This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft File: RF3xPSDztXGkumELgeYwPbbQmcA.mft (raw, json) Hash identifier: TX99uwc/yrJ96KIEtGcAc/sPjtO3BUGufEcnX/TyVNs= Subject key identifier: 4B:DD:8C:A5:1C:BE:4D:3F:FB:28:C6:47:0B:B5:61:95:0C:18:F5:4E Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0 Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0 Certificate serial: 019B5A514F9B05B5643E9B234D4F0A6A8203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 11:00:36 +0000 Manifest this update: Fri 26 Dec 2025 11:00:36 +0000 Manifest next update: Sat 27 Dec 2025 11:00:36 +0000 Files and hashes: 1: 6Ch2BA4EBBViUCewGb6Paaan7YI.roa (hash: WRYMr3XPQ7z0oDRXKp9hN0X+086fzEIRzfg0NuzfPNE=) 2: RF3xPSDztXGkumELgeYwPbbQmcA.crl (hash: VuTD2UbBhPdTGJOynsv0/uTeW7woY+yg9EFx+/D/+3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:4f:9b:05:b5:64:3e:9b:23:4d:4f:0a:6a:82:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0 Validity Not Before: Dec 26 11:00:36 2025 GMT Not After : Dec 27 11:00:36 2025 GMT Subject: CN=4bdd8ca51cbe4d3ffb28c6470bb561950c18f54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f3:c6:30:c3:75:b9:dc:54:18:b3:17:78:72: 94:c7:f1:25:34:bc:77:fe:b5:e8:3c:9b:5b:6c:16: e7:ae:40:82:2d:65:e2:74:24:de:50:84:0b:01:86: 7f:13:6a:5d:b6:26:dc:b5:f1:06:f0:d6:02:57:b3: 9b:34:d1:22:bb:f9:60:9c:ad:25:48:df:39:86:59: 93:13:dd:e9:fe:2a:a1:a3:e2:ad:67:83:6a:5b:30: 65:67:ce:0c:37:75:53:13:37:4a:1e:c1:9c:20:dd: 0e:c2:d3:c6:aa:9f:18:8a:da:3c:b0:15:8b:15:6c: aa:a8:1c:67:45:1e:24:8c:91:d3:05:42:78:19:f4: a7:51:00:da:39:63:51:0d:3d:76:52:d0:f3:04:ab: 5d:15:37:eb:b8:5c:a2:ca:e2:b5:de:56:55:4e:d0: 51:1d:00:ba:79:e4:9f:e6:c1:5e:4b:3e:7b:0e:47: d0:60:b6:4a:b4:32:0d:6d:ac:60:7b:9e:23:21:15: 37:cf:d3:74:49:45:69:88:50:2a:ce:3e:89:cc:46: f1:76:4f:20:cc:36:a1:3c:46:0c:de:fb:87:6f:f0: ba:98:5c:ca:13:e4:f1:7d:11:ae:b2:2f:48:af:e1: 68:84:4b:98:d8:76:3e:79:f9:9c:46:67:d1:e1:70: 22:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DD:8C:A5:1C:BE:4D:3F:FB:28:C6:47:0B:B5:61:95:0C:18:F5:4E X509v3 Authority Key Identifier: keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:12:ea:f4:b7:30:f9:29:05:25:33:36:a0:f5:22:ca:b5: da:5f:d6:ee:47:f6:89:60:36:08:c1:4a:0a:73:0b:7f:94:c9: db:9b:cd:0e:54:ba:de:1d:5d:04:65:6b:03:4f:66:ef:3e:86: 7b:42:3f:78:aa:83:9e:be:17:39:75:b6:62:ce:48:ea:9f:82: 9e:8e:90:50:34:fd:0c:fc:6b:cf:e7:7a:f1:b4:89:e8:e9:ec: 88:63:0a:99:50:7f:1a:bd:44:44:7a:27:ea:64:fe:fe:1d:84: 8f:a0:27:2e:05:50:01:6d:9c:2e:74:67:f5:16:56:57:71:4d: 3a:b0:7a:04:e9:e2:39:df:6e:11:24:dc:01:2c:a4:ca:97:fd: c2:5c:d3:f3:e6:c5:5d:05:cd:c0:49:2e:74:b2:45:8f:60:34: c5:30:57:bc:13:72:9f:73:9a:98:fa:72:eb:51:ce:e4:1e:c7: ae:40:1d:77:71:df:8a:19:bb:fd:f9:38:3e:91:d0:ac:9f:13: c2:7e:13:17:87:14:c1:83:ce:f1:8c:3a:3f:51:f7:5f:c1:49: c8:8f:0e:21:8d:11:87:5a:a9:ab:5d:cc:eb:85:95:6b:e0:b9: 77:19:76:14:70:1a:db:f0:c4:d5:3e:68:f5:e2:b7:ea:b1:00: 64:ce:57:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUU+bBbVkPpsjTU8KaoIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk MDk5YzAwHhcNMjUxMjI2MTEwMDM2WhcNMjUxMjI3MTEwMDM2WjAzMTEwLwYDVQQD Eyg0YmRkOGNhNTFjYmU0ZDNmZmIyOGM2NDcwYmI1NjE5NTBjMThmNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fPGMMN1udxUGLMXeHKUx/ElNLx3 /rXoPJtbbBbnrkCCLWXidCTeUIQLAYZ/E2pdtibctfEG8NYCV7ObNNEiu/lgnK0l SN85hlmTE93p/iqho+KtZ4NqWzBlZ84MN3VTEzdKHsGcIN0OwtPGqp8Yito8sBWL FWyqqBxnRR4kjJHTBUJ4GfSnUQDaOWNRDT12UtDzBKtdFTfruFyiyuK13lZVTtBR HQC6eeSf5sFeSz57DkfQYLZKtDINbaxge54jIRU3z9N0SUVpiFAqzj6JzEbxdk8g zDahPEYM3vuHb/C6mFzKE+TxfRGusi9Ir+FohEuY2HY+efmcRmfR4XAiUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvdjKUcvk0/+yjGRwu1YZUMGPVOMB8GA1UdIwQY MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt NGY1NGFkNzU1YjIwLzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhgS6vS3 MPkpBSUzNqD1Isq12l/W7kf2iWA2CMFKCnMLf5TJ25vNDlS63h1dBGVrA09m7z6G e0I/eKqDnr4XOXW2Ys5I6p+Cno6QUDT9DPxrz+d68bSJ6OnsiGMKmVB/Gr1ERHon 6mT+/h2Ej6AnLgVQAW2cLnRn9RZWV3FNOrB6BOniOd9uESTcASykypf9wlzT8+bF XQXNwEkudLJFj2A0xTBXvBNyn3OamPpy61HO5B7HrkAdd3Hfihm7/fk4PpHQrJ8T wn4TF4cUwYPO8Yw6P1H3X8FJyI8OIY0Rh1qpq13M64WVa+C5dxl2FHAa2/DE1T5o 9eK36rEAZM5Xtg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:08 2025 by rpki-client