This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json) Hash identifier: M6BD30tZT3U6Fv0bc9pCa0Eq1kroqmyPcqMOSGdNxUA= Subject key identifier: 3B:BB:BA:FE:0E:EE:60:3A:AF:46:4C:55:9E:9D:5B:E8:CE:D5:3E:10 Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97 Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797 Certificate serial: 019B3E6DAECDD692936270D392A68A58E591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 01:02:14 +0000 Manifest this update: Sun 21 Dec 2025 01:02:14 +0000 Manifest next update: Mon 22 Dec 2025 01:02:14 +0000 Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: JVkjcGlUXMeq+ubT40eXuJXOkAPoBkAbmzdjHQ6ybdw=) 2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:ae:cd:d6:92:93:62:70:d3:92:a6:8a:58:e5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797 Validity Not Before: Dec 21 01:02:14 2025 GMT Not After : Dec 22 01:02:14 2025 GMT Subject: CN=3bbbbafe0eee603aaf464c559e9d5be8ced53e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:ec:da:67:7b:c1:33:be:24:3e:b4:f9:a7: 6d:bc:1d:38:fb:69:2b:47:0b:fd:7b:7c:b6:20:b8: 45:58:0a:90:7f:ff:c8:fd:b6:2e:c6:f3:b9:fb:00: 4c:ed:af:3e:a0:40:e8:85:9b:30:bc:5e:9d:4b:4d: 31:dd:95:62:3e:79:ba:44:39:cf:22:e3:86:fc:35: 09:a8:b7:a4:ab:78:c6:14:23:c6:45:02:ea:2b:7c: f8:71:28:ba:58:a4:d6:a9:fd:cb:a2:7f:f0:87:90: b7:46:40:f9:3a:3a:90:91:75:e1:f4:e6:a1:4f:93: 00:83:b5:b2:53:84:77:11:c8:96:b9:21:24:b3:0e: b6:2a:fe:7b:fe:6f:9b:71:d9:be:8f:4b:07:70:81: 86:bc:8a:d0:63:98:4f:8a:e2:0d:be:cf:06:06:f3: 44:75:ca:8e:30:ba:60:ce:f1:db:4a:ba:35:f5:30: 0c:72:07:d8:44:04:8d:0d:9d:5c:5d:47:28:5a:bb: 2f:b6:04:4c:e5:e3:8b:00:a8:b0:f2:3c:e4:a7:7a: bc:af:82:51:4e:68:33:19:fa:01:de:52:1e:87:31: 26:ba:5f:f6:bb:a2:7a:09:7a:15:58:4a:d1:da:3b: e8:16:31:8b:70:78:76:06:10:ed:a8:c5:dd:f3:2a: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BB:BA:FE:0E:EE:60:3A:AF:46:4C:55:9E:9D:5B:E8:CE:D5:3E:10 X509v3 Authority Key Identifier: keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a1:89:6c:07:49:9d:17:b1:eb:de:50:6d:18:d6:b7:42:04: 5a:be:33:cd:31:0f:f8:35:61:0d:90:18:54:23:8a:4e:b2:b4: 1f:06:19:df:fc:7f:04:08:f6:27:48:c8:f1:19:b8:12:7a:57: c0:68:32:11:a9:01:74:58:16:65:50:aa:e1:68:2b:db:99:91: 17:ca:a9:0c:e9:20:d6:68:c6:bb:7d:7b:30:be:41:14:33:a6: 32:55:d5:8c:5f:b3:33:c6:4a:9e:b9:b5:2c:85:67:d5:de:c7: d8:e8:05:bd:83:d1:d9:8e:5c:a8:37:7e:ec:f7:91:da:45:4e: e1:7f:37:4b:e1:a1:f4:fc:7f:47:0e:7d:cf:a0:21:79:63:c7: a8:70:d9:e9:c5:d0:8e:72:5b:c1:e4:70:10:78:eb:e4:ee:f9: 56:f0:99:9d:2d:50:3c:47:a7:b2:62:c7:b5:20:29:54:a1:91: a3:16:64:b6:9a:86:67:c1:e0:50:dd:e8:9a:61:d0:90:70:cb: b6:68:b1:b0:ff:6f:59:3d:c5:20:5f:60:1c:ed:73:16:48:8b: 35:6e:70:1d:37:8c:5a:28:1e:23:3d:4f:f2:67:f0:01:2f:c8: 73:61:07:70:83:57:a7:a9:24:74:67:e0:93:a5:4f:60:46:8e: 06:6d:de:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ba7N1pKTYnDTkqaKWOWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MjdmMjFkNDA2MjFlNTgxM2U0YTA2OTIxMTk0N2UyNGQw MGU3OTcwHhcNMjUxMjIxMDEwMjE0WhcNMjUxMjIyMDEwMjE0WjAzMTEwLwYDVQQD EygzYmJiYmFmZTBlZWU2MDNhYWY0NjRjNTU5ZTlkNWJlOGNlZDUzZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NDs2md7wTO+JD60+adtvB04+2kr Rwv9e3y2ILhFWAqQf//I/bYuxvO5+wBM7a8+oEDohZswvF6dS00x3ZViPnm6RDnP IuOG/DUJqLekq3jGFCPGRQLqK3z4cSi6WKTWqf3Lon/wh5C3RkD5OjqQkXXh9Oah T5MAg7WyU4R3EciWuSEksw62Kv57/m+bcdm+j0sHcIGGvIrQY5hPiuINvs8GBvNE dcqOMLpgzvHbSro19TAMcgfYRASNDZ1cXUcoWrsvtgRM5eOLAKiw8jzkp3q8r4JR TmgzGfoB3lIehzEmul/2u6J6CXoVWErR2jvoFjGLcHh2BhDtqMXd8yrJjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu7uv4O7mA6r0ZMVZ6dW+jO1T4QMB8GA1UdIwQY MBaAFEUn8h1AYh5YE+SgaSEZR+JNAOeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYt ZjA4NmU2Zjk2Y2JiLzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYtZjA4NmU2Zjk2Y2Ji LzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqGJbAdJ nRex695QbRjWt0IEWr4zzTEP+DVhDZAYVCOKTrK0HwYZ3/x/BAj2J0jI8Rm4EnpX wGgyEakBdFgWZVCq4Wgr25mRF8qpDOkg1mjGu317ML5BFDOmMlXVjF+zM8ZKnrm1 LIVn1d7H2OgFvYPR2Y5cqDd+7PeR2kVO4X83S+Gh9Px/Rw59z6AheWPHqHDZ6cXQ jnJbweRwEHjr5O75VvCZnS1QPEensmLHtSApVKGRoxZktpqGZ8HgUN3ommHQkHDL tmixsP9vWT3FIF9gHO1zFkiLNW5wHTeMWigeIz1P8mfwAS/Ic2EHcINXp6kkdGfg k6VPYEaOBm3ekw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:59 2025 by rpki-client