This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft File: RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json) Hash identifier: pK17v5H1bRcYJ5nrIALQJkJmRLuncwKeAs+JrKoHKGc= Subject key identifier: 13:6C:68:E0:D4:F5:60:02:C6:DD:AA:56:9C:4D:B0:15:2B:11:CD:9F Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5 Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5 Certificate serial: 019B3DC7E3D084C30AE05D7E943999D65690 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft Manifest number: 05E5 Signing time: Sat 20 Dec 2025 22:01:08 +0000 Manifest this update: Sat 20 Dec 2025 22:01:08 +0000 Manifest next update: Sun 21 Dec 2025 22:01:08 +0000 Files and hashes: 1: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: yLr3rj+ATk3dBQhzfS0d1E/UbREkPrc0VTlMrswD2lY=) 2: knBsZ4wjpF8zeO3oZHgDCU3JzpY.roa (hash: TYTzhZiCS0TYNybiAGDqTJecyl1aRzohizYpYrTciOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:e3:d0:84:c3:0a:e0:5d:7e:94:39:99:d6:56:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5 Validity Not Before: Dec 20 22:01:08 2025 GMT Not After : Dec 21 22:01:08 2025 GMT Subject: CN=136c68e0d4f56002c6ddaa569c4db0152b11cd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:cb:63:d6:c3:37:12:36:f0:aa:c4:96:4e: 3b:2e:a4:1f:04:86:28:a3:3a:84:45:c5:00:2d:0a: cd:71:d0:3c:7e:b2:37:2d:fc:c3:78:2c:2f:f7:78: 13:94:51:ab:dc:e2:47:80:fc:a0:63:0a:b5:fc:99: 04:93:6d:65:92:cc:bb:3c:aa:cf:ac:2f:ed:d2:00: f9:f4:78:64:55:2b:cb:e5:fd:d7:bb:ad:7f:09:1b: f8:33:8a:80:e0:69:0f:bd:69:8a:a2:e3:9d:15:d0: c5:3d:13:57:c5:06:b0:e4:59:a6:58:f1:01:6b:33: 3f:17:41:c0:db:3d:48:84:64:20:71:36:63:0b:c0: b9:96:e3:58:c9:64:0a:ec:73:06:70:92:03:d8:97: 01:1e:38:1a:ff:51:0d:6c:02:f6:7c:60:4b:6e:ce: a5:31:76:22:a2:49:09:c3:15:06:0d:86:ef:4c:05: b6:55:ae:7c:56:a3:d8:53:73:7d:2d:0c:d2:6c:ec: 52:1d:5e:8c:05:fc:b4:4e:10:24:61:5a:1d:bb:cd: da:61:d3:21:89:ac:d2:77:39:b9:f9:f5:1b:bd:e6: 75:cf:a9:ca:5e:e8:3b:67:cf:56:10:74:e7:35:58: 45:98:a6:fe:55:b9:90:a5:b9:01:c1:3c:01:0b:8b: 70:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6C:68:E0:D4:F5:60:02:C6:DD:AA:56:9C:4D:B0:15:2B:11:CD:9F X509v3 Authority Key Identifier: keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:dc:03:76:81:4a:6f:77:75:75:ff:ec:78:b0:bb:2c:93:0d: 9d:00:83:e7:62:e0:34:38:2e:93:ad:be:5b:5a:84:ea:29:1e: c7:9b:83:67:12:f4:68:2a:d5:3b:61:df:b5:0f:a1:8e:61:40: 8a:e7:16:4b:a4:a9:d2:97:5a:a5:97:fb:06:32:eb:46:ee:a0: 89:6f:61:ce:47:42:88:04:ea:3c:49:8d:c6:0c:aa:00:3c:67: 81:5f:b7:47:1a:06:18:be:57:6a:e6:c6:89:a8:be:f8:41:d0: 5a:b0:54:74:5c:85:60:82:9d:68:3d:77:ff:0e:eb:fc:32:f0: 5b:58:0b:a7:17:a4:dc:e5:22:de:ad:5a:67:c2:ad:32:e1:10: 6f:35:75:99:d5:57:02:9e:a8:db:8f:be:a0:1a:3d:d7:9f:d3: 9b:b3:5b:16:7b:23:f2:df:bb:fd:7c:18:91:ca:13:26:27:81: 5c:42:c3:5f:55:d3:9e:3e:cf:13:1c:68:6f:72:b0:86:4e:46: 18:b8:f1:44:47:79:38:1a:1b:b3:d5:b6:fb:2e:23:0b:82:b9: 27:ae:43:d7:06:50:79:bc:d7:0f:88:6a:f4:44:8f:63:a0:cc: a0:c5:cb:a2:d3:fc:c1:43:76:7e:24:30:dd:34:17:6e:fc:27: 02:2e:e1:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+PQhMMK4F1+lDmZ1laQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YjE0NjdjMjA0ODFkMTFiNjdmZjdiYWM2NDk4OTU5Zjcx OGUxZjUwHhcNMjUxMjIwMjIwMTA4WhcNMjUxMjIxMjIwMTA4WjAzMTEwLwYDVQQD EygxMzZjNjhlMGQ0ZjU2MDAyYzZkZGFhNTY5YzRkYjAxNTJiMTFjZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj7LY9bDNxI28KrElk47LqQfBIYo ozqERcUALQrNcdA8frI3LfzDeCwv93gTlFGr3OJHgPygYwq1/JkEk21lksy7PKrP rC/t0gD59HhkVSvL5f3Xu61/CRv4M4qA4GkPvWmKouOdFdDFPRNXxQaw5FmmWPEB azM/F0HA2z1IhGQgcTZjC8C5luNYyWQK7HMGcJID2JcBHjga/1ENbAL2fGBLbs6l MXYiokkJwxUGDYbvTAW2Va58VqPYU3N9LQzSbOxSHV6MBfy0ThAkYVodu83aYdMh iazSdzm5+fUbveZ1z6nKXug7Z89WEHTnNVhFmKb+VbmQpbkBwTwBC4twgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNsaODU9WACxt2qVpxNsBUrEc2fMB8GA1UdIwQY MBaAFESxRnwgSB0Rtn/3usZJiVn3GOH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYjdmNWEtZTg2MC00NDIwLWFiZWUt MTlmODc0YTE4MWM1LzEvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYjdmNWEtZTg2MC00NDIwLWFiZWUtMTlmODc0YTE4MWM1 LzEvUkxGR2ZDQklIUkcyZl9lNnhrbUpXZmNZNGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdwDdoFK b3d1df/seLC7LJMNnQCD52LgNDguk62+W1qE6ikex5uDZxL0aCrVO2HftQ+hjmFA iucWS6Sp0pdapZf7BjLrRu6giW9hzkdCiATqPEmNxgyqADxngV+3RxoGGL5XaubG iai++EHQWrBUdFyFYIKdaD13/w7r/DLwW1gLpxek3OUi3q1aZ8KtMuEQbzV1mdVX Ap6o24++oBo915/Tm7NbFnsj8t+7/XwYkcoTJieBXELDX1XTnj7PExxob3Kwhk5G GLjxREd5OBobs9W2+y4jC4K5J65D1wZQebzXD4hq9ESPY6DMoMXLotP8wUN2fiQw 3TQXbvwnAi7hTA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:45 2025 by rpki-client