This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json) Hash identifier: nVqvyk1Z+yKzO9DsCR6oYWUcahKMDu/tCsRxQ35r7dc= Subject key identifier: 27:D6:9C:04:12:E0:4A:14:F9:13:1C:54:E9:8F:4B:1A:97:9B:5A:05 Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Certificate serial: 019B39B3CCA4086EF6537D246633182C658C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft Manifest number: 06BC Signing time: Sat 20 Dec 2025 03:00:43 +0000 Manifest this update: Sat 20 Dec 2025 03:00:43 +0000 Manifest next update: Sun 21 Dec 2025 03:00:43 +0000 Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=) 2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=) 3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: oaThe/xK4y88Ygj80vQAFZUGiY53KXzWcSxTItPLcLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:cc:a4:08:6e:f6:53:7d:24:66:33:18:2c:65:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Validity Not Before: Dec 20 03:00:43 2025 GMT Not After : Dec 21 03:00:43 2025 GMT Subject: CN=27d69c0412e04a14f9131c54e98f4b1a979b5a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:d3:7a:b9:b7:5c:e1:dc:3e:32:4d:12:37: 52:4d:db:f4:67:b2:de:9d:3d:85:08:3e:1e:df:ce: d4:29:95:78:80:d0:fa:ad:f5:db:95:22:d3:49:51: 31:bd:8d:a7:3a:0c:5d:b9:c1:6e:fa:97:ce:bb:ad: 9d:42:29:80:6c:9b:ac:1a:fd:d8:cd:da:72:3c:89: a4:85:7b:49:ca:bd:89:41:1f:ca:c1:6f:cb:17:52: 4f:37:d4:e9:f6:a3:0a:d1:0b:a6:da:35:b4:3a:96: b4:3a:05:09:1c:e3:f6:60:f7:9d:55:08:e5:34:67: 1a:e8:f4:95:c7:be:51:b0:af:1c:88:ac:7e:87:98: bc:7b:ce:dd:07:48:d6:fb:ae:74:28:fa:7a:e4:ca: 7e:50:f3:44:65:79:e0:ef:6c:e4:e5:c6:51:4b:90: e8:7b:fc:b9:cf:d6:ae:88:e3:d1:d3:67:08:a2:1c: dc:50:22:53:b8:fe:a1:51:05:7b:1e:e6:09:57:ca: 45:0d:3e:84:17:a1:4c:88:d7:50:c8:96:dc:74:fd: 21:16:be:d0:d5:a7:f3:2c:8d:a6:ce:11:7b:96:4e: 64:44:a3:d9:e0:8a:99:e3:0b:13:9f:da:a3:5e:bb: 6a:fb:18:7b:1e:fc:2b:4a:7d:f6:cd:f2:e5:f8:01: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D6:9C:04:12:E0:4A:14:F9:13:1C:54:E9:8F:4B:1A:97:9B:5A:05 X509v3 Authority Key Identifier: keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ca:7b:fe:47:8e:86:e6:4e:10:29:de:d7:d0:f5:fb:2e:02: df:bc:04:b9:96:66:fc:61:bc:49:67:8c:aa:6b:68:38:27:da: 9c:28:16:3f:dd:46:2a:01:75:6e:e3:2b:43:50:d5:71:0f:d5: c8:7a:17:91:e1:67:7b:b9:33:02:7e:82:45:98:81:12:70:ac: a3:9d:47:cd:c7:e2:2c:ac:eb:8c:ea:a8:63:78:61:d8:7b:6e: c4:84:86:01:aa:49:7d:7f:7b:d9:4b:30:2b:77:08:bd:2c:fd: 4f:be:1a:40:de:80:73:63:75:bf:17:dc:af:1b:c2:d8:e3:83: e3:d8:4f:a1:75:7f:5e:03:0f:7b:18:91:59:1c:bf:3d:a1:97: d6:09:89:3a:ce:3f:4a:18:e1:88:16:40:38:fb:e5:13:06:58: ea:af:45:a2:3f:ee:8d:86:c8:30:67:27:e4:68:76:72:cc:03: 9a:bd:9f:1b:86:75:bd:76:c4:67:d1:22:7d:71:66:44:6c:a8: ff:30:05:26:7b:0d:83:12:6a:ec:96:39:0e:5e:c9:40:76:5e: a9:b1:50:52:4a:27:6d:cc:f7:d2:32:36:d0:58:98:bc:82:08: a6:7d:ac:57:92:d3:50:ba:03:e5:84:09:92:8b:5b:85:e1:5c: f1:c7:f9:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s8ykCG72U30kZjMYLGWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz MGYyNWEwHhcNMjUxMjIwMDMwMDQzWhcNMjUxMjIxMDMwMDQzWjAzMTEwLwYDVQQD EygyN2Q2OWMwNDEyZTA0YTE0ZjkxMzFjNTRlOThmNGIxYTk3OWI1YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfTTerm3XOHcPjJNEjdSTdv0Z7Le nT2FCD4e387UKZV4gND6rfXblSLTSVExvY2nOgxducFu+pfOu62dQimAbJusGv3Y zdpyPImkhXtJyr2JQR/KwW/LF1JPN9Tp9qMK0Qum2jW0Opa0OgUJHOP2YPedVQjl NGca6PSVx75RsK8ciKx+h5i8e87dB0jW+650KPp65Mp+UPNEZXng72zk5cZRS5Do e/y5z9auiOPR02cIohzcUCJTuP6hUQV7HuYJV8pFDT6EF6FMiNdQyJbcdP0hFr7Q 1afzLI2mzhF7lk5kRKPZ4IqZ4wsTn9qjXrtq+xh7HvwrSn32zfLl+AF4vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfWnAQS4EoU+RMcVOmPSxqXm1oFMB8GA1UdIwQY MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsp7/keO huZOECne19D1+y4C37wEuZZm/GG8SWeMqmtoOCfanCgWP91GKgF1buMrQ1DVcQ/V yHoXkeFne7kzAn6CRZiBEnCso51HzcfiLKzrjOqoY3hh2HtuxISGAapJfX972Usw K3cIvSz9T74aQN6Ac2N1vxfcrxvC2OOD49hPoXV/XgMPexiRWRy/PaGX1gmJOs4/ ShjhiBZAOPvlEwZY6q9Foj/ujYbIMGcn5Gh2cswDmr2fG4Z1vXbEZ9EifXFmRGyo /zAFJnsNgxJq7JY5Dl7JQHZeqbFQUkonbcz30jI20FiYvIIIpn2sV5LTULoD5YQJ kotbheFc8cf5Lg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:39 2025 by rpki-client