This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json) Hash identifier: NWHirwwgIy0zfwXDtZUCq9hYBIXBcVZwtrk7RFmySnQ= Subject key identifier: ED:68:EB:D8:31:DB:AB:53:D5:97:50:EB:8F:B7:32:1D:5D:EB:AB:75 Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19 Certificate issuer: /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19 Certificate serial: 019AF1D1B0BF3CE71A3D5F57CF9E738115C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft Manifest number: 0BF1 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: 3N9UYLo0xUDRDj5u2ZGsggXWyM8.roa (hash: GzegVU/Yobk+zlKS0VWYX3GqVecmGnXDmHTuncP48uU=) 2: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: dUc3YsEpQ6iunUhp4AZBnpxzTT37+HQl9XAV1IELkFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b0:bf:3c:e7:1a:3d:5f:57:cf:9e:73:81:15:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=ed68ebd831dbab53d59750eb8fb7321d5debab75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1a:b4:a4:44:5f:01:b9:96:04:7a:bb:9d:23: 62:e0:3a:ad:8c:b5:bc:73:d9:1f:c7:15:96:4a:37: c5:84:93:de:54:3a:44:bb:1a:62:bb:97:1e:5d:61: 20:44:7d:ed:de:0e:27:26:bb:57:ea:8a:88:4f:8d: 86:47:dd:59:06:62:87:d0:13:c8:41:e8:9d:33:01: 96:82:8a:2f:9d:48:ad:3f:d3:97:8f:98:02:35:b9: fd:11:92:2d:78:09:eb:66:f5:ad:e7:6a:90:3e:2b: 5d:7a:8b:91:39:da:2d:31:f9:06:80:b8:b1:ae:66: 5e:bc:71:1b:83:26:82:a6:85:30:3d:5b:28:f5:09: b1:ec:1b:4c:2b:4e:38:cc:18:7e:b7:16:7f:5c:99: 14:46:43:98:bf:e8:81:05:21:2c:37:bc:16:d7:b8: 7c:b7:97:fd:8a:19:d1:b8:e3:3e:85:68:0d:91:27: b6:86:42:de:fe:34:a5:6d:72:f9:d0:d6:08:2c:2f: 73:89:fd:db:4d:6b:48:59:e6:30:ba:26:08:84:04: 32:6e:f1:fd:6a:6e:f8:a2:ac:7f:4d:11:be:df:a7: 6a:ff:56:a9:9c:06:1e:13:f8:30:50:c0:0e:25:88: 88:ca:90:33:ed:23:03:66:5d:ee:31:ba:3e:84:0f: 63:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:68:EB:D8:31:DB:AB:53:D5:97:50:EB:8F:B7:32:1D:5D:EB:AB:75 X509v3 Authority Key Identifier: keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:49:a8:aa:7b:99:2b:5e:f6:c0:71:f0:de:e3:c2:cc:82:68: fc:2c:6f:3a:2a:00:d7:47:f8:dc:a8:a1:bc:70:d6:f9:06:92: a3:4c:ff:02:3d:96:6f:24:a9:e5:ca:7d:b7:40:2a:5b:e9:61: 30:45:85:d5:56:bf:58:7d:e0:39:f9:1c:f6:f5:76:be:5a:0d: 0f:4a:07:1b:9f:bf:d3:40:db:68:8c:f3:1a:0a:52:de:15:09: 0b:a2:fe:15:91:b6:00:f6:35:3a:21:29:39:28:7d:95:f2:a7: 5b:5a:bc:ab:c1:e4:21:c0:71:0d:64:fe:b5:5e:e9:a5:13:cc: de:d7:d6:ea:e5:09:6c:5b:16:e9:08:a7:15:1e:90:89:0f:c8: d8:26:ba:b1:5e:b8:e1:31:3f:66:9a:29:00:39:f1:9b:7c:e8: 12:a3:ac:d9:9e:42:3d:13:fd:bd:26:4e:c1:38:96:d3:27:b4: fd:d5:cd:c3:1f:6c:1f:a4:15:57:a8:d6:84:d6:01:d9:7d:7b: ab:0e:9f:b6:da:6a:58:3f:b0:c0:b3:8d:ce:d7:68:98:d1:22: a9:13:70:ff:26:7c:2b:dc:8d:0c:ef:d3:b3:38:a9:7b:71:e3: 56:6d:44:62:58:0e:30:d9:b7:50:e9:da:e3:21:eb:7c:30:b3: 45:18:9c:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bC/POcaPV9Xz55zgRXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZjAxNzcxZDFjYzhmZDExNGM0NmE2MTYyMDZhYTRjNTlk YmRjMTkwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EyhlZDY4ZWJkODMxZGJhYjUzZDU5NzUwZWI4ZmI3MzIxZDVkZWJhYjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxq0pERfAbmWBHq7nSNi4DqtjLW8 c9kfxxWWSjfFhJPeVDpEuxpiu5ceXWEgRH3t3g4nJrtX6oqIT42GR91ZBmKH0BPI QeidMwGWgoovnUitP9OXj5gCNbn9EZIteAnrZvWt52qQPitdeouROdotMfkGgLix rmZevHEbgyaCpoUwPVso9Qmx7BtMK044zBh+txZ/XJkURkOYv+iBBSEsN7wW17h8 t5f9ihnRuOM+hWgNkSe2hkLe/jSlbXL50NYILC9zif3bTWtIWeYwuiYIhAQybvH9 am74oqx/TRG+36dq/1apnAYeE/gwUMAOJYiIypAz7SMDZl3uMbo+hA9jWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1o69gx26tT1ZdQ64+3Mh1d66t1MB8GA1UdIwQY MBaAFEbwF3HRzI/RFMRqYWIGqkxZ29wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnZBWGNkSE1qOUVVeEdwaFlnYXFURm5iM0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZTU3YTMtYTE4MS00NWRmLWI0YWUt MzE2ZjZkYWJmZmJmLzEvUnZBWGNkSE1qOUVVeEdwaFlnYXFURm5iM0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC83ZTU3YTMtYTE4MS00NWRmLWI0YWUtMzE2ZjZkYWJmZmJm LzEvUnZBWGNkSE1qOUVVeEdwaFlnYXFURm5iM0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0UmoqnuZ K172wHHw3uPCzIJo/CxvOioA10f43KihvHDW+QaSo0z/Aj2WbySp5cp9t0AqW+lh MEWF1Va/WH3gOfkc9vV2vloND0oHG5+/00DbaIzzGgpS3hUJC6L+FZG2APY1OiEp OSh9lfKnW1q8q8HkIcBxDWT+tV7ppRPM3tfW6uUJbFsW6QinFR6QiQ/I2Ca6sV64 4TE/ZpopADnxm3zoEqOs2Z5CPRP9vSZOwTiW0ye0/dXNwx9sH6QVV6jWhNYB2X17 qw6fttpqWD+wwLONztdomNEiqRNw/yZ8K9yNDO/Tszipe3HjVm1EYlgOMNm3UOna 4yHrfDCzRRicYg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:23 2025 by rpki-client