This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json) Hash identifier: FBnUfnYs0rU0qMsTNS5syJqTyeuHp/km578qmoZNZ9w= Subject key identifier: C7:8D:71:C0:2D:FF:A0:EE:80:B8:3F:47:F1:50:67:C4:D7:09:4B:90 Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97 Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797 Certificate serial: 019AF12E79FCE9A34306E71ABF2BC543AAD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: 7VETLWTFEYIg8W5txoJNR9zXxC+rMXZJheGTTYoMEUs=) 2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:79:fc:e9:a3:43:06:e7:1a:bf:2b:c5:43:aa:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=c78d71c02dffa0ee80b83f47f15067c4d7094b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:8b:a2:21:e4:80:22:ee:f4:13:93:cd:7d: 09:df:69:92:e2:08:fe:10:bc:08:37:d4:69:30:04: a0:64:e6:a9:85:bf:f5:bf:43:6b:00:e7:e6:2e:12: 77:6d:31:cc:79:f4:73:cc:35:bf:47:dd:2c:60:32: bd:9e:95:bd:78:06:67:63:d4:6b:0b:2a:6d:57:bd: 6c:fd:b2:9a:1b:2b:28:2c:fb:65:63:1a:07:d7:07: 01:eb:2b:3b:dc:c2:5e:cd:53:ca:b4:1d:a0:8e:c5: 48:de:76:c9:0a:a0:1e:1d:bc:88:a9:c0:95:d0:31: 52:28:28:7c:c7:6c:b7:89:04:ac:3d:9a:cd:94:b6: 60:6b:80:9a:64:dc:c8:4a:06:8e:d7:75:49:f7:4d: e2:1c:b7:d8:6b:f4:17:3d:9f:fe:46:ff:b5:0a:48: c9:b2:ca:23:ed:93:39:0e:22:48:c2:af:9a:54:a9: 9f:8a:9b:ab:09:21:fd:f3:d1:1d:76:b5:42:92:29: 53:c5:49:05:0b:47:55:9f:91:e1:e4:ad:d9:58:19: 68:ca:6a:e8:59:60:4d:b2:78:03:e4:21:c1:e9:52: 30:23:e2:52:40:ce:98:02:11:dd:0d:e4:a0:68:29: 68:00:c9:11:d4:79:d4:de:23:e6:a7:b6:d5:bc:20: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8D:71:C0:2D:FF:A0:EE:80:B8:3F:47:F1:50:67:C4:D7:09:4B:90 X509v3 Authority Key Identifier: keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e4:ed:dc:9e:03:a4:ce:a1:a5:bf:c9:26:ec:a6:f0:52:9a: ed:f6:0a:71:9b:87:b2:25:93:4b:2a:fa:7e:04:de:e7:c3:cf: 93:ff:be:ba:51:e0:be:9e:9f:37:7d:be:01:62:ab:4a:08:83: 96:6d:15:20:8d:d5:f7:f0:c0:a0:a1:1f:31:ab:8f:84:36:9b: 3b:80:4a:10:b3:17:a9:0e:91:07:5c:e9:0f:54:f7:ba:c6:bf: 32:42:12:d8:43:5b:9f:e9:b4:af:35:95:92:c5:a4:75:e5:6d: 13:99:f4:5b:d8:7c:27:fc:25:40:00:40:7d:b4:09:08:e7:b3: cc:00:14:64:e1:e1:bb:89:7b:0f:9d:95:71:79:d0:a0:ca:79: 93:0f:c4:6e:4b:11:46:29:80:ed:19:88:c8:7e:83:fb:84:f7: 5a:14:5c:e1:90:25:34:06:5a:7b:ce:0a:3a:3b:e1:d0:49:20: 92:4a:29:67:f8:cb:83:13:cb:3f:c2:84:06:02:37:d3:83:0e: 9a:3c:77:c8:7d:f7:46:4c:cc:1c:db:f5:b3:c2:e1:41:b0:78: 88:2b:0f:bd:ea:b6:56:1d:1e:6f:8e:b5:54:62:c3:77:d7:7c: d3:5e:1c:10:fa:e4:7c:ce:19:17:b9:ff:07:1c:0d:1d:e7:bb: 05:bd:6e:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnn86aNDBucavyvFQ6rWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MjdmMjFkNDA2MjFlNTgxM2U0YTA2OTIxMTk0N2UyNGQw MGU3OTcwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EyhjNzhkNzFjMDJkZmZhMGVlODBiODNmNDdmMTUwNjdjNGQ3MDk0YjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtauLoiHkgCLu9BOTzX0J32mS4gj+ ELwIN9RpMASgZOaphb/1v0NrAOfmLhJ3bTHMefRzzDW/R90sYDK9npW9eAZnY9Rr CyptV71s/bKaGysoLPtlYxoH1wcB6ys73MJezVPKtB2gjsVI3nbJCqAeHbyIqcCV 0DFSKCh8x2y3iQSsPZrNlLZga4CaZNzISgaO13VJ903iHLfYa/QXPZ/+Rv+1CkjJ ssoj7ZM5DiJIwq+aVKmfipurCSH989EddrVCkilTxUkFC0dVn5Hh5K3ZWBloymro WWBNsngD5CHB6VIwI+JSQM6YAhHdDeSgaCloAMkR1HnU3iPmp7bVvCBHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeNccAt/6DugLg/R/FQZ8TXCUuQMB8GA1UdIwQY MBaAFEUn8h1AYh5YE+SgaSEZR+JNAOeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYt ZjA4NmU2Zjk2Y2JiLzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYtZjA4NmU2Zjk2Y2Ji LzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeTt3J4D pM6hpb/JJuym8FKa7fYKcZuHsiWTSyr6fgTe58PPk/++ulHgvp6fN32+AWKrSgiD lm0VII3V9/DAoKEfMauPhDabO4BKELMXqQ6RB1zpD1T3usa/MkIS2ENbn+m0rzWV ksWkdeVtE5n0W9h8J/wlQABAfbQJCOezzAAUZOHhu4l7D52VcXnQoMp5kw/EbksR RimA7RmIyH6D+4T3WhRc4ZAlNAZae84KOjvh0EkgkkopZ/jLgxPLP8KEBgI304MO mjx3yH33RkzMHNv1s8LhQbB4iCsPveq2Vh0eb461VGLDd9d8014cEPrkfM4ZF7n/ BxwNHee7Bb1uOw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:32 2025 by rpki-client