This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json) Hash identifier: 0nSF18VfHDICW9iZ8wFXVAsn9DmD0UfbdLrbty2NkzQ= Subject key identifier: ED:28:86:CF:44:D5:09:0E:2B:C0:AD:47:07:03:D2:9A:7A:0D:0F:F0 Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019AF088271883609B02CA43D40F210B960D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft Manifest number: 1163 Signing time: Fri 05 Dec 2025 22:00:45 +0000 Manifest this update: Fri 05 Dec 2025 22:00:45 +0000 Manifest next update: Sat 06 Dec 2025 22:00:45 +0000 Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=) 2: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: 7tRXcKfyJWjln8rv5ImDDVnvbRYdkoAtMnGZDkFDOXo=) 3: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=) 4: p35nG8WnKus4OTOs7KI5F65sYzo.roa (hash: RVbXfLYb/+mFr+HMiMKT1IcR5Oe18VB+slW6Nc/dCTU=) 5: pcXYlaDPwjog7iEv3SU8SnXzBAo.roa (hash: /AdWWJb1IqZ42mmM/SvQrc5HCBK96OSXdfXnx0nlkCw=) 6: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=) 7: ySapTfZYgbxoEK957EhqmLLUXOc.roa (hash: PiAUqrCpwQjO/wsILlIaOLs415SXxFD6K/JzPp3q6ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:27:18:83:60:9b:02:ca:43:d4:0f:21:0b:96:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Dec 5 22:00:45 2025 GMT Not After : Dec 6 22:00:45 2025 GMT Subject: CN=ed2886cf44d5090e2bc0ad470703d29a7a0d0ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:51:39:f9:4d:48:13:e6:44:fd:6b:ea:14: 0d:ca:af:d1:dd:17:06:e6:88:89:0b:50:a9:b3:87: 56:e9:44:57:70:31:2f:0c:6e:cf:80:e6:b3:5f:3d: aa:a9:29:6d:1c:e5:c6:59:08:6c:de:c3:76:d2:4d: ae:23:1e:07:e3:2e:fb:a6:c4:fd:da:0c:09:a1:dd: 6f:ca:28:ce:27:ad:b2:5d:7b:17:5b:03:51:b8:9a: da:db:08:c0:c2:82:2d:3c:b9:8e:06:21:2e:70:01: e8:f0:8f:1b:4c:39:d5:ca:a5:87:91:a5:88:a6:58: a5:96:83:f3:c7:14:69:07:bd:f2:f0:a4:c1:67:e0: bd:9f:9d:3b:a6:54:e3:9b:ef:2f:f3:7e:b4:06:8a: ee:1f:5a:25:aa:8f:1c:16:a9:d2:1e:bf:a8:b8:33: 8b:af:ea:87:c9:9e:9b:71:64:a1:19:9d:38:8b:de: b7:f6:e7:c5:dc:80:74:c4:bd:4a:92:83:9b:d9:e3: 73:49:76:9a:9f:fa:3e:c0:d9:af:c6:fc:95:12:7d: a6:65:d4:f8:7c:26:82:22:a8:bd:07:df:b0:fc:d8: 6f:74:13:ea:b6:1f:6c:52:86:71:82:20:42:6f:66: 64:df:c6:f9:06:2c:49:d6:be:14:9a:b9:35:e2:cf: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:28:86:CF:44:D5:09:0E:2B:C0:AD:47:07:03:D2:9A:7A:0D:0F:F0 X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:74:64:e4:e9:25:8e:6b:2c:55:2e:e6:5a:1d:02:44:ac:2a: 7f:9b:37:34:5a:6b:ce:9f:7d:9b:9e:0e:d1:9b:47:7e:97:97: a6:93:5c:2c:51:83:43:6d:b8:3c:5c:eb:b8:4e:c9:dc:64:7a: 14:70:24:9e:34:b9:4e:a9:92:15:aa:5e:1b:f0:06:d4:1c:78: 83:7d:4e:2b:87:a2:8a:82:00:6e:62:d4:bd:2a:0a:31:13:47: 50:17:28:bd:11:53:f9:0a:61:60:1d:01:f0:49:53:19:c6:24: a9:f4:d7:6a:9c:bd:59:4e:92:87:9a:ae:39:b0:7e:b1:e5:ca: 49:e3:a2:19:39:12:21:50:02:38:51:5a:ab:67:2d:c4:42:b0: 76:b0:ae:19:5e:b7:3b:14:7b:a5:05:ea:30:1d:7a:b2:20:49: cf:cb:0b:f4:a2:e0:3e:61:20:44:1f:0c:27:bc:30:fa:95:f4: 24:8b:e0:71:6d:d7:06:35:92:60:c2:09:22:46:10:e8:2a:c7: 39:88:aa:5c:7d:98:4f:70:7b:36:e8:42:5f:47:80:65:90:ec: 80:b9:69:20:97:54:40:fc:40:72:aa:e7:9f:cb:e6:a5:f3:e9: a0:36:3c:ab:e1:48:50:dc:73:91:16:39:a5:b5:01:c4:ee:a6: 4a:44:e9:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiCcYg2CbAspD1A8hC5YNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjUxMjA1MjIwMDQ1WhcNMjUxMjA2MjIwMDQ1WjAzMTEwLwYDVQQD EyhlZDI4ODZjZjQ0ZDUwOTBlMmJjMGFkNDcwNzAzZDI5YTdhMGQwZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kBROflNSBPmRP1r6hQNyq/R3RcG 5oiJC1Cps4dW6URXcDEvDG7PgOazXz2qqSltHOXGWQhs3sN20k2uIx4H4y77psT9 2gwJod1vyijOJ62yXXsXWwNRuJra2wjAwoItPLmOBiEucAHo8I8bTDnVyqWHkaWI plilloPzxxRpB73y8KTBZ+C9n507plTjm+8v8360BoruH1olqo8cFqnSHr+ouDOL r+qHyZ6bcWShGZ04i9639ufF3IB0xL1KkoOb2eNzSXaan/o+wNmvxvyVEn2mZdT4 fCaCIqi9B9+w/NhvdBPqth9sUoZxgiBCb2Zk38b5BixJ1r4Umrk14s++bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0ohs9E1QkOK8CtRwcD0pp6DQ/wMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3Rk5Okl jmssVS7mWh0CRKwqf5s3NFprzp99m54O0ZtHfpeXppNcLFGDQ224PFzruE7J3GR6 FHAknjS5TqmSFapeG/AG1Bx4g31OK4eiioIAbmLUvSoKMRNHUBcovRFT+QphYB0B 8ElTGcYkqfTXapy9WU6Sh5quObB+seXKSeOiGTkSIVACOFFaq2ctxEKwdrCuGV63 OxR7pQXqMB16siBJz8sL9KLgPmEgRB8MJ7ww+pX0JIvgcW3XBjWSYMIJIkYQ6CrH OYiqXH2YT3B7NuhCX0eAZZDsgLlpIJdUQPxAcqrnn8vmpfPpoDY8q+FIUNxzkRY5 pbUBxO6mSkTpJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:38 2025 by rpki-client