This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json) Hash identifier: H13czqp+LscA8WdoyfwzrBpal4VcLt6Hx0ACEeUFovE= Subject key identifier: 88:23:A1:5A:2C:FD:1B:EB:37:71:A1:C4:CB:7A:44:D7:9F:C8:E3:3F Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b Certificate serial: 019AF2098D54629D2E1C4DF214D169E55802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft Manifest number: 0B67 Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: 47oAZ7ALtnjytAXw6azuJ79q9jI.roa (hash: CqBkSTQVbCb2uDCbL2m8QddnjqjXpjXCwL7OFoKHIQU=) 2: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: txPax8zTYTepvo5lv2caaDKjVAL+yonIRALOK4hRk+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8d:54:62:9d:2e:1c:4d:f2:14:d1:69:e5:58:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=8823a15a2cfd1beb3771a1c4cb7a44d79fc8e33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:10:c0:62:4a:3d:d5:eb:5c:86:f7:de:38:67: 6b:4f:55:f3:c7:19:0c:b3:ed:eb:cb:13:74:ec:97: 09:be:8d:9e:91:a4:ee:63:dd:3c:1a:7d:94:3c:62: fa:a2:04:47:a0:05:4a:58:d6:e6:f8:54:ac:d3:a5: 76:15:4f:bd:09:ad:4f:ce:10:9e:5a:4f:3e:18:e7: f1:2e:28:6b:07:82:c0:41:49:9c:c4:45:56:68:ce: 6d:7b:88:0d:7e:e5:52:b9:82:fa:13:3f:a5:7f:fd: 0c:c8:6f:7b:a3:c5:33:6e:0e:d3:6a:a9:10:db:b6: ab:72:a6:1b:bd:50:c1:35:18:8c:b1:9b:f3:68:7e: 45:b3:36:20:5f:f8:b1:bf:d7:c3:4f:c5:30:cf:cd: 2c:31:df:02:2d:09:03:fe:21:56:66:97:81:c5:82: 3e:b9:08:5f:28:43:d0:31:09:36:01:30:ad:26:b6: 52:98:a0:87:39:34:32:cd:c1:6d:9f:68:ad:4f:05: ea:55:60:ce:67:63:0d:30:12:f1:68:b1:38:3e:70: 3c:63:2c:aa:65:3e:55:9a:08:8b:f9:c6:a8:cc:61: 9b:57:5b:a8:2c:eb:02:a7:b0:51:b8:87:6e:b6:96: 1c:fc:56:e7:f6:96:19:a3:f7:78:3d:50:22:90:69: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:23:A1:5A:2C:FD:1B:EB:37:71:A1:C4:CB:7A:44:D7:9F:C8:E3:3F X509v3 Authority Key Identifier: keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c3:dd:75:32:6e:02:81:b4:70:8f:f4:61:77:5a:a9:15:f3: 69:b4:4d:0f:07:af:2a:2c:d9:19:51:f3:7d:b5:c7:18:8b:10: 71:8c:98:e5:15:eb:fc:49:19:f5:e4:17:e9:a5:c8:79:0d:4e: ea:f4:68:13:69:62:05:70:1e:61:e8:c3:c2:ed:eb:4c:a1:cb: 5e:c0:81:0d:22:08:d4:b5:d5:59:f6:03:72:79:ce:64:3b:76: b5:a0:6f:16:08:89:e7:2d:7e:e6:ad:f1:b5:ba:4b:96:04:c3: a4:72:49:75:dc:77:3c:1c:93:91:b4:6d:39:5a:bf:43:ab:a1: 00:75:c6:8b:6a:e5:0f:55:98:0d:33:f2:83:0b:3b:45:fd:7a: 42:39:db:27:d1:3a:9e:a4:d4:38:6e:a0:b2:8b:aa:e1:c8:48: 88:63:2b:87:95:e9:20:af:10:ff:a1:9c:88:24:2f:a8:17:a3: e9:81:83:2f:26:be:70:c2:a2:cd:08:ec:e1:9a:60:36:7e:fa: 00:94:93:b2:50:50:ec:2b:6a:5a:f4:63:8d:5e:77:03:d6:ee: 31:3e:8e:33:40:d3:9a:9a:9f:61:d7:a5:31:49:3b:57:1c:12: 6b:bd:f3:22:7e:ab:6c:db:94:4c:12:d9:9e:97:b1:68:c3:33: ca:14:fe:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY1UYp0uHE3yFNFp5VgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzVkYTNhMjA4NzllNTVmZTk2ODUzZTBkN2FlZWZmNTMz ODZlOGIwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD Eyg4ODIzYTE1YTJjZmQxYmViMzc3MWExYzRjYjdhNDRkNzlmYzhlMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRDAYko91etchvfeOGdrT1XzxxkM s+3ryxN07JcJvo2ekaTuY908Gn2UPGL6ogRHoAVKWNbm+FSs06V2FU+9Ca1PzhCe Wk8+GOfxLihrB4LAQUmcxEVWaM5te4gNfuVSuYL6Ez+lf/0MyG97o8Uzbg7TaqkQ 27arcqYbvVDBNRiMsZvzaH5FszYgX/ixv9fDT8Uwz80sMd8CLQkD/iFWZpeBxYI+ uQhfKEPQMQk2ATCtJrZSmKCHOTQyzcFtn2itTwXqVWDOZ2MNMBLxaLE4PnA8Yyyq ZT5VmgiL+caozGGbV1uoLOsCp7BRuIdutpYc/Fbn9pYZo/d4PVAikGknbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgjoVos/RvrN3GhxMt6RNefyOM/MB8GA1UdIwQY MBaAFEY12jogh55V/paFPg167v9TOG6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1Yjgt YzQwY2UzMmI2Zjc2LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1YjgtYzQwY2UzMmI2Zjc2 LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesPddTJu AoG0cI/0YXdaqRXzabRNDwevKizZGVHzfbXHGIsQcYyY5RXr/EkZ9eQX6aXIeQ1O 6vRoE2liBXAeYejDwu3rTKHLXsCBDSII1LXVWfYDcnnOZDt2taBvFgiJ5y1+5q3x tbpLlgTDpHJJddx3PByTkbRtOVq/Q6uhAHXGi2rlD1WYDTPygws7Rf16QjnbJ9E6 nqTUOG6gsouq4chIiGMrh5XpIK8Q/6GciCQvqBej6YGDLya+cMKizQjs4ZpgNn76 AJSTslBQ7CtqWvRjjV53A9buMT6OM0DTmpqfYdelMUk7VxwSa73zIn6rbNuUTBLZ npexaMMzyhT+3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:34 2025 by rpki-client