This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json) Hash identifier: 3aH/T5Sr5sjCYJ52CcUWH5y9sXq4PfYfaRFrVxDzNTg= Subject key identifier: 74:43:E9:FA:4A:89:87:83:42:C9:83:C2:B3:C2:D8:FA:78:D9:51:71 Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7 Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7 Certificate serial: 019B416D7C45D68197289448AE76EE50519E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft Manifest number: 0ABF Signing time: Sun 21 Dec 2025 15:00:52 +0000 Manifest this update: Sun 21 Dec 2025 15:00:52 +0000 Manifest next update: Mon 22 Dec 2025 15:00:52 +0000 Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: sP1GG7kaPntDhmZE8jqZ+hBf0+dXjOyNgVWw4Txfbow=) 2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=) 3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:7c:45:d6:81:97:28:94:48:ae:76:ee:50:51:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7 Validity Not Before: Dec 21 15:00:52 2025 GMT Not After : Dec 22 15:00:52 2025 GMT Subject: CN=7443e9fa4a89878342c983c2b3c2d8fa78d95171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:26:92:40:51:04:c0:78:5d:96:3d:52:02: 84:e8:bd:22:89:e6:6a:bf:34:74:da:5d:6f:d4:cb: c8:72:46:e7:8c:53:80:06:99:af:55:17:63:32:cc: 38:ad:3a:9d:fb:9f:dc:28:ae:fa:42:f7:0a:9d:d1: 84:d3:fd:08:2e:c0:28:d3:ab:68:17:a7:75:00:fe: b6:03:50:13:d3:75:d3:00:b4:6e:5a:71:da:a0:f3: 93:e6:05:af:57:a3:f2:fa:b6:76:24:d3:c9:cb:98: 3c:00:51:d7:2f:3a:d4:a1:a8:cd:01:7d:4b:b4:43: a2:d1:ca:c8:66:f3:7e:e1:14:e8:7d:e0:ee:2c:d1: 77:25:f8:6e:b7:a0:a8:59:f4:aa:82:94:4a:95:33: 92:c1:e4:7c:27:29:f9:18:07:9e:13:67:c0:ea:9a: d6:4c:f1:72:19:cd:9a:eb:24:b8:1f:20:04:6d:90: 00:df:7b:08:37:f7:ba:f4:d6:06:24:e0:a6:fe:68: 43:33:81:40:d8:75:09:f8:04:31:c1:e1:e7:75:3c: 50:e2:e7:19:0c:52:74:b2:d3:ce:76:2e:21:09:9e: 39:f5:91:ec:42:7b:15:e9:01:3c:b5:ec:23:e0:5c: 7d:0b:0c:cf:50:0c:53:c3:41:4c:20:fd:c7:1f:7f: 87:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:43:E9:FA:4A:89:87:83:42:C9:83:C2:B3:C2:D8:FA:78:D9:51:71 X509v3 Authority Key Identifier: keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:53:56:7e:7c:eb:4f:a3:4f:8c:e6:0f:2f:f8:bc:db:6a:dd: 8a:ba:06:f5:95:88:66:94:54:da:41:85:ad:0d:ec:b8:6a:b7: 6e:20:64:04:06:71:ec:df:69:02:d7:36:b3:72:dd:4d:e3:e6: f6:e6:25:a4:97:1e:6f:3d:80:1d:9a:d1:3b:7c:3b:86:a6:dd: 13:b2:65:60:68:00:da:74:ef:88:ae:88:13:bd:54:4a:06:9d: b9:b7:42:f2:e7:34:3a:29:4f:3c:95:06:d2:4e:5b:e7:f2:f4: 39:7e:29:90:1d:f6:f8:0a:8f:15:cb:42:cb:3b:e8:b9:e3:28: 69:0b:25:a2:bf:b3:b2:6d:58:31:e5:d6:a9:25:03:90:ab:1d: 01:ae:72:3c:29:9d:52:ba:13:93:d5:3e:59:18:7f:1e:8b:45: e5:30:70:a0:68:b0:6b:30:35:45:51:f1:d8:00:8f:a6:75:44: 28:60:0d:11:cb:67:84:b1:43:c3:aa:5c:f8:c4:7d:ee:de:8f: 5e:00:bf:51:d6:be:5b:c9:d4:69:44:e5:6c:9c:d8:9c:8a:3a: 7b:6f:fd:0b:76:1a:1b:01:11:ff:da:b8:4f:30:61:d1:62:df: 27:2e:bc:61:11:67:44:23:88:3a:ae:40:08:42:c6:08:fd:62: f0:75:78:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbXxF1oGXKJRIrnbuUFGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTdlYjk2NzQzOGZmYzRlYjY2NjMzZGQ4YzAzNTAxODkz NjY3ZjcwHhcNMjUxMjIxMTUwMDUyWhcNMjUxMjIyMTUwMDUyWjAzMTEwLwYDVQQD Eyg3NDQzZTlmYTRhODk4NzgzNDJjOTgzYzJiM2MyZDhmYTc4ZDk1MTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5QmkkBRBMB4XZY9UgKE6L0iieZq vzR02l1v1MvIckbnjFOABpmvVRdjMsw4rTqd+5/cKK76QvcKndGE0/0ILsAo06to F6d1AP62A1AT03XTALRuWnHaoPOT5gWvV6Py+rZ2JNPJy5g8AFHXLzrUoajNAX1L tEOi0crIZvN+4RTofeDuLNF3Jfhut6CoWfSqgpRKlTOSweR8Jyn5GAeeE2fA6prW TPFyGc2a6yS4HyAEbZAA33sIN/e69NYGJOCm/mhDM4FA2HUJ+AQxweHndTxQ4ucZ DFJ0stPOdi4hCZ459ZHsQnsV6QE8tewj4Fx9CwzPUAxTw0FMIP3HH3+HbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRD6fpKiYeDQsmDwrPC2Pp42VFxMB8GA1UdIwQY MBaAFKyX65Z0OP/E62ZjPdjANQGJNmf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEt Y2YxOTk3YzAyNTBkLzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEtY2YxOTk3YzAyNTBk LzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFNWfnzr T6NPjOYPL/i822rdiroG9ZWIZpRU2kGFrQ3suGq3biBkBAZx7N9pAtc2s3LdTePm 9uYlpJcebz2AHZrRO3w7hqbdE7JlYGgA2nTviK6IE71USgadubdC8uc0OilPPJUG 0k5b5/L0OX4pkB32+AqPFctCyzvoueMoaQslor+zsm1YMeXWqSUDkKsdAa5yPCmd UroTk9U+WRh/HotF5TBwoGiwazA1RVHx2ACPpnVEKGANEctnhLFDw6pc+MR97t6P XgC/Uda+W8nUaUTlbJzYnIo6e2/9C3YaGwER/9q4TzBh0WLfJy68YRFnRCOIOq5A CELGCP1i8HV4mQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:00:31 2025 by rpki-client