This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json) Hash identifier: WOKH6815hPBdmi4NrYJC/NwL3WoMY6DPULbr38x6rPg= Subject key identifier: CC:FA:4E:7D:B7:7D:39:38:72:E8:B6:39:18:84:44:1E:1E:24:B8:92 Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b Certificate serial: 019B3D59D1D4913806BEF08CAE198CC8887B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft Manifest number: 0B8E Signing time: Sat 20 Dec 2025 20:00:55 +0000 Manifest this update: Sat 20 Dec 2025 20:00:55 +0000 Manifest next update: Sun 21 Dec 2025 20:00:55 +0000 Files and hashes: 1: 47oAZ7ALtnjytAXw6azuJ79q9jI.roa (hash: CqBkSTQVbCb2uDCbL2m8QddnjqjXpjXCwL7OFoKHIQU=) 2: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: /RV1TexEVg38PfrrnU+myWlle5GagMaPowlnkhtr9Ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d1:d4:91:38:06:be:f0:8c:ae:19:8c:c8:88:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b Validity Not Before: Dec 20 20:00:55 2025 GMT Not After : Dec 21 20:00:55 2025 GMT Subject: CN=ccfa4e7db77d393872e8b6391884441e1e24b892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:7e:14:88:b4:dd:ca:31:c0:82:89:98:0f: b6:39:ed:e5:64:46:ad:96:9e:3f:64:91:9e:9d:48: 67:84:19:b6:b7:ba:7d:5f:30:f4:b3:11:fd:cd:8d: 53:99:0a:f4:ec:6b:0d:32:6b:a3:47:f5:0d:3d:39: 86:12:05:46:e8:20:62:e5:d6:fb:31:a3:91:8e:ae: 64:99:3a:47:d8:ac:8b:06:97:25:57:76:88:0c:4f: de:04:13:f1:b7:be:10:a7:fe:5d:bf:23:d3:11:d3: f5:28:fa:d5:ba:d9:21:54:ec:1d:05:8b:5e:c5:b8: 22:be:fa:c3:a3:18:11:b3:4b:6e:6d:02:37:7c:73: 12:db:f0:32:ca:96:79:8c:95:99:8d:4c:e6:d1:e5: 58:ac:18:c1:8d:b4:f9:f4:d4:69:28:38:2f:c6:69: ff:1a:62:86:44:ef:17:eb:09:a2:92:1f:19:5d:e8: 97:de:eb:1d:b9:11:c1:12:e8:66:f6:2a:30:8a:db: 24:82:89:29:e8:fb:e0:a4:55:23:e1:26:84:cd:46: e7:12:46:8e:4d:4e:85:bf:9d:3d:04:42:20:96:83: ac:31:09:85:4e:f7:fa:f5:1d:d2:b9:cd:87:6c:b5: 74:0e:4e:dd:bb:3c:3a:d9:4e:71:7d:85:79:a1:14: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FA:4E:7D:B7:7D:39:38:72:E8:B6:39:18:84:44:1E:1E:24:B8:92 X509v3 Authority Key Identifier: keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:44:fc:96:49:64:32:52:cd:be:ec:b9:96:dd:42:2d:80:f9: ac:af:c5:87:6e:e6:7f:ed:d8:50:c4:49:1f:f5:11:e3:87:18: ac:e1:72:4a:6a:ea:04:a4:6c:4e:7b:b6:a3:da:7e:cd:54:d3: d5:3e:f0:d8:d2:d5:ea:b5:90:73:17:97:65:ed:55:fb:b1:e7: f5:3f:46:9b:ad:ff:8a:e7:af:93:d3:86:91:73:86:50:27:ab: 1b:b0:a6:20:9e:6f:87:f7:e1:ad:5d:b8:98:82:dc:1a:05:1a: 02:ee:9e:2d:c3:77:5e:b7:f2:4e:46:24:92:55:76:7b:55:da: f6:cd:f3:6c:a7:9f:fd:df:e6:51:ef:5e:62:ed:c3:3a:34:11: 9f:f8:37:f2:9f:99:4b:41:fc:86:da:88:d7:fc:5a:31:89:0c: 0b:04:27:d9:86:29:ce:9e:79:ee:9f:c7:c7:5f:09:31:5c:da: 1e:00:cd:ca:29:86:c6:61:06:62:f8:49:49:72:f3:a6:09:88: 15:32:6e:e8:86:c7:5d:36:8f:6e:b4:22:29:de:fc:1e:c6:6e: be:98:b6:03:9f:90:b5:a3:79:07:38:4a:d7:78:f7:78:32:98: f7:f8:ab:4b:79:65:5e:bd:29:19:8d:ec:cc:f8:bc:0a:86:32: 96:b6:94:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdHUkTgGvvCMrhmMyIh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzVkYTNhMjA4NzllNTVmZTk2ODUzZTBkN2FlZWZmNTMz ODZlOGIwHhcNMjUxMjIwMjAwMDU1WhcNMjUxMjIxMjAwMDU1WjAzMTEwLwYDVQQD EyhjY2ZhNGU3ZGI3N2QzOTM4NzJlOGI2MzkxODg0NDQxZTFlMjRiODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUR+FIi03coxwIKJmA+2Oe3lZEat lp4/ZJGenUhnhBm2t7p9XzD0sxH9zY1TmQr07GsNMmujR/UNPTmGEgVG6CBi5db7 MaORjq5kmTpH2KyLBpclV3aIDE/eBBPxt74Qp/5dvyPTEdP1KPrVutkhVOwdBYte xbgivvrDoxgRs0tubQI3fHMS2/AyypZ5jJWZjUzm0eVYrBjBjbT59NRpKDgvxmn/ GmKGRO8X6wmikh8ZXeiX3usduRHBEuhm9iowitskgokp6PvgpFUj4SaEzUbnEkaO TU6Fv509BEIgloOsMQmFTvf69R3Suc2HbLV0Dk7duzw62U5xfYV5oRTUBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMz6Tn23fTk4cui2ORiERB4eJLiSMB8GA1UdIwQY MBaAFEY12jogh55V/paFPg167v9TOG6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1Yjgt YzQwY2UzMmI2Zjc2LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1YjgtYzQwY2UzMmI2Zjc2 LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqET8lklk MlLNvuy5lt1CLYD5rK/Fh27mf+3YUMRJH/UR44cYrOFySmrqBKRsTnu2o9p+zVTT 1T7w2NLV6rWQcxeXZe1V+7Hn9T9Gm63/iuevk9OGkXOGUCerG7CmIJ5vh/fhrV24 mILcGgUaAu6eLcN3XrfyTkYkklV2e1Xa9s3zbKef/d/mUe9eYu3DOjQRn/g38p+Z S0H8htqI1/xaMYkMCwQn2YYpzp557p/Hx18JMVzaHgDNyimGxmEGYvhJSXLzpgmI FTJu6IbHXTaPbrQiKd78HsZuvpi2A5+QtaN5BzhK13j3eDKY9/irS3llXr0pGY3s zPi8CoYylraUbQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:46 2025 by rpki-client