This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json) Hash identifier: 2DaagRahzkcBeJQ3otwN5W77K03aEZ+NYrmj9Vbnr8s= Subject key identifier: 8F:DA:2E:F1:09:83:2C:C4:71:0D:46:8F:FC:66:41:F8:CE:5B:B1:04 Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53 Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53 Certificate serial: 019B2B1E8334A1004FCBCE50718972334D2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft Manifest number: 0E62 Signing time: Wed 17 Dec 2025 07:02:58 +0000 Manifest this update: Wed 17 Dec 2025 07:02:58 +0000 Manifest next update: Thu 18 Dec 2025 07:02:58 +0000 Files and hashes: 1: FdZc5w6NQTxVaX5pVim2SXSRdFw.roa (hash: 3yS2WlAT7COs2QdB7b8/iS1aVVb5UF5pqjux+yVKvWo=) 2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: pKc2YhAxe/MgpLminfXZP1jn4oYLE8aC89dGWxf58Cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:83:34:a1:00:4f:cb:ce:50:71:89:72:33:4d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53 Validity Not Before: Dec 17 07:02:58 2025 GMT Not After : Dec 18 07:02:58 2025 GMT Subject: CN=8fda2ef109832cc4710d468ffc6641f8ce5bb104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b5:eb:27:34:71:86:9b:7a:14:b0:f8:07:db: 0a:ef:f4:60:3d:a1:0a:ef:2a:0d:da:72:f3:60:cd: 28:0f:9d:ee:98:59:35:22:31:ff:8e:ea:e9:85:5d: d5:e1:fd:52:74:da:1c:a1:85:42:60:74:ac:90:90: 2d:ad:75:25:0c:4e:4f:0d:f2:4e:79:e6:00:d8:71: 39:59:68:ac:a8:ed:fb:b0:1d:53:c7:37:5d:05:24: fa:14:44:a7:a9:9a:1c:c3:04:bb:07:63:d1:96:b6: 00:2a:ad:d5:c1:c8:a6:65:11:cb:68:40:db:1b:54: 3f:e1:72:9e:2d:62:32:01:61:d5:be:ba:51:58:af: 21:60:57:d9:a8:f2:d3:ff:e4:10:1e:2c:89:db:d9: 83:0d:2a:6c:0d:56:33:b9:52:e9:21:7d:32:03:c2: d0:4e:cb:58:4a:ba:f0:64:f6:46:4f:ed:0b:ad:2d: c1:c8:3b:de:9c:81:fc:f0:6b:a2:8e:8b:6e:bf:28: be:9c:c9:d4:c2:b0:f3:24:13:d1:73:7c:5c:22:6c: 61:53:f4:bc:50:cd:7a:db:be:6b:94:bf:d8:89:c5: 87:20:cf:4c:4d:7f:02:8d:5e:c4:36:08:51:3e:55: d1:02:2b:9f:3b:75:d2:35:5f:4b:c9:c3:6d:a4:aa: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:2E:F1:09:83:2C:C4:71:0D:46:8F:FC:66:41:F8:CE:5B:B1:04 X509v3 Authority Key Identifier: keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:53:a7:c4:51:28:23:5d:c2:3f:4e:d9:7f:fc:c0:d0:ed:73: f7:ec:8c:a6:95:e8:a9:1e:e7:60:fe:1e:2c:90:98:74:08:c8: a6:3c:01:8b:e9:14:1f:e3:f4:94:3c:17:d6:9d:1e:83:e9:08: ad:cd:a8:1d:c1:4e:bd:18:e7:af:3e:a2:c5:97:ad:b6:dc:bc: 0a:be:a1:24:f4:87:de:0b:91:1c:03:92:c3:ed:b9:80:f1:88: 91:71:38:77:88:69:aa:90:2f:38:e2:6c:51:3a:fb:73:47:4c: e3:32:a1:48:f5:0a:b3:a6:e0:8a:98:38:e6:1d:c3:f4:0b:43: 2d:d9:27:60:e0:8f:46:c0:3a:ae:6d:21:0d:c3:95:84:39:a6: ab:83:ec:57:2a:57:b4:3c:81:c3:72:8c:4f:a2:9f:0b:12:ee: 1e:3c:8e:f0:b9:10:f6:13:9f:f7:fe:e6:d1:7d:2b:70:b1:40: 36:51:3d:f2:a6:16:8e:ff:69:ac:9e:82:bd:c9:3c:6e:58:03: cf:79:48:2d:b7:9e:33:96:3a:4e:15:d1:2d:48:18:a4:41:bd: 1d:82:70:49:08:30:53:8b:d6:86:6d:76:2b:7a:a5:bf:b0:09: 8e:6a:8b:1d:24:e4:cc:82:35:82:1d:f1:eb:66:fe:44:74:98: 49:33:39:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHoM0oQBPy85QcYlyM00tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZWQxMTE2MzBlMDUyOTc3OTVkZGRkMjk4ZWExZmIyOWU2 OTVjNTMwHhcNMjUxMjE3MDcwMjU4WhcNMjUxMjE4MDcwMjU4WjAzMTEwLwYDVQQD Eyg4ZmRhMmVmMTA5ODMyY2M0NzEwZDQ2OGZmYzY2NDFmOGNlNWJiMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rXrJzRxhpt6FLD4B9sK7/RgPaEK 7yoN2nLzYM0oD53umFk1IjH/jurphV3V4f1SdNocoYVCYHSskJAtrXUlDE5PDfJO eeYA2HE5WWisqO37sB1TxzddBST6FESnqZocwwS7B2PRlrYAKq3VwcimZRHLaEDb G1Q/4XKeLWIyAWHVvrpRWK8hYFfZqPLT/+QQHiyJ29mDDSpsDVYzuVLpIX0yA8LQ TstYSrrwZPZGT+0LrS3ByDvenIH88Guijotuvyi+nMnUwrDzJBPRc3xcImxhU/S8 UM16275rlL/YicWHIM9MTX8CjV7ENghRPlXRAiufO3XSNV9LycNtpKouTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/aLvEJgyzEcQ1Gj/xmQfjOW7EEMB8GA1UdIwQY MBaAFEXtERYw4FKXeV3d0pjqH7KeaVxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQt YTAzOGVmMWVmZjM5LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQtYTAzOGVmMWVmZjM5 LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1OnxFEo I13CP07Zf/zA0O1z9+yMppXoqR7nYP4eLJCYdAjIpjwBi+kUH+P0lDwX1p0eg+kI rc2oHcFOvRjnrz6ixZettty8Cr6hJPSH3guRHAOSw+25gPGIkXE4d4hpqpAvOOJs UTr7c0dM4zKhSPUKs6bgipg45h3D9AtDLdknYOCPRsA6rm0hDcOVhDmmq4PsVypX tDyBw3KMT6KfCxLuHjyO8LkQ9hOf9/7m0X0rcLFANlE98qYWjv9prJ6Cvck8blgD z3lILbeeM5Y6ThXRLUgYpEG9HYJwSQgwU4vWhm12K3qlv7AJjmqLHSTkzII1gh3x 62b+RHSYSTM5Sg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:26:13 2025 by rpki-client