This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json) Hash identifier: b9/2jHCK3CPaJQe6VPt3XHJ4R7H3NqbOAyIWFEb5PAM= Subject key identifier: 70:95:59:69:99:DB:FB:23:74:17:B6:7D:BE:B1:5D:E7:F0:87:BE:78 Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Certificate serial: 019B3E6C7644E708FB2516444C6202A7F242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft Manifest number: 0657 Signing time: Sun 21 Dec 2025 01:00:54 +0000 Manifest this update: Sun 21 Dec 2025 01:00:54 +0000 Manifest next update: Mon 22 Dec 2025 01:00:54 +0000 Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=) 2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=) 3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: gfvMDrJgXl8FpXqlotDRrtOS7Wd9Bz0aLsztsseAYis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:76:44:e7:08:fb:25:16:44:4c:62:02:a7:f2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Validity Not Before: Dec 21 01:00:54 2025 GMT Not After : Dec 22 01:00:54 2025 GMT Subject: CN=7095596999dbfb237417b67dbeb15de7f087be78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8b:4a:d0:4b:5f:a3:3c:e0:f5:12:50:d9:27: 0b:8f:d9:6a:02:ac:19:5c:af:8a:2e:dd:dd:bd:01: 89:79:b9:8e:c7:46:79:6b:e4:2e:91:15:ad:58:3a: e4:f2:68:34:a9:0a:d9:04:b6:d6:b3:47:86:30:88: 00:64:a1:1c:0a:eb:fb:7d:c8:15:b2:d8:f6:75:44: 5a:12:f9:10:2a:e3:51:a1:64:15:39:d9:ba:6a:62: 62:86:c7:a8:0a:a0:0c:e4:da:28:ba:d9:85:40:55: 8f:61:8e:82:4e:02:cf:81:a4:91:d7:b0:3f:27:01: 46:ef:d4:fc:c8:d2:a6:aa:43:b1:a9:b8:ee:7b:b9: 60:1f:36:95:f3:34:6d:1d:ec:cf:1b:ce:6b:68:cf: 45:6a:36:c0:ae:c6:97:67:79:d1:f8:6d:c5:83:fc: 84:0a:60:8d:c3:50:a8:d8:90:df:09:28:0e:5d:7d: 9f:7f:9e:e1:e3:ae:2b:1e:ed:74:b5:59:c1:ed:60: 65:f4:e0:e0:63:c9:a1:d5:68:e5:68:e3:3c:bc:07: 34:c1:d0:26:48:3a:35:0c:b2:1b:ed:ba:cf:c5:7a: c5:e5:17:ca:3b:dd:cf:b7:90:01:39:78:c7:5b:48: 20:59:d7:fb:51:00:40:3b:d3:26:b4:64:e6:e2:bb: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:95:59:69:99:DB:FB:23:74:17:B6:7D:BE:B1:5D:E7:F0:87:BE:78 X509v3 Authority Key Identifier: keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:90:c1:4a:aa:5a:82:62:64:c0:c0:35:2d:dc:26:4d:cb:34: 11:a5:b7:69:31:69:95:88:85:52:e9:f0:b5:0a:f9:d4:f9:b4: 70:4f:7d:f3:61:a2:f7:34:18:78:bb:e5:28:c3:17:0b:a5:93: ef:85:4a:11:7e:0e:48:0a:7f:35:20:dc:a1:21:b1:dc:32:85: a3:88:38:ff:19:62:57:e2:23:8b:45:56:c2:d6:b8:f0:da:af: 59:fb:83:fe:4d:c5:25:cc:51:c6:8b:ee:1a:9d:f6:39:cf:03: a7:3d:6a:c1:47:bc:84:db:65:6c:b1:8d:de:53:4f:6c:ac:61: 7a:58:81:2a:96:89:81:4b:ee:e2:45:f3:85:74:01:74:4e:73: 93:05:89:7e:c8:84:d0:a7:f5:78:59:54:c6:e6:35:aa:d4:73: 8b:11:4d:38:d5:11:fc:96:3e:66:ca:25:44:ee:47:55:ac:c6: 48:0d:98:e3:38:06:aa:94:4f:3f:82:17:72:fc:ae:43:6d:92: ea:ad:aa:40:9a:35:cd:25:04:58:26:26:d9:dc:19:f1:9a:15: cf:4b:ed:27:8c:87:72:df:00:f7:cd:1e:a6:ab:82:13:b7:20: 1f:70:14:48:56:6a:9a:72:cd:3e:db:ca:f5:2c:46:bf:f6:60: cf:d6:6d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bHZE5wj7JRZETGICp/JCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMzdjZjRiMWZkNGNlNTY3ODhlZDgwYjdhMmUxMWM2MWI0 NTZhYjQwHhcNMjUxMjIxMDEwMDU0WhcNMjUxMjIyMDEwMDU0WjAzMTEwLwYDVQQD Eyg3MDk1NTk2OTk5ZGJmYjIzNzQxN2I2N2RiZWIxNWRlN2YwODdiZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YtK0Etfozzg9RJQ2ScLj9lqAqwZ XK+KLt3dvQGJebmOx0Z5a+QukRWtWDrk8mg0qQrZBLbWs0eGMIgAZKEcCuv7fcgV stj2dURaEvkQKuNRoWQVOdm6amJihseoCqAM5NooutmFQFWPYY6CTgLPgaSR17A/ JwFG79T8yNKmqkOxqbjue7lgHzaV8zRtHezPG85raM9FajbArsaXZ3nR+G3Fg/yE CmCNw1Co2JDfCSgOXX2ff57h464rHu10tVnB7WBl9ODgY8mh1WjlaOM8vAc0wdAm SDo1DLIb7brPxXrF5RfKO93Pt5ABOXjHW0ggWdf7UQBAO9MmtGTm4rvoBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCVWWmZ2/sjdBe2fb6xXefwh754MB8GA1UdIwQY MBaAFK43z0sf1M5WeI7YC3ouEcYbRWq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAt MWVhMmE4ZWExNTQzLzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAtMWVhMmE4ZWExNTQz LzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5DBSqpa gmJkwMA1LdwmTcs0EaW3aTFplYiFUunwtQr51Pm0cE9982Gi9zQYeLvlKMMXC6WT 74VKEX4OSAp/NSDcoSGx3DKFo4g4/xliV+Iji0VWwta48NqvWfuD/k3FJcxRxovu Gp32Oc8Dpz1qwUe8hNtlbLGN3lNPbKxheliBKpaJgUvu4kXzhXQBdE5zkwWJfsiE 0Kf1eFlUxuY1qtRzixFNONUR/JY+ZsolRO5HVazGSA2Y4zgGqpRPP4IXcvyuQ22S 6q2qQJo1zSUEWCYm2dwZ8ZoVz0vtJ4yHct8A980epquCE7cgH3AUSFZqmnLNPtvK 9SxGv/Zgz9ZthA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:16:25 2025 by rpki-client