This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json) Hash identifier: L5dslKYFhvLnNVIwzNlqxtkYvFhF1fY81yeOOax6EDk= Subject key identifier: 44:13:C7:6A:4A:02:64:C3:D9:85:00:19:61:64:40:EE:C6:67:D1:DF Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0 Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0 Certificate serial: 019B6B45ADD9787DCA0386457741D969E4E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft Manifest number: 0FBF Signing time: Mon 29 Dec 2025 18:01:26 +0000 Manifest this update: Mon 29 Dec 2025 18:01:26 +0000 Manifest next update: Tue 30 Dec 2025 18:01:26 +0000 Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: +p2afmjz+sMmjsYEJXpt66fenrAJBeMtKHpYpLwoeIg=) 2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:45:ad:d9:78:7d:ca:03:86:45:77:41:d9:69:e4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0 Validity Not Before: Dec 29 18:01:26 2025 GMT Not After : Dec 30 18:01:26 2025 GMT Subject: CN=4413c76a4a0264c3d9850019616440eec667d1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:c0:e3:e3:ec:13:ea:56:a3:26:35:cf:d2: da:20:52:db:4e:3d:6a:12:80:de:fd:6a:6a:10:36: c2:55:97:70:5b:c0:e4:56:cd:f4:e7:78:89:5c:eb: ae:ff:0f:43:53:07:3e:99:c9:10:db:e5:bd:b6:2d: fe:dd:cd:b0:6e:12:b7:58:4a:4a:bb:5d:95:c4:80: 9d:29:c0:30:dc:cf:e2:ed:8f:74:c2:7e:25:03:72: b3:e2:dc:54:6b:c4:de:e6:41:c5:c2:29:8b:d8:4f: ba:39:7e:61:62:d9:76:35:e9:72:bc:bb:f2:1f:ba: 74:f7:d0:05:c8:a7:70:94:8b:bc:22:bc:c8:7a:68: fd:2e:48:af:ed:35:70:ea:3b:7f:d6:1c:0d:c1:be: 1f:7e:58:5f:3a:74:00:fd:d6:83:3b:02:61:6b:97: 03:ed:44:38:4b:8c:df:ac:08:8d:40:23:3b:46:ac: c6:7f:29:c7:35:1d:d2:09:a4:82:7e:ea:42:7b:c9: a2:d2:28:74:96:83:61:f2:83:4d:9b:08:46:cd:35: 4d:9e:aa:c5:3c:da:92:ff:76:58:27:47:a4:7e:b3: 75:57:9e:e1:ea:89:7d:fb:cd:b2:af:19:c8:32:ee: e3:50:12:d7:c3:8c:49:66:c7:06:40:62:cd:47:59: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:13:C7:6A:4A:02:64:C3:D9:85:00:19:61:64:40:EE:C6:67:D1:DF X509v3 Authority Key Identifier: keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2e:1b:30:2e:81:2e:45:57:a7:1b:02:67:0a:99:f3:3b:9d: c3:db:b7:ad:86:3e:bc:50:63:eb:03:d6:46:07:71:b2:d7:72: 0f:30:76:25:d7:2f:58:0f:35:70:65:eb:68:1f:e1:49:09:7b: e6:e0:c7:b2:cd:28:cc:e6:97:a8:3d:ac:5a:c8:72:55:5f:d2: 91:49:49:99:3c:1d:19:c4:2a:20:30:cc:73:fb:c7:3b:f1:60: 1d:fb:20:d6:0a:a6:13:58:aa:db:4d:bb:dc:19:ac:dd:ae:5c: be:46:40:a9:90:b7:e2:72:bd:06:2c:b1:a7:23:39:11:eb:3f: fc:43:45:6f:eb:c0:88:76:b7:ff:5a:e6:20:61:d5:1e:6c:90: 0d:5f:c6:f4:dd:19:65:49:9e:16:de:70:e2:7c:21:42:ba:7e: 52:19:73:90:6a:47:b7:7e:31:88:fd:40:09:98:df:03:4b:2f: 9c:59:74:6d:ad:a3:53:c1:1b:96:1e:8a:a9:e6:e8:5b:27:e4: 38:15:1a:92:2e:49:79:d2:6c:15:c8:f0:43:20:5c:f2:81:4e: 29:d4:33:2c:a6:88:d0:d4:7d:2e:ac:10:3f:ea:1e:74:2f:1b: 6c:96:77:c0:6c:86:ab:3e:f2:d2:78:96:7a:df:f1:fc:c9:7d: a3:f0:ba:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRa3ZeH3KA4ZFd0HZaeTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MGJjNjdmNTQ5ZWIwNDkyNTc3MjBhMDAwZWIwNWI1NGY1 ZDJiYzAwHhcNMjUxMjI5MTgwMTI2WhcNMjUxMjMwMTgwMTI2WjAzMTEwLwYDVQQD Eyg0NDEzYzc2YTRhMDI2NGMzZDk4NTAwMTk2MTY0NDBlZWM2NjdkMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrXA4+PsE+pWoyY1z9LaIFLbTj1q EoDe/WpqEDbCVZdwW8DkVs3053iJXOuu/w9DUwc+mckQ2+W9ti3+3c2wbhK3WEpK u12VxICdKcAw3M/i7Y90wn4lA3Kz4txUa8Te5kHFwimL2E+6OX5hYtl2NelyvLvy H7p099AFyKdwlIu8IrzIemj9Lkiv7TVw6jt/1hwNwb4fflhfOnQA/daDOwJha5cD 7UQ4S4zfrAiNQCM7RqzGfynHNR3SCaSCfupCe8mi0ih0loNh8oNNmwhGzTVNnqrF PNqS/3ZYJ0ekfrN1V57h6ol9+82yrxnIMu7jUBLXw4xJZscGQGLNR1lONwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQTx2pKAmTD2YUAGWFkQO7GZ9HfMB8GA1UdIwQY MBaAFEULxn9UnrBJJXcgoADrBbVPXSvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYt MjRhOGQ5YmYzN2JjLzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYtMjRhOGQ5YmYzN2Jj LzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC4bMC6B LkVXpxsCZwqZ8zudw9u3rYY+vFBj6wPWRgdxstdyDzB2JdcvWA81cGXraB/hSQl7 5uDHss0ozOaXqD2sWshyVV/SkUlJmTwdGcQqIDDMc/vHO/FgHfsg1gqmE1iq2027 3Bms3a5cvkZAqZC34nK9BiyxpyM5Ees//ENFb+vAiHa3/1rmIGHVHmyQDV/G9N0Z ZUmeFt5w4nwhQrp+UhlzkGpHt34xiP1ACZjfA0svnFl0ba2jU8Eblh6KqeboWyfk OBUaki5JedJsFcjwQyBc8oFOKdQzLKaI0NR9LqwQP+oedC8bbJZ3wGyGqz7y0niW et/x/Ml9o/C6Hg== -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:26 2025 by rpki-client