This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json) Hash identifier: 0BVxDu72t5+NAy6kkohTiNDXunxkx6znOKNbIei8DTI= Subject key identifier: 18:DB:DA:BC:C2:79:30:56:74:4F:20:63:75:76:78:E8:05:80:7A:5A Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83 Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883 Certificate serial: 019B318CFE52524D6B443F501A4594D684FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft Manifest number: 13A9 Signing time: Thu 18 Dec 2025 13:01:22 +0000 Manifest this update: Thu 18 Dec 2025 13:01:22 +0000 Manifest next update: Fri 19 Dec 2025 13:01:22 +0000 Files and hashes: 1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=) 2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: HN54Xf4NQ+G6ORS6/rmG3TdG9zVl2Eiju1jQCbFZMcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:fe:52:52:4d:6b:44:3f:50:1a:45:94:d6:84:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883 Validity Not Before: Dec 18 13:01:22 2025 GMT Not After : Dec 19 13:01:22 2025 GMT Subject: CN=18dbdabcc2793056744f2063757678e805807a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:5f:1d:62:26:09:94:29:81:7d:02:af:a0: 6e:80:89:50:8c:65:c1:cd:84:a7:ac:88:6c:65:ff: c1:35:19:cc:cf:1d:38:38:9f:af:d8:7d:50:64:0c: 60:55:94:42:96:f3:02:5e:09:e8:f3:1e:c3:57:a1: a7:df:77:13:45:d8:78:4a:40:1a:e9:b6:67:7e:af: 0a:40:57:84:7f:21:3b:76:f3:8f:3d:6e:df:1a:2b: 3f:6e:4b:43:b9:88:e9:97:5b:32:4b:f0:ac:95:cc: c2:20:b6:aa:82:d2:08:07:4d:39:f6:23:cf:82:0c: fa:21:60:b5:a3:c5:65:1b:48:2f:8f:8a:8b:f0:e7: 5c:73:1c:0c:50:c0:77:63:77:b4:d1:ae:38:88:f9: b3:19:33:fe:47:2c:e9:8f:0b:45:a1:51:cf:86:64: e2:8c:69:21:e3:98:66:08:08:8b:7a:20:f5:19:95: bf:b3:00:33:41:80:8d:94:2d:05:c2:eb:0d:77:4a: 79:42:25:fd:0f:b1:1d:4c:d0:95:17:01:36:46:61: 67:d9:2d:60:27:55:45:eb:ae:77:85:9f:af:7f:62: 66:55:0a:85:ff:97:b4:8d:c9:10:2c:40:87:fa:14: 66:58:14:9b:ff:c1:e3:cf:3a:92:82:fd:7b:6b:85: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DB:DA:BC:C2:79:30:56:74:4F:20:63:75:76:78:E8:05:80:7A:5A X509v3 Authority Key Identifier: keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:10:0e:6e:ac:c7:7c:38:c2:3b:eb:7b:4d:7f:b6:fa:30:c3: 56:46:6b:5e:69:b1:16:a4:0d:f1:c1:93:19:5f:43:2f:ad:e5: 9f:d1:42:c9:95:71:c0:9d:e2:81:3a:b9:2e:83:58:a6:50:e8: 04:40:e1:a6:ce:c3:08:39:c3:1d:db:2a:2e:68:08:17:00:ad: 86:4a:06:55:54:56:88:62:8c:0b:6f:f7:ac:df:53:f2:c3:bb: d9:52:4a:66:a6:75:5d:af:f8:bf:6f:45:c5:2e:10:a2:7d:3b: d8:87:d0:15:99:f0:23:74:eb:62:15:ab:bb:9a:a3:17:87:e6: 1e:2b:80:02:3e:8d:0d:16:f2:c6:de:97:03:bc:21:ea:13:f8: 7f:aa:bf:a3:2a:9b:10:e0:91:e7:77:82:9d:ab:d3:67:5e:aa: 98:8a:bf:66:d5:d6:af:31:2f:83:8b:3a:e8:af:8b:57:cb:9c: 39:ec:70:8c:6e:c6:d1:1e:9e:b9:a5:7d:d8:90:d3:5a:64:f2: a4:f7:05:2e:a6:5d:eb:83:de:0d:c2:51:3c:8a:d5:e8:ce:de: 24:78:a5:da:48:ee:b2:df:26:0b:21:96:fd:c3:07:b4:96:d5: e9:21:0e:f0:78:34:af:26:39:23:2a:8c:98:9a:2b:0d:49:6e: d5:a3:29:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjP5SUk1rRD9QGkWU1oT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNTNjYmViNzE1MDg0YjMyMmExYTE0OWM5NmUwOWM0MGVk NmQ4ODMwHhcNMjUxMjE4MTMwMTIyWhcNMjUxMjE5MTMwMTIyWjAzMTEwLwYDVQQD EygxOGRiZGFiY2MyNzkzMDU2NzQ0ZjIwNjM3NTc2NzhlODA1ODA3YTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNpfHWImCZQpgX0Cr6BugIlQjGXB zYSnrIhsZf/BNRnMzx04OJ+v2H1QZAxgVZRClvMCXgno8x7DV6Gn33cTRdh4SkAa 6bZnfq8KQFeEfyE7dvOPPW7fGis/bktDuYjpl1syS/CslczCILaqgtIIB0059iPP ggz6IWC1o8VlG0gvj4qL8OdccxwMUMB3Y3e00a44iPmzGTP+RyzpjwtFoVHPhmTi jGkh45hmCAiLeiD1GZW/swAzQYCNlC0FwusNd0p5QiX9D7EdTNCVFwE2RmFn2S1g J1VF6653hZ+vf2JmVQqF/5e0jckQLECH+hRmWBSb/8HjzzqSgv17a4Wu5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjb2rzCeTBWdE8gY3V2eOgFgHpaMB8GA1UdIwQY MBaAFKxTy+txUISzIqGhScluCcQO1tiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQt N2FlYWRiNDVhMjM3LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQtN2FlYWRiNDVhMjM3 LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBAObqzH fDjCO+t7TX+2+jDDVkZrXmmxFqQN8cGTGV9DL63ln9FCyZVxwJ3igTq5LoNYplDo BEDhps7DCDnDHdsqLmgIFwCthkoGVVRWiGKMC2/3rN9T8sO72VJKZqZ1Xa/4v29F xS4Qon072IfQFZnwI3TrYhWru5qjF4fmHiuAAj6NDRbyxt6XA7wh6hP4f6q/oyqb EOCR53eCnavTZ16qmIq/ZtXWrzEvg4s66K+LV8ucOexwjG7G0R6euaV92JDTWmTy pPcFLqZd64PeDcJRPIrV6M7eJHil2kjust8mCyGW/cMHtJbV6SEO8Hg0ryY5IyqM mJorDUlu1aMp2g== -----END CERTIFICATE-----Generated at Thu Dec 18 16:01:58 2025 by rpki-client