This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json) Hash identifier: NO1bC4MRsQ12qjRFHpZ3krCD1GvkNZMrIngaq0UsWJs= Subject key identifier: E5:F0:82:7E:5C:A8:42:3F:F0:5B:E2:9E:F3:85:7E:11:C5:23:BA:42 Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Certificate serial: 019B2EF9A58CDD1D43D60B4905D9621C9726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 01:01:11 +0000 Manifest this update: Thu 18 Dec 2025 01:01:11 +0000 Manifest next update: Fri 19 Dec 2025 01:01:11 +0000 Files and hashes: 1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=) 2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: 7RaFe/ACwLr/X9K6Vw1Ks/HQlfUqmcfftFZsrrZjbBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:a5:8c:dd:1d:43:d6:0b:49:05:d9:62:1c:97:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Validity Not Before: Dec 18 01:01:11 2025 GMT Not After : Dec 19 01:01:11 2025 GMT Subject: CN=e5f0827e5ca8423ff05be29ef3857e11c523ba42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:6e:f1:a9:92:dc:91:b8:94:8e:07:b3:a3: d1:fa:f9:c9:fa:31:e2:2b:28:fa:26:6b:d8:54:2a: 90:fd:85:03:f7:e2:87:4f:42:b7:1b:03:37:70:90: dd:74:e4:6c:93:a7:01:a1:02:09:72:98:b6:92:af: d4:9d:8c:9d:0a:8d:ef:b5:45:60:e2:b8:4e:35:a0: 9a:e4:8b:c6:99:6b:60:2d:7d:6d:b9:8b:2f:3f:00: ad:72:ed:40:eb:16:36:66:42:14:7f:b5:c9:63:72: 62:d6:3a:93:58:55:19:9b:a9:2e:76:b4:ec:d9:ca: 4e:73:ab:d1:51:5f:75:a7:ad:97:81:22:96:1c:d5: 58:41:4f:10:63:bc:07:8d:d4:f6:9d:d1:14:2e:18: 4f:2f:f2:4d:c5:12:db:e8:93:5e:37:87:ab:06:f3: f3:2b:b9:79:42:bb:92:57:f2:4b:7b:26:a9:ec:fc: 73:ae:32:18:51:90:4d:f7:4b:15:42:20:5e:09:be: c4:75:fa:eb:c7:80:b4:7b:c6:c2:48:7c:9b:80:fc: a0:e9:38:e0:1c:7d:fa:b4:fb:1d:07:a3:2c:d8:99: ea:b2:e9:88:19:ab:99:01:0b:c5:76:3f:4b:8c:75: 52:a9:03:92:83:2e:94:14:2b:b2:d3:b6:21:ca:42: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F0:82:7E:5C:A8:42:3F:F0:5B:E2:9E:F3:85:7E:11:C5:23:BA:42 X509v3 Authority Key Identifier: keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:31:f1:74:11:a4:dc:66:16:10:55:97:f4:28:07:66:e9:18: 06:3a:6f:4e:bc:9a:60:34:98:56:6e:4b:be:ec:5a:b5:f6:fe: 89:b1:be:7f:76:ad:fd:0a:9a:9b:e3:4a:b0:e6:ed:fe:4a:82: 38:98:43:b2:99:08:1d:2b:93:6c:f2:b8:f0:ff:22:fa:c6:3c: 04:76:99:58:28:3a:12:e7:bc:42:41:9d:33:59:eb:64:57:63: 69:5f:5c:c6:17:f2:fb:31:20:82:89:b5:65:00:72:c7:50:de: 5a:38:fa:71:3a:37:3b:3b:76:11:96:a4:35:ae:f8:4b:fa:d6: 05:5d:d5:17:df:b7:b0:c0:00:97:ad:e0:74:d4:f7:4f:e2:2b: 52:70:a6:10:af:aa:85:91:fc:14:65:55:0a:cc:b2:18:3c:18: b8:15:fb:48:80:14:fd:e8:cb:e9:d2:60:7d:29:93:fe:bc:e0: 72:cb:a8:61:b0:b4:45:df:99:7e:d1:8f:e6:5a:e8:c1:55:0f: 28:3f:5d:99:d8:31:90:63:a9:36:fd:0c:a2:5e:dc:7a:ad:54: 0f:94:4f:d8:8a:19:44:e2:59:9b:97:50:d3:b7:15:69:bd:b9: bd:dc:71:4c:60:33:dd:d2:a5:73:f7:a9:cc:4e:8c:b8:a0:79: f8:73:f9:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+aWM3R1D1gtJBdliHJcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWRmN2M1ZjgyZGJjMGIxZGJhMzI4Mjg2MmQ1M2VjODg3 ZDVjNjYwHhcNMjUxMjE4MDEwMTExWhcNMjUxMjE5MDEwMTExWjAzMTEwLwYDVQQD EyhlNWYwODI3ZTVjYTg0MjNmZjA1YmUyOWVmMzg1N2UxMWM1MjNiYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTJu8amS3JG4lI4Hs6PR+vnJ+jHi Kyj6JmvYVCqQ/YUD9+KHT0K3GwM3cJDddORsk6cBoQIJcpi2kq/UnYydCo3vtUVg 4rhONaCa5IvGmWtgLX1tuYsvPwCtcu1A6xY2ZkIUf7XJY3Ji1jqTWFUZm6kudrTs 2cpOc6vRUV91p62XgSKWHNVYQU8QY7wHjdT2ndEULhhPL/JNxRLb6JNeN4erBvPz K7l5QruSV/JLeyap7PxzrjIYUZBN90sVQiBeCb7Edfrrx4C0e8bCSHybgPyg6Tjg HH36tPsdB6Ms2JnqsumIGauZAQvFdj9LjHVSqQOSgy6UFCuy07YhykLOjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXwgn5cqEI/8FvinvOFfhHFI7pCMB8GA1UdIwQY MBaAFK+t98X4LbwLHboygoYtU+yIfVxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAt NzhmNmM4MDQ3NzNkLzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAtNzhmNmM4MDQ3NzNk LzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTHxdBGk 3GYWEFWX9CgHZukYBjpvTryaYDSYVm5Lvuxatfb+ibG+f3at/Qqam+NKsObt/kqC OJhDspkIHSuTbPK48P8i+sY8BHaZWCg6Eue8QkGdM1nrZFdjaV9cxhfy+zEggom1 ZQByx1DeWjj6cTo3Ozt2EZakNa74S/rWBV3VF9+3sMAAl63gdNT3T+IrUnCmEK+q hZH8FGVVCsyyGDwYuBX7SIAU/ejL6dJgfSmT/rzgcsuoYbC0Rd+ZftGP5lrowVUP KD9dmdgxkGOpNv0Mol7ceq1UD5RP2IoZROJZm5dQ07cVab25vdxxTGAz3dKlc/ep zE6MuKB5+HP5IA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:52:59 2025 by rpki-client