This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft File: rfjUKjroBc6WqpT66fW0QG_0VZk.mft (raw, json) Hash identifier: REI6pUoUEMOpSJcojzOqiiufqQtR/C8EL+/SQnYFITc= Subject key identifier: 6A:18:5C:6F:35:19:BF:7E:CB:6F:6D:55:0D:0D:48:D8:F5:C7:89:2E Authority key identifier: AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99 Certificate issuer: /CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599 Certificate serial: 019AF3C08B4074D1C30C62901264479A47AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft Manifest number: 04C9 Signing time: Sat 06 Dec 2025 13:01:13 +0000 Manifest this update: Sat 06 Dec 2025 13:01:13 +0000 Manifest next update: Sun 07 Dec 2025 13:01:13 +0000 Files and hashes: 1: rfjUKjroBc6WqpT66fW0QG_0VZk.crl (hash: 5oVBPOX48w9J5D97hL+hYKTfL77WwmlTgfTi9e45U/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:8b:40:74:d1:c3:0c:62:90:12:64:47:9a:47:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599 Validity Not Before: Dec 6 13:01:13 2025 GMT Not After : Dec 7 13:01:13 2025 GMT Subject: CN=6a185c6f3519bf7ecb6f6d550d0d48d8f5c7892e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:35:a0:f0:1a:c7:ab:b4:ff:cc:a6:69:74: 30:56:a1:fb:c2:ea:94:ee:b5:39:cd:f2:ad:8a:17: 68:e8:11:5b:fc:c4:46:7c:b1:1a:cc:8b:46:f6:f5: 21:b5:6a:7e:7a:73:10:fa:c8:63:b0:e8:1c:9c:9d: ad:35:ec:29:ac:1f:d5:8c:24:a2:80:57:6c:13:ff: bc:23:4e:fa:ad:b1:13:22:ea:e4:b9:ef:a4:c1:22: 35:1b:dd:94:35:be:b6:07:a0:3a:34:4a:53:95:cf: 0d:d7:f2:e5:f6:58:ad:a1:86:5b:e8:d4:fd:b7:4c: 9d:f5:f9:98:35:1c:7e:9a:ca:b3:91:9a:bd:24:3c: 20:3c:5f:6c:dc:01:0c:ab:76:b7:72:89:c8:28:ce: 0d:e8:27:3e:f8:e9:b4:7f:86:d5:28:f9:3d:ed:78: 2f:fd:05:c3:21:0e:66:a3:75:65:33:4f:c2:6a:e0: 94:1c:49:62:6c:52:8d:4b:de:3b:b0:16:64:4f:ed: a0:e2:ba:1a:ff:3a:ce:50:67:17:93:9f:03:d0:59: 0a:b1:c2:b2:90:67:3a:b9:3d:d7:14:02:57:ef:f8: b7:e9:5a:e4:ab:64:24:84:9e:94:4b:5d:03:e9:1b: 06:d2:c8:09:7a:ec:1e:04:d7:e4:51:9b:c3:fa:87: 7c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:18:5C:6F:35:19:BF:7E:CB:6F:6D:55:0D:0D:48:D8:F5:C7:89:2E X509v3 Authority Key Identifier: keyid:AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:48:e4:7b:ad:0f:7c:4d:83:35:1f:22:86:a7:5c:17:a4:c1: 22:6e:59:b2:0f:e0:29:12:dc:2d:24:4f:8b:28:4a:ae:d7:c5: 90:70:d3:08:91:07:6d:e6:6a:9c:02:01:d6:3b:7d:56:ae:b5: 5b:56:83:28:b5:1a:b3:70:cc:65:d9:63:2f:04:9b:3b:7e:30: 0f:16:51:41:72:e5:25:cb:61:9d:a3:f7:27:33:21:30:de:2a: 4d:08:56:41:03:9a:0b:f8:54:89:25:73:8e:2e:2e:a7:cc:de: 93:96:8e:b9:31:e7:e6:ff:36:2e:12:8c:a5:4a:c1:51:3e:86: 64:51:a7:f7:b6:89:69:27:a8:f6:1e:f7:1d:d8:ad:0d:50:f5: 39:ad:be:dd:29:9c:bd:6b:02:79:a6:e4:e1:a7:ff:c7:f1:38: 18:7b:25:ff:23:99:69:ce:bc:4e:b6:2f:4e:47:19:5c:11:c0: c7:5c:63:75:d3:c8:9c:44:6f:0a:c9:fb:6a:c0:9e:c4:cc:af: 4a:99:c2:7d:01:2c:e0:e1:78:fa:bb:d9:8c:80:61:86:40:2a: bb:4e:59:ea:3b:3e:95:a7:77:c7:81:46:cc:34:46:cb:9f:8f: 7a:96:2f:11:5a:33:c9:cb:99:54:2b:e7:51:cb:b8:94:c6:66: d2:56:ff:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwItAdNHDDGKQEmRHmkerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjhkNDJhM2FlODA1Y2U5NmFhOTRmYWU5ZjViNDQwNmZm NDU1OTkwHhcNMjUxMjA2MTMwMTEzWhcNMjUxMjA3MTMwMTEzWjAzMTEwLwYDVQQD Eyg2YTE4NWM2ZjM1MTliZjdlY2I2ZjZkNTUwZDBkNDhkOGY1Yzc4OTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzk1oPAax6u0/8ymaXQwVqH7wuqU 7rU5zfKtihdo6BFb/MRGfLEazItG9vUhtWp+enMQ+shjsOgcnJ2tNewprB/VjCSi gFdsE/+8I076rbETIurkue+kwSI1G92UNb62B6A6NEpTlc8N1/Ll9litoYZb6NT9 t0yd9fmYNRx+msqzkZq9JDwgPF9s3AEMq3a3conIKM4N6Cc++Om0f4bVKPk97Xgv /QXDIQ5mo3VlM0/CauCUHElibFKNS947sBZkT+2g4roa/zrOUGcXk58D0FkKscKy kGc6uT3XFAJX7/i36Vrkq2QkhJ6US10D6RsG0sgJeuweBNfkUZvD+od8JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoYXG81Gb9+y29tVQ0NSNj1x4kuMB8GA1UdIwQY MBaAFK341Co66AXOlqqU+un1tEBv9FWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZqVUtqcm9CYzZXcXBUNjZmVzBRR18wVlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81YjIzMDUtOTdmZC00NzMwLWIxYTAt YTc3OWI5OTNkZjU4LzEvcmZqVUtqcm9CYzZXcXBUNjZmVzBRR18wVlprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81YjIzMDUtOTdmZC00NzMwLWIxYTAtYTc3OWI5OTNkZjU4 LzEvcmZqVUtqcm9CYzZXcXBUNjZmVzBRR18wVlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckjke60P fE2DNR8ihqdcF6TBIm5Zsg/gKRLcLSRPiyhKrtfFkHDTCJEHbeZqnAIB1jt9Vq61 W1aDKLUas3DMZdljLwSbO34wDxZRQXLlJcthnaP3JzMhMN4qTQhWQQOaC/hUiSVz ji4up8zek5aOuTHn5v82LhKMpUrBUT6GZFGn97aJaSeo9h73HditDVD1Oa2+3Smc vWsCeabk4af/x/E4GHsl/yOZac68TrYvTkcZXBHAx1xjddPInERvCsn7asCexMyv SpnCfQEs4OF4+rvZjIBhhkAqu05Z6js+lad3x4FGzDRGy5+PepYvEVozycuZVCvn Ucu4lMZm0lb/fg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:57 2025 by rpki-client