This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json) Hash identifier: 9/mC/uOOdAj4UQkETUiXMQ0B+0CenxpQM/eSr1l4G9M= Subject key identifier: 52:71:5E:48:68:EE:E9:09:5B:7D:1C:A4:DD:7C:F7:AA:0C:09:77:4D Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6 Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6 Certificate serial: 019AF5407A2BD43D69FC33D4465624D80B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft Manifest number: 1432 Signing time: Sat 06 Dec 2025 20:00:34 +0000 Manifest this update: Sat 06 Dec 2025 20:00:34 +0000 Manifest next update: Sun 07 Dec 2025 20:00:34 +0000 Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=) 2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: L+GUfRoLpxxSepTbSsTk1KFB6WF0T1ENIqA90CqJc9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:7a:2b:d4:3d:69:fc:33:d4:46:56:24:d8:0b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6 Validity Not Before: Dec 6 20:00:34 2025 GMT Not After : Dec 7 20:00:34 2025 GMT Subject: CN=52715e4868eee9095b7d1ca4dd7cf7aa0c09774d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:2e:f5:c2:8e:b5:d2:6a:b2:8a:13:57:8b: 3a:9f:b8:b0:98:c3:bf:e6:26:79:2f:4a:97:a3:0f: 61:33:bb:ae:a5:ac:59:b1:4b:da:1c:69:46:26:a6: 41:84:22:2c:3c:58:e5:93:58:73:4e:16:43:29:f3: cc:eb:40:40:88:be:19:a5:1f:84:6b:df:6f:19:e1: 16:69:89:e3:29:91:86:60:db:0a:72:ce:ef:1b:05: b0:d6:13:68:cd:8d:b5:74:07:cd:a5:b3:8f:86:cc: b4:f1:5b:bd:57:38:6d:8c:9c:16:70:b5:12:82:48: a5:11:87:94:be:47:52:7f:06:59:a9:98:5b:f5:3c: a7:02:7f:fc:7e:98:2e:85:0b:65:e4:ba:26:52:fd: 09:dd:0e:cb:d0:8e:34:be:3b:e0:f2:3d:a3:a7:d4: 93:2a:97:e4:1b:3a:9a:ad:32:40:c6:9b:e7:cf:bf: 36:df:5a:6d:89:0b:dd:78:cc:42:a4:e7:e5:66:d8: 5b:e6:c8:3c:b9:39:67:b5:53:a3:6c:5e:fb:5b:2f: f3:2a:22:1e:4d:f7:72:b3:fe:88:ae:b7:b4:bc:fa: c7:2d:47:7e:d4:a0:5c:07:fb:8a:eb:e5:20:8c:1e: 19:c9:fc:71:6c:7f:ad:78:01:50:ac:68:b5:b2:0c: 0b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:71:5E:48:68:EE:E9:09:5B:7D:1C:A4:DD:7C:F7:AA:0C:09:77:4D X509v3 Authority Key Identifier: keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:35:1b:ff:22:04:7d:41:70:7c:60:0d:55:97:62:f4:1f:0e: 8a:24:4f:db:7d:6d:c2:08:4c:1b:2a:a6:2e:26:7c:11:31:c5: 1f:c5:ac:ec:18:3d:0b:8d:9d:ba:9f:15:88:4a:c4:33:93:3d: fa:d2:b1:68:f7:39:e2:0a:db:90:18:81:ca:9a:67:9f:aa:6b: 0c:95:33:61:fe:0a:d9:c1:90:f5:e3:0e:17:08:f0:d9:33:ec: d3:a3:66:cf:9b:ab:15:9c:b0:96:ed:aa:66:13:6b:a8:00:f2: a1:a2:7a:b4:ef:c9:e3:b2:25:fd:2e:8a:d5:98:cc:64:84:76: 7b:f3:a0:34:b8:d4:0b:25:5e:fd:b9:18:43:3b:a6:d7:54:0e: d1:e8:ab:a0:54:ce:c9:0f:c1:0c:71:23:ba:27:0b:96:37:1b: 52:d0:ce:e4:34:9b:83:c5:4b:41:bf:ff:32:63:54:a5:74:db: 2b:8b:aa:4e:dd:bf:e7:a3:1a:d3:5c:c1:44:89:c4:fc:4f:16: 95:a3:50:8a:1c:0b:15:5b:f2:47:f4:fe:67:1d:cf:d6:50:3a: 75:2b:3f:bc:e7:eb:f8:e6:8d:30:f8:97:61:41:17:b0:33:61: 42:c9:87:03:80:98:a6:13:39:4f:0c:c2:ba:4a:f3:74:6f:d7: fc:55:a4:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QHor1D1p/DPURlYk2At+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NWVmZDZjNDc3ODA2YmQ2YjQ1MjY3NTU4ZDY4MjhmZWVj NjFlYTYwHhcNMjUxMjA2MjAwMDM0WhcNMjUxMjA3MjAwMDM0WjAzMTEwLwYDVQQD Eyg1MjcxNWU0ODY4ZWVlOTA5NWI3ZDFjYTRkZDdjZjdhYTBjMDk3NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPAu9cKOtdJqsooTV4s6n7iwmMO/ 5iZ5L0qXow9hM7uupaxZsUvaHGlGJqZBhCIsPFjlk1hzThZDKfPM60BAiL4ZpR+E a99vGeEWaYnjKZGGYNsKcs7vGwWw1hNozY21dAfNpbOPhsy08Vu9VzhtjJwWcLUS gkilEYeUvkdSfwZZqZhb9TynAn/8fpguhQtl5LomUv0J3Q7L0I40vjvg8j2jp9ST KpfkGzqarTJAxpvnz78231ptiQvdeMxCpOflZthb5sg8uTlntVOjbF77Wy/zKiIe Tfdys/6Irre0vPrHLUd+1KBcB/uK6+UgjB4ZyfxxbH+teAFQrGi1sgwLeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJxXkho7ukJW30cpN1896oMCXdNMB8GA1UdIwQY MBaAFJRe/WxHeAa9a0UmdVjWgo/uxh6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zMjhmYWItNGViYy00ZTFmLTg0MGUt YmM0MjQzNDlhMTZlLzEvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zMjhmYWItNGViYy00ZTFmLTg0MGUtYmM0MjQzNDlhMTZl LzEvbEY3OWJFZDRCcjFyUlNaMVdOYUNqLTdHSHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzUb/yIE fUFwfGANVZdi9B8OiiRP231twghMGyqmLiZ8ETHFH8Ws7Bg9C42dup8ViErEM5M9 +tKxaPc54grbkBiByppnn6prDJUzYf4K2cGQ9eMOFwjw2TPs06Nmz5urFZywlu2q ZhNrqADyoaJ6tO/J47Il/S6K1ZjMZIR2e/OgNLjUCyVe/bkYQzum11QO0eiroFTO yQ/BDHEjuicLljcbUtDO5DSbg8VLQb//MmNUpXTbK4uqTt2/56Ma01zBRInE/E8W laNQihwLFVvyR/T+Zx3P1lA6dSs/vOfr+OaNMPiXYUEXsDNhQsmHA4CYphM5TwzC ukrzdG/X/FWkWA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:49 2025 by rpki-client