This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json) Hash identifier: gat5pfmB+uAruPDp8/Vu5OM4B0IPnQrx/j8bn+ZsTZU= Subject key identifier: C3:BE:2C:61:3C:F5:4F:48:66:EA:54:67:46:1E:A1:04:77:7C:96:43 Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5 Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5 Certificate serial: 019AF42E56EEAB9D1270AFA773B8EBC7C578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 15:01:08 +0000 Manifest this update: Sat 06 Dec 2025 15:01:08 +0000 Manifest next update: Sun 07 Dec 2025 15:01:08 +0000 Files and hashes: 1: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (hash: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=) 2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: OadErXu5rVorrDTGYQrKZPSJpk4nZ6DeZ7zUEX2UeH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:56:ee:ab:9d:12:70:af:a7:73:b8:eb:c7:c5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5 Validity Not Before: Dec 6 15:01:08 2025 GMT Not After : Dec 7 15:01:08 2025 GMT Subject: CN=c3be2c613cf54f4866ea5467461ea104777c9643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:23:20:04:a0:e4:83:50:53:91:3e:14:9b: 5a:39:18:a2:44:c0:ab:ac:93:dd:51:c4:0c:8c:95: 69:2a:37:2b:47:03:43:e3:5e:fb:12:19:a5:e0:7a: 7e:be:1e:70:27:d4:da:66:4d:53:98:3e:d7:91:d8: a8:b0:e9:9c:71:ff:56:e6:6d:3e:50:1b:9a:f5:c1: 35:09:6f:e6:44:39:6d:e7:c2:12:de:05:ed:70:97: ea:2e:62:05:59:82:0e:de:06:09:e2:11:e4:dc:9f: 3d:8d:63:5d:fb:78:9b:dd:de:4e:b9:67:ec:99:a6: e9:b7:37:da:8f:45:4a:ec:9b:df:85:ae:69:b2:08: fe:4b:64:de:62:84:6b:43:7d:31:7d:66:b5:d4:18: 50:fb:7b:3d:99:64:f8:28:c8:6c:3f:33:0c:b3:b3: 93:ab:83:b4:e2:e3:57:34:70:23:5f:6f:6f:55:54: b7:8e:b0:ee:1c:65:2e:1c:01:a2:0a:d3:b2:8c:ce: e9:df:e0:39:54:6b:46:4d:0a:9c:3f:c7:51:4c:bf: 06:e3:b7:e3:f3:70:14:6f:62:f3:53:32:4c:24:16: 4d:6c:48:ce:f5:09:b3:55:a2:96:04:16:f3:f5:b9: 48:8c:df:1e:7b:af:5e:08:a3:b2:5d:c5:73:27:1c: 04:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BE:2C:61:3C:F5:4F:48:66:EA:54:67:46:1E:A1:04:77:7C:96:43 X509v3 Authority Key Identifier: keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:8c:db:e1:34:c9:98:f1:5e:39:78:1c:35:19:f0:92:94:70: c8:eb:8b:3a:22:d6:af:57:95:11:1f:0b:c6:03:3b:33:ce:fc: 97:ff:b6:d6:ed:10:89:90:2b:01:2c:29:39:e9:97:8f:12:6b: dc:2e:3b:9b:da:84:c5:73:64:f3:dc:77:66:d9:68:a5:23:d4: 19:65:4a:ef:38:19:79:a4:ec:20:f6:2c:e4:e7:8a:94:87:31: c5:8f:83:12:41:d3:44:84:50:9e:25:f7:13:35:bf:9e:1a:3d: 09:7f:99:df:15:57:83:2f:74:cb:2e:ee:8a:1c:55:4c:18:62: e9:de:c7:af:87:4f:c6:93:66:90:a4:4f:ca:75:cc:73:52:69: 25:fd:06:a6:ef:27:09:c5:41:07:20:40:37:68:ef:63:cb:72: ae:ab:95:6e:e0:ec:19:5a:3b:e0:e3:f7:7b:7b:72:11:e9:d8: 58:7d:94:5c:b8:3d:9a:21:66:7d:1e:5c:86:3d:d5:1c:d2:3a: da:f4:a8:54:b8:2d:9d:1f:2b:8a:82:db:c9:79:a5:2f:71:78: 83:2e:5b:07:f2:cf:bf:c2:35:87:c4:e7:69:f8:5b:26:eb:bc: 95:a1:a5:ef:8e:14:5b:26:fe:4f:98:17:12:c1:8c:59:12:dd: 0d:3c:bd:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Llbuq50ScK+nc7jrx8V4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTI2MzMyNzRiMWQ4ODZhOTI3NTdmNjUyMTljMmU3NTQ2 ZWNkZjUwHhcNMjUxMjA2MTUwMTA4WhcNMjUxMjA3MTUwMTA4WjAzMTEwLwYDVQQD EyhjM2JlMmM2MTNjZjU0ZjQ4NjZlYTU0Njc0NjFlYTEwNDc3N2M5NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRQjIASg5INQU5E+FJtaORiiRMCr rJPdUcQMjJVpKjcrRwND4177Ehml4Hp+vh5wJ9TaZk1TmD7XkdiosOmccf9W5m0+ UBua9cE1CW/mRDlt58IS3gXtcJfqLmIFWYIO3gYJ4hHk3J89jWNd+3ib3d5OuWfs mabptzfaj0VK7Jvfha5psgj+S2TeYoRrQ30xfWa11BhQ+3s9mWT4KMhsPzMMs7OT q4O04uNXNHAjX29vVVS3jrDuHGUuHAGiCtOyjM7p3+A5VGtGTQqcP8dRTL8G47fj 83AUb2LzUzJMJBZNbEjO9QmzVaKWBBbz9blIjN8ee69eCKOyXcVzJxwE5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMO+LGE89U9IZupUZ0YeoQR3fJZDMB8GA1UdIwQY MBaAFERSYzJ0sdiGqSdX9lIZwudUbs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgt YmI4NmQ0YmEwMmRlLzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgtYmI4NmQ0YmEwMmRl LzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4zb4TTJ mPFeOXgcNRnwkpRwyOuLOiLWr1eVER8LxgM7M878l/+21u0QiZArASwpOemXjxJr 3C47m9qExXNk89x3ZtlopSPUGWVK7zgZeaTsIPYs5OeKlIcxxY+DEkHTRIRQniX3 EzW/nho9CX+Z3xVXgy90yy7uihxVTBhi6d7Hr4dPxpNmkKRPynXMc1JpJf0Gpu8n CcVBByBAN2jvY8tyrquVbuDsGVo74OP3e3tyEenYWH2UXLg9miFmfR5chj3VHNI6 2vSoVLgtnR8rioLbyXmlL3F4gy5bB/LPv8I1h8TnafhbJuu8laGl744UWyb+T5gX EsGMWRLdDTy9Mw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:18 2025 by rpki-client