This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft File: RF5JFjhV_sylL50Of079Lw8nGcU.mft (raw, json) Hash identifier: RYWzCgJRGKZBHosOnomlbbi0LRCMgKzhQ/gatAYFtaw= Subject key identifier: D4:B9:1D:36:39:15:8C:16:2C:C2:E4:89:96:71:C0:5A:08:BF:81:FF Authority key identifier: 44:5E:49:16:38:55:FE:CC:A5:2F:9D:0E:7F:4E:FD:2F:0F:27:19:C5 Certificate issuer: /CN=445e49163855fecca52f9d0e7f4efd2f0f2719c5 Certificate serial: 019AF509FE2BF4EFBD9BD00A5779F0F3A916 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft Manifest number: 0ED2 Signing time: Sat 06 Dec 2025 19:01:04 +0000 Manifest this update: Sat 06 Dec 2025 19:01:04 +0000 Manifest next update: Sun 07 Dec 2025 19:01:04 +0000 Files and hashes: 1: RF5JFjhV_sylL50Of079Lw8nGcU.crl (hash: FZljS18sOUqB79N2jpuEhUZo8p5x5ULTE9AJz+xIBCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:fe:2b:f4:ef:bd:9b:d0:0a:57:79:f0:f3:a9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445e49163855fecca52f9d0e7f4efd2f0f2719c5 Validity Not Before: Dec 6 19:01:04 2025 GMT Not After : Dec 7 19:01:04 2025 GMT Subject: CN=d4b91d3639158c162cc2e4899671c05a08bf81ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:35:55:a2:a5:54:b3:e1:c8:fa:9e:94:60:e8: 2d:90:f6:34:7b:2c:dd:f6:b2:c9:9f:06:a0:da:6b: d9:19:46:58:b5:51:66:1d:07:0c:3a:48:46:e2:88: 8c:19:e8:d3:f8:22:7a:a0:32:60:ab:11:09:e2:58: 8b:9d:c4:94:61:8e:2b:41:1a:3a:20:0f:74:bd:a9: b3:a4:c8:94:8d:76:7c:61:a3:29:1c:61:99:29:93: 93:a2:70:88:4d:cd:fd:55:0a:73:1a:3e:8b:59:70: 10:14:03:7e:37:83:08:92:1e:36:e3:e9:1c:f5:16: 59:e7:d8:6d:f9:ce:e4:42:4f:57:2d:bf:88:22:6d: 68:9c:13:31:bd:99:cd:0c:9d:d7:f1:20:ea:a9:7e: 79:bf:d1:5b:63:e7:e2:2d:b2:78:1e:8b:94:19:a7: d1:e2:a6:42:02:9e:e8:75:49:66:e0:cf:1a:30:d5: ca:05:5a:79:31:65:d7:e7:1a:f3:36:ac:ee:08:d7: 00:ba:07:bc:e2:4b:1b:c4:17:6e:24:1e:e4:c7:ee: 39:86:d0:22:0c:c6:cc:f8:69:16:c3:f4:6f:b5:21: f7:0c:c6:e7:d8:78:fc:ec:a9:f0:11:ea:bb:3f:eb: c8:84:8d:49:0f:63:21:c1:cf:16:89:41:a0:10:bd: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:1D:36:39:15:8C:16:2C:C2:E4:89:96:71:C0:5A:08:BF:81:FF X509v3 Authority Key Identifier: keyid:44:5E:49:16:38:55:FE:CC:A5:2F:9D:0E:7F:4E:FD:2F:0F:27:19:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF5JFjhV_sylL50Of079Lw8nGcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/16d14b-8824-4bb3-bdf4-26e651df3186/1/RF5JFjhV_sylL50Of079Lw8nGcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1b:e7:f4:4d:05:f8:d3:77:5d:94:1f:03:9c:28:0b:2f:a1: 89:0e:c8:a4:c0:a5:f7:00:eb:28:fe:de:b3:da:85:3c:7d:2f: 46:59:bd:ac:b8:0b:4d:c7:13:ff:31:dc:29:f7:98:e8:aa:4c: 62:c2:98:c3:1b:d2:b2:f4:f2:b9:55:57:8c:df:ba:eb:36:44: 86:3a:53:21:f5:84:c6:a6:18:fc:a5:ea:29:62:eb:41:2d:a0: 28:5f:bc:0e:b6:34:6e:8c:07:8e:87:f6:cd:c9:87:db:20:b4: fc:bf:dc:d1:c1:87:68:e4:e0:da:9b:f6:8a:b7:a0:8e:bc:6d: b5:10:c3:70:72:b7:58:94:c5:26:55:6b:3f:d9:5e:bf:4c:fe: 69:ad:d6:86:ae:18:e8:5d:96:0f:90:d2:8b:c0:c6:47:96:79: 73:06:ca:06:d4:78:a9:78:6e:48:fa:5b:c3:14:40:d0:b1:17: 40:26:4c:9a:e4:cd:57:c9:fc:7e:44:ab:b2:34:4d:f5:0b:18: 26:cb:25:60:f5:99:95:c4:02:bc:19:6a:e4:6d:52:6c:2e:8b: 05:c4:83:c0:d6:bc:1c:4f:80:82:b3:27:2b:58:ae:b2:d9:a3: f6:f6:8a:d0:8d:c5:a1:08:80:89:f6:e8:64:b4:95:3e:87:39: ec:67:3a:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cf4r9O+9m9AKV3nw86kWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NWU0OTE2Mzg1NWZlY2NhNTJmOWQwZTdmNGVmZDJmMGYy NzE5YzUwHhcNMjUxMjA2MTkwMTA0WhcNMjUxMjA3MTkwMTA0WjAzMTEwLwYDVQQD EyhkNGI5MWQzNjM5MTU4YzE2MmNjMmU0ODk5NjcxYzA1YTA4YmY4MWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DVVoqVUs+HI+p6UYOgtkPY0eyzd 9rLJnwag2mvZGUZYtVFmHQcMOkhG4oiMGejT+CJ6oDJgqxEJ4liLncSUYY4rQRo6 IA90vamzpMiUjXZ8YaMpHGGZKZOTonCITc39VQpzGj6LWXAQFAN+N4MIkh424+kc 9RZZ59ht+c7kQk9XLb+IIm1onBMxvZnNDJ3X8SDqqX55v9FbY+fiLbJ4HouUGafR 4qZCAp7odUlm4M8aMNXKBVp5MWXX5xrzNqzuCNcAuge84ksbxBduJB7kx+45htAi DMbM+GkWw/RvtSH3DMbn2Hj87KnwEeq7P+vIhI1JD2Mhwc8WiUGgEL330QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS5HTY5FYwWLMLkiZZxwFoIv4H/MB8GA1UdIwQY MBaAFEReSRY4Vf7MpS+dDn9O/S8PJxnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkY1SkZqaFZfc3lsTDUwT2YwNzlMdzhuR2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNmQxNGItODgyNC00YmIzLWJkZjQt MjZlNjUxZGYzMTg2LzEvUkY1SkZqaFZfc3lsTDUwT2YwNzlMdzhuR2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xNmQxNGItODgyNC00YmIzLWJkZjQtMjZlNjUxZGYzMTg2 LzEvUkY1SkZqaFZfc3lsTDUwT2YwNzlMdzhuR2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhvn9E0F +NN3XZQfA5woCy+hiQ7IpMCl9wDrKP7es9qFPH0vRlm9rLgLTccT/zHcKfeY6KpM YsKYwxvSsvTyuVVXjN+66zZEhjpTIfWExqYY/KXqKWLrQS2gKF+8DrY0bowHjof2 zcmH2yC0/L/c0cGHaOTg2pv2iregjrxttRDDcHK3WJTFJlVrP9lev0z+aa3Whq4Y 6F2WD5DSi8DGR5Z5cwbKBtR4qXhuSPpbwxRA0LEXQCZMmuTNV8n8fkSrsjRN9QsY JsslYPWZlcQCvBlq5G1SbC6LBcSDwNa8HE+AgrMnK1iustmj9vaK0I3FoQiAifbo ZLSVPoc57Gc6XQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:46:14 2025 by rpki-client