This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json) Hash identifier: nvaJAKVThQsS6vjyYHBEHq+FD+CnG5N1cqb0vH//e4M= Subject key identifier: 2F:86:22:08:FA:22:B0:1B:F5:41:7E:93:FB:A8:87:65:DA:05:0C:63 Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5 Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5 Certificate serial: 019AF61C5E85BA4EBDB8E83B915913D14556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft Manifest number: 04E3 Signing time: Sun 07 Dec 2025 00:00:45 +0000 Manifest this update: Sun 07 Dec 2025 00:00:45 +0000 Manifest next update: Mon 08 Dec 2025 00:00:45 +0000 Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: j1TBXYt1+uN6G21IzSRPokX7H4A2a3AID8eUjzckIk4=) 2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:5e:85:ba:4e:bd:b8:e8:3b:91:59:13:d1:45:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5 Validity Not Before: Dec 7 00:00:45 2025 GMT Not After : Dec 8 00:00:45 2025 GMT Subject: CN=2f862208fa22b01bf5417e93fba88765da050c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:73:94:bd:84:b2:ad:94:fb:7d:ff:b5:3c: be:00:bf:d2:21:08:3b:ac:a6:90:e0:5d:74:0f:ff: ba:7e:9d:79:0e:ab:0c:04:c2:85:05:a0:77:80:ba: e8:72:70:e2:aa:84:1c:35:f4:b9:83:44:e3:f4:81: a1:51:1f:91:a7:e4:51:7c:23:4f:21:d8:eb:65:1c: b8:df:65:87:26:7a:65:2c:ad:a5:cd:05:ce:eb:51: 58:1d:71:6f:12:87:83:10:11:c9:35:a3:76:12:37: af:b4:03:b6:65:9e:47:ed:65:fd:d9:09:50:48:dc: 3b:4f:06:6e:59:0a:6f:7c:54:a6:cb:7a:53:83:5e: ce:89:45:c2:29:00:cc:d5:dd:b4:45:9f:87:c2:5d: 41:a5:72:7d:aa:bf:64:39:8f:69:61:08:d5:6a:11: e6:b1:a0:7d:0e:d0:11:bf:3f:52:54:85:8d:1a:55: 89:91:b1:09:f7:6d:42:75:b4:8b:d0:2a:13:72:1d: b7:38:cc:8f:9b:5d:36:80:63:ca:d8:d7:97:d3:88: 70:95:36:c0:bc:db:a3:95:0b:00:16:ae:8e:94:ad: c1:ef:fb:d4:fc:a9:bb:56:3f:af:a2:c4:73:68:23: 91:f1:03:cc:6d:4a:d8:f8:ba:37:ab:53:5e:04:11: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:22:08:FA:22:B0:1B:F5:41:7E:93:FB:A8:87:65:DA:05:0C:63 X509v3 Authority Key Identifier: keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:eb:52:0b:2d:7b:36:df:26:7a:05:8b:e6:9f:68:ef:96:39: b1:cd:5c:72:ff:fd:b7:c1:f4:13:0a:ac:7a:f6:bb:5c:19:cf: 6b:4e:f5:2a:5a:81:df:fd:4d:4e:4e:94:1e:6a:88:6a:bd:30: 93:4c:bd:77:70:39:39:eb:fd:35:a8:72:6c:d2:b3:5e:85:94: d6:87:f4:b9:df:04:61:c6:85:4b:42:79:05:8f:42:e1:f6:e9: db:b5:a7:0f:ad:a7:eb:1d:8c:f9:67:9c:61:af:af:b0:b5:81: 17:5c:e0:95:c4:96:ce:4e:05:54:f1:c1:b8:c1:12:70:c7:19: 96:67:ce:01:85:79:1e:db:c6:74:fb:10:14:55:b8:2f:d7:b7: b8:12:10:58:57:67:8e:07:8e:19:04:87:20:3d:75:7b:7c:d0: c6:46:46:2d:7c:79:f0:19:81:1e:c4:88:97:a1:d5:b6:e0:ec: 8b:01:8b:e0:06:aa:ca:07:79:0a:e9:56:f0:3d:62:33:8e:7b: 14:de:20:74:7a:12:85:ad:5f:9e:c7:e7:2a:ef:3d:5f:8e:f7: 6e:ba:ee:86:ae:8c:dc:da:8f:ae:ab:bf:ce:f8:ac:81:83:41: 3f:d7:6a:fe:04:b3:4b:b4:c1:65:0f:fb:da:68:40:88:dc:11: 74:bf:dd:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HF6Fuk69uOg7kVkT0UVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTczNzNlMWE2ODZkNmI1OWVlODVkYzM3ODk5ZDA2NTMx Mzg2ZTUwHhcNMjUxMjA3MDAwMDQ1WhcNMjUxMjA4MDAwMDQ1WjAzMTEwLwYDVQQD EygyZjg2MjIwOGZhMjJiMDFiZjU0MTdlOTNmYmE4ODc2NWRhMDUwYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv69zlL2Esq2U+33/tTy+AL/SIQg7 rKaQ4F10D/+6fp15DqsMBMKFBaB3gLrocnDiqoQcNfS5g0Tj9IGhUR+Rp+RRfCNP IdjrZRy432WHJnplLK2lzQXO61FYHXFvEoeDEBHJNaN2EjevtAO2ZZ5H7WX92QlQ SNw7TwZuWQpvfFSmy3pTg17OiUXCKQDM1d20RZ+Hwl1BpXJ9qr9kOY9pYQjVahHm saB9DtARvz9SVIWNGlWJkbEJ921CdbSL0CoTch23OMyPm102gGPK2NeX04hwlTbA vNujlQsAFq6OlK3B7/vU/Km7Vj+vosRzaCOR8QPMbUrY+Lo3q1NeBBEz1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+GIgj6IrAb9UF+k/uoh2XaBQxjMB8GA1UdIwQY MBaAFERXNz4aaG1rWe6F3DeJnQZTE4blMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYt OWU4NjQzNjg1MTMzLzEvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYtOWU4NjQzNjg1MTMz LzEvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+tSCy17 Nt8megWL5p9o75Y5sc1ccv/9t8H0Ewqseva7XBnPa071KlqB3/1NTk6UHmqIar0w k0y9d3A5Oev9NahybNKzXoWU1of0ud8EYcaFS0J5BY9C4fbp27WnD62n6x2M+Wec Ya+vsLWBF1zglcSWzk4FVPHBuMEScMcZlmfOAYV5HtvGdPsQFFW4L9e3uBIQWFdn jgeOGQSHID11e3zQxkZGLXx58BmBHsSIl6HVtuDsiwGL4Aaqygd5CulW8D1iM457 FN4gdHoSha1fnsfnKu89X473brruhq6M3NqPrqu/zvisgYNBP9dq/gSzS7TBZQ/7 2mhAiNwRdL/d9w== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:08 2025 by rpki-client