This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json) Hash identifier: mGV1U9s0J2eoVztrgJITeHi8s/pT+gVQIel79DRkz5M= Subject key identifier: 6B:24:43:C9:6D:D6:CA:9C:C2:EA:D8:09:71:D5:58:B6:8A:2B:CD:1A Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Certificate serial: 019AF50A581107FDF05C386D48B9FD4FB6DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:01:27 +0000 Manifest this update: Sat 06 Dec 2025 19:01:27 +0000 Manifest next update: Sun 07 Dec 2025 19:01:27 +0000 Files and hashes: 1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=) 2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: C2hg1WAMxHtDBLaZ53cPzsqDWZOfAoI3RTs32F198Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:58:11:07:fd:f0:5c:38:6d:48:b9:fd:4f:b6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Validity Not Before: Dec 6 19:01:27 2025 GMT Not After : Dec 7 19:01:27 2025 GMT Subject: CN=6b2443c96dd6ca9cc2ead80971d558b68a2bcd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:fd:db:e4:2f:93:4a:73:5e:40:c4:1f:ad: 80:28:5f:bd:70:2b:59:19:51:24:a6:dd:38:71:70: ff:13:cf:92:c9:dd:68:56:0f:8a:0e:9e:f8:ec:a7: ff:a7:c7:4d:7b:d9:a7:1a:e1:29:4d:10:36:fd:0e: e0:96:aa:73:3e:ad:3c:6a:a7:ec:c7:f0:4b:5c:ed: ce:c2:a8:74:98:aa:2b:55:57:c7:34:40:8b:48:aa: cb:48:24:8d:88:11:fc:97:fc:63:ea:cd:fb:88:f4: 10:c5:6b:94:f8:7c:a3:78:48:57:7d:7f:c7:f1:2a: 8e:be:56:4a:1c:b0:eb:26:dd:d7:44:0e:8f:ed:8f: c6:84:85:20:18:04:c2:36:b0:bf:0b:90:c2:b9:f9: 32:ca:57:61:a7:ac:d2:27:80:85:8f:84:fe:ab:f9: ab:22:67:22:31:7a:1d:c7:57:42:e8:c8:4b:18:be: da:56:93:c7:b1:d5:97:d6:f2:56:36:85:8e:0b:16: 9d:f3:2f:5c:42:05:82:54:93:58:00:3a:f4:1f:01: cb:57:8d:01:d2:59:ea:8c:34:dd:25:61:af:d0:e3: e5:1c:db:8a:1e:64:16:4a:96:fc:c3:32:0c:aa:bc: 18:6a:6a:51:9e:4c:2c:2d:11:90:1b:7f:db:3a:a0: 56:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:24:43:C9:6D:D6:CA:9C:C2:EA:D8:09:71:D5:58:B6:8A:2B:CD:1A X509v3 Authority Key Identifier: keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:59:d3:59:9f:9a:7c:4e:1f:50:9e:5d:45:4d:2f:67:6f:61: 87:01:9c:4f:f7:ce:59:16:ab:5f:7c:99:37:c9:2c:14:c9:ab: b1:54:d3:f1:94:c0:c5:06:ca:48:91:42:37:29:e2:38:62:1d: 07:83:e3:01:7e:33:9d:97:9b:b7:05:10:18:40:bd:69:43:55: fc:5f:f7:3d:65:85:27:ad:40:c2:8e:a6:3b:80:f5:34:0c:bf: 2a:cd:2f:ef:04:b7:ff:4b:60:e3:19:91:fd:72:9a:db:ae:69: 40:1b:30:d6:00:6d:66:35:9d:a1:87:85:5a:2a:0b:10:e9:0a: cd:90:c5:24:d8:10:80:e5:be:32:f5:df:e6:4e:38:82:39:4c: 9f:82:9a:20:ae:d9:37:72:8c:38:4f:49:9c:d4:2a:61:65:2f: e5:56:1a:66:a6:8d:fc:e3:9c:ed:e8:a7:47:ba:6d:d9:4d:89: 48:49:d8:02:78:ba:87:e9:3e:cc:a4:a2:e8:ba:c2:60:31:d0: 33:59:5a:c3:60:d7:96:39:a6:6c:53:08:0a:d2:21:c0:49:98: cc:4f:2c:9f:f9:63:65:8d:65:68:2b:7b:8a:a6:3d:54:fe:0c: 08:55:c3:99:e4:c2:5d:29:0f:33:0f:36:ac:de:6c:52:6a:4a: 85:d1:2e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClgRB/3wXDhtSLn9T7bbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWRmN2M1ZjgyZGJjMGIxZGJhMzI4Mjg2MmQ1M2VjODg3 ZDVjNjYwHhcNMjUxMjA2MTkwMTI3WhcNMjUxMjA3MTkwMTI3WjAzMTEwLwYDVQQD Eyg2YjI0NDNjOTZkZDZjYTljYzJlYWQ4MDk3MWQ1NThiNjhhMmJjZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv792+Qvk0pzXkDEH62AKF+9cCtZ GVEkpt04cXD/E8+Syd1oVg+KDp747Kf/p8dNe9mnGuEpTRA2/Q7glqpzPq08aqfs x/BLXO3Owqh0mKorVVfHNECLSKrLSCSNiBH8l/xj6s37iPQQxWuU+HyjeEhXfX/H 8SqOvlZKHLDrJt3XRA6P7Y/GhIUgGATCNrC/C5DCufkyyldhp6zSJ4CFj4T+q/mr ImciMXodx1dC6MhLGL7aVpPHsdWX1vJWNoWOCxad8y9cQgWCVJNYADr0HwHLV40B 0lnqjDTdJWGv0OPlHNuKHmQWSpb8wzIMqrwYampRnkwsLRGQG3/bOqBW5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGskQ8lt1sqcwurYCXHVWLaKK80aMB8GA1UdIwQY MBaAFK+t98X4LbwLHboygoYtU+yIfVxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAt NzhmNmM4MDQ3NzNkLzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAtNzhmNmM4MDQ3NzNk LzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlnTWZ+a fE4fUJ5dRU0vZ29hhwGcT/fOWRarX3yZN8ksFMmrsVTT8ZTAxQbKSJFCNyniOGId B4PjAX4znZebtwUQGEC9aUNV/F/3PWWFJ61Awo6mO4D1NAy/Ks0v7wS3/0tg4xmR /XKa265pQBsw1gBtZjWdoYeFWioLEOkKzZDFJNgQgOW+MvXf5k44gjlMn4KaIK7Z N3KMOE9JnNQqYWUv5VYaZqaN/OOc7einR7pt2U2JSEnYAni6h+k+zKSi6LrCYDHQ M1law2DXljmmbFMICtIhwEmYzE8sn/ljZY1laCt7iqY9VP4MCFXDmeTCXSkPMw82 rN5sUmpKhdEuJA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:48 2025 by rpki-client