This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json) Hash identifier: rd+3oz8GSOnItA4faMwJpGeHlUJTJeNsyi/6yS9g4zU= Subject key identifier: 81:1C:11:7A:C3:08:83:49:1D:B9:10:E3:E6:E6:E4:BF:C2:34:9E:D2 Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e Certificate serial: 019AF2096FE13EA0D474F760A0A3322ED29B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft Manifest number: 06F5 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=) 2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: YG2NEy+mICmUMbwtrlKTQcNs0vgywNMlblrTRfN1Lwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6f:e1:3e:a0:d4:74:f7:60:a0:a3:32:2e:d2:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=811c117ac30883491db910e3e6e6e4bfc2349ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:f4:f6:cb:72:ee:67:25:0b:4c:2d:d0:80: c1:e3:82:1d:53:d0:4c:93:04:06:1b:10:14:fd:8e: 06:b3:bf:b6:4d:a9:00:26:33:3f:04:e0:24:8a:71: ae:ed:c0:77:9f:a9:fd:1c:1d:c0:1d:ec:7a:c8:25: be:5b:40:d9:b3:a1:64:27:c8:1c:49:6a:1a:54:e0: 76:b0:fa:c6:33:2a:b9:ac:4c:10:9a:32:a4:56:e3: 05:9e:34:c0:66:3b:6b:e7:97:dc:f4:cf:8b:83:99: f3:b5:81:d0:61:9f:b3:b3:33:0f:5e:35:d0:0c:75: 40:31:ae:82:89:31:6d:ba:fd:0b:8a:3f:58:0f:25: 90:0b:9f:9b:0f:fb:78:6f:16:a0:b0:21:79:74:b4: 35:e9:6d:8e:e0:c0:b5:77:77:08:50:2f:89:0d:6a: a6:82:a5:ef:a6:2a:53:34:06:a2:61:77:9e:0e:de: 87:1c:83:38:ff:82:9b:d7:e4:db:35:de:2a:8a:73: 80:07:49:84:a2:cf:a6:53:21:3c:ab:39:9f:ca:90: 8a:1d:35:a0:2c:70:01:4c:24:50:21:c1:ca:61:aa: e5:d2:9d:5d:5d:c8:4d:a5:d5:8b:ee:ac:7e:6c:81: 84:c6:ca:07:16:8e:24:d9:dd:55:a3:79:c3:82:f1: 91:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1C:11:7A:C3:08:83:49:1D:B9:10:E3:E6:E6:E4:BF:C2:34:9E:D2 X509v3 Authority Key Identifier: keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:07:bc:ea:79:22:04:a4:ad:34:f9:4c:38:68:2c:bd:d7:64: 53:36:5a:d4:74:95:29:d2:c0:69:eb:d1:0f:ef:63:5d:e0:4a: 6c:ee:83:92:d6:be:71:17:1a:c8:05:a9:26:dd:de:fd:2f:a9: 8c:70:2d:88:3f:c6:ff:85:85:d0:83:e5:d6:f8:14:18:a7:85: 55:6d:5f:2c:ca:eb:cb:f9:a7:6d:30:14:71:11:f1:ff:64:d3: ad:c7:39:60:c6:f0:ba:57:45:50:90:26:25:e8:69:23:b4:b1: 0a:39:54:c9:7f:07:30:92:d7:4c:d0:4e:58:ad:ef:e8:b1:1a: 12:7a:9f:4a:41:18:93:ea:2b:64:72:ed:e2:bd:aa:4e:4a:3c: db:28:36:f6:27:2a:5b:cc:43:f1:58:5a:fe:14:0e:b7:a1:0f: c2:ce:fd:49:63:47:81:21:a2:55:37:7e:4b:6c:55:33:67:77: 9d:00:1f:fe:04:ef:74:86:80:07:d7:17:db:1e:6b:49:37:f7: 13:30:12:9a:0e:f3:4a:6c:78:a5:84:fb:a4:bc:4b:6f:37:9b: 97:61:1a:c8:08:7a:12:db:83:e8:5f:7a:21:32:09:97:85:9f: e2:52:05:96:31:51:6c:76:e9:ef:52:1c:b2:c4:77:51:f7:8b: 86:51:b7:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW/hPqDUdPdgoKMyLtKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ0OTc1YTVkYmRiZjgyM2I0YTBhNmI3ZWViOTliMTQ4 NDM2N2UwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD Eyg4MTFjMTE3YWMzMDg4MzQ5MWRiOTEwZTNlNmU2ZTRiZmMyMzQ5ZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2D09sty7mclC0wt0IDB44IdU9BM kwQGGxAU/Y4Gs7+2TakAJjM/BOAkinGu7cB3n6n9HB3AHex6yCW+W0DZs6FkJ8gc SWoaVOB2sPrGMyq5rEwQmjKkVuMFnjTAZjtr55fc9M+Lg5nztYHQYZ+zszMPXjXQ DHVAMa6CiTFtuv0Lij9YDyWQC5+bD/t4bxagsCF5dLQ16W2O4MC1d3cIUC+JDWqm gqXvpipTNAaiYXeeDt6HHIM4/4Kb1+TbNd4qinOAB0mEos+mUyE8qzmfypCKHTWg LHABTCRQIcHKYarl0p1dXchNpdWL7qx+bIGExsoHFo4k2d1Vo3nDgvGR3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEcEXrDCINJHbkQ4+bm5L/CNJ7SMB8GA1UdIwQY MBaAFK30SXWl29v4I7SgprfuuZsUhDZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDkt YmJiMGM4MDI4ZTJiLzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDktYmJiMGM4MDI4ZTJi LzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowe86nki BKStNPlMOGgsvddkUzZa1HSVKdLAaevRD+9jXeBKbO6Dkta+cRcayAWpJt3e/S+p jHAtiD/G/4WF0IPl1vgUGKeFVW1fLMrry/mnbTAUcRHx/2TTrcc5YMbwuldFUJAm JehpI7SxCjlUyX8HMJLXTNBOWK3v6LEaEnqfSkEYk+orZHLt4r2qTko82yg29icq W8xD8Vha/hQOt6EPws79SWNHgSGiVTd+S2xVM2d3nQAf/gTvdIaAB9cX2x5rSTf3 EzASmg7zSmx4pYT7pLxLbzebl2EayAh6EtuD6F96ITIJl4Wf4lIFljFRbHbp71Ic ssR3UfeLhlG3Wg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:47 2025 by rpki-client