This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json) Hash identifier: kDiVxSTitaBX3IQXkzGK7DvGrWTpzHsSbYn7P1ymyIA= Subject key identifier: DB:17:F4:37:FC:56:BC:E9:62:62:59:9A:19:75:C7:FC:73:9E:F7:3C Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Certificate serial: 019AF23F737E0F20DCFFBB2C7A1B1A2C4B71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft Manifest number: 0697 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=) 2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=) 3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: FsnX8NKbiVMZJoEQSM0p950i8TUav5Kgc9q2Ya0WYyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:73:7e:0f:20:dc:ff:bb:2c:7a:1b:1a:2c:4b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=db17f437fc56bce96262599a1975c7fc739ef73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:cc:d2:72:4e:b1:a2:0b:1a:80:22:ad:70: c8:2e:0e:27:6c:e5:4f:89:11:92:38:8e:7a:a8:06: 0f:ef:e9:85:ea:b4:fc:71:b9:e7:66:cd:57:58:12: 2a:d0:60:2a:78:0a:c4:b4:d1:18:83:fd:f7:74:0e: 22:0a:7c:b6:df:4c:6a:fb:c9:39:2e:31:42:46:db: 85:de:6a:67:d1:e9:bd:c8:32:5c:52:17:c5:9e:23: c4:5f:52:45:da:5f:a6:78:05:6f:4b:02:5c:d5:be: 9d:44:85:4a:1d:e4:d8:77:e7:52:e5:bd:e3:3f:85: a6:15:3b:b7:4e:62:43:23:ea:1c:29:a4:57:57:6a: 72:67:ee:15:ab:2b:69:9f:a2:a7:61:67:f2:07:f2: 55:9c:b5:6b:53:fa:7c:db:2a:7e:56:b0:c7:9c:3a: 7d:0d:aa:66:66:f5:56:1e:a5:63:e9:36:91:95:dc: 40:c4:3d:96:72:54:58:ae:1d:9a:b3:0c:06:87:ef: 61:65:f3:ff:cc:6a:af:1e:b9:8c:bd:5e:e5:28:68: e5:07:2d:c4:d4:85:ae:9d:d7:9d:a9:2b:1e:a4:d2: 64:27:5b:4d:a7:f4:8a:3f:15:fa:b7:78:bd:41:13: 3f:f6:4b:07:08:25:56:ab:75:45:8e:d4:2b:05:b9: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:17:F4:37:FC:56:BC:E9:62:62:59:9A:19:75:C7:FC:73:9E:F7:3C X509v3 Authority Key Identifier: keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:3a:05:c0:07:ce:86:84:60:03:6e:ea:11:e2:9c:11:44:1f: cf:51:4d:11:42:2b:b9:6c:1b:99:6d:6c:4b:03:84:f9:29:66: df:b1:36:55:a5:5f:22:d1:12:82:ee:54:4a:a4:cd:96:22:79: 60:65:c9:86:0a:2f:2d:bd:43:58:1b:f6:ba:f7:2f:f8:6d:c8: 5a:5e:05:28:0d:8b:4e:f8:b9:57:83:34:10:bc:34:40:fd:f4: 68:3b:87:b1:fe:a9:22:cd:ea:de:af:c3:31:bf:ef:6f:7f:23: 73:f6:08:a1:8c:40:82:6f:dc:1b:f9:e0:26:ae:97:37:d1:54: 9c:50:65:21:14:55:d3:be:d9:a3:18:bb:3c:46:d1:cb:42:7b: 43:92:d2:dd:ad:a5:9d:8b:c8:53:98:c2:44:00:7b:6f:d7:19: 48:68:a7:46:85:5e:b2:8e:dd:0c:cd:53:a7:b5:24:67:32:11: e7:e2:df:e2:37:cd:3b:fd:63:3a:93:ac:61:eb:9b:42:c3:31: fc:72:c2:79:01:cd:f9:08:e1:50:41:34:d9:ea:2c:7d:ac:3d: ef:89:93:b0:9d:ab:1d:cc:cc:95:b8:e3:63:c0:ac:00:fa:63: 1f:19:0f:c9:16:64:16:17:b0:e3:df:63:c7:da:4f:aa:7c:3c: d4:a0:ea:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3N+DyDc/7ssehsaLEtxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz MGYyNWEwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EyhkYjE3ZjQzN2ZjNTZiY2U5NjI2MjU5OWExOTc1YzdmYzczOWVmNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX7M0nJOsaILGoAirXDILg4nbOVP iRGSOI56qAYP7+mF6rT8cbnnZs1XWBIq0GAqeArEtNEYg/33dA4iCny230xq+8k5 LjFCRtuF3mpn0em9yDJcUhfFniPEX1JF2l+meAVvSwJc1b6dRIVKHeTYd+dS5b3j P4WmFTu3TmJDI+ocKaRXV2pyZ+4Vqytpn6KnYWfyB/JVnLVrU/p82yp+VrDHnDp9 DapmZvVWHqVj6TaRldxAxD2WclRYrh2aswwGh+9hZfP/zGqvHrmMvV7lKGjlBy3E 1IWundedqSsepNJkJ1tNp/SKPxX6t3i9QRM/9ksHCCVWq3VFjtQrBbkSMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsX9Df8VrzpYmJZmhl1x/xznvc8MB8GA1UdIwQY MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDoFwAfO hoRgA27qEeKcEUQfz1FNEUIruWwbmW1sSwOE+Slm37E2VaVfItESgu5USqTNliJ5 YGXJhgovLb1DWBv2uvcv+G3IWl4FKA2LTvi5V4M0ELw0QP30aDuHsf6pIs3q3q/D Mb/vb38jc/YIoYxAgm/cG/ngJq6XN9FUnFBlIRRV077Zoxi7PEbRy0J7Q5LS3a2l nYvIU5jCRAB7b9cZSGinRoVeso7dDM1Tp7UkZzIR5+Lf4jfNO/1jOpOsYeubQsMx /HLCeQHN+QjhUEE02eosfaw974mTsJ2rHczMlbjjY8CsAPpjHxkPyRZkFhew499j x9pPqnw81KDqGg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:11 2025 by rpki-client