This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json) Hash identifier: iZmMfH/4s5t/3wpEPd52oVAFHcBF1oNygQpDdMNYS2k= Subject key identifier: B5:44:95:9A:DD:5E:73:EC:CC:13:CB:E8:EB:6B:F0:3D:0F:B1:35:13 Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Certificate serial: 019AF46552581C6355FDE63B8A543F6AA369 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft Manifest number: 0662 Signing time: Sat 06 Dec 2025 16:01:12 +0000 Manifest this update: Sat 06 Dec 2025 16:01:12 +0000 Manifest next update: Sun 07 Dec 2025 16:01:12 +0000 Files and hashes: 1: 3MSuooCKHgIIUe741NoPew7fM6U.roa (hash: XKzD8YwrOGRcbqdlpu8IePXtpBqyVK3W7mHC5tD4SHY=) 2: D0IiHp-JRFUBLBIMco4yz6rCtC8.roa (hash: RH04SIPsMKZVw07b+Tt+/enaXnFcPsETZoWJ4h4XK54=) 3: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: Qr3eBSHLzCDqc4pkOaE0qPt5jIK6dlPP86PbwSHADRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:52:58:1c:63:55:fd:e6:3b:8a:54:3f:6a:a3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Validity Not Before: Dec 6 16:01:12 2025 GMT Not After : Dec 7 16:01:12 2025 GMT Subject: CN=b544959add5e73eccc13cbe8eb6bf03d0fb13513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:ef:f9:d2:99:60:ec:32:c3:76:b1:f5:80: 90:79:55:8f:d5:49:34:8e:46:24:73:53:85:ee:d6: 3c:d8:fd:41:3c:39:d2:b2:99:02:2a:51:c4:cd:64: 6c:c2:83:d6:fa:9a:a2:82:bf:ba:86:5b:3c:29:9b: 22:5b:df:57:fd:fc:dc:5d:a6:9b:2e:9e:d8:17:96: 75:87:cf:38:76:ab:56:03:e0:fc:a5:41:27:47:43: 59:ef:79:74:75:7f:6c:aa:e0:ca:fc:3a:f2:da:5b: 61:fb:35:b4:49:c5:62:08:39:41:da:99:f7:cf:b2: 23:6f:5c:f9:87:7c:71:bc:8e:ff:ed:72:4d:a5:6e: d1:28:64:09:52:43:52:a2:e0:2f:dd:cb:59:93:dd: 55:c9:a2:e5:db:37:69:e4:b0:c0:08:a6:32:1c:22: ae:9e:73:4b:82:20:81:06:67:62:d0:44:c7:6d:3f: 9b:d8:d7:a6:57:ab:f2:e1:12:26:23:aa:9e:3b:d3: 2d:6d:4a:71:00:d4:1d:df:ef:46:90:2e:43:73:cb: 5a:93:95:3b:6c:2d:f5:f1:a6:58:a7:f8:fd:9b:df: 18:d3:bf:aa:85:23:72:0e:18:3a:fa:50:aa:4e:d5: 3b:9d:96:ad:d6:08:14:e8:a9:38:5f:a1:76:76:bf: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:44:95:9A:DD:5E:73:EC:CC:13:CB:E8:EB:6B:F0:3D:0F:B1:35:13 X509v3 Authority Key Identifier: keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1d:d8:c7:a4:be:8c:fa:b9:31:4d:5b:76:85:0e:93:73:f3: d9:72:04:3a:70:c0:50:7b:42:e4:a2:ef:a5:4c:76:f1:9a:ec: e7:02:65:77:5b:01:17:43:bd:70:61:4e:8f:15:b4:d3:65:3b: f1:50:12:89:22:c8:39:11:bb:9e:83:85:8f:ed:ca:c7:8a:10: bb:ee:ad:36:03:fa:ae:9c:e5:53:ae:e6:51:ec:70:34:df:87: 4d:45:ba:63:38:81:15:c6:ae:88:f6:34:2c:92:b2:f8:30:fe: 19:fb:28:e3:98:56:cd:5a:60:f3:7c:66:f2:70:a6:8c:b9:89: 56:72:29:e2:47:04:79:20:8e:fe:49:0a:a3:42:3f:c0:42:30: a6:56:9d:e3:c9:99:7e:a4:15:c6:53:fb:d8:49:d0:f9:6c:07: 89:27:ba:cc:4a:dd:9f:a5:08:b7:b3:31:fb:e2:b4:6c:f5:aa: 98:86:93:06:ec:94:d1:26:1c:2a:35:b4:f6:5d:93:18:b8:fd: af:d8:a9:bf:20:e8:3d:e1:57:7d:03:8f:60:96:0b:29:9f:e9: b2:52:b0:46:a5:a9:e4:de:77:5f:1e:f5:c3:46:5d:6a:d9:c3: d7:a1:19:a6:4a:f9:90:1f:28:91:3b:2c:a4:47:74:8f:7d:7c: c8:c7:21:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVJYHGNV/eY7ilQ/aqNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi ZDNjNmUwHhcNMjUxMjA2MTYwMTEyWhcNMjUxMjA3MTYwMTEyWjAzMTEwLwYDVQQD EyhiNTQ0OTU5YWRkNWU3M2VjY2MxM2NiZThlYjZiZjAzZDBmYjEzNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVDv+dKZYOwyw3ax9YCQeVWP1Uk0 jkYkc1OF7tY82P1BPDnSspkCKlHEzWRswoPW+pqigr+6hls8KZsiW99X/fzcXaab Lp7YF5Z1h884dqtWA+D8pUEnR0NZ73l0dX9squDK/Dry2lth+zW0ScViCDlB2pn3 z7Ijb1z5h3xxvI7/7XJNpW7RKGQJUkNSouAv3ctZk91VyaLl2zdp5LDACKYyHCKu nnNLgiCBBmdi0ETHbT+b2NemV6vy4RImI6qeO9MtbUpxANQd3+9GkC5Dc8tak5U7 bC318aZYp/j9m98Y07+qhSNyDhg6+lCqTtU7nZat1ggU6Kk4X6F2dr8U6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVElZrdXnPszBPL6Otr8D0PsTUTMB8GA1UdIwQY MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt NTBkNzA5YmZmZWI1LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1 LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHR3Yx6S+ jPq5MU1bdoUOk3Pz2XIEOnDAUHtC5KLvpUx28Zrs5wJld1sBF0O9cGFOjxW002U7 8VASiSLIORG7noOFj+3Kx4oQu+6tNgP6rpzlU67mUexwNN+HTUW6YziBFcauiPY0 LJKy+DD+Gfso45hWzVpg83xm8nCmjLmJVnIp4kcEeSCO/kkKo0I/wEIwplad48mZ fqQVxlP72EnQ+WwHiSe6zErdn6UIt7Mx++K0bPWqmIaTBuyU0SYcKjW09l2TGLj9 r9ipvyDoPeFXfQOPYJYLKZ/pslKwRqWp5N53Xx71w0ZdatnD16EZpkr5kB8okTss pEd0j318yMchVA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:08:21 2025 by rpki-client