This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json) Hash identifier: LWohJL3C5Oy+kytvZSMUXZsL9q4+YxBTVMFAe12usR4= Subject key identifier: 5D:7F:A3:9B:D5:BF:7D:07:63:5F:C1:16:3C:59:46:D5:73:5A:31:F9 Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5 Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5 Certificate serial: 019B4B1535D30648A74705BE5C585AADBA76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft Manifest number: 050F Signing time: Tue 23 Dec 2025 12:00:39 +0000 Manifest this update: Tue 23 Dec 2025 12:00:39 +0000 Manifest next update: Wed 24 Dec 2025 12:00:39 +0000 Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: ZrpKuLwnfwQ0/t6Q1Srod4mYPvznpgHFNEYEIKnw1co=) 2: XMirD3qG50TrikmGR0PujWf3jjs.roa (hash: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:35:d3:06:48:a7:47:05:be:5c:58:5a:ad:ba:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5 Validity Not Before: Dec 23 12:00:39 2025 GMT Not After : Dec 24 12:00:39 2025 GMT Subject: CN=5d7fa39bd5bf7d07635fc1163c5946d5735a31f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8e:f3:f3:63:30:2b:96:ac:2a:de:b1:fe:15: 47:95:54:77:68:85:b2:4b:f3:a9:24:30:65:ed:5e: 51:9e:aa:6a:a5:71:ea:8b:b3:e3:d4:1d:3e:4e:c1: 99:6c:fd:1c:06:9a:c3:4b:9d:db:52:bb:8b:1f:36: ec:d3:d2:2d:2c:44:c6:ee:94:39:36:d7:18:3e:6a: 5e:14:86:ea:53:69:ba:88:f6:38:9f:ae:a5:90:46: 59:5e:55:ca:2a:b0:78:3c:f7:47:50:53:d5:82:00: 6f:9a:e3:b2:94:db:7f:d5:b3:6f:76:5c:83:68:94: e3:fe:ba:29:fb:7b:14:09:b4:46:cd:3f:ed:d1:00: d0:80:cb:1b:4f:75:52:92:59:40:44:4e:3d:1f:ed: ba:28:f0:2c:50:81:c3:fe:f4:30:1a:5d:6d:01:27: ea:c4:61:4f:7e:1f:37:a8:9e:96:99:1c:2f:06:7a: b1:22:c5:f6:ca:4a:4a:b5:2c:68:b5:36:51:ca:c6: 74:81:fd:e8:de:5f:fc:6e:c3:e3:9d:b3:75:8d:d9: 9b:6b:99:be:12:2d:17:c1:4c:74:93:e4:3a:be:d7: 18:cd:bf:f1:d6:bb:09:e2:29:22:ce:ed:d6:7a:28: 1d:0e:69:93:3f:81:73:d5:5d:48:2f:de:d7:91:6c: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7F:A3:9B:D5:BF:7D:07:63:5F:C1:16:3C:59:46:D5:73:5A:31:F9 X509v3 Authority Key Identifier: keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fb:94:7c:36:2e:52:9a:be:b4:ad:e9:a6:83:70:28:56:6e: 24:2d:96:e4:e3:a5:87:8a:8e:02:71:51:61:53:c7:3c:37:f4: 67:6c:f7:20:6d:92:72:46:73:a9:7f:38:45:6d:6c:c6:cf:c8: bc:d3:f3:1f:31:24:18:5a:c4:92:de:a3:97:d1:32:ba:ab:7a: 70:9f:3d:27:43:2c:c7:fd:c9:07:a2:1f:cc:10:9e:79:25:de: a0:99:2f:1b:06:77:1f:94:d1:e4:90:aa:e6:c4:9a:80:97:51: 71:fa:fe:ea:95:93:59:63:cd:9e:aa:d0:e8:ae:19:81:eb:3e: 10:a8:a6:6f:eb:94:4c:5f:03:3b:44:5c:5a:dd:d7:41:39:cc: 16:d8:e0:3d:79:8c:81:6d:0e:83:e8:26:7d:56:97:31:7f:e8: bc:e0:31:cd:72:17:ba:34:ff:cd:58:9f:ac:58:6c:ee:d9:b2: 78:3c:49:b1:b3:df:a7:b3:af:e1:f4:30:00:0e:af:2a:15:1e: c0:26:4c:73:39:0c:c2:58:36:0e:91:82:0c:62:76:e8:0b:d0: 3f:7f:ae:f6:20:44:14:ac:e3:79:b0:f6:a5:66:e5:fa:63:b3: 31:77:91:04:fe:43:95:08:4b:3b:5c:af:77:04:e8:3e:62:d2: 05:f3:a4:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFTXTBkinRwW+XFharbp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTczNzNlMWE2ODZkNmI1OWVlODVkYzM3ODk5ZDA2NTMx Mzg2ZTUwHhcNMjUxMjIzMTIwMDM5WhcNMjUxMjI0MTIwMDM5WjAzMTEwLwYDVQQD Eyg1ZDdmYTM5YmQ1YmY3ZDA3NjM1ZmMxMTYzYzU5NDZkNTczNWEzMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9I7z82MwK5asKt6x/hVHlVR3aIWy S/OpJDBl7V5RnqpqpXHqi7Pj1B0+TsGZbP0cBprDS53bUruLHzbs09ItLETG7pQ5 NtcYPmpeFIbqU2m6iPY4n66lkEZZXlXKKrB4PPdHUFPVggBvmuOylNt/1bNvdlyD aJTj/rop+3sUCbRGzT/t0QDQgMsbT3VSkllARE49H+26KPAsUIHD/vQwGl1tASfq xGFPfh83qJ6WmRwvBnqxIsX2ykpKtSxotTZRysZ0gf3o3l/8bsPjnbN1jdmba5m+ Ei0XwUx0k+Q6vtcYzb/x1rsJ4ikizu3WeigdDmmTP4Fz1V1IL97XkWxm+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1/o5vVv30HY1/BFjxZRtVzWjH5MB8GA1UdIwQY MBaAFERXNz4aaG1rWe6F3DeJnQZTE4blMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYt OWU4NjQzNjg1MTMzLzEvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYtOWU4NjQzNjg1MTMz LzEvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPuUfDYu Upq+tK3ppoNwKFZuJC2W5OOlh4qOAnFRYVPHPDf0Z2z3IG2SckZzqX84RW1sxs/I vNPzHzEkGFrEkt6jl9Eyuqt6cJ89J0Msx/3JB6IfzBCeeSXeoJkvGwZ3H5TR5JCq 5sSagJdRcfr+6pWTWWPNnqrQ6K4Zges+EKimb+uUTF8DO0RcWt3XQTnMFtjgPXmM gW0Og+gmfVaXMX/ovOAxzXIXujT/zVifrFhs7tmyeDxJsbPfp7Ov4fQwAA6vKhUe wCZMczkMwlg2DpGCDGJ26AvQP3+u9iBEFKzjebD2pWbl+mOzMXeRBP5DlQhLO1yv dwToPmLSBfOkaQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:37:13 2025 by rpki-client