This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft File: Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json) Hash identifier: ybYwJZRhpWwiOEDmWxevU69SiZ9p8Msnj/YuI6ictiU= Subject key identifier: 27:33:7D:43:70:AE:89:70:E1:3B:37:B6:93:5B:05:F0:7B:C1:1C:4E Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52 Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52 Certificate serial: 019AF12CC647DFE8A4710A1598F31239AA1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft Manifest number: 06C9 Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: K-1cBvMFbalkBJFw0sJ7i1WTZEs.roa (hash: 3Ikel/xplePBRCnzN26gvmaI2UYrfX6N2d00Q4SBcaQ=) 2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: XYPcHTgHx5dJt3A10jE/T7DhS/SWU5923KrQIPEFmbo=) 3: cpmcqEkiElTb72sko05fp48X-FM.roa (hash: xqlsImmQ/9E7U68AUDQtcRJOydRd1Euow8hua9KaN+Y=) 4: moiKPG2LP_pIBJ3oE3uKFFimTvs.roa (hash: 7/+kCaotJP3wY1l3ZzCfImaKj4/imFC7lov/Lv+DrVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c6:47:df:e8:a4:71:0a:15:98:f3:12:39:aa:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52 Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=27337d4370ae8970e13b37b6935b05f07bc11c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:52:85:a7:32:28:82:43:6d:84:49:9a:a9: c6:71:cc:11:d4:36:c1:f1:69:61:e2:9b:2d:b9:5d: 49:b1:40:68:b2:44:a5:bd:40:ae:28:ce:dd:35:eb: 4b:00:43:7c:96:09:ee:f6:42:04:fe:a0:97:79:9e: 17:c4:43:af:95:e7:b1:9c:eb:d2:7e:af:e9:34:75: 3f:6f:2d:48:4e:b7:b2:79:fe:94:d6:f8:39:9d:35: 6e:64:1c:ab:20:31:ac:f6:65:60:d4:67:6b:92:2f: 20:6d:fd:50:c1:57:68:20:68:27:ee:04:54:0d:b8: 16:40:26:1c:2a:84:c0:d9:76:1f:96:60:8d:7f:c3: 1f:9b:17:44:5c:dd:a9:1e:8c:f6:c7:bc:fb:0c:38: 2f:fb:4e:8c:a5:ab:6c:bd:8a:ba:45:a4:b0:1b:08: fe:7f:ef:6c:4d:00:9e:14:85:6f:40:9b:84:6e:7b: 23:73:ea:5a:2f:31:33:9f:32:3b:ba:27:0d:b5:19: e2:a4:a4:ad:d1:84:81:d0:1a:e2:32:cd:04:0e:a7: 6e:09:12:a6:31:50:26:a2:ff:e0:c0:c7:db:d4:8b: 92:d1:e2:69:2c:9e:db:4b:7e:50:66:e8:05:20:b5: f8:64:dc:23:c6:91:f8:d5:5c:4f:13:66:7a:4a:49: 2c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:33:7D:43:70:AE:89:70:E1:3B:37:B6:93:5B:05:F0:7B:C1:1C:4E X509v3 Authority Key Identifier: keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:72:4a:a6:96:e6:91:6d:5a:59:da:38:31:da:c8:4c:85:0a: 16:28:a1:b2:05:be:70:a4:60:f3:34:18:63:91:49:9c:df:7a: 38:e1:da:ab:74:07:6f:9c:4a:39:55:d2:40:6e:67:66:ad:b4: 03:06:ed:76:1e:56:50:62:9f:44:f2:d9:c0:e9:34:e8:d8:68: 1f:1d:bb:ff:53:1c:d8:13:78:bf:26:31:ec:02:ce:22:78:bd: 12:ba:fb:28:2b:7a:3e:2b:fd:de:8c:51:38:6a:95:6e:64:30: aa:a5:05:07:58:6f:b0:ac:1a:06:e8:28:d8:3b:73:44:91:3e: f7:07:dd:76:32:e9:20:e5:c8:fb:d0:a8:09:e7:d6:73:2c:a3: 68:b6:e8:e1:d0:62:45:2c:1c:46:00:20:8a:06:2a:f5:54:db: b5:b6:b0:5c:9a:e6:14:b8:e6:5b:68:40:d7:28:f6:3f:94:3c: 4b:91:53:81:a1:4a:d9:7b:9a:f6:08:bd:3d:bc:45:ef:51:5a: 6c:d5:89:58:1d:d3:29:64:39:1b:c1:c3:a7:e9:47:34:8c:0d: 04:6f:50:ea:46:08:49:92:1b:61:fa:5a:09:c4:47:9b:03:c4: 4b:34:8b:30:03:1d:5f:a7:76:5d:d4:10:91:3f:27:79:7c:cb: 8e:75:81:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMZH3+ikcQoVmPMSOaobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2M2Y5MTcwNzdmOGYzZDBlMzM4Yzc0MmVhMjFkNjQzNThk MTlkNTIwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD EygyNzMzN2Q0MzcwYWU4OTcwZTEzYjM3YjY5MzViMDVmMDdiYzExYzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGdShacyKIJDbYRJmqnGccwR1DbB 8Wlh4pstuV1JsUBoskSlvUCuKM7dNetLAEN8lgnu9kIE/qCXeZ4XxEOvleexnOvS fq/pNHU/by1ITreyef6U1vg5nTVuZByrIDGs9mVg1Gdrki8gbf1QwVdoIGgn7gRU DbgWQCYcKoTA2XYflmCNf8MfmxdEXN2pHoz2x7z7DDgv+06MpatsvYq6RaSwGwj+ f+9sTQCeFIVvQJuEbnsjc+paLzEznzI7uicNtRnipKSt0YSB0BriMs0EDqduCRKm MVAmov/gwMfb1IuS0eJpLJ7bS35QZugFILX4ZNwjxpH41VxPE2Z6SkksTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCczfUNwrolw4Ts3tpNbBfB7wRxOMB8GA1UdIwQY MBaAFEY/kXB3+PPQ4zjHQuoh1kNY0Z1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmIt MjVhNDBjMDc1ZjEyLzEvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmItMjVhNDBjMDc1ZjEy LzEvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxnJKppbm kW1aWdo4MdrITIUKFiihsgW+cKRg8zQYY5FJnN96OOHaq3QHb5xKOVXSQG5nZq20 Awbtdh5WUGKfRPLZwOk06NhoHx27/1Mc2BN4vyYx7ALOIni9Err7KCt6Piv93oxR OGqVbmQwqqUFB1hvsKwaBugo2DtzRJE+9wfddjLpIOXI+9CoCefWcyyjaLbo4dBi RSwcRgAgigYq9VTbtbawXJrmFLjmW2hA1yj2P5Q8S5FTgaFK2Xua9gi9PbxF71Fa bNWJWB3TKWQ5G8HDp+lHNIwNBG9Q6kYISZIbYfpaCcRHmwPESzSLMAMdX6d2XdQQ kT8neXzLjnWBEg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:46 2025 by rpki-client