This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json) Hash identifier: wlU1B/8uQ4QjHQuc+BJjeAOzzMIZnzCsKC3y+vthkYM= Subject key identifier: 06:DF:D2:43:C8:44:02:34:32:D7:0B:E9:32:D4:5E:01:6F:35:B0:70 Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 019B495E81D7125BA62D8A5E4CE2B2FB25B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft Manifest number: 1191 Signing time: Tue 23 Dec 2025 04:01:28 +0000 Manifest this update: Tue 23 Dec 2025 04:01:28 +0000 Manifest next update: Wed 24 Dec 2025 04:01:28 +0000 Files and hashes: 1: 1-zO_X8m4H1rJu5YxrTfq1_LtFUw.roa (hash: 8XULk9NSCsk6wJTdGSnM5MpRbtNCX8jvKKx3+n/QI24=) 2: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: 0yGlrWckrViFmIP5ZR7w0HxX0ZVeLlYd+Ol9JQaNFZk=) 3: iVv9ozH_svAyWCz87404M3b3dOg.roa (hash: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=) 4: p35nG8WnKus4OTOs7KI5F65sYzo.roa (hash: RVbXfLYb/+mFr+HMiMKT1IcR5Oe18VB+slW6Nc/dCTU=) 5: pcXYlaDPwjog7iEv3SU8SnXzBAo.roa (hash: /AdWWJb1IqZ42mmM/SvQrc5HCBK96OSXdfXnx0nlkCw=) 6: phMHUXGvPxn2DLT5p1ejhNrhbjU.roa (hash: I3f7lI5Gs9gMy8wigPhFWkKF/LTaX3B+WQTJbC+AJvo=) 7: ySapTfZYgbxoEK957EhqmLLUXOc.roa (hash: PiAUqrCpwQjO/wsILlIaOLs415SXxFD6K/JzPp3q6ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:81:d7:12:5b:a6:2d:8a:5e:4c:e2:b2:fb:25:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: Dec 23 04:01:28 2025 GMT Not After : Dec 24 04:01:28 2025 GMT Subject: CN=06dfd243c844023432d70be932d45e016f35b070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:9c:21:55:dd:8b:c8:68:4c:3e:35:df:66: f9:84:42:ad:47:7a:48:f2:5e:5c:d5:24:07:25:07: 8f:41:b4:95:73:73:76:9e:b2:4d:cc:0b:57:a7:9e: b6:a5:62:15:b8:08:d1:fe:2e:ea:d2:66:5c:f9:de: 9a:ac:32:e3:00:fc:25:39:e9:71:73:ca:e2:5f:51: a5:39:7b:9f:d6:30:19:c6:21:78:57:4f:c9:f1:4c: b7:8b:45:09:9c:6e:eb:4a:0d:89:60:f4:8a:32:54: 0a:fa:ff:c3:69:d7:db:7c:5d:87:76:80:a0:2d:48: 1c:e9:59:d1:f8:85:df:93:32:e3:ab:57:00:68:72: 95:1f:ad:68:fa:f5:c7:43:47:30:f4:55:50:f0:9f: 4a:9d:d3:e7:e5:08:27:8e:11:93:ce:e0:2d:75:d4: ff:13:5e:39:a2:d2:1a:e8:96:57:0a:29:14:bf:b5: 2c:1d:ee:ef:81:ce:3c:54:3f:63:5a:76:77:a5:b7: 77:74:a0:d1:cf:76:2f:b8:7d:63:23:10:f5:9b:92: 32:e0:fe:de:d4:16:86:5a:b2:71:be:23:e5:6a:3e: 12:05:65:cd:74:7f:cf:00:93:62:37:f1:cd:2d:db: 23:7a:5f:aa:94:36:ac:ef:a1:bb:e5:d5:8f:21:e1: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DF:D2:43:C8:44:02:34:32:D7:0B:E9:32:D4:5E:01:6F:35:B0:70 X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c5:65:15:a7:3b:da:4c:0e:6a:97:5e:53:6d:f8:7f:a8:f0: da:62:d8:91:5e:63:33:97:6b:bf:0a:34:25:ce:30:4d:64:6c: 40:6e:df:d6:c5:68:86:2d:6b:22:fd:ee:0d:ad:08:e8:2c:9b: 67:0e:3c:3a:2d:39:90:45:ba:30:08:87:dc:2a:9c:5b:c7:d4: b4:31:cd:9b:af:92:b4:4b:5d:9d:19:ac:86:e7:2d:f1:4a:90: b3:1b:27:92:c1:16:ac:fb:3e:7f:13:bc:9f:77:a9:22:81:b7: 0e:03:d5:39:1a:dd:06:46:94:b9:ff:2d:4d:9c:45:22:79:b1: 24:c4:ef:f1:4f:1e:27:71:90:e9:d0:a1:b3:4b:2c:3f:45:d8: 16:60:90:85:c2:1f:c8:bc:45:11:20:cb:dc:89:6c:85:43:bb: 9d:56:3d:16:a3:d6:b3:c7:9c:c5:d0:1e:3c:2a:32:6b:1b:93: 2e:26:ef:a8:39:7b:04:5e:ee:97:71:cd:88:8a:61:bd:ae:7c: 34:2e:61:57:34:be:34:7d:13:a5:72:ca:a8:3f:af:a9:90:f4: ae:f9:e2:16:93:77:6a:dd:ba:ee:19:ed:1b:42:f1:34:aa:f0: 2f:20:dc:f1:3b:51:34:3d:80:c9:8e:14:cc:83:e7:e1:ff:78: de:e4:c0:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXoHXElumLYpeTOKy+yW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjUxMjIzMDQwMTI4WhcNMjUxMjI0MDQwMTI4WjAzMTEwLwYDVQQD EygwNmRmZDI0M2M4NDQwMjM0MzJkNzBiZTkzMmQ0NWUwMTZmMzViMDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ycIVXdi8hoTD4132b5hEKtR3pI 8l5c1SQHJQePQbSVc3N2nrJNzAtXp562pWIVuAjR/i7q0mZc+d6arDLjAPwlOelx c8riX1GlOXuf1jAZxiF4V0/J8Uy3i0UJnG7rSg2JYPSKMlQK+v/DadfbfF2HdoCg LUgc6VnR+IXfkzLjq1cAaHKVH61o+vXHQ0cw9FVQ8J9KndPn5QgnjhGTzuAtddT/ E145otIa6JZXCikUv7UsHe7vgc48VD9jWnZ3pbd3dKDRz3YvuH1jIxD1m5Iy4P7e 1BaGWrJxviPlaj4SBWXNdH/PAJNiN/HNLdsjel+qlDas76G75dWPIeHhmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbf0kPIRAI0MtcL6TLUXgFvNbBwMB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8VlFac7 2kwOapdeU234f6jw2mLYkV5jM5drvwo0Jc4wTWRsQG7f1sVohi1rIv3uDa0I6Cyb Zw48Oi05kEW6MAiH3CqcW8fUtDHNm6+StEtdnRmshuct8UqQsxsnksEWrPs+fxO8 n3epIoG3DgPVORrdBkaUuf8tTZxFInmxJMTv8U8eJ3GQ6dChs0ssP0XYFmCQhcIf yLxFESDL3IlshUO7nVY9FqPWs8ecxdAePCoyaxuTLibvqDl7BF7ul3HNiIphva58 NC5hVzS+NH0TpXLKqD+vqZD0rvniFpN3at267hntG0LxNKrwLyDc8TtRND2AyY4U zIPn4f943uTAMg== -----END CERTIFICATE-----Generated at Tue Dec 23 07:56:33 2025 by rpki-client