This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json) Hash identifier: yT3W1tGK62b0hm27rOtW1HRrcwuRZVQNku1a7gMLqyw= Subject key identifier: D7:33:29:19:A7:57:09:09:A1:E4:8A:B8:23:A4:50:DF:8A:B4:95:1E Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f Certificate serial: 019B39EB6C539B98731B673A3360F82AB269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft Manifest number: 0537 Signing time: Sat 20 Dec 2025 04:01:28 +0000 Manifest this update: Sat 20 Dec 2025 04:01:28 +0000 Manifest next update: Sun 21 Dec 2025 04:01:28 +0000 Files and hashes: 1: AtEE45wMuuWclU17cb1kVGtiK-k.roa (hash: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=) 2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: KhGQ0uqN0IY72nrtiyjD9A9xH0k+bZzYc6fF/UAwPBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:6c:53:9b:98:73:1b:67:3a:33:60:f8:2a:b2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f Validity Not Before: Dec 20 04:01:28 2025 GMT Not After : Dec 21 04:01:28 2025 GMT Subject: CN=d7332919a7570909a1e48ab823a450df8ab4951e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:35:ec:c1:0c:fc:b7:cf:8c:2d:21:92:1e: 6b:62:06:d4:90:32:cb:4d:8d:25:11:1f:9c:c5:0f: 68:52:f8:02:be:e5:ea:50:67:a2:fa:37:7b:2e:ae: bf:de:d2:ff:8f:a4:39:0d:81:db:97:bd:ae:e4:6e: 39:40:0c:14:ec:65:e8:1e:e1:55:9b:33:28:4a:b7: 3f:a4:57:cb:f9:e4:80:a7:53:dc:6f:31:1d:93:80: 20:23:47:11:c4:40:7c:7c:12:c4:fa:c6:2c:53:89: 71:9d:fa:14:ce:f8:11:59:c6:f5:93:bb:f2:c9:35: b9:a6:d8:04:a3:75:a9:65:ec:e6:86:90:bc:71:37: d1:d3:80:ea:f0:16:d6:bd:67:bd:15:59:e7:96:be: 5a:1b:56:16:e9:c1:1b:86:03:4f:66:e4:90:5e:74: e8:4c:68:9b:da:ff:fc:51:b5:b3:9f:02:b1:32:93: 8d:1d:d0:e1:05:89:68:cd:24:b1:10:04:cf:ca:de: 44:82:77:2c:9e:52:e1:79:23:a5:a2:ad:1b:7f:b5: 02:0a:a6:27:92:fc:04:ee:dc:07:d2:d8:c9:fc:46: 43:dc:88:44:8d:b9:2f:f9:70:b7:59:e2:1e:7d:7c: 77:25:b3:74:79:fe:aa:3a:1e:f3:4a:2a:6b:c2:47: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:33:29:19:A7:57:09:09:A1:E4:8A:B8:23:A4:50:DF:8A:B4:95:1E X509v3 Authority Key Identifier: keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ac:e9:fc:63:8a:f1:74:37:c6:3d:4c:dd:e6:03:15:69:94: 9c:ac:49:97:cb:bf:31:04:b9:dd:a7:e4:7a:df:8e:ca:cc:3f: ca:f3:23:68:04:df:ca:22:a8:7c:2e:de:08:56:bc:31:ba:14: 08:4f:4b:20:ba:a6:23:66:de:e1:f5:2d:d3:5b:9c:93:b9:d1: 13:85:d1:d3:53:f6:0d:21:48:1b:11:0f:a3:b5:f2:f1:2f:67: 2d:e4:a0:9a:62:1d:b6:9b:53:95:9f:11:1c:7d:df:22:b2:7e: cb:ce:10:e7:e6:e2:1b:f9:dd:93:b0:0b:01:a2:f0:1b:69:81: 06:58:2c:f4:73:bb:a0:58:6c:97:80:c4:dd:a8:46:e9:9a:34: 3a:6b:2f:9c:e2:05:71:fa:87:e6:0a:ea:46:f7:f4:7e:32:ec: b4:e9:09:bc:39:b0:8a:48:5e:db:b1:e0:62:62:83:44:a6:c4: b2:f2:23:5a:56:47:67:88:ce:de:f5:26:ef:02:18:f9:20:89: 51:cc:4d:24:61:c2:e8:18:2c:61:f2:d2:42:73:d9:44:dd:37: 1a:48:e6:12:e3:7f:93:e1:d2:f5:d6:fb:4c:88:3f:22:7f:d2: 44:c5:1a:ec:a5:15:fc:09:23:0f:2e:81:9e:62:8d:8b:29:fd: 21:2a:e6:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs562xTm5hzG2c6M2D4KrJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZmMwYWE1YTZjMzM5MWVmZmZmYTgzNDI1YjIzYjI2NGM3 MTA4NWYwHhcNMjUxMjIwMDQwMTI4WhcNMjUxMjIxMDQwMTI4WjAzMTEwLwYDVQQD EyhkNzMzMjkxOWE3NTcwOTA5YTFlNDhhYjgyM2E0NTBkZjhhYjQ5NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nY17MEM/LfPjC0hkh5rYgbUkDLL TY0lER+cxQ9oUvgCvuXqUGei+jd7Lq6/3tL/j6Q5DYHbl72u5G45QAwU7GXoHuFV mzMoSrc/pFfL+eSAp1PcbzEdk4AgI0cRxEB8fBLE+sYsU4lxnfoUzvgRWcb1k7vy yTW5ptgEo3WpZezmhpC8cTfR04Dq8BbWvWe9FVnnlr5aG1YW6cEbhgNPZuSQXnTo TGib2v/8UbWznwKxMpONHdDhBYlozSSxEATPyt5EgncsnlLheSOloq0bf7UCCqYn kvwE7twH0tjJ/EZD3IhEjbkv+XC3WeIefXx3JbN0ef6qOh7zSiprwkd6ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNczKRmnVwkJoeSKuCOkUN+KtJUeMB8GA1UdIwQY MBaAFEX8CqWmwzke//+oNCWyOyZMcQhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYt OTI3MTliMDBiYmQ0LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS83M2M2MGItMThjZC00MjViLThlNmYtOTI3MTliMDBiYmQ0 LzEvUmZ3S3BhYkRPUjdfXzZnMEpiSTdKa3h4Q0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqzp/GOK 8XQ3xj1M3eYDFWmUnKxJl8u/MQS53afket+Oysw/yvMjaATfyiKofC7eCFa8MboU CE9LILqmI2be4fUt01uck7nRE4XR01P2DSFIGxEPo7Xy8S9nLeSgmmIdtptTlZ8R HH3fIrJ+y84Q5+biG/ndk7ALAaLwG2mBBlgs9HO7oFhsl4DE3ahG6Zo0OmsvnOIF cfqH5grqRvf0fjLstOkJvDmwikhe27HgYmKDRKbEsvIjWlZHZ4jO3vUm7wIY+SCJ UcxNJGHC6BgsYfLSQnPZRN03GkjmEuN/k+HS9db7TIg/In/SRMUa7KUV/AkjDy6B nmKNiyn9ISrmMw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:50:52 2025 by rpki-client