This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: eWXpgcWhbta+fPd9LXd9hqxLTc2SLk6jjiTi2tcleh4= Subject key identifier: 00:EB:09:C1:AE:76:24:1C:21:92:8F:A5:CB:D4:EF:E6:5E:64:B4:6D Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019AF1646A7DFE55C207E60B64F62D935B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1963 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: KumaOhSQ1_mncFf0ZkCQhvDH-Lo.roa (hash: 0SuemogzHjG4lYfHbDePATRRaFFo9hyJ2zL/inmV6J0=) 3: P-v3vv0KtPcU5ckoJuioqfAvCBA.roa (hash: RGoV+ttam68ElUsAZjdRegMArcfjEbAdwWH0ALqYdx4=) 4: SYEjevclwiM2IUvlBue1SOh9bGs.roa (hash: UFjPgHR+7hB6t2fsS+1gtbHRxilk5aI3yi0dletWuDk=) 5: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 6: UxAe-vuq0LASbymfXY97A2tyW0I.roa (hash: wK0TUb6+fwtEAOQM+tFuYJCxYRBZyTLv6liL52P7etQ=) 7: UxYRiME_CynJL3Z4PeaSszWfcKU.roa (hash: TGPUOMFk3KB0382uXjIllR7Ek5Xq7ZkNwkj4QNmYXCo=) 8: ZcoCLAuMS0FD4SRSBrl4rRHwFtI.roa (hash: g9p+MnHrqDz1zdwz25+f7URDMFu0+pb3qO13uPcQ0yI=) 9: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 10: lQ5sD4sASnM8FucWRrfJ9N_JO3U.roa (hash: QILaZH2AQC3yUfJPEC77NKji+krwGACsw0GKn5Sbj3I=) 11: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 12: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: GlLeBRvl9tOukmfciIzECqV2DjWdmZvtk7oRvAGgK3g=) 13: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 14: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6a:7d:fe:55:c2:07:e6:0b:64:f6:2d:93:5b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=00eb09c1ae76241c21928fa5cbd4efe65e64b46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ce:e9:01:1b:a8:c2:70:51:b0:b6:f5:10:96: c3:56:b0:e3:b2:fa:4c:c4:14:a8:fd:ee:be:f0:61: d8:61:5f:22:1a:a3:e9:91:59:f6:55:f4:61:45:32: 52:07:db:40:28:72:8c:8d:ae:27:0c:15:f5:ea:80: 30:9f:d1:1b:23:db:a9:ce:13:6b:f3:b7:43:58:30: 72:16:fc:69:fd:02:93:a4:02:65:ad:45:70:47:9a: 4a:7b:ef:db:30:9e:34:83:b0:d2:73:93:83:b0:41: 39:8f:7a:1f:1b:03:05:90:0a:ad:23:38:bb:a1:97: 67:d9:8d:b1:b1:8a:be:93:14:18:2f:44:ce:80:4f: ab:e1:8a:7d:e5:e6:4e:01:11:19:75:f5:94:ce:29: 96:69:83:2a:65:b4:46:9e:83:64:a5:bc:ff:85:39: 2e:22:a6:99:f4:07:17:58:d5:30:c5:83:51:14:0c: 5c:9b:65:e0:97:30:7a:98:a6:74:b2:99:f7:2f:0c: 0b:0c:b8:80:d2:2b:98:4d:73:84:9f:8d:b3:09:c7: 38:44:30:49:43:54:b6:4b:ef:48:09:4a:01:7e:75: 5f:76:c8:9d:c2:1b:99:e0:9b:91:26:e1:d2:d7:7c: 8a:6f:7d:b8:21:b8:f0:21:cf:63:8f:27:3b:0b:41: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EB:09:C1:AE:76:24:1C:21:92:8F:A5:CB:D4:EF:E6:5E:64:B4:6D X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4a:3a:d3:e2:3f:de:30:fa:03:9e:96:b8:d9:32:45:53:b0: c2:db:d2:07:c6:40:82:dd:17:e2:ce:cc:a2:4c:c5:b3:21:2f: d0:79:67:97:57:c1:25:07:98:e7:9e:84:7e:be:fc:23:b3:6e: 5f:35:d6:67:ef:c8:b1:74:7c:5e:6a:8b:ed:2d:7a:45:46:c9: 9a:9e:67:d4:a1:31:e5:41:8f:a2:c8:b8:01:18:27:56:35:d6: b7:c8:8e:ea:c8:dd:8a:34:71:0b:27:59:e2:3f:fe:d7:51:e1: 67:4c:5b:b3:bb:a5:39:71:e6:1a:fc:4d:e1:52:b3:d7:88:c5: 26:6e:5d:8a:18:ab:28:74:46:7e:b1:bf:d9:20:0a:9a:cb:e7: fe:83:0a:c2:83:25:01:59:32:1a:57:bf:7d:f1:a4:5f:be:ce: 6d:a1:7d:bf:21:9a:74:27:bf:09:7f:1b:3f:a6:25:a7:67:89: d3:73:28:28:45:27:aa:d6:f0:26:6c:c2:61:f9:4a:bb:f6:76: 88:38:62:74:ab:21:55:2e:04:ca:10:55:71:14:4f:cb:2e:4e: 81:c9:7d:a4:6b:5f:f2:78:17:3e:e2:6e:fc:93:0c:8c:4b:1c: c7:7a:1d:55:6e:92:7f:3c:f6:3d:a4:6a:0d:64:ce:ae:8b:05: 57:bc:0d:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGp9/lXCB+YLZPYtk1sxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD EygwMGViMDljMWFlNzYyNDFjMjE5MjhmYTVjYmQ0ZWZlNjVlNjRiNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6M7pARuownBRsLb1EJbDVrDjsvpM xBSo/e6+8GHYYV8iGqPpkVn2VfRhRTJSB9tAKHKMja4nDBX16oAwn9EbI9upzhNr 87dDWDByFvxp/QKTpAJlrUVwR5pKe+/bMJ40g7DSc5ODsEE5j3ofGwMFkAqtIzi7 oZdn2Y2xsYq+kxQYL0TOgE+r4Yp95eZOAREZdfWUzimWaYMqZbRGnoNkpbz/hTku IqaZ9AcXWNUwxYNRFAxcm2XglzB6mKZ0spn3LwwLDLiA0iuYTXOEn42zCcc4RDBJ Q1S2S+9ICUoBfnVfdsidwhuZ4JuRJuHS13yKb324IbjwIc9jjyc7C0H5vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADrCcGudiQcIZKPpcvU7+ZeZLRtMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANko60+I/ 3jD6A56WuNkyRVOwwtvSB8ZAgt0X4s7MokzFsyEv0Hlnl1fBJQeY556Efr78I7Nu XzXWZ+/IsXR8XmqL7S16RUbJmp5n1KEx5UGPosi4ARgnVjXWt8iO6sjdijRxCydZ 4j/+11HhZ0xbs7ulOXHmGvxN4VKz14jFJm5dihirKHRGfrG/2SAKmsvn/oMKwoMl AVkyGle/ffGkX77ObaF9vyGadCe/CX8bP6Ylp2eJ03MoKEUnqtbwJmzCYflKu/Z2 iDhidKshVS4EyhBVcRRPyy5Ogcl9pGtf8ngXPuJu/JMMjEscx3odVW6Sfzz2PaRq DWTOrosFV7wNjA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:57:18 2025 by rpki-client