This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json) Hash identifier: dhYOz6wTVSyXP6UDKGW5qPGKeM8lX3Dvc5I50tLGvm8= Subject key identifier: 9B:F9:E4:96:97:28:6A:6C:F5:AD:C5:B4:4D:13:D7:07:F4:AF:BE:51 Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33 Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33 Certificate serial: 019B3D599F28B23AB0E6186A3271B5C1A002 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft Manifest number: 0F4F Signing time: Sat 20 Dec 2025 20:00:42 +0000 Manifest this update: Sat 20 Dec 2025 20:00:42 +0000 Manifest next update: Sun 21 Dec 2025 20:00:42 +0000 Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: iIlBkxQuWqm8mcZJ0DDDz66PMARxgRergYaJgJB+JHA=) 2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:9f:28:b2:3a:b0:e6:18:6a:32:71:b5:c1:a0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33 Validity Not Before: Dec 20 20:00:42 2025 GMT Not After : Dec 21 20:00:42 2025 GMT Subject: CN=9bf9e49697286a6cf5adc5b44d13d707f4afbe51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:d0:63:7b:bb:08:d6:11:8d:0f:ca:95:99: 43:15:8c:1a:c5:ba:f7:c5:1d:ea:be:ca:fd:44:0d: e6:98:42:1f:de:b9:90:0d:c4:87:f7:f6:16:99:68: 53:f5:e1:5f:ea:11:22:70:f9:d2:da:59:80:d6:52: 71:a5:64:63:69:1b:4e:b7:b3:2c:b3:86:c5:1f:9c: 1a:28:dd:0c:ce:55:26:59:85:95:93:1f:4f:82:03: 76:00:7d:ec:1b:9e:49:6c:48:ca:70:9c:2a:da:21: ee:64:a5:b6:b5:bb:11:7a:13:2e:6f:63:4d:52:8c: 17:d9:71:60:24:12:b7:11:ec:91:99:a6:61:f2:e9: 8f:7b:20:07:cd:29:75:40:b1:75:ad:8b:9c:ea:cb: 2f:41:99:78:57:65:ce:45:27:f4:f8:23:80:6d:0a: 6f:80:8a:2d:9e:0b:cd:17:6a:f1:1d:5f:86:4c:d5: 35:67:27:23:da:53:48:f0:32:9f:f7:c5:1a:7e:9e: 19:e3:bb:0c:30:02:3c:c5:ee:f3:5b:73:20:3b:0c: 75:6a:b0:7f:fd:bb:6a:4e:ce:cd:6e:3c:ba:a3:2d: f1:ab:1d:4f:65:98:f3:d2:41:12:23:dd:4c:fc:cf: 29:56:de:4b:76:41:94:3f:da:05:e7:34:22:60:5d: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F9:E4:96:97:28:6A:6C:F5:AD:C5:B4:4D:13:D7:07:F4:AF:BE:51 X509v3 Authority Key Identifier: keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5c:17:2b:ae:db:5c:d0:15:d7:a6:31:f1:c7:4a:93:0f:d0: 81:24:b8:16:e1:58:f7:38:ef:e9:8e:9f:79:83:c7:22:b7:a8: f4:31:20:f4:4e:ad:7f:8b:a7:5e:7a:f8:32:d8:62:7d:e2:f5: 93:7f:a2:f2:20:0a:55:dd:b6:ae:5d:05:43:1e:7f:5c:42:e2: ce:cc:dd:32:5c:17:f6:b6:06:4d:00:5a:c4:c0:2e:c8:47:30: b9:5b:5e:ad:8b:97:04:d6:25:46:0b:7c:92:c2:88:ae:ea:2f: 06:c5:d4:5e:13:07:58:14:33:a2:23:96:3d:3e:c7:a3:61:ce: 97:31:91:9c:af:ea:09:63:fd:54:53:a2:e7:c6:72:7a:0e:6c: eb:88:37:92:d2:47:d3:5d:88:fc:f1:a3:93:b9:e1:a7:ac:db: 18:88:56:9f:dd:d5:19:a3:73:08:f3:ee:05:b6:7f:4d:13:73: 66:60:4b:a6:c2:33:16:44:8d:1b:51:5a:15:68:2b:b6:dd:9f: ae:10:88:e5:a0:4a:ce:e4:88:c3:6d:67:d8:c8:d5:63:ed:6f: 3d:53:97:0b:2b:fe:2d:5b:af:c7:f5:43:00:4b:c8:4c:64:d8: 48:73:88:2f:41:0a:b6:15:96:9a:09:af:5a:df:16:f9:c7:f1: 4f:f4:b5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZ8osjqw5hhqMnG1waACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ODE0ZWE3ZTgzYjQwMTliZmQ1Nzk3ZWJhOTg5ZGEwNmRk OTBlMzMwHhcNMjUxMjIwMjAwMDQyWhcNMjUxMjIxMjAwMDQyWjAzMTEwLwYDVQQD Eyg5YmY5ZTQ5Njk3Mjg2YTZjZjVhZGM1YjQ0ZDEzZDcwN2Y0YWZiZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunLQY3u7CNYRjQ/KlZlDFYwaxbr3 xR3qvsr9RA3mmEIf3rmQDcSH9/YWmWhT9eFf6hEicPnS2lmA1lJxpWRjaRtOt7Ms s4bFH5waKN0MzlUmWYWVkx9PggN2AH3sG55JbEjKcJwq2iHuZKW2tbsRehMub2NN UowX2XFgJBK3EeyRmaZh8umPeyAHzSl1QLF1rYuc6ssvQZl4V2XORSf0+COAbQpv gIotngvNF2rxHV+GTNU1Zycj2lNI8DKf98Uafp4Z47sMMAI8xe7zW3MgOwx1arB/ /btqTs7Nbjy6oy3xqx1PZZjz0kESI91M/M8pVt5LdkGUP9oF5zQiYF2mWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJv55JaXKGps9a3FtE0T1wf0r75RMB8GA1UdIwQY MBaAFESBTqfoO0AZv9V5frqYnaBt2Q4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYWM0NGItNTY1YS00Mjg2LWE0MGMt ZDdlMDFhYzAyYTc1LzEvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zYWM0NGItNTY1YS00Mjg2LWE0MGMtZDdlMDFhYzAyYTc1 LzEvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFwXK67b XNAV16Yx8cdKkw/QgSS4FuFY9zjv6Y6feYPHIreo9DEg9E6tf4unXnr4MthifeL1 k3+i8iAKVd22rl0FQx5/XELizszdMlwX9rYGTQBaxMAuyEcwuVterYuXBNYlRgt8 ksKIruovBsXUXhMHWBQzoiOWPT7Ho2HOlzGRnK/qCWP9VFOi58Zyeg5s64g3ktJH 012I/PGjk7nhp6zbGIhWn93VGaNzCPPuBbZ/TRNzZmBLpsIzFkSNG1FaFWgrtt2f rhCI5aBKzuSIw21n2MjVY+1vPVOXCyv+LVuvx/VDAEvITGTYSHOIL0EKthWWmgmv Wt8W+cfxT/S1zw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:01:44 2025 by rpki-client