This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json) Hash identifier: aWPO+smC/I/I01JwUK+J3FrXg9Cr5tA+CpCeTUyRu7k= Subject key identifier: C4:60:F1:10:49:FC:E3:EF:CD:D9:D9:9D:15:0B:44:BE:D1:AB:62:33 Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98 Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98 Certificate serial: 019AF352980CA40B0B9E9D6FC63C83DDE9B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft Manifest number: 0BB1 Signing time: Sat 06 Dec 2025 11:01:07 +0000 Manifest this update: Sat 06 Dec 2025 11:01:07 +0000 Manifest next update: Sun 07 Dec 2025 11:01:07 +0000 Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=) 2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: 6NAatU39wWEw1HX4aKJ0O6n/bHsC5GZwtPxZn8DvYKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:98:0c:a4:0b:0b:9e:9d:6f:c6:3c:83:dd:e9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98 Validity Not Before: Dec 6 11:01:07 2025 GMT Not After : Dec 7 11:01:07 2025 GMT Subject: CN=c460f11049fce3efcdd9d99d150b44bed1ab6233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:58:11:43:a4:4d:83:3d:3d:0a:d4:b8:f0: 8a:7d:52:3b:93:5a:e6:62:c1:06:fa:1b:d2:76:af: d7:43:e6:16:4f:f9:48:9e:a4:2a:a0:9e:3d:8b:dc: 74:c2:56:06:4e:57:c7:03:bd:0c:10:91:f9:de:76: 0b:4f:67:86:5c:f3:df:98:5a:49:04:7a:eb:73:a8: 16:a2:51:5d:48:f1:8c:65:de:8b:c9:18:48:c4:7e: 2d:09:13:97:af:05:1a:64:f9:b6:bc:37:68:4b:c8: 1a:e9:08:8a:64:bd:f7:02:b5:74:ae:10:3b:74:ab: 6d:b9:fb:f8:25:f2:a8:76:ea:d1:cc:9e:a5:4e:c0: 0a:80:fc:8b:13:e5:60:d7:cf:8b:37:16:ea:e8:be: 0e:7d:3f:21:f0:48:ad:24:6f:1b:b7:04:0b:76:db: 00:f9:83:c1:be:8e:fd:16:a0:78:94:3a:43:c9:91: b7:38:f4:d0:9b:b0:15:4c:e8:3e:9a:30:df:f7:ae: c8:e5:9e:18:95:13:fe:b1:16:d8:5b:35:e1:fc:de: d9:37:b2:15:97:7d:16:a5:20:ea:89:19:78:88:ba: 48:ca:ce:49:34:bf:75:cf:b1:5b:a8:a6:9f:9e:e0: 0a:01:05:8f:51:15:0a:86:96:8a:2e:ec:59:af:c6: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:60:F1:10:49:FC:E3:EF:CD:D9:D9:9D:15:0B:44:BE:D1:AB:62:33 X509v3 Authority Key Identifier: keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:28:13:e8:ce:e3:50:33:40:cd:bb:03:41:de:e2:af:de:14: 17:35:5b:17:21:39:87:53:a4:d1:11:41:72:c4:0f:61:eb:88: eb:da:e6:c7:78:d9:00:d7:f5:14:a7:d9:e4:06:9a:2b:22:d3: e4:28:17:1b:e1:de:2d:b6:58:c9:be:3c:f5:43:d2:d1:ec:80: cd:6d:43:47:30:7a:c3:a6:b3:5f:07:55:5e:00:81:40:79:18: d3:fa:41:0b:8a:e5:16:8c:e7:ff:3b:21:3b:90:13:e9:b2:b4: c0:c7:21:75:b2:ca:0c:86:9d:72:3c:be:8a:78:5f:51:3d:1a: 1b:8a:6b:f7:d7:18:73:af:a2:bb:2b:71:5a:d1:a9:d2:fe:b5: 8f:09:45:3c:7d:a5:de:5e:d6:1e:82:71:a1:19:6c:64:c2:b2: b1:b6:c2:01:c4:c5:bd:53:d4:c1:7d:71:b9:54:fc:1a:3f:ad: 1e:72:fb:f3:ef:3a:e0:10:ff:18:f0:25:b4:23:47:5c:d2:33: 8c:59:8f:de:a9:19:80:fb:fb:be:32:87:87:3c:5e:5d:da:b0: 94:ea:54:29:cb:dd:36:d1:8b:58:63:2f:16:5c:97:9b:40:49: af:ee:6d:de:d7:f7:57:13:2c:5f:b5:8d:24:e3:aa:04:ae:15: ba:73:fa:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpgMpAsLnp1vxjyD3emxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNThlYjdjNjE3NTBjY2UzMzNjZDAwMjZjNzdjOTNjYmU0 NjVkOTgwHhcNMjUxMjA2MTEwMTA3WhcNMjUxMjA3MTEwMTA3WjAzMTEwLwYDVQQD EyhjNDYwZjExMDQ5ZmNlM2VmY2RkOWQ5OWQxNTBiNDRiZWQxYWI2MjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwllYEUOkTYM9PQrUuPCKfVI7k1rm YsEG+hvSdq/XQ+YWT/lInqQqoJ49i9x0wlYGTlfHA70MEJH53nYLT2eGXPPfmFpJ BHrrc6gWolFdSPGMZd6LyRhIxH4tCROXrwUaZPm2vDdoS8ga6QiKZL33ArV0rhA7 dKttufv4JfKodurRzJ6lTsAKgPyLE+Vg18+LNxbq6L4OfT8h8EitJG8btwQLdtsA +YPBvo79FqB4lDpDyZG3OPTQm7AVTOg+mjDf967I5Z4YlRP+sRbYWzXh/N7ZN7IV l30WpSDqiRl4iLpIys5JNL91z7FbqKafnuAKAQWPURUKhpaKLuxZr8ZRBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRg8RBJ/OPvzdnZnRULRL7Rq2IzMB8GA1UdIwQY MBaAFKxY63xhdQzOMzzQAmx3yTy+Rl2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgt MWRlMDBiZDg5MTJjLzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgtMWRlMDBiZDg5MTJj LzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCgT6M7j UDNAzbsDQd7ir94UFzVbFyE5h1Ok0RFBcsQPYeuI69rmx3jZANf1FKfZ5AaaKyLT 5CgXG+HeLbZYyb489UPS0eyAzW1DRzB6w6azXwdVXgCBQHkY0/pBC4rlFozn/zsh O5AT6bK0wMchdbLKDIadcjy+inhfUT0aG4pr99cYc6+iuytxWtGp0v61jwlFPH2l 3l7WHoJxoRlsZMKysbbCAcTFvVPUwX1xuVT8Gj+tHnL78+864BD/GPAltCNHXNIz jFmP3qkZgPv7vjKHhzxeXdqwlOpUKcvdNtGLWGMvFlyXm0BJr+5t3tf3VxMsX7WN JOOqBK4VunP62A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:36:41 2025 by rpki-client