This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json) Hash identifier: AM+onK1j9dLvdm+ClVxvn+gIp0rKOoRdbozXkZPigqc= Subject key identifier: C4:08:2B:C7:E7:18:D6:92:16:A8:7E:A4:A2:5D:02:0E:CF:BB:A0:B4 Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8 Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8 Certificate serial: 019AF2096B320B8FB2E2CCF404B22DC2A682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft Manifest number: 0A47 Signing time: Sat 06 Dec 2025 05:01:34 +0000 Manifest this update: Sat 06 Dec 2025 05:01:34 +0000 Manifest next update: Sun 07 Dec 2025 05:01:34 +0000 Files and hashes: 1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=) 2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: 1Xcj61r0DN9p3dIQwA913sXL9GvIm/WYC7XfhIlmDnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6b:32:0b:8f:b2:e2:cc:f4:04:b2:2d:c2:a6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8 Validity Not Before: Dec 6 05:01:34 2025 GMT Not After : Dec 7 05:01:34 2025 GMT Subject: CN=c4082bc7e718d69216a87ea4a25d020ecfbba0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:a5:ea:bf:f8:34:32:0f:0b:72:53:de:67: b0:b5:f0:ff:fd:f4:fc:8b:ab:55:0c:38:43:21:3d: a5:66:6b:18:92:b1:c2:12:40:23:db:c7:01:26:4a: e9:29:4e:ef:e1:81:b7:c1:b3:2b:c1:13:0c:24:d7: 35:ee:b9:b8:57:4c:81:4b:8d:cf:c5:4b:b3:28:f1: 93:09:eb:e6:d5:d3:3e:99:4b:7f:8e:36:b2:a9:3c: 7e:9c:ac:7f:67:fe:ab:5d:0d:f6:dd:42:e4:dd:ae: cd:89:75:01:93:a4:65:94:42:84:a6:ce:99:28:45: 19:c1:1c:00:e9:0d:5b:03:96:bb:ae:85:ea:3b:8a: 8d:54:bf:cb:2a:1b:06:44:e3:30:a6:bf:89:08:ea: 9f:e2:f5:30:58:2a:21:ab:91:07:8b:f9:45:f1:df: a5:8b:d7:e4:52:5e:5b:a3:8d:3e:9b:0b:66:e7:dd: ec:31:6c:93:57:92:fe:a8:5d:c8:8a:46:6f:6a:47: c9:b2:7c:4d:1d:b0:92:a1:eb:33:7b:ce:00:04:11: ff:c2:0d:22:63:b7:b1:72:b8:10:bf:35:79:b3:f1: 8f:60:c3:27:0b:38:a6:0e:cb:e3:43:a6:53:cd:7a: 11:58:4d:f3:86:f0:2b:b4:bc:e8:8a:db:72:81:62: df:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:2B:C7:E7:18:D6:92:16:A8:7E:A4:A2:5D:02:0E:CF:BB:A0:B4 X509v3 Authority Key Identifier: keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:60:b1:8a:9d:9d:2e:16:38:ba:63:17:29:af:75:6b:05:0f: 5b:56:bd:fe:eb:88:58:4b:8b:38:a4:cf:ef:27:73:ba:6b:2c: 95:f2:12:1e:dc:87:17:3e:b2:fb:95:ed:09:1d:8b:12:59:23: 1a:c0:eb:ab:88:b6:bc:47:eb:c6:37:9a:3e:79:05:de:3e:5c: 68:6e:da:89:99:66:f0:50:0e:51:b5:58:59:3b:e5:cf:88:88: 5a:c5:b2:e1:f7:53:c2:ef:6c:5f:a2:96:4e:27:72:5c:e9:c9: cc:45:e1:97:e3:96:73:4b:b9:d9:c6:f9:8f:21:35:53:48:5a: 5e:16:2c:4c:df:98:0f:a6:ac:bf:20:f3:83:a9:d0:71:3e:10: 02:fd:6e:94:9b:3c:36:62:98:f5:ed:ce:18:fe:d6:a5:a6:46: 10:89:0f:fc:67:aa:6f:8d:32:bb:41:60:85:dc:cd:ef:a1:02: ac:90:e8:9f:f5:03:8f:6f:99:cf:51:70:ec:e1:58:92:85:41: a0:43:d5:6c:ad:86:42:df:75:e6:cb:f7:b0:27:3b:07:b7:50: 17:f7:77:fd:64:76:3e:e2:4c:b2:67:eb:1f:c4:be:42:82:0a: 54:fe:22:31:2c:3d:e2:b4:25:c4:f4:d9:8e:06:a8:30:f4:71: 1a:cc:5b:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWsyC4+y4sz0BLItwqaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjdhYjNmMWE5M2U3MTRmMzA3NGEwNWQ4NmZjY2UyMjA2 MzA1YTgwHhcNMjUxMjA2MDUwMTM0WhcNMjUxMjA3MDUwMTM0WjAzMTEwLwYDVQQD EyhjNDA4MmJjN2U3MThkNjkyMTZhODdlYTRhMjVkMDIwZWNmYmJhMGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwCl6r/4NDIPC3JT3mewtfD//fT8 i6tVDDhDIT2lZmsYkrHCEkAj28cBJkrpKU7v4YG3wbMrwRMMJNc17rm4V0yBS43P xUuzKPGTCevm1dM+mUt/jjayqTx+nKx/Z/6rXQ323ULk3a7NiXUBk6RllEKEps6Z KEUZwRwA6Q1bA5a7roXqO4qNVL/LKhsGROMwpr+JCOqf4vUwWCohq5EHi/lF8d+l i9fkUl5bo40+mwtm593sMWyTV5L+qF3IikZvakfJsnxNHbCSoesze84ABBH/wg0i Y7excrgQvzV5s/GPYMMnCzimDsvjQ6ZTzXoRWE3zhvArtLzoittygWLfjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQIK8fnGNaSFqh+pKJdAg7Pu6C0MB8GA1UdIwQY MBaAFKz3qz8ak+cU8wdKBdhvzOIgYwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMt YWQ0M2NjZDdhYWU4LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMtYWQ0M2NjZDdhYWU4 LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGCxip2d LhY4umMXKa91awUPW1a9/uuIWEuLOKTP7ydzumsslfISHtyHFz6y+5XtCR2LElkj GsDrq4i2vEfrxjeaPnkF3j5caG7aiZlm8FAOUbVYWTvlz4iIWsWy4fdTwu9sX6KW TidyXOnJzEXhl+OWc0u52cb5jyE1U0haXhYsTN+YD6asvyDzg6nQcT4QAv1ulJs8 NmKY9e3OGP7WpaZGEIkP/Geqb40yu0FghdzN76ECrJDon/UDj2+Zz1Fw7OFYkoVB oEPVbK2GQt915sv3sCc7B7dQF/d3/WR2PuJMsmfrH8S+QoIKVP4iMSw94rQlxPTZ jgaoMPRxGsxbIw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:39 2025 by rpki-client