This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json) Hash identifier: 7641N0IrjSxvaXWjJ53yW2YxVcCOGXEtot1wF8zokVg= Subject key identifier: E2:8E:6A:8C:EF:04:32:3C:C0:44:64:51:D6:5A:E0:4C:2D:15:E5:20 Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b Certificate serial: 019AF1D1F7015093BB3C61880C336CCE2733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft Manifest number: 045B Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: TCbT2lKvimmPca_tcJyE61X19LM.roa (hash: qkxwRBCeRtuFBBppHywPPyPUPj2kdHg3WbKwG9y9ays=) 2: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=) 3: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: Ybi3zE4PH+YAIw5O8v0dH7nPRWTF/EMQ5fDB3DLfb2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f7:01:50:93:bb:3c:61:88:0c:33:6c:ce:27:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=e28e6a8cef04323cc0446451d65ae04c2d15e520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:f0:bc:5c:9f:e1:5f:b7:76:6b:98:3f:0e: 74:0c:1d:89:c0:7f:8a:2f:be:e8:3b:8f:d4:08:7f: 4c:5e:c8:a8:e7:c1:3d:61:24:34:a7:0b:2f:51:f4: ab:5a:97:0c:60:1d:41:ef:45:0f:3b:f7:ca:7b:2f: 69:30:57:7f:c7:8f:9c:33:44:f8:25:19:ee:57:a0: 81:82:3d:1a:29:82:10:e6:44:95:b5:b7:a2:2c:03: 8b:56:55:55:9f:00:b1:98:42:e7:10:6f:19:ff:3a: 45:78:a9:e6:d1:8f:95:e8:4b:3f:bf:71:e3:73:cc: 49:3a:2d:d6:4d:75:fd:8b:ec:30:c3:19:19:ba:ee: ff:b8:86:dd:4d:49:b4:3c:77:35:88:ba:9a:5f:6e: a7:84:6e:b9:68:11:46:ac:d0:b9:c9:ce:ae:01:85: b9:78:99:6a:db:e2:d4:c8:01:62:17:35:39:5e:c5: 0a:df:dd:a3:1c:b1:4a:fa:0c:a6:ab:e3:68:78:b8: 36:08:68:72:3c:b8:cc:88:e9:a0:1a:ef:2e:8e:e1: 61:c6:2f:9c:58:79:c7:a5:5b:78:00:d7:d3:3d:da: 41:aa:c5:61:5f:82:58:24:3e:68:05:13:91:a5:d2: d5:b9:18:f1:0b:ae:dd:69:8d:58:97:dd:bc:00:93: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8E:6A:8C:EF:04:32:3C:C0:44:64:51:D6:5A:E0:4C:2D:15:E5:20 X509v3 Authority Key Identifier: keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:04:66:8e:3b:42:54:31:46:a9:57:ad:ef:63:94:42:f5:e2: 2f:8c:b9:be:60:86:aa:ae:15:1b:81:c3:6d:15:23:3c:41:05: 07:46:e5:b6:93:9e:b4:52:2a:70:9c:b9:c1:b8:ab:fd:12:51: 8d:2a:15:bf:18:83:33:51:4a:bf:55:0f:55:9d:5d:06:ac:f9: 40:48:4c:58:5a:d6:dc:70:f1:3b:e9:ee:ce:ea:56:75:d2:eb: 8f:00:96:ec:89:c0:15:22:68:58:61:5a:7d:e7:5f:78:07:ae: 8a:7d:1c:57:03:56:48:ca:3d:cd:04:52:d0:98:95:1a:64:bf: 6b:61:48:5b:3e:0a:75:f3:a7:2f:53:59:20:9e:f1:59:4d:3a: 04:cc:de:7e:c4:b0:5e:ff:89:0d:d4:55:1b:e6:4c:69:a4:a9: c2:56:51:f0:94:97:39:9c:7f:da:21:bb:eb:7b:09:24:75:2d: 87:dd:d9:c9:44:db:74:68:cd:7d:f1:cc:8b:06:71:c5:e4:dd: 94:3f:c1:67:7b:c2:60:33:be:08:88:f1:65:ab:86:d1:6d:97: 4c:62:3b:a8:0e:73:81:d8:15:b2:3f:a7:b7:77:62:b8:8e:ad: 8d:8d:a1:7e:73:53:2e:e6:ce:12:35:8a:02:3d:d2:df:8a:43: d6:77:d6:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fcBUJO7PGGIDDNsziczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMTE1N2M5OGYyNjI3OWZjM2VlZDJkYWIzY2YxMTgzNzJi ZGJlMWIwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EyhlMjhlNmE4Y2VmMDQzMjNjYzA0NDY0NTFkNjVhZTA0YzJkMTVlNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JTwvFyf4V+3dmuYPw50DB2JwH+K L77oO4/UCH9MXsio58E9YSQ0pwsvUfSrWpcMYB1B70UPO/fKey9pMFd/x4+cM0T4 JRnuV6CBgj0aKYIQ5kSVtbeiLAOLVlVVnwCxmELnEG8Z/zpFeKnm0Y+V6Es/v3Hj c8xJOi3WTXX9i+wwwxkZuu7/uIbdTUm0PHc1iLqaX26nhG65aBFGrNC5yc6uAYW5 eJlq2+LUyAFiFzU5XsUK392jHLFK+gymq+NoeLg2CGhyPLjMiOmgGu8ujuFhxi+c WHnHpVt4ANfTPdpBqsVhX4JYJD5oBRORpdLVuRjxC67daY1Yl928AJPNywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKOaozvBDI8wERkUdZa4EwtFeUgMB8GA1UdIwQY MBaAFLERV8mPJiefw+7S2rPPEYNyvb4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYt ZTBhY2FjYzEwZWY1LzEvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYtZTBhY2FjYzEwZWY1 LzEvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgRmjjtC VDFGqVet72OUQvXiL4y5vmCGqq4VG4HDbRUjPEEFB0bltpOetFIqcJy5wbir/RJR jSoVvxiDM1FKv1UPVZ1dBqz5QEhMWFrW3HDxO+nuzupWddLrjwCW7InAFSJoWGFa fedfeAeuin0cVwNWSMo9zQRS0JiVGmS/a2FIWz4KdfOnL1NZIJ7xWU06BMzefsSw Xv+JDdRVG+ZMaaSpwlZR8JSXOZx/2iG763sJJHUth93ZyUTbdGjNffHMiwZxxeTd lD/BZ3vCYDO+CIjxZauG0W2XTGI7qA5zgdgVsj+nt3diuI6tjY2hfnNTLubOEjWK Aj3S34pD1nfW/g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:02 2025 by rpki-client