This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json) Hash identifier: 3/+A3M5sYPrvdYWDPsTSw5xsi6x6FPVpvhtWRF4j0Wc= Subject key identifier: F8:DB:60:C6:D2:A4:CA:FF:C1:9F:D6:E0:08:F7:14:75:4F:BB:2F:1C Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Certificate serial: 019B53AB0DCD43E820CAA89D4DF4BA14E11F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft Manifest number: 0662 Signing time: Thu 25 Dec 2025 04:01:17 +0000 Manifest this update: Thu 25 Dec 2025 04:01:17 +0000 Manifest next update: Fri 26 Dec 2025 04:01:17 +0000 Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=) 2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=) 3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: tv/h1rhVJMnCpnZOzb0GCRUSp7UZpUGG5gpXyLFNBA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:0d:cd:43:e8:20:ca:a8:9d:4d:f4:ba:14:e1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Validity Not Before: Dec 25 04:01:17 2025 GMT Not After : Dec 26 04:01:17 2025 GMT Subject: CN=f8db60c6d2a4caffc19fd6e008f714754fbb2f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:56:a1:ac:a9:0d:fa:6d:68:fa:cd:5c:6f: 9b:c9:69:dd:d1:8e:c8:62:ad:70:82:55:43:f0:c9: 89:1b:8a:5e:ef:91:b8:79:95:a8:4e:35:67:65:cf: 74:c0:a5:00:52:a6:4d:0d:02:fb:0c:de:57:a4:e3: 65:e9:4f:4e:98:62:16:29:db:f7:bc:c8:2c:9f:6b: 7f:7c:d3:a8:da:d4:70:59:b0:73:00:f8:b5:03:50: 60:5b:56:27:2b:08:46:57:af:7a:c5:af:eb:1c:08: e2:f8:55:45:40:85:69:0e:43:6f:41:13:92:a6:fd: aa:2c:58:19:3a:78:c6:1b:8b:14:47:87:75:44:89: 80:d0:5e:89:ce:b6:c3:a6:95:99:6a:bb:90:11:97: db:fd:c8:a0:56:8b:f1:01:02:f0:65:43:bd:10:74: 27:a3:47:2e:72:d4:c9:f6:fd:e6:9a:67:40:bb:00: f6:b3:80:96:e9:b1:b0:af:2b:de:fd:b6:87:2d:82: 33:91:79:cf:bc:cc:5a:8e:cd:9e:36:3c:cb:ed:7c: b6:cf:d6:f7:c4:c3:89:93:e4:0b:9e:9b:ba:08:32: 21:bc:47:79:88:11:dd:5f:2d:80:c5:79:3b:06:57: 5c:fa:71:24:b0:e4:cc:d9:9e:4b:68:2a:3e:4b:6f: 60:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DB:60:C6:D2:A4:CA:FF:C1:9F:D6:E0:08:F7:14:75:4F:BB:2F:1C X509v3 Authority Key Identifier: keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9c:35:d4:55:08:89:67:26:a7:45:07:ef:2f:9a:16:e9:58: 7e:09:e4:e2:41:19:31:ac:bf:3e:cf:9c:3c:04:7b:ee:56:0d: 17:4e:65:4f:69:5f:35:ab:fc:bd:e8:81:37:54:0b:12:30:e4: 34:b1:f6:91:5e:72:3f:13:da:24:29:0f:a4:ee:ef:82:25:4c: 9e:3d:2f:24:ff:b4:81:f6:17:cf:56:3e:72:f4:d9:43:8c:18: 32:68:b0:fe:c8:20:03:aa:84:4d:c4:3c:15:90:61:ef:9d:40: c4:0f:b3:48:ff:6c:c9:b3:31:da:1f:19:ea:90:7d:e5:a6:a8: d7:8f:64:91:42:16:49:a2:70:5f:7f:65:1b:d2:e2:27:8e:25: 5b:b2:ed:91:f4:0e:dc:db:bc:6d:a2:e8:9e:68:4c:79:b5:c9: d3:95:57:c2:7c:ea:7b:0d:b9:a3:77:19:7a:5c:cf:2c:33:3b: 09:1b:c2:cf:2a:2e:97:f0:cb:f8:46:3f:be:75:ca:ac:4a:95: b7:00:58:a1:b6:b6:56:3a:2d:48:8f:06:6c:3b:88:be:97:c5: ca:eb:87:17:44:12:f8:b0:ff:07:05:5f:76:9a:5d:13:0a:98: d1:46:c5:26:06:3e:a2:f0:f0:c2:08:24:96:20:33:ff:a2:ff: 46:9c:f4:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqw3NQ+ggyqidTfS6FOEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMzdjZjRiMWZkNGNlNTY3ODhlZDgwYjdhMmUxMWM2MWI0 NTZhYjQwHhcNMjUxMjI1MDQwMTE3WhcNMjUxMjI2MDQwMTE3WjAzMTEwLwYDVQQD EyhmOGRiNjBjNmQyYTRjYWZmYzE5ZmQ2ZTAwOGY3MTQ3NTRmYmIyZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBdWoaypDfptaPrNXG+byWnd0Y7I Yq1wglVD8MmJG4pe75G4eZWoTjVnZc90wKUAUqZNDQL7DN5XpONl6U9OmGIWKdv3 vMgsn2t/fNOo2tRwWbBzAPi1A1BgW1YnKwhGV696xa/rHAji+FVFQIVpDkNvQROS pv2qLFgZOnjGG4sUR4d1RImA0F6JzrbDppWZaruQEZfb/cigVovxAQLwZUO9EHQn o0cuctTJ9v3mmmdAuwD2s4CW6bGwryve/baHLYIzkXnPvMxajs2eNjzL7Xy2z9b3 xMOJk+QLnpu6CDIhvEd5iBHdXy2AxXk7Bldc+nEksOTM2Z5LaCo+S29gnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjbYMbSpMr/wZ/W4Aj3FHVPuy8cMB8GA1UdIwQY MBaAFK43z0sf1M5WeI7YC3ouEcYbRWq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAt MWVhMmE4ZWExNTQzLzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAtMWVhMmE4ZWExNTQz LzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZw11FUI iWcmp0UH7y+aFulYfgnk4kEZMay/Ps+cPAR77lYNF05lT2lfNav8veiBN1QLEjDk NLH2kV5yPxPaJCkPpO7vgiVMnj0vJP+0gfYXz1Y+cvTZQ4wYMmiw/sggA6qETcQ8 FZBh751AxA+zSP9sybMx2h8Z6pB95aao149kkUIWSaJwX39lG9LiJ44lW7LtkfQO 3Nu8baLonmhMebXJ05VXwnzqew25o3cZelzPLDM7CRvCzyoul/DL+EY/vnXKrEqV twBYoba2VjotSI8GbDuIvpfFyuuHF0QS+LD/BwVfdppdEwqY0UbFJgY+ovDwwggk liAz/6L/Rpz0ZQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:17:33 2025 by rpki-client