This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json) Hash identifier: hTqJRMOl0LBDnMjjA5KzCX07YgX9Q21taC7EgsYDUiI= Subject key identifier: B6:8F:8E:7E:34:10:55:80:C2:1D:5B:D9:21:C5:59:86:ED:26:86:F2 Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac Certificate serial: 019B3DC76944B30EF493E978F17C8BA5C46E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft Manifest number: 0596 Signing time: Sat 20 Dec 2025 22:00:37 +0000 Manifest this update: Sat 20 Dec 2025 22:00:37 +0000 Manifest next update: Sun 21 Dec 2025 22:00:37 +0000 Files and hashes: 1: 0MlTaxTSqs7exW9T9UwJnI13N48.roa (hash: tFPjdFZ8VQwwFGSe9O82bqMhmvn5QbzxecPzG4FY10Y=) 2: A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa (hash: ldoqGlxkskwlUGFcvsBCWW2juWo6FhsFHoXDckpMuNw=) 3: CIfkNcs_dPG1243KuyQzPUhrSqE.roa (hash: vq82qZoa17x2oFYdWbGJVFocqNvpvLo719jmFST2KLk=) 4: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: MVMsTibLFQwellSjf1weBHjZyVf8XNxgOYaUZP3Ikec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:69:44:b3:0e:f4:93:e9:78:f1:7c:8b:a5:c4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac Validity Not Before: Dec 20 22:00:37 2025 GMT Not After : Dec 21 22:00:37 2025 GMT Subject: CN=b68f8e7e34105580c21d5bd921c55986ed2686f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:11:9d:e6:6c:1a:0a:aa:79:f6:1b:25:da:35: a5:60:3f:7b:b1:a3:2e:a9:18:8d:d2:66:da:25:83: 23:5c:68:17:64:b7:e7:35:2b:a9:35:bb:99:93:cf: c4:d9:1e:14:92:d6:05:9a:8d:8e:20:6d:02:ae:c5: 54:df:de:6e:ac:14:d0:70:38:af:cf:90:d5:7a:ec: 38:6b:33:8b:c8:76:72:a3:80:f6:ab:0f:15:65:ff: 93:1b:95:2d:6c:fb:f5:62:ba:b7:a3:f7:06:0a:6d: c2:0d:8a:0c:48:4a:24:30:90:18:4d:b9:33:2b:e9: 75:eb:e0:91:f8:b4:3e:00:73:05:77:99:57:b4:86: 15:2c:4c:60:3c:c5:30:d0:6a:85:04:ba:b0:ee:a6: dd:a6:3e:b9:aa:89:3d:49:26:2d:c9:32:37:a5:05: ad:b5:e6:76:85:58:0b:e1:9c:31:a3:f4:57:08:71: a6:26:d8:48:11:19:b1:3e:eb:c3:b4:f9:22:22:c0: 7e:63:24:fe:32:44:9b:7b:b9:f0:2f:fd:bb:1c:30: b4:13:ef:c0:34:9f:9a:ae:0d:61:92:27:6f:a3:05: ba:c3:84:62:3c:d0:55:34:23:98:6d:05:4e:8c:23: a6:e6:be:ec:bc:74:9d:1e:a2:3f:84:3b:26:69:d8: f1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8F:8E:7E:34:10:55:80:C2:1D:5B:D9:21:C5:59:86:ED:26:86:F2 X509v3 Authority Key Identifier: keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c5:77:11:94:8e:81:22:f5:08:35:6a:ba:8d:47:e3:22:aa: 8a:c9:34:c1:a8:7b:00:f6:43:c6:ad:5b:f6:10:e7:be:d6:81: 4f:b4:59:0a:ff:e6:57:29:09:49:c5:eb:de:82:dd:e2:0f:9c: 71:45:cd:4c:f3:93:0f:30:44:a4:dd:82:ba:d9:51:55:0a:cb: ff:73:71:0c:d0:bd:48:e2:49:65:a4:bb:ec:6b:d1:cb:36:a4: 00:63:b7:3a:54:ae:18:70:f7:f5:53:55:b7:4f:95:6c:6a:5e: 34:bd:9d:44:ff:84:35:45:8a:5b:d3:97:8f:20:7f:a3:84:1a: 9c:a1:79:7c:e6:a5:d2:70:eb:05:d5:42:f7:bb:3c:e7:b9:47: 1b:e8:36:65:81:80:ec:53:ab:4a:33:3e:f8:a0:d5:a7:07:57: 78:32:e9:74:a4:7a:b0:e4:de:90:b0:96:aa:a2:07:79:c3:9b: 2f:b7:0c:dc:eb:35:13:ec:14:56:97:62:bd:d9:19:6f:35:56: b7:9e:1a:f7:98:e4:29:de:84:22:b0:c9:22:98:5a:a7:fa:f3: c4:fd:60:08:dd:e9:17:98:05:11:99:e7:34:a2:bc:ee:d9:b3: 21:ce:3c:83:3d:e0:b4:02:10:e0:b8:ac:1b:e0:ee:5e:c5:91: 3b:f4:74:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x2lEsw70k+l48XyLpcRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzhiZjY4YjY2NzVlMmE1YTNhNzkyMmY2NDc3ZDJhZmIz NTdmYWMwHhcNMjUxMjIwMjIwMDM3WhcNMjUxMjIxMjIwMDM3WjAzMTEwLwYDVQQD EyhiNjhmOGU3ZTM0MTA1NTgwYzIxZDViZDkyMWM1NTk4NmVkMjY4NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xGd5mwaCqp59hsl2jWlYD97saMu qRiN0mbaJYMjXGgXZLfnNSupNbuZk8/E2R4UktYFmo2OIG0CrsVU395urBTQcDiv z5DVeuw4azOLyHZyo4D2qw8VZf+TG5UtbPv1Yrq3o/cGCm3CDYoMSEokMJAYTbkz K+l16+CR+LQ+AHMFd5lXtIYVLExgPMUw0GqFBLqw7qbdpj65qok9SSYtyTI3pQWt teZ2hVgL4Zwxo/RXCHGmJthIERmxPuvDtPkiIsB+YyT+MkSbe7nwL/27HDC0E+/A NJ+arg1hkidvowW6w4RiPNBVNCOYbQVOjCOm5r7svHSdHqI/hDsmadjx4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaPjn40EFWAwh1b2SHFWYbtJobyMB8GA1UdIwQY MBaAFEY4v2i2Z14qWjp5IvZHfSr7NX+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMt ODcwNzNmNDM0YjAzLzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMtODcwNzNmNDM0YjAz LzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsV3EZSO gSL1CDVquo1H4yKqisk0wah7APZDxq1b9hDnvtaBT7RZCv/mVykJScXr3oLd4g+c cUXNTPOTDzBEpN2CutlRVQrL/3NxDNC9SOJJZaS77GvRyzakAGO3OlSuGHD39VNV t0+VbGpeNL2dRP+ENUWKW9OXjyB/o4QanKF5fOal0nDrBdVC97s857lHG+g2ZYGA 7FOrSjM++KDVpwdXeDLpdKR6sOTekLCWqqIHecObL7cM3Os1E+wUVpdivdkZbzVW t54a95jkKd6EIrDJIphap/rzxP1gCN3pF5gFEZnnNKK87tmzIc48gz3gtAIQ4Lis G+DuXsWRO/R0ZA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:20 2025 by rpki-client