This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft File: RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json) Hash identifier: 9oh1JUZiYCNbGncEPbDABt1dpXxmMyIUZzuaIPwL2T0= Subject key identifier: 7B:FF:6F:94:0C:70:DC:2D:49:CC:7B:67:99:AE:2D:B3:EA:3F:B1:77 Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73 Certificate issuer: /CN=463260e45ee1521c6aab83f21d5b69e810c1e073 Certificate serial: 019B6AD73C74BB3E95384B9F6284A0C499FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft Manifest number: 179B Signing time: Mon 29 Dec 2025 16:00:49 +0000 Manifest this update: Mon 29 Dec 2025 16:00:49 +0000 Manifest next update: Tue 30 Dec 2025 16:00:49 +0000 Files and hashes: 1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: OnHylGEGfQ09ZYAtpNYyKuWEviBA+NX/4+9uqkF8ZHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:3c:74:bb:3e:95:38:4b:9f:62:84:a0:c4:99:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073 Validity Not Before: Dec 29 16:00:49 2025 GMT Not After : Dec 30 16:00:49 2025 GMT Subject: CN=7bff6f940c70dc2d49cc7b6799ae2db3ea3fb177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8d:9e:2d:62:c5:25:6d:36:8d:71:34:d6:4d: d0:93:ea:98:33:2a:88:ec:c4:04:b3:58:5f:b8:5e: a2:2f:d5:3a:c3:67:13:11:60:1a:c5:8e:4d:49:91: 10:b4:f0:3d:d6:b3:dc:76:1e:03:3f:32:b5:f4:96: d3:36:98:9e:ab:db:18:d8:97:e7:32:05:32:8a:7d: 02:74:53:00:99:91:e3:83:f1:ed:c4:b0:76:4e:4b: 8a:01:e0:40:ce:78:a3:e7:22:6f:2d:10:67:d9:3b: 35:e3:c5:05:5e:05:f4:c4:33:f3:2f:60:85:68:e7: 3e:bb:c5:27:d2:4b:e0:86:07:f8:0a:7a:93:1a:b9: 22:58:ed:ad:96:a2:34:c2:a8:35:5d:9c:48:57:b1: 28:05:bd:10:8b:60:16:e2:e0:be:94:5a:a8:4d:46: 7b:9a:c5:b9:28:59:89:95:ce:61:64:d7:fe:c9:5f: e9:83:91:29:84:26:81:59:af:0e:1e:3d:b8:25:70: 6f:a2:3b:97:6e:f0:f5:ae:4a:57:a3:f1:d7:51:3a: 51:37:14:97:c0:ed:02:5c:f1:65:61:b2:1e:48:a1: 9e:68:f9:2b:38:2f:28:0e:8f:38:dd:85:e6:44:08: 03:07:d0:53:11:5b:e6:85:05:6c:53:6a:ff:4e:33: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FF:6F:94:0C:70:DC:2D:49:CC:7B:67:99:AE:2D:B3:EA:3F:B1:77 X509v3 Authority Key Identifier: keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:57:2d:43:8f:d8:bf:c5:a8:55:4d:5b:d5:8a:fb:eb:2e:f1: 7e:04:4e:a8:33:1a:ab:09:16:8e:82:3a:21:9b:fa:bc:55:80: ca:75:ad:73:3d:0f:c7:21:05:30:89:2b:64:53:45:8b:60:16: e6:f6:33:3d:ea:68:9a:6d:2f:9a:58:37:99:69:41:11:81:20: 7c:91:75:b1:be:28:56:59:a0:7c:63:ac:10:60:69:fb:a4:83: a5:e6:4a:e8:99:49:54:8d:83:72:8d:4d:d9:54:ea:d0:88:7c: cf:22:f4:cb:1e:41:d6:57:0c:16:32:de:a4:03:54:6f:6f:78: 78:cd:24:4c:6f:bb:f3:db:32:6a:0f:26:59:37:66:d1:10:b1: 4f:74:66:7d:d4:df:05:0a:7c:72:18:5b:cd:ab:58:34:fa:3f: d0:c9:7d:2a:2f:71:14:23:d3:b8:33:9e:80:dc:49:ce:c3:b4: 65:f5:25:c2:c1:d9:db:1d:e9:66:5f:1d:f9:02:d0:7e:b1:3b: 46:f1:85:17:44:e7:66:e2:17:a4:e4:ef:fb:2f:a6:cd:92:f8: 50:b3:e4:d3:b7:d0:0a:c5:25:87:b3:c0:a3:1c:35:93:5f:68: 99:1b:89:b9:b4:2a:9f:36:dc:04:10:ff:54:1a:a9:05:ab:b3: 6f:f5:3f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1zx0uz6VOEufYoSgxJn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzI2MGU0NWVlMTUyMWM2YWFiODNmMjFkNWI2OWU4MTBj MWUwNzMwHhcNMjUxMjI5MTYwMDQ5WhcNMjUxMjMwMTYwMDQ5WjAzMTEwLwYDVQQD Eyg3YmZmNmY5NDBjNzBkYzJkNDljYzdiNjc5OWFlMmRiM2VhM2ZiMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI2eLWLFJW02jXE01k3Qk+qYMyqI 7MQEs1hfuF6iL9U6w2cTEWAaxY5NSZEQtPA91rPcdh4DPzK19JbTNpieq9sY2Jfn MgUyin0CdFMAmZHjg/HtxLB2TkuKAeBAznij5yJvLRBn2Ts148UFXgX0xDPzL2CF aOc+u8Un0kvghgf4CnqTGrkiWO2tlqI0wqg1XZxIV7EoBb0Qi2AW4uC+lFqoTUZ7 msW5KFmJlc5hZNf+yV/pg5EphCaBWa8OHj24JXBvojuXbvD1rkpXo/HXUTpRNxSX wO0CXPFlYbIeSKGeaPkrOC8oDo843YXmRAgDB9BTEVvmhQVsU2r/TjN7VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHv/b5QMcNwtScx7Z5muLbPqP7F3MB8GA1UdIwQY MBaAFEYyYORe4VIcaquD8h1baegQweBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAt OGZkNDVjZDUxMzhhLzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAtOGZkNDVjZDUxMzhh LzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVctQ4/Y v8WoVU1b1Yr76y7xfgROqDMaqwkWjoI6IZv6vFWAynWtcz0PxyEFMIkrZFNFi2AW 5vYzPepomm0vmlg3mWlBEYEgfJF1sb4oVlmgfGOsEGBp+6SDpeZK6JlJVI2Dco1N 2VTq0Ih8zyL0yx5B1lcMFjLepANUb294eM0kTG+789syag8mWTdm0RCxT3RmfdTf BQp8chhbzatYNPo/0Ml9Ki9xFCPTuDOegNxJzsO0ZfUlwsHZ2x3pZl8d+QLQfrE7 RvGFF0TnZuIXpOTv+y+mzZL4ULPk07fQCsUlh7PAoxw1k19omRuJubQqnzbcBBD/ VBqpBauzb/U/yg== -----END CERTIFICATE-----Generated at Mon Dec 29 22:38:33 2025 by rpki-client