This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json) Hash identifier: TNezF45nrmKj/swuS+7qjHoRpEx39gkzaj1MOwsQojs= Subject key identifier: 26:40:DF:A2:FF:8A:79:13:F4:93:B2:D4:A2:80:08:DA:B7:81:A8:3F Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30 Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830 Certificate serial: 019AF209815753075198FDF42020954DF6FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: csdHd_e7Tx65D2MBS9ZtbLUxU90.roa (hash: fNuNtwuPS3v94+W5VQY9K+dMsKggefc0dwxaWQUAwyY=) 2: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: 8dQm3pAvC0hq6sZW3Po+oTksppK3hhR7Y80oWI3ZBac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:81:57:53:07:51:98:fd:f4:20:20:95:4d:f6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830 Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=2640dfa2ff8a7913f493b2d4a28008dab781a83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:c9:d6:6c:73:47:50:67:62:5c:8b:d3:2e: 2b:1a:c6:88:83:08:eb:7c:50:a6:37:f7:86:5a:d1: 06:57:52:00:87:f2:f6:a7:ad:e4:82:63:ac:48:7b: f7:d3:2d:ee:f1:36:41:26:f6:2a:fc:8d:5b:6e:20: c6:ed:0d:7e:32:0d:12:a3:49:08:80:18:44:30:ee: 57:9d:db:c5:86:ee:ba:c2:91:42:7a:d1:21:d7:2a: 93:9f:e1:ec:2b:92:b3:5d:ce:46:18:bc:d3:e4:77: f6:f9:b6:89:a3:81:86:8e:a7:77:2b:5a:74:1c:e1: 09:95:46:fc:72:66:00:e8:dc:14:ae:f0:5f:90:ad: a8:6e:cd:61:53:f7:b9:6a:23:47:e7:d2:96:46:cc: 32:cb:fc:1d:4a:b1:f5:5a:6a:03:78:00:62:6d:06: f0:0d:78:ec:a2:f0:10:84:09:90:68:fc:a7:28:cd: 71:3c:9a:74:67:3d:9e:4b:0a:e2:ca:8a:9f:68:3e: 98:32:e2:56:05:09:39:18:46:68:62:d3:2d:b6:2b: 56:06:0a:24:f9:c8:38:05:60:da:04:61:17:36:18: 34:6f:05:72:3f:f4:9c:32:28:d4:d0:1b:d4:26:6e: 2e:66:f5:14:3d:ae:74:a5:29:6f:77:95:fe:e9:f3: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:40:DF:A2:FF:8A:79:13:F4:93:B2:D4:A2:80:08:DA:B7:81:A8:3F X509v3 Authority Key Identifier: keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fe:06:62:55:40:c4:74:4d:a7:3f:9b:6e:15:77:fe:0e:04: ae:c6:8f:d2:5e:c6:0c:54:d6:bc:78:ec:fd:6b:d1:36:8d:91: d3:5b:6b:01:8b:5b:9f:2e:40:31:3a:a4:ca:c0:3b:14:0e:2e: 5e:1f:be:f7:a8:2d:2e:82:57:a9:5e:08:93:ca:2b:c6:94:7a: 61:ef:88:4b:80:0d:b7:e8:1b:7c:14:38:b0:9d:83:e4:b6:e1: 4f:ba:77:af:d4:9e:74:f9:21:52:e1:43:42:78:71:38:06:5a: bc:e2:fe:80:9d:df:a3:bb:6e:56:0d:47:ac:e1:79:49:e2:85: 7b:6d:11:86:99:79:c7:3f:09:f2:33:02:2b:26:8d:d5:10:b8: db:cf:f1:36:00:bb:cd:62:c6:4d:80:ea:f0:4d:a7:ca:1c:15: c3:e3:7e:62:7c:8c:2d:ef:4f:22:1c:3c:f9:6b:f6:92:a0:00: 31:a9:fa:01:b8:d4:17:a7:9f:09:42:e9:0a:f0:73:ba:87:b6: 57:f9:e0:7f:38:06:76:47:e3:04:e7:6b:35:b7:1f:1e:3f:d1: b4:a9:55:90:0c:31:2b:a0:a0:c3:81:66:ae:a3:bf:19:6d:db: 86:d8:f8:53:c1:6d:0f:2f:ff:0e:44:1a:c9:51:50:1d:d9:4e: 32:e2:b4:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYFXUwdRmP30ICCVTfb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZmQ5MGNiMzU3NDJmOWU1ODFlOGNiZGYwZTNlMTIzYTg0 OWM4MzAwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD EygyNjQwZGZhMmZmOGE3OTEzZjQ5M2IyZDRhMjgwMDhkYWI3ODFhODNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumDJ1mxzR1BnYlyL0y4rGsaIgwjr fFCmN/eGWtEGV1IAh/L2p63kgmOsSHv30y3u8TZBJvYq/I1bbiDG7Q1+Mg0So0kI gBhEMO5XndvFhu66wpFCetEh1yqTn+HsK5KzXc5GGLzT5Hf2+baJo4GGjqd3K1p0 HOEJlUb8cmYA6NwUrvBfkK2obs1hU/e5aiNH59KWRswyy/wdSrH1WmoDeABibQbw DXjsovAQhAmQaPynKM1xPJp0Zz2eSwriyoqfaD6YMuJWBQk5GEZoYtMttitWBgok +cg4BWDaBGEXNhg0bwVyP/ScMijU0BvUJm4uZvUUPa50pSlvd5X+6fMn1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZA36L/inkT9JOy1KKACNq3gag/MB8GA1UdIwQY MBaAFK39kMs1dC+eWB6MvfDj4SOoScgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83ZTIyNGQtZjE1NC00Zjc1LWEyYTgt ZWI3ZWM0ZDdkY2E4LzEvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83ZTIyNGQtZjE1NC00Zjc1LWEyYTgtZWI3ZWM0ZDdkY2E4 LzEvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/4GYlVA xHRNpz+bbhV3/g4ErsaP0l7GDFTWvHjs/WvRNo2R01trAYtbny5AMTqkysA7FA4u Xh++96gtLoJXqV4Ik8orxpR6Ye+IS4ANt+gbfBQ4sJ2D5LbhT7p3r9SedPkhUuFD QnhxOAZavOL+gJ3fo7tuVg1HrOF5SeKFe20Rhpl5xz8J8jMCKyaN1RC428/xNgC7 zWLGTYDq8E2nyhwVw+N+YnyMLe9PIhw8+Wv2kqAAMan6AbjUF6efCULpCvBzuoe2 V/ngfzgGdkfjBOdrNbcfHj/RtKlVkAwxK6Cgw4FmrqO/GW3bhtj4U8FtDy//DkQa yVFQHdlOMuK0iQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:26 2025 by rpki-client