This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json) Hash identifier: WTYGNIM7DsQONO7j7KGr5d4Bx+L98eJ/0auM7pEYPVU= Subject key identifier: 02:69:76:93:CB:9D:35:9C:D2:E2:4D:82:64:5E:0F:F9:99:8D:4B:16 Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98 Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98 Certificate serial: 019B2776FB19F81ED8D6F81B2397F8B4126A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft Manifest number: 0BCC Signing time: Tue 16 Dec 2025 14:01:07 +0000 Manifest this update: Tue 16 Dec 2025 14:01:07 +0000 Manifest next update: Wed 17 Dec 2025 14:01:07 +0000 Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=) 2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: sKCM4j95hejNgZ5nyffNN+PGkZfP5LxhtQJYbDZQH1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:76:fb:19:f8:1e:d8:d6:f8:1b:23:97:f8:b4:12:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98 Validity Not Before: Dec 16 14:01:07 2025 GMT Not After : Dec 17 14:01:07 2025 GMT Subject: CN=02697693cb9d359cd2e24d82645e0ff9998d4b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:b2:17:c7:6c:b7:bc:ad:e3:03:a6:09:13: 00:48:bb:a6:9b:60:79:18:2b:93:a8:f0:e6:74:35: 6f:d8:29:04:a9:12:de:a1:0d:71:d9:3f:22:d9:ca: 31:00:87:5b:99:c2:ff:72:24:5b:e3:44:6b:47:ab: 8e:8c:aa:ac:31:d3:1c:7e:70:69:89:d5:37:52:6b: fd:50:ca:4f:7f:8e:a4:80:db:bc:e9:f6:e5:fb:fc: 22:12:c0:4f:1b:6f:a0:04:19:0f:0e:3c:47:a2:d2: e0:fd:b4:c1:6b:04:2c:7e:c4:4f:97:88:61:0e:e0: d4:36:8c:58:4a:1b:05:81:52:9b:0d:49:74:10:23: 5f:1c:1c:f9:82:d9:de:07:4a:e0:3b:c9:a7:ff:4e: 19:76:61:5a:1e:32:2a:23:e5:e1:bf:d7:78:3a:f2: aa:3f:ae:c1:43:19:0d:a7:7c:c7:f5:ed:81:80:c0: 09:87:cc:4b:b8:e0:f8:69:6c:4b:a4:90:f9:d9:b5: 09:aa:be:40:c0:e2:cb:a0:84:07:b8:16:3c:55:60: f1:26:9d:38:98:a7:e8:0c:ba:23:9e:5d:71:e2:27: 0c:6a:32:9d:8e:2c:f5:0b:fe:30:fa:15:0e:e5:86: e7:81:b1:9b:80:77:14:75:c5:16:a1:e8:29:6f:0a: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:69:76:93:CB:9D:35:9C:D2:E2:4D:82:64:5E:0F:F9:99:8D:4B:16 X509v3 Authority Key Identifier: keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f5:4c:44:67:e2:bd:6e:0e:a7:3d:43:27:03:b3:8a:ff:9f: a0:02:11:56:0d:d9:e7:f0:fb:5b:12:c0:c8:e3:aa:d0:53:a7: fe:69:db:68:b3:34:a0:7c:2e:33:9d:8b:bb:36:ae:21:d8:8c: b2:1d:cb:74:eb:d6:20:08:f6:d4:f3:8f:06:ea:57:bd:b4:fe: 7f:19:0a:12:5d:74:71:f1:78:f1:15:cb:f2:42:c0:6f:02:37: e1:cc:9d:7c:d9:6b:43:cc:c5:e2:29:47:32:5e:92:6e:62:c5: 92:9d:69:72:fd:c9:98:55:d6:24:ef:34:ea:3e:d3:ef:8c:e1: ea:18:7f:bf:c6:8f:cc:a5:5b:cc:10:cb:7b:69:36:6d:64:fb: 98:c6:5c:00:b2:22:23:ba:17:a2:78:20:fc:6a:b3:c9:18:d9: cb:91:84:6a:c5:1b:13:90:b8:e3:ba:9d:5f:1c:23:38:d3:96: fe:3f:bf:ae:bd:9d:b1:35:01:d6:0b:7c:0a:bf:98:7c:f2:cb: 94:fb:c1:ee:20:ec:97:d2:e8:00:be:1e:cd:fa:8a:ef:6f:08: 5f:63:b5:12:2d:bc:e9:35:0a:17:2e:14:0e:9e:49:d5:9e:8e: e1:b2:8f:fe:96:7a:03:d5:b1:4b:99:e3:4c:c0:87:07:a4:67: fa:41:2a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndvsZ+B7Y1vgbI5f4tBJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNThlYjdjNjE3NTBjY2UzMzNjZDAwMjZjNzdjOTNjYmU0 NjVkOTgwHhcNMjUxMjE2MTQwMTA3WhcNMjUxMjE3MTQwMTA3WjAzMTEwLwYDVQQD EygwMjY5NzY5M2NiOWQzNTljZDJlMjRkODI2NDVlMGZmOTk5OGQ0YjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6yyF8dst7yt4wOmCRMASLumm2B5 GCuTqPDmdDVv2CkEqRLeoQ1x2T8i2coxAIdbmcL/ciRb40RrR6uOjKqsMdMcfnBp idU3Umv9UMpPf46kgNu86fbl+/wiEsBPG2+gBBkPDjxHotLg/bTBawQsfsRPl4hh DuDUNoxYShsFgVKbDUl0ECNfHBz5gtneB0rgO8mn/04ZdmFaHjIqI+Xhv9d4OvKq P67BQxkNp3zH9e2BgMAJh8xLuOD4aWxLpJD52bUJqr5AwOLLoIQHuBY8VWDxJp04 mKfoDLojnl1x4icMajKdjiz1C/4w+hUO5YbngbGbgHcUdcUWoegpbwqNbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJpdpPLnTWc0uJNgmReD/mZjUsWMB8GA1UdIwQY MBaAFKxY63xhdQzOMzzQAmx3yTy+Rl2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgt MWRlMDBiZDg5MTJjLzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgtMWRlMDBiZDg5MTJj LzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfVMRGfi vW4Opz1DJwOziv+foAIRVg3Z5/D7WxLAyOOq0FOn/mnbaLM0oHwuM52LuzauIdiM sh3LdOvWIAj21POPBupXvbT+fxkKEl10cfF48RXL8kLAbwI34cydfNlrQ8zF4ilH Ml6SbmLFkp1pcv3JmFXWJO806j7T74zh6hh/v8aPzKVbzBDLe2k2bWT7mMZcALIi I7oXongg/GqzyRjZy5GEasUbE5C447qdXxwjONOW/j+/rr2dsTUB1gt8Cr+YfPLL lPvB7iDsl9LoAL4ezfqK728IX2O1Ei286TUKFy4UDp5J1Z6O4bKP/pZ6A9WxS5nj TMCHB6Rn+kEqfA== -----END CERTIFICATE-----Generated at Tue Dec 16 18:00:51 2025 by rpki-client