This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json) Hash identifier: z8Z7xUmB55Yi0uAwh1XmwPjlU43x0VFDdwiVGuKo5yo= Subject key identifier: B6:38:E1:83:7C:2F:BB:55:EE:5C:A9:EF:04:E1:E4:B1:07:1A:5A:F2 Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f Certificate serial: 019AF0888A16F34B467770E37EF3AEA989C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft Manifest number: 0511 Signing time: Fri 05 Dec 2025 22:01:11 +0000 Manifest this update: Fri 05 Dec 2025 22:01:11 +0000 Manifest next update: Sat 06 Dec 2025 22:01:11 +0000 Files and hashes: 1: AtEE45wMuuWclU17cb1kVGtiK-k.roa (hash: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=) 2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: f6a6j1U0O1X/0PnM1q0V8bcC353F0vhO3LfzfO3nbMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:8a:16:f3:4b:46:77:70:e3:7e:f3:ae:a9:89:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f Validity Not Before: Dec 5 22:01:11 2025 GMT Not After : Dec 6 22:01:11 2025 GMT Subject: CN=b638e1837c2fbb55ee5ca9ef04e1e4b1071a5af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:58:b9:98:2c:35:46:f5:93:fe:96:fa:a3: 08:02:80:71:88:f2:3c:af:8e:c1:09:dd:22:11:ee: f3:67:4b:fd:81:3f:74:54:5c:24:64:ec:2f:33:1e: 35:a5:51:f7:f2:c4:9f:6f:d4:06:20:67:24:b5:60: ef:8d:cf:6f:94:2c:55:76:3c:28:80:82:c3:12:0b: 30:ed:be:c2:f4:9d:db:38:36:4e:35:75:29:ca:4d: 37:78:b7:ea:6a:ea:80:f2:5d:3f:3e:e3:8f:3f:fb: 4f:cb:64:ff:ac:96:7a:9f:a4:11:6d:8e:b6:5f:40: bf:34:66:9a:a4:17:96:8b:3d:8d:ca:75:dc:bd:43: 08:43:4c:4b:33:bd:28:59:82:53:96:4e:70:c5:47: 9e:22:62:fb:2f:bb:00:1c:38:00:35:91:d7:07:b7: 1d:11:80:cf:88:e5:a8:c7:78:08:22:f6:aa:ca:5d: f6:fc:13:36:f0:38:c8:d9:9f:ed:8b:13:1d:41:60: 2a:16:73:3c:da:54:0b:aa:60:c2:6b:f1:2a:bf:c9: f3:c8:7c:ca:c4:bf:22:81:4a:33:f2:1e:84:2e:69: 2c:1b:bd:9a:27:08:06:dd:b2:68:e5:94:79:0e:f8: af:74:b7:99:3d:eb:b8:bb:8c:0b:ca:6b:be:6d:93: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:38:E1:83:7C:2F:BB:55:EE:5C:A9:EF:04:E1:E4:B1:07:1A:5A:F2 X509v3 Authority Key Identifier: keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:46:a6:1a:17:c7:3e:98:c9:00:3c:b1:09:ec:bb:41:e5:f9: 13:82:1d:54:ed:9e:82:91:3f:3f:ca:12:df:3e:9d:48:5b:9f: 43:9e:d9:ec:79:91:a7:79:e0:ac:c8:47:97:c3:4f:2f:c1:b0: ab:28:ff:42:f2:91:81:09:95:06:90:b6:36:31:6a:61:76:03: be:5a:57:92:a7:bc:51:9d:11:93:c6:48:76:33:d9:72:25:26: 66:20:b8:19:ea:ad:a2:db:8f:ff:3d:45:86:5d:01:1f:57:95: ab:84:24:28:c8:8a:90:3b:36:70:15:3a:45:a3:e3:e7:2e:77: 9c:a4:11:87:0a:70:8c:e0:e7:72:ae:ec:a8:3e:78:98:b5:56: 64:99:1c:e2:6f:d5:5c:06:83:f0:56:9a:ac:22:34:79:dc:f9: 76:9d:df:95:28:5b:e0:08:e3:c7:da:93:de:69:37:10:63:e3: 1e:3f:e5:a1:f4:1d:a6:e5:91:18:ef:bc:ab:1e:f5:4c:7d:8e: 71:0d:97:80:dc:0e:41:c9:36:8e:c5:21:f5:0f:40:e8:65:3a: a1:dc:e5:c4:1c:a3:ac:85:cd:bc:56:46:2b:74:99:c8:99:1f: 97:a8:36:d8:93:e6:f2:2a:03:7c:58:60:43:46:08:0d:2d:70: bf:b1:36:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIoW80tGd3DjfvOuqYnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZmMwYWE1YTZjMzM5MWVmZmZmYTgzNDI1YjIzYjI2NGM3 MTA4NWYwHhcNMjUxMjA1MjIwMTExWhcNMjUxMjA2MjIwMTExWjAzMTEwLwYDVQQD EyhiNjM4ZTE4MzdjMmZiYjU1ZWU1Y2E5ZWYwNGUxZTRiMTA3MWE1YWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGBYuZgsNUb1k/6W+qMIAoBxiPI8 r47BCd0iEe7zZ0v9gT90VFwkZOwvMx41pVH38sSfb9QGIGcktWDvjc9vlCxVdjwo gILDEgsw7b7C9J3bODZONXUpyk03eLfqauqA8l0/PuOPP/tPy2T/rJZ6n6QRbY62 X0C/NGaapBeWiz2NynXcvUMIQ0xLM70oWYJTlk5wxUeeImL7L7sAHDgANZHXB7cd EYDPiOWox3gIIvaqyl32/BM28DjI2Z/tixMdQWAqFnM82lQLqmDCa/Eqv8nzyHzK xL8igUoz8h6ELmksG72aJwgG3bJo5ZR5DvivdLeZPeu4u4wLymu+bZPVmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY44YN8L7tV7lyp7wTh5LEHGlryMB8GA1UdIwQY MBaAFEX8CqWmwzke//+oNCWyOyZMcQhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYt OTI3MTliMDBiYmQ0LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYtOTI3MTliMDBiYmQ0 LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUamGhfH PpjJADyxCey7QeX5E4IdVO2egpE/P8oS3z6dSFufQ57Z7HmRp3ngrMhHl8NPL8Gw qyj/QvKRgQmVBpC2NjFqYXYDvlpXkqe8UZ0Rk8ZIdjPZciUmZiC4GeqtotuP/z1F hl0BH1eVq4QkKMiKkDs2cBU6RaPj5y53nKQRhwpwjODncq7sqD54mLVWZJkc4m/V XAaD8FaarCI0edz5dp3flShb4Ajjx9qT3mk3EGPjHj/lofQdpuWRGO+8qx71TH2O cQ2XgNwOQck2jsUh9Q9A6GU6odzlxByjrIXNvFZGK3SZyJkfl6g22JPm8ioDfFhg Q0YIDS1wv7E29g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:43 2025 by rpki-client