This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json) Hash identifier: N9lepoazunEht+ewvYBIq7CcLb1fTUXpqIqSoHywP9Q= Subject key identifier: 11:FD:99:FE:AB:6B:DF:3A:74:BA:44:9D:76:49:4E:17:9C:55:C1:80 Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f Certificate serial: 019B2C66ADCE5E1DDAD50D351D4AC4E3D49F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft Manifest number: 0530 Signing time: Wed 17 Dec 2025 13:01:25 +0000 Manifest this update: Wed 17 Dec 2025 13:01:25 +0000 Manifest next update: Thu 18 Dec 2025 13:01:25 +0000 Files and hashes: 1: AtEE45wMuuWclU17cb1kVGtiK-k.roa (hash: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=) 2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: 1/fFBEmpF3p4aajxgaPWaaknGFsy2gFpRhFXtGxjcUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:ad:ce:5e:1d:da:d5:0d:35:1d:4a:c4:e3:d4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f Validity Not Before: Dec 17 13:01:25 2025 GMT Not After : Dec 18 13:01:25 2025 GMT Subject: CN=11fd99feab6bdf3a74ba449d76494e179c55c180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:56:d3:63:a9:cb:71:c2:6c:18:e0:81:1d: ee:5b:8f:c4:64:6f:29:4e:15:2a:02:99:79:6f:e0: 14:eb:89:fb:73:89:ee:8a:a5:85:25:5d:ae:79:27: 86:6c:0b:11:70:aa:1e:81:09:f3:21:8e:ad:dc:4e: 14:ad:5f:f4:e2:7b:e2:70:fa:8f:d8:20:cc:4b:1b: 65:33:b5:c2:f1:03:58:77:fe:fb:6c:13:b3:cb:2e: 45:69:3d:da:87:97:0a:c4:2d:62:e2:6a:99:c7:13: d5:9f:52:12:4f:15:87:30:be:19:57:55:6c:8e:fa: 06:64:7e:42:d1:89:81:99:b6:9e:17:6c:cd:a4:5b: ac:dc:4a:04:e7:7b:fc:c2:df:e3:e3:8e:57:93:a5: d1:56:20:a8:dc:4d:04:c4:6c:7b:c4:29:17:1d:c8: 1f:d5:38:72:89:08:6b:6f:5a:20:27:0f:34:28:30: ff:77:4a:56:51:cb:6c:a3:53:3c:3e:d0:dd:17:38: 32:f5:98:06:65:f7:47:9d:86:87:a3:73:84:d9:c9: e8:5e:35:7f:78:ed:b0:a7:27:bd:58:98:3f:e1:3c: e0:d8:dd:be:41:fa:9d:de:53:ca:f4:fb:eb:26:b3: c6:26:fe:73:92:a5:19:47:e3:ff:09:de:df:82:08: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FD:99:FE:AB:6B:DF:3A:74:BA:44:9D:76:49:4E:17:9C:55:C1:80 X509v3 Authority Key Identifier: keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e5:44:c2:45:79:00:fc:f8:ac:b3:fa:46:04:7b:b2:a8:77: c7:63:10:68:39:85:3d:a2:f5:01:a4:d3:de:a2:ee:53:e2:0a: 55:50:98:b6:2a:49:6e:f5:95:a8:6a:b0:bb:00:07:28:68:f0: ef:0e:7f:6b:ee:92:13:52:f6:0b:5e:25:e6:62:4b:16:85:53: 3f:85:30:82:0d:ea:59:9d:1b:0b:5c:5c:83:81:df:54:54:a3: 2c:5e:dd:e6:1c:78:1b:64:9d:e7:5a:92:4e:54:3c:c2:b5:17: 1e:5a:1e:e3:06:82:44:f2:53:3e:8f:b2:e2:72:3f:dd:d1:df: a9:b3:d8:a1:2d:2e:e9:f2:02:1d:c5:00:9b:ef:37:20:e6:89: 1f:85:3d:ac:63:16:f7:12:da:65:04:12:2a:3a:2e:2f:35:c1: 4e:26:5d:19:33:c0:b4:a0:1f:8b:b9:a3:68:41:7f:12:e6:1b: e0:45:93:43:71:38:ef:1a:b0:74:0e:22:77:e0:ee:48:d7:cc: 88:66:2c:06:e7:8a:57:d2:6c:66:a3:0a:f0:44:b5:93:e2:27: d0:7e:1a:90:0a:a3:1a:66:44:41:b2:b0:32:7d:38:6b:29:ee: 41:c2:95:38:21:30:a2:71:18:52:91:d9:5d:1d:28:63:51:a2: 04:ac:ef:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZq3OXh3a1Q01HUrE49SfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZmMwYWE1YTZjMzM5MWVmZmZmYTgzNDI1YjIzYjI2NGM3 MTA4NWYwHhcNMjUxMjE3MTMwMTI1WhcNMjUxMjE4MTMwMTI1WjAzMTEwLwYDVQQD EygxMWZkOTlmZWFiNmJkZjNhNzRiYTQ0OWQ3NjQ5NGUxNzljNTVjMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+hW02Opy3HCbBjggR3uW4/EZG8p ThUqApl5b+AU64n7c4nuiqWFJV2ueSeGbAsRcKoegQnzIY6t3E4UrV/04nvicPqP 2CDMSxtlM7XC8QNYd/77bBOzyy5FaT3ah5cKxC1i4mqZxxPVn1ISTxWHML4ZV1Vs jvoGZH5C0YmBmbaeF2zNpFus3EoE53v8wt/j445Xk6XRViCo3E0ExGx7xCkXHcgf 1ThyiQhrb1ogJw80KDD/d0pWUctso1M8PtDdFzgy9ZgGZfdHnYaHo3OE2cnoXjV/ eO2wpye9WJg/4Tzg2N2+Qfqd3lPK9PvrJrPGJv5zkqUZR+P/Cd7fgggWnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH9mf6ra986dLpEnXZJThecVcGAMB8GA1UdIwQY MBaAFEX8CqWmwzke//+oNCWyOyZMcQhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYt OTI3MTliMDBiYmQ0LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYtOTI3MTliMDBiYmQ0 LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOVEwkV5 APz4rLP6RgR7sqh3x2MQaDmFPaL1AaTT3qLuU+IKVVCYtipJbvWVqGqwuwAHKGjw 7w5/a+6SE1L2C14l5mJLFoVTP4Uwgg3qWZ0bC1xcg4HfVFSjLF7d5hx4G2Sd51qS TlQ8wrUXHloe4waCRPJTPo+y4nI/3dHfqbPYoS0u6fICHcUAm+83IOaJH4U9rGMW 9xLaZQQSKjouLzXBTiZdGTPAtKAfi7mjaEF/EuYb4EWTQ3E47xqwdA4id+DuSNfM iGYsBueKV9JsZqMK8ES1k+In0H4akAqjGmZEQbKwMn04aynuQcKVOCEwonEYUpHZ XR0oY1GiBKzvqg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:51:32 2025 by rpki-client