This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json) Hash identifier: RvVpf9Ip8oebWOgF8qp7fE/rTH7vFqzYvEsLV4bVios= Subject key identifier: 74:78:A0:43:9E:6B:C7:67:8C:6A:D2:2B:D9:29:5D:9F:85:E5:AA:B6 Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0 Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0 Certificate serial: 019B5FAE8183AF792BEAA480A122075E1BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft Manifest number: 0FB9 Signing time: Sat 27 Dec 2025 12:00:30 +0000 Manifest this update: Sat 27 Dec 2025 12:00:30 +0000 Manifest next update: Sun 28 Dec 2025 12:00:30 +0000 Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: scheGEAtvnRZyoe4fejxf99T2UhH2KOqPcbtvnf9FBg=) 2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:ae:81:83:af:79:2b:ea:a4:80:a1:22:07:5e:1b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0 Validity Not Before: Dec 27 12:00:30 2025 GMT Not After : Dec 28 12:00:30 2025 GMT Subject: CN=7478a0439e6bc7678c6ad22bd9295d9f85e5aab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2c:04:ca:17:80:38:47:4a:4d:44:eb:11:e5: e6:9e:e2:99:7a:37:42:d9:d8:84:7c:4e:3b:8b:09: 96:f7:3c:2a:a7:01:e0:53:d5:d5:02:0d:0d:b3:fa: d8:be:bf:14:e4:a9:8a:6c:f2:0b:37:e8:fd:dd:c4: c7:bd:6c:89:a4:2d:14:21:2a:35:74:fa:32:ae:8e: 6a:93:1b:96:5f:ad:61:b7:65:24:a7:d2:39:4e:1e: 13:4c:db:f8:12:4b:76:5f:89:f8:10:75:3b:15:05: 3e:de:c4:c6:08:ce:b5:0c:9f:03:e0:24:4b:1e:db: e7:d7:6b:82:73:e1:3d:8d:9a:8d:45:a8:79:bf:56: e1:37:44:e9:52:d2:4e:01:83:66:34:c3:0c:df:f1: 4f:99:b3:23:ac:54:bf:bd:51:b1:52:91:67:89:29: d3:80:8c:89:7a:91:75:ab:2f:cb:c3:74:e7:a8:0c: af:17:aa:1a:03:5f:65:43:f0:cb:fe:b9:8d:0b:a5: be:5c:d3:91:84:58:00:5a:8d:72:9c:06:e5:e6:ff: 85:70:92:9f:62:85:ae:8b:5a:ad:f1:23:a3:f7:a6: 1a:fc:15:86:f4:b0:2a:47:9d:58:72:81:69:67:5a: 44:ca:30:bd:a9:d5:c0:d5:71:53:ba:09:90:41:6b: 37:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:78:A0:43:9E:6B:C7:67:8C:6A:D2:2B:D9:29:5D:9F:85:E5:AA:B6 X509v3 Authority Key Identifier: keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:43:a1:d8:f1:0d:bf:07:e8:72:22:f3:ac:d4:12:2d:99:20: 9a:1b:b1:f2:1f:61:b4:83:10:01:b9:24:a0:45:fb:39:33:ed: 02:47:88:f8:19:a0:78:7b:26:b5:f5:0a:e7:73:ad:c9:72:8a: 4d:8f:ac:bd:a7:d1:fe:3f:81:d2:d8:7f:67:17:e7:db:ee:7a: ff:c3:6e:96:bb:9f:73:ed:f0:eb:09:d5:d5:dc:a5:00:e9:9d: 82:8c:45:37:07:25:5b:ee:ab:16:cb:66:4c:d1:df:ac:4c:40: ff:1c:23:1c:a9:06:0c:30:9a:b2:db:53:79:c9:ed:7c:7e:59: 29:aa:07:65:4e:a3:31:b4:b4:5c:85:24:e6:0f:f3:cf:c1:ee: 77:ae:c5:21:6b:a1:ae:6b:52:6f:e3:33:b8:42:75:69:fb:d2: de:73:65:cb:fb:bc:a9:ae:a2:8a:46:70:19:1f:8e:8c:5a:44: 67:f9:86:09:d2:e9:55:5a:1d:13:14:05:b6:9c:0f:0f:53:20: 3e:2d:98:7c:0c:eb:9a:b7:42:fc:6c:6d:3a:5c:50:fe:bc:c0: 0d:62:2d:81:7b:c9:46:a6:9a:fa:89:97:49:19:f1:15:fe:a3: 4b:64:27:24:af:26:b7:81:8c:77:3e:cd:ce:e3:e5:e0:cf:56: 50:9a:d2:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfroGDr3kr6qSAoSIHXhvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MGJjNjdmNTQ5ZWIwNDkyNTc3MjBhMDAwZWIwNWI1NGY1 ZDJiYzAwHhcNMjUxMjI3MTIwMDMwWhcNMjUxMjI4MTIwMDMwWjAzMTEwLwYDVQQD Eyg3NDc4YTA0MzllNmJjNzY3OGM2YWQyMmJkOTI5NWQ5Zjg1ZTVhYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CwEyheAOEdKTUTrEeXmnuKZejdC 2diEfE47iwmW9zwqpwHgU9XVAg0Ns/rYvr8U5KmKbPILN+j93cTHvWyJpC0UISo1 dPoyro5qkxuWX61ht2Ukp9I5Th4TTNv4Ekt2X4n4EHU7FQU+3sTGCM61DJ8D4CRL Htvn12uCc+E9jZqNRah5v1bhN0TpUtJOAYNmNMMM3/FPmbMjrFS/vVGxUpFniSnT gIyJepF1qy/Lw3TnqAyvF6oaA19lQ/DL/rmNC6W+XNORhFgAWo1ynAbl5v+FcJKf YoWui1qt8SOj96Ya/BWG9LAqR51YcoFpZ1pEyjC9qdXA1XFTugmQQWs3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR4oEOea8dnjGrSK9kpXZ+F5aq2MB8GA1UdIwQY MBaAFEULxn9UnrBJJXcgoADrBbVPXSvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYt MjRhOGQ5YmYzN2JjLzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYtMjRhOGQ5YmYzN2Jj LzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEOh2PEN vwfociLzrNQSLZkgmhux8h9htIMQAbkkoEX7OTPtAkeI+BmgeHsmtfUK53OtyXKK TY+svafR/j+B0th/Zxfn2+56/8Nulrufc+3w6wnV1dylAOmdgoxFNwclW+6rFstm TNHfrExA/xwjHKkGDDCasttTecntfH5ZKaoHZU6jMbS0XIUk5g/zz8Hud67FIWuh rmtSb+MzuEJ1afvS3nNly/u8qa6iikZwGR+OjFpEZ/mGCdLpVVodExQFtpwPD1Mg Pi2YfAzrmrdC/GxtOlxQ/rzADWItgXvJRqaa+omXSRnxFf6jS2QnJK8mt4GMdz7N zuPl4M9WUJrSjw== -----END CERTIFICATE-----Generated at Sat Dec 27 19:23:32 2025 by rpki-client