This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json) Hash identifier: eMgXedRcyWvjv48x4FJ/e3gmcITkRCZfw60iZ0sgrBk= Subject key identifier: A0:93:9D:81:6F:BC:DB:3D:E8:FC:CA:D8:8F:0E:C7:FA:3A:5F:A0:D1 Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Certificate serial: 019B5E64F0F980897AA5619A6A8400619436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft Manifest number: 06CF Signing time: Sat 27 Dec 2025 06:00:32 +0000 Manifest this update: Sat 27 Dec 2025 06:00:32 +0000 Manifest next update: Sun 28 Dec 2025 06:00:32 +0000 Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=) 2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=) 3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: 9Gt8SmV5DZpg4lQgyKzvPbI2wtLm/07SnJNAdN9rosM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:64:f0:f9:80:89:7a:a5:61:9a:6a:84:00:61:94:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Validity Not Before: Dec 27 06:00:32 2025 GMT Not After : Dec 28 06:00:32 2025 GMT Subject: CN=a0939d816fbcdb3de8fccad88f0ec7fa3a5fa0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ae:a1:9d:e0:69:a1:d0:74:02:ef:aa:ee:bc: 5d:01:be:6a:3a:1e:ef:2d:d0:94:a5:71:e7:ea:7e: 1a:e0:e7:77:ce:64:ef:79:05:6f:36:10:dc:bc:df: 31:34:23:96:56:d3:7e:2d:1a:e2:7a:3d:fe:98:8f: d4:a1:02:7e:49:b4:30:90:2b:e4:60:0b:28:39:27: 32:02:fa:15:fe:e3:8e:24:a7:89:a8:da:de:d1:b8: bd:43:23:ed:8b:bb:7c:ae:b1:d7:27:10:5f:23:66: b9:c7:a6:56:74:a2:31:e6:b4:3b:d8:b5:f1:a4:1f: 61:4b:15:4c:0b:79:3d:eb:7f:57:6c:3d:9d:03:02: be:05:e6:a9:a1:d5:5b:65:77:c7:c2:d1:9b:b8:76: a1:b8:b5:56:33:32:a6:cd:c7:b0:89:b4:97:d1:b7: 5a:47:8c:92:a0:d4:71:2a:9d:bf:4d:71:40:a8:99: 19:70:dd:c3:a2:94:8f:96:5b:b1:57:e9:63:60:af: a7:a2:45:e5:24:8a:b7:41:3f:f6:95:6e:88:71:b5: fd:49:d8:a3:d1:cf:72:19:96:86:53:dc:d5:7f:17: e1:35:58:d8:72:7d:98:2b:ad:48:55:66:a6:d4:eb: 10:f8:a5:5a:78:b5:47:fc:1d:32:f2:68:98:36:f0: 77:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:93:9D:81:6F:BC:DB:3D:E8:FC:CA:D8:8F:0E:C7:FA:3A:5F:A0:D1 X509v3 Authority Key Identifier: keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:c0:86:53:4d:6b:b6:5e:37:66:92:7e:d4:3b:b8:b7:ec:78: b6:25:8c:c9:32:62:e2:d9:44:4c:29:1b:b9:35:d6:f5:c4:5f: 67:ec:45:54:7c:ee:3b:0a:a3:bb:02:ce:18:43:5e:0a:f1:07: a7:e3:9b:ff:7f:1f:70:f8:cc:21:07:43:a7:3d:af:45:07:de: 0c:1d:28:5a:eb:9e:54:02:a0:00:32:ff:01:1c:8c:3a:62:90: c5:a0:c7:8b:a4:bb:99:c9:4f:9d:c0:56:3c:bf:62:a6:ce:31: a6:47:bd:3f:48:46:a0:ba:c2:d8:a0:65:1a:2c:bd:a7:6e:1c: 25:f1:1b:49:7f:c3:39:b1:22:44:db:e6:0c:9b:0d:0f:e4:15: a5:a3:a4:2b:9f:97:32:78:9c:bf:6c:dc:99:e0:e5:9a:c3:d0: 6f:dd:ac:c0:c4:39:e0:ba:c6:01:b6:a0:e0:82:5a:4a:34:76: bd:df:a9:93:e1:7c:16:a4:14:df:03:d8:e6:34:78:59:9b:fb: 6b:91:47:dd:51:9f:92:d6:62:90:fc:36:2f:b8:21:71:8c:5d: 1b:76:d7:f3:c6:20:7c:8c:b7:8d:a2:65:43:8c:49:14:d3:c1: 41:f9:d1:7d:c0:82:b4:c9:29:fb:a0:b9:09:80:cd:f7:23:0b: 7c:09:41:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteZPD5gIl6pWGaaoQAYZQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz MGYyNWEwHhcNMjUxMjI3MDYwMDMyWhcNMjUxMjI4MDYwMDMyWjAzMTEwLwYDVQQD EyhhMDkzOWQ4MTZmYmNkYjNkZThmY2NhZDg4ZjBlYzdmYTNhNWZhMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA966hneBpodB0Au+q7rxdAb5qOh7v LdCUpXHn6n4a4Od3zmTveQVvNhDcvN8xNCOWVtN+LRriej3+mI/UoQJ+SbQwkCvk YAsoOScyAvoV/uOOJKeJqNre0bi9QyPti7t8rrHXJxBfI2a5x6ZWdKIx5rQ72LXx pB9hSxVMC3k9639XbD2dAwK+BeapodVbZXfHwtGbuHahuLVWMzKmzcewibSX0bda R4ySoNRxKp2/TXFAqJkZcN3DopSPlluxV+ljYK+nokXlJIq3QT/2lW6IcbX9Sdij 0c9yGZaGU9zVfxfhNVjYcn2YK61IVWam1OsQ+KVaeLVH/B0y8miYNvB3pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCTnYFvvNs96PzK2I8Ox/o6X6DRMB8GA1UdIwQY MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcCGU01r tl43ZpJ+1Du4t+x4tiWMyTJi4tlETCkbuTXW9cRfZ+xFVHzuOwqjuwLOGENeCvEH p+Ob/38fcPjMIQdDpz2vRQfeDB0oWuueVAKgADL/ARyMOmKQxaDHi6S7mclPncBW PL9ips4xpke9P0hGoLrC2KBlGiy9p24cJfEbSX/DObEiRNvmDJsND+QVpaOkK5+X Mnicv2zcmeDlmsPQb92swMQ54LrGAbag4IJaSjR2vd+pk+F8FqQU3wPY5jR4WZv7 a5FH3VGfktZikPw2L7ghcYxdG3bX88YgfIy3jaJlQ4xJFNPBQfnRfcCCtMkp+6C5 CYDN9yMLfAlB6Q== -----END CERTIFICATE-----Generated at Sat Dec 27 15:40:53 2025 by rpki-client