This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json) Hash identifier: O1YZS8vruKBi2HqwkhGpaMwB5DcSeTyiCclyUB42DzM= Subject key identifier: 11:80:98:D4:2A:51:F4:F5:1E:59:61:90:16:BB:2E:D4:B3:42:2C:0F Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5 Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5 Certificate serial: 019B435C04C4BEA0097B2463555E6C7AF8E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft Manifest number: 171D Signing time: Mon 22 Dec 2025 00:01:02 +0000 Manifest this update: Mon 22 Dec 2025 00:01:02 +0000 Manifest next update: Tue 23 Dec 2025 00:01:02 +0000 Files and hashes: 1: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (hash: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=) 2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: bPI1++x/GSDIa921G4XdqR3VCVikcbtpk+uBbb8UXuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:04:c4:be:a0:09:7b:24:63:55:5e:6c:7a:f8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5 Validity Not Before: Dec 22 00:01:02 2025 GMT Not After : Dec 23 00:01:02 2025 GMT Subject: CN=118098d42a51f4f51e59619016bb2ed4b3422c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:ec:8e:ac:04:da:18:f5:3f:ef:a5:36:6e: e9:1a:2b:5f:cd:34:ee:c5:b7:49:82:df:d4:c6:c3: 2a:85:a5:4e:9a:4e:6e:cb:4e:54:8a:0e:27:9a:eb: ab:cf:21:f4:73:d4:01:7a:f4:be:63:f1:46:4d:b0: 52:3a:3f:0b:7d:39:21:a6:95:be:12:9c:c2:36:bf: 62:8f:2e:1e:84:72:7b:1e:7b:83:cf:a1:cc:bc:b9: e5:80:2b:8f:ae:b2:30:c3:00:79:7b:f1:8d:ea:c9: 3e:3a:75:51:91:ee:f9:7b:43:1a:3c:0f:d2:e9:8a: 84:a1:13:8d:30:b8:14:34:4a:1e:be:a7:45:e5:17: 58:3b:66:77:f4:81:42:b9:b8:34:d6:98:c6:ce:79: c1:e1:86:7d:1c:a3:0c:e5:e8:af:61:9c:a5:99:2b: 54:ab:5d:d4:f7:18:b2:13:b7:55:d7:13:21:ca:b4: 59:76:bd:f4:49:76:01:3f:cb:47:ba:c4:11:22:11: 3d:97:d5:c3:53:21:4a:c0:6a:ae:15:02:7d:34:72: 71:6a:03:71:27:f0:3d:2c:91:2c:da:d1:d2:4f:90: 9c:16:2c:72:f9:de:9b:ff:c0:e5:55:5a:a4:1b:40: 55:a3:9a:a3:a3:8b:84:95:6d:7a:69:76:dd:68:cf: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:80:98:D4:2A:51:F4:F5:1E:59:61:90:16:BB:2E:D4:B3:42:2C:0F X509v3 Authority Key Identifier: keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7b:b6:26:dc:5c:79:31:02:65:9e:f2:8f:d2:24:d9:ae:48: 4d:fd:2c:93:df:07:b0:35:7c:62:9c:fd:59:8e:97:a2:98:9a: 6f:37:2b:32:8a:9a:5d:6b:6d:3b:f4:6f:61:85:a1:83:c1:bb: 46:f4:b7:65:ef:d9:6d:d0:5c:16:13:67:05:21:4c:0f:eb:48: 5d:54:1c:f7:1d:70:ea:c8:1e:e1:ad:fa:8a:9c:71:58:92:c6: 2e:40:cb:85:f9:83:f9:3b:98:92:82:02:a2:a2:8e:f5:60:54: 7e:f7:f4:7d:7f:0b:d5:2f:b8:73:a2:4f:b6:eb:f2:26:d7:69: 66:41:e8:8c:34:3a:38:16:79:ee:7d:46:91:c6:07:c6:7d:d2: 1b:89:bd:22:fa:40:f4:53:81:19:15:76:8e:67:69:c8:5a:1e: be:24:f3:6d:ab:8b:4b:45:f2:bd:24:dc:02:94:fa:00:5b:04: 9f:0d:c2:61:02:c2:3c:c3:23:78:bc:3a:5d:65:b1:1b:7f:12: 47:90:7d:1f:94:b2:4d:60:74:22:25:13:1f:cc:36:ce:78:d8: 14:e2:92:43:82:ee:9f:1e:ea:28:d3:56:0c:23:64:1e:ef:c7: 4d:2e:4f:71:ed:ee:e0:3d:62:30:d5:70:ed:ad:50:69:73:66: 20:fb:59:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXATEvqAJeyRjVV5sevjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTI2MzMyNzRiMWQ4ODZhOTI3NTdmNjUyMTljMmU3NTQ2 ZWNkZjUwHhcNMjUxMjIyMDAwMTAyWhcNMjUxMjIzMDAwMTAyWjAzMTEwLwYDVQQD EygxMTgwOThkNDJhNTFmNGY1MWU1OTYxOTAxNmJiMmVkNGIzNDIyYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoebsjqwE2hj1P++lNm7pGitfzTTu xbdJgt/UxsMqhaVOmk5uy05Uig4nmuurzyH0c9QBevS+Y/FGTbBSOj8LfTkhppW+ EpzCNr9ijy4ehHJ7HnuDz6HMvLnlgCuPrrIwwwB5e/GN6sk+OnVRke75e0MaPA/S 6YqEoRONMLgUNEoevqdF5RdYO2Z39IFCubg01pjGznnB4YZ9HKMM5eivYZylmStU q13U9xiyE7dV1xMhyrRZdr30SXYBP8tHusQRIhE9l9XDUyFKwGquFQJ9NHJxagNx J/A9LJEs2tHST5CcFixy+d6b/8DlVVqkG0BVo5qjo4uElW16aXbdaM99lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGAmNQqUfT1HllhkBa7LtSzQiwPMB8GA1UdIwQY MBaAFERSYzJ0sdiGqSdX9lIZwudUbs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgt YmI4NmQ0YmEwMmRlLzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgtYmI4NmQ0YmEwMmRl LzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnu2Jtxc eTECZZ7yj9Ik2a5ITf0sk98HsDV8Ypz9WY6XopiabzcrMoqaXWttO/RvYYWhg8G7 RvS3Ze/ZbdBcFhNnBSFMD+tIXVQc9x1w6sge4a36ipxxWJLGLkDLhfmD+TuYkoIC oqKO9WBUfvf0fX8L1S+4c6JPtuvyJtdpZkHojDQ6OBZ57n1GkcYHxn3SG4m9IvpA 9FOBGRV2jmdpyFoeviTzbauLS0XyvSTcApT6AFsEnw3CYQLCPMMjeLw6XWWxG38S R5B9H5SyTWB0IiUTH8w2znjYFOKSQ4Lunx7qKNNWDCNkHu/HTS5Pce3u4D1iMNVw 7a1QaXNmIPtZ3g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:40:01 2025 by rpki-client