5l/4alG40CgJM ihCywhE5n43rpfUHsHmEI8SzPpgugTRRCCTGLBqt0iTY30Ax+FOhjinIrxb0NXIo 6dwkqhhz78aP4ci49h5WILLXvxTBBD5cbEGKQH5JmQxV+gyeURisybVNIfn9WxD1 11dQvaAoAQgFKHVw6DJxkxKLCkwoXlX29df1nCqCOGaeQQdbyXPaoH3VBXyTqusD m+Qrl3js0Udcbw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:54:37 2025 by rpki-client