This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft File: Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft (raw, json) Hash identifier: LSwBG8dTEv/ytEY05Xrt5KYqqQS1Vip+8VVPzwlfkMw= Subject key identifier: 0F:56:F0:88:28:0D:73:3A:DA:35:CD:10:68:37:EA:B3:19:CF:ED:E3 Authority key identifier: 45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA Certificate issuer: /CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa Certificate serial: 019B2A0A337F3A7901CC76226146E981D504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft Manifest number: 133C Signing time: Wed 17 Dec 2025 02:01:10 +0000 Manifest this update: Wed 17 Dec 2025 02:01:10 +0000 Manifest next update: Thu 18 Dec 2025 02:01:10 +0000 Files and hashes: 1: 4jpGoGfytvkcBWF1AUAJF0-qdUc.roa (hash: RRVQEgJXSCFRfqwvduB081T3vxLgFXzLMjRYLNyG6B8=) 2: 988R5OqLx1cdXJRL_JY-sifrbw8.roa (hash: BOCl4HP9kR43t+HCwvP5qbX3Z6YHP7lJJWGPo5+9LHA=) 3: Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl (hash: oqKhlJLGzFnOcVDJy5k4w3ZnJ+uOMczOIkXr91hH0VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 02:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:0a:33:7f:3a:79:01:cc:76:22:61:46:e9:81:d5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45ad6f1f1b730c7a016b562c12b31becc4b3e1fa Validity Not Before: Dec 17 02:01:10 2025 GMT Not After : Dec 18 02:01:10 2025 GMT Subject: CN=0f56f088280d733ada35cd106837eab319cfede3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:53:e1:d4:79:40:8f:80:4a:53:7f:0f:30: 36:05:d7:cb:ee:9b:48:5d:38:3f:c7:b5:a1:f3:5c: 6d:f4:34:70:e6:89:97:63:ca:b4:62:a2:f1:92:fe: ef:57:ec:19:2e:38:6e:e5:4e:30:db:76:24:34:2b: ab:c8:31:37:13:18:d7:13:71:04:3c:47:35:34:d1: f2:c8:72:6e:22:1c:cf:9b:be:ac:d8:5e:4a:03:ce: db:d9:93:b2:17:ee:c3:96:16:3c:ca:ac:87:bf:a9: 3f:d8:94:ef:42:e6:9a:a7:7b:02:6f:31:c1:33:55: 09:02:ae:00:b9:03:d3:79:d4:76:c0:78:60:4a:4f: 25:28:cf:59:29:d6:59:c4:19:39:61:e9:3e:c0:d3: 5b:4d:33:de:1c:0d:8e:06:d4:ce:37:95:f5:2c:02: 58:f5:3f:96:d6:69:03:6b:f4:16:7e:7b:0f:ae:0c: 94:c7:e3:26:46:69:33:24:9f:c6:08:d0:9a:46:10: fe:3b:6a:71:99:b0:b2:7a:1c:22:d9:0f:bf:48:a2: ff:3f:d0:38:08:1a:59:94:34:3b:c7:f2:3c:35:d9: 8c:21:cd:ec:89:2f:6c:18:90:84:39:28:cb:54:9b: 5e:e3:2a:aa:5d:3f:71:5b:42:5a:48:ce:c8:ff:b4: 37:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:56:F0:88:28:0D:73:3A:DA:35:CD:10:68:37:EA:B3:19:CF:ED:E3 X509v3 Authority Key Identifier: keyid:45:AD:6F:1F:1B:73:0C:7A:01:6B:56:2C:12:B3:1B:EC:C4:B3:E1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra1vHxtzDHoBa1YsErMb7MSz4fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/00c03c-d207-4ec1-9dd9-32449ce6cf89/1/Ra1vHxtzDHoBa1YsErMb7MSz4fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f1:c1:a6:d7:74:0e:85:5f:1c:ce:23:00:50:20:04:79:e2: 46:db:e0:09:c1:5a:e2:56:69:73:ba:b4:68:19:a7:c6:c0:ea: 4b:dd:6b:a5:e1:01:d6:a3:77:93:71:72:8f:13:1d:c2:f3:c6: 5d:bc:7b:62:cf:7a:79:fa:da:7c:2c:5b:5e:11:4e:56:0b:18: 43:43:69:ef:bf:fa:3e:e7:ef:20:c0:d9:10:af:69:66:47:62: 52:48:87:ad:af:35:cf:f6:d6:0b:d1:c7:b5:b8:59:d0:f5:4c: 82:8e:3b:f5:15:0b:62:43:d5:31:a0:8a:80:49:b0:64:b6:7b: 48:97:42:8a:82:f0:04:e7:68:44:5b:29:e7:0b:d9:5c:40:f3: 4b:0e:73:13:a4:91:4a:75:b2:73:1d:0b:f4:24:12:bf:5f:03: 53:0d:74:40:42:df:6c:33:f8:8a:a5:44:2d:28:c6:fd:83:d7: c6:78:73:c2:3f:49:9a:3d:4c:7c:76:56:81:99:9a:66:7e:29: ec:99:fb:cb:eb:36:fa:25:8a:5c:26:e0:4f:12:a4:98:23:27: f3:56:66:71:77:c6:c7:ae:2a:2b:06:97:dc:d9:c3:01:2f:a9: 62:a5:9d:dd:f9:1c:14:c5:11:71:04:f7:e2:b2:ea:c5:2a:9e: e6:ef:4e:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCjN/OnkBzHYiYUbpgdUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWQ2ZjFmMWI3MzBjN2EwMTZiNTYyYzEyYjMxYmVjYzRi M2UxZmEwHhcNMjUxMjE3MDIwMTEwWhcNMjUxMjE4MDIwMTEwWjAzMTEwLwYDVQQD EygwZjU2ZjA4ODI4MGQ3MzNhZGEzNWNkMTA2ODM3ZWFiMzE5Y2ZlZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSdT4dR5QI+ASlN/DzA2BdfL7ptI XTg/x7Wh81xt9DRw5omXY8q0YqLxkv7vV+wZLjhu5U4w23YkNCuryDE3ExjXE3EE PEc1NNHyyHJuIhzPm76s2F5KA87b2ZOyF+7DlhY8yqyHv6k/2JTvQuaap3sCbzHB M1UJAq4AuQPTedR2wHhgSk8lKM9ZKdZZxBk5Yek+wNNbTTPeHA2OBtTON5X1LAJY 9T+W1mkDa/QWfnsPrgyUx+MmRmkzJJ/GCNCaRhD+O2pxmbCyehwi2Q+/SKL/P9A4 CBpZlDQ7x/I8NdmMIc3siS9sGJCEOSjLVJte4yqqXT9xW0JaSM7I/7Q3DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9W8IgoDXM62jXNEGg36rMZz+3jMB8GA1UdIwQY MBaAFEWtbx8bcwx6AWtWLBKzG+zEs+H6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDkt MzI0NDljZTZjZjg5LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wMGMwM2MtZDIwNy00ZWMxLTlkZDktMzI0NDljZTZjZjg5 LzEvUmExdkh4dHpESG9CYTFZc0VyTWI3TVN6NGZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfHBptd0 DoVfHM4jAFAgBHniRtvgCcFa4lZpc7q0aBmnxsDqS91rpeEB1qN3k3FyjxMdwvPG Xbx7Ys96efrafCxbXhFOVgsYQ0Np77/6PufvIMDZEK9pZkdiUkiHra81z/bWC9HH tbhZ0PVMgo479RULYkPVMaCKgEmwZLZ7SJdCioLwBOdoRFsp5wvZXEDzSw5zE6SR SnWycx0L9CQSv18DUw10QELfbDP4iqVELSjG/YPXxnhzwj9Jmj1MfHZWgZmaZn4p 7Jn7y+s2+iWKXCbgTxKkmCMn81ZmcXfGx64qKwaX3NnDAS+pYqWd3fkcFMURcQT3 4rLqxSqe5u9OfA== -----END CERTIFICATE-----Generated at Wed Dec 17 11:18:38 2025 by rpki-client