This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft File: RGFYx1seMgOyK1g8wYTD9UiLJdY.mft (raw, json) Hash identifier: mAh0zgYCUeucnNUCgfR1IVq8rVpiG2fe392EWraNeCw= Subject key identifier: 9C:4E:ED:B6:91:94:20:13:20:A5:8D:13:A5:D9:7A:8A:97:08:F5:96 Authority key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6 Certificate issuer: /CN=446158c75b1e3203b22b583cc184c3f5488b25d6 Certificate serial: 019AF208A8DC454CC7EA867EF9D095A2417D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft Manifest number: 152E Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: RGFYx1seMgOyK1g8wYTD9UiLJdY.crl (hash: DScocf0o2Qk/zRhuShgoNVMW/utvA9w9jOzTzVnGukg=) 2: VIvZu8tQokm1xiej3HARVMmJcks.roa (hash: ZzmGdbDE4kWOnJhlJzMP8vBrXKF4L54dsaKlIHnEfEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a8:dc:45:4c:c7:ea:86:7e:f9:d0:95:a2:41:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=446158c75b1e3203b22b583cc184c3f5488b25d6 Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=9c4eedb69194201320a58d13a5d97a8a9708f596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:02:84:a3:94:03:a9:84:5d:c0:c5:6f:c2: 49:61:ef:97:b3:25:49:5e:b7:09:33:d6:d7:be:e0: 3a:3f:f8:54:20:0e:e8:f5:b2:5c:f7:e1:91:73:48: 73:0e:c9:5b:86:a6:a4:a5:23:fc:b0:e7:cc:b6:26: c4:9e:52:f8:44:d5:7f:d3:96:f6:0e:c6:b5:9d:d8: 69:3a:27:87:38:67:09:b8:0a:e3:c6:ac:6c:03:96: ae:73:aa:b1:43:8b:cc:7d:f9:6d:f7:38:9d:f1:1d: 3c:db:79:15:e0:37:6d:d2:24:41:68:fa:84:96:ca: 3d:d5:c5:04:fc:15:43:7d:0c:0c:51:76:df:40:90: 2b:e6:27:86:0f:f0:70:66:20:c5:61:80:d7:82:27: 49:dc:61:c0:38:b6:83:8c:d4:68:35:53:8e:b5:d6: 8f:7a:43:fd:dc:02:83:06:ca:bf:3f:2e:68:dc:0d: 3b:62:9a:1a:08:cc:5c:22:01:cd:2b:af:a5:ea:ba: e3:c1:c4:c2:c5:84:e9:d1:5e:1d:20:c3:72:9d:37: 20:d0:b5:93:af:50:73:10:c7:4a:85:ab:67:80:15: b4:90:8a:be:5a:b1:2c:7b:7b:8c:f6:fd:f1:9f:ba: 29:8f:3b:eb:8b:9d:9f:6a:0e:3a:d2:ac:49:51:e3: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4E:ED:B6:91:94:20:13:20:A5:8D:13:A5:D9:7A:8A:97:08:F5:96 X509v3 Authority Key Identifier: keyid:44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:83:04:c7:a9:01:0a:7c:9c:86:bc:a3:99:97:e4:10:20:b6: e6:b4:0b:ec:76:7d:a8:7b:8f:12:0d:29:64:93:e3:75:fa:28: 97:b9:4e:f3:d0:03:02:b3:2f:7c:6d:3a:33:f3:84:0f:58:d6: 59:b7:8e:b8:92:51:cd:01:fc:22:6b:7f:47:33:9e:8a:f5:03: 52:bb:7f:f0:7d:44:f5:56:d2:8d:bc:a1:5c:ed:ec:87:99:b7: 77:23:b2:02:f6:17:b5:24:df:01:ef:1d:9f:62:d5:d4:98:a5: b0:d7:1b:f4:15:ac:e5:24:1b:35:0b:7b:db:a2:9f:d5:61:f6: 33:9f:10:ef:80:24:2c:9b:25:04:bd:cd:43:63:22:11:c8:35: 4c:32:3f:df:87:c0:bf:c5:d5:af:42:a8:77:9d:bc:53:f8:52: 11:c9:9d:f4:91:85:ea:46:62:26:73:5f:50:7a:6b:3a:81:52: 32:49:9a:ba:34:1b:ad:ac:04:c2:2b:1a:49:d0:13:82:10:d2: 49:64:6e:ea:d3:3e:4b:91:3a:36:ad:7b:33:33:1c:36:d0:c9: 7c:e1:a6:9d:9c:3d:91:78:48:0a:5b:70:49:b7:2d:5f:0e:1d: 30:1e:cb:ee:e4:20:67:4c:3d:82:27:f1:fa:e1:a4:2d:d2:20: 4c:21:8b:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKjcRUzH6oZ++dCVokF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NjE1OGM3NWIxZTMyMDNiMjJiNTgzY2MxODRjM2Y1NDg4 YjI1ZDYwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD Eyg5YzRlZWRiNjkxOTQyMDEzMjBhNThkMTNhNWQ5N2E4YTk3MDhmNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh8ChKOUA6mEXcDFb8JJYe+XsyVJ XrcJM9bXvuA6P/hUIA7o9bJc9+GRc0hzDslbhqakpSP8sOfMtibEnlL4RNV/05b2 Dsa1ndhpOieHOGcJuArjxqxsA5auc6qxQ4vMfflt9zid8R0823kV4Ddt0iRBaPqE lso91cUE/BVDfQwMUXbfQJAr5ieGD/BwZiDFYYDXgidJ3GHAOLaDjNRoNVOOtdaP ekP93AKDBsq/Py5o3A07YpoaCMxcIgHNK6+l6rrjwcTCxYTp0V4dIMNynTcg0LWT r1BzEMdKhatngBW0kIq+WrEse3uM9v3xn7opjzvri52fag460qxJUeNsZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxO7baRlCATIKWNE6XZeoqXCPWWMB8GA1UdIwQY MBaAFERhWMdbHjIDsitYPMGEw/VIiyXWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkdGWXgxc2VNZ095SzFnOHdZVEQ5VWlMSmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jZDcwM2EtMDZmOS00MTA2LThjOGQt YjcyODliMzcwYjZkLzEvUkdGWXgxc2VNZ095SzFnOHdZVEQ5VWlMSmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jZDcwM2EtMDZmOS00MTA2LThjOGQtYjcyODliMzcwYjZk LzEvUkdGWXgxc2VNZ095SzFnOHdZVEQ5VWlMSmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoMEx6kB CnychryjmZfkECC25rQL7HZ9qHuPEg0pZJPjdfool7lO89ADArMvfG06M/OED1jW WbeOuJJRzQH8Imt/RzOeivUDUrt/8H1E9VbSjbyhXO3sh5m3dyOyAvYXtSTfAe8d n2LV1JilsNcb9BWs5SQbNQt726Kf1WH2M58Q74AkLJslBL3NQ2MiEcg1TDI/34fA v8XVr0Kod528U/hSEcmd9JGF6kZiJnNfUHprOoFSMkmaujQbrawEwisaSdATghDS SWRu6tM+S5E6Nq17MzMcNtDJfOGmnZw9kXhICltwSbctXw4dMB7L7uQgZ0w9gifx +uGkLdIgTCGLVg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:45 2025 by rpki-client