This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json) Hash identifier: xTKrcn8OIG82yQy2ELXsqrWwysjqFZWzMJ0cO+/eVUk= Subject key identifier: 9B:88:49:15:5C:09:85:45:13:7D:FF:40:33:8B:9A:D7:CA:C5:83:91 Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53 Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53 Certificate serial: 019B2D0BA6C378DA3CAE45193A8DA490DB66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft Manifest number: 0E63 Signing time: Wed 17 Dec 2025 16:01:36 +0000 Manifest this update: Wed 17 Dec 2025 16:01:36 +0000 Manifest next update: Thu 18 Dec 2025 16:01:36 +0000 Files and hashes: 1: FdZc5w6NQTxVaX5pVim2SXSRdFw.roa (hash: 3yS2WlAT7COs2QdB7b8/iS1aVVb5UF5pqjux+yVKvWo=) 2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: qrERaaBgMYDVjsUDCrWIiZ002mBdEWu1jdLgEPuGOSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:a6:c3:78:da:3c:ae:45:19:3a:8d:a4:90:db:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53 Validity Not Before: Dec 17 16:01:36 2025 GMT Not After : Dec 18 16:01:36 2025 GMT Subject: CN=9b8849155c098545137dff40338b9ad7cac58391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2d:a5:b4:01:09:db:3a:64:9c:72:91:a9:4e: 2e:63:fd:cd:95:4c:57:54:35:20:e5:9e:8d:ce:4c: 4f:e5:40:28:e1:78:25:4d:af:b4:96:d0:25:9b:74: 3b:9e:69:c3:b4:b5:b4:8f:ff:71:8b:72:17:57:77: f0:14:63:89:92:5c:34:25:7d:45:78:a9:1a:46:0d: d0:ef:ef:3a:de:ef:dc:6e:31:65:b5:43:cd:24:2b: 87:d9:45:41:59:e2:25:75:c6:2f:70:4c:75:70:33: 02:07:3d:c3:56:8c:99:ed:52:81:0b:25:f0:d9:2b: 10:13:53:43:b1:0e:83:62:57:47:18:99:9f:00:0c: b6:c4:44:72:18:ca:dd:3a:ee:e6:5c:b3:a0:8f:ba: 5c:3c:17:5a:8f:8d:97:52:11:55:44:d1:48:2d:12: 53:62:cc:6f:d1:ea:7b:5a:34:a3:e8:1e:49:df:0e: 64:0f:0e:61:9f:26:65:f3:94:3a:88:c1:e4:d2:60: f4:ab:67:c5:e7:5a:42:39:8a:9b:2e:5f:79:79:20: d2:3b:39:bc:c3:23:6a:89:42:e9:12:8f:fe:ec:bd: 0d:dd:c3:23:5d:4a:50:f0:2f:56:1e:05:ce:6f:f3: e3:23:80:67:87:a2:66:79:25:cc:35:45:cf:f5:29: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:49:15:5C:09:85:45:13:7D:FF:40:33:8B:9A:D7:CA:C5:83:91 X509v3 Authority Key Identifier: keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:38:78:3a:2a:f1:bc:f8:5a:39:00:d4:37:6d:34:2a:36:de: 67:95:16:bc:63:0b:50:8e:ed:fc:ee:66:dd:f8:5b:33:c9:ff: 6e:02:80:2e:e3:b6:61:67:16:b1:2f:aa:60:80:c6:fa:25:38: 9a:ff:4a:54:25:48:7d:ef:0b:75:4f:ce:c4:60:31:56:24:de: 47:83:ad:24:ac:2c:50:2b:0d:88:45:8b:c3:95:5a:83:fa:72: 84:02:fa:48:5b:5a:3c:cd:98:6e:52:15:ee:9a:de:8d:ba:70: b0:f3:01:d1:b1:8a:24:27:c1:d7:37:27:fa:bf:4c:e3:7e:98: d2:e2:4a:6b:f7:4a:2e:6d:6f:81:bb:13:9d:2a:6a:40:db:90: ed:c5:09:38:62:4f:96:20:13:5b:a5:8a:a2:d1:5f:a3:4e:8d: 37:9d:99:cc:fb:c7:fe:e5:07:3c:c1:e7:5f:5c:8f:a2:7d:a5: 1f:0d:50:41:86:4e:65:dd:f1:01:1a:18:ca:b3:0d:4a:53:82: 8c:98:df:fd:bf:58:98:02:25:99:b2:74:30:3a:c1:9d:55:30: a3:1d:e8:25:be:b5:0b:43:b0:f7:08:e4:58:5a:0a:66:2c:d9: a7:bf:40:45:a6:8e:2a:4e:49:9e:b6:48:a5:25:52:28:6a:16: aa:6f:26:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC6bDeNo8rkUZOo2kkNtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZWQxMTE2MzBlMDUyOTc3OTVkZGRkMjk4ZWExZmIyOWU2 OTVjNTMwHhcNMjUxMjE3MTYwMTM2WhcNMjUxMjE4MTYwMTM2WjAzMTEwLwYDVQQD Eyg5Yjg4NDkxNTVjMDk4NTQ1MTM3ZGZmNDAzMzhiOWFkN2NhYzU4MzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C2ltAEJ2zpknHKRqU4uY/3NlUxX VDUg5Z6NzkxP5UAo4XglTa+0ltAlm3Q7nmnDtLW0j/9xi3IXV3fwFGOJklw0JX1F eKkaRg3Q7+863u/cbjFltUPNJCuH2UVBWeIldcYvcEx1cDMCBz3DVoyZ7VKBCyXw 2SsQE1NDsQ6DYldHGJmfAAy2xERyGMrdOu7mXLOgj7pcPBdaj42XUhFVRNFILRJT Ysxv0ep7WjSj6B5J3w5kDw5hnyZl85Q6iMHk0mD0q2fF51pCOYqbLl95eSDSOzm8 wyNqiULpEo/+7L0N3cMjXUpQ8C9WHgXOb/PjI4Bnh6JmeSXMNUXP9Sng/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuISRVcCYVFE33/QDOLmtfKxYORMB8GA1UdIwQY MBaAFEXtERYw4FKXeV3d0pjqH7KeaVxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQt YTAzOGVmMWVmZjM5LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQtYTAzOGVmMWVmZjM5 LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzh4Oirx vPhaOQDUN200KjbeZ5UWvGMLUI7t/O5m3fhbM8n/bgKALuO2YWcWsS+qYIDG+iU4 mv9KVCVIfe8LdU/OxGAxViTeR4OtJKwsUCsNiEWLw5Vag/pyhAL6SFtaPM2YblIV 7prejbpwsPMB0bGKJCfB1zcn+r9M436Y0uJKa/dKLm1vgbsTnSpqQNuQ7cUJOGJP liATW6WKotFfo06NN52ZzPvH/uUHPMHnX1yPon2lHw1QQYZOZd3xARoYyrMNSlOC jJjf/b9YmAIlmbJ0MDrBnVUwox3oJb61C0Ow9wjkWFoKZizZp79ARaaOKk5JnrZI pSVSKGoWqm8mAQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:25:46 2025 by rpki-client