This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft File: Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft (raw, json) Hash identifier: Pq6UIPZ2BvRs2oIN5E+/lI6FCvS8cQM1b+ok+XBafmo= Subject key identifier: 58:D6:21:B3:17:98:C4:9F:04:BC:BC:D8:D7:B2:12:F3:41:3B:EE:77 Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52 Certificate issuer: /CN=463f917077f8f3d0e338c742ea21d64358d19d52 Certificate serial: 019B3A91454F3A505DBC5C57FFEB9B7EA904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft Manifest number: 06EF Signing time: Sat 20 Dec 2025 07:02:37 +0000 Manifest this update: Sat 20 Dec 2025 07:02:37 +0000 Manifest next update: Sun 21 Dec 2025 07:02:37 +0000 Files and hashes: 1: K-1cBvMFbalkBJFw0sJ7i1WTZEs.roa (hash: 3Ikel/xplePBRCnzN26gvmaI2UYrfX6N2d00Q4SBcaQ=) 2: Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl (hash: d4Clipt5uUWL8b7ZmPCDgXBJ5jQwVglEkqrnsDW8GPY=) 3: cpmcqEkiElTb72sko05fp48X-FM.roa (hash: xqlsImmQ/9E7U68AUDQtcRJOydRd1Euow8hua9KaN+Y=) 4: moiKPG2LP_pIBJ3oE3uKFFimTvs.roa (hash: 7/+kCaotJP3wY1l3ZzCfImaKj4/imFC7lov/Lv+DrVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:45:4f:3a:50:5d:bc:5c:57:ff:eb:9b:7e:a9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52 Validity Not Before: Dec 20 07:02:37 2025 GMT Not After : Dec 21 07:02:37 2025 GMT Subject: CN=58d621b31798c49f04bcbcd8d7b212f3413bee77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:a2:5f:40:ab:e1:cd:d0:8a:00:8a:9f:c8: a4:38:e7:3d:f1:d5:47:74:38:2f:61:e0:51:73:1a: 96:e4:db:b5:2e:c9:ef:1f:31:70:4a:7e:86:8c:0a: 5b:04:3b:db:8c:6a:1b:77:27:b9:11:0b:a0:dd:81: fc:eb:ab:e4:8c:85:76:38:cd:14:db:d4:61:cb:44: 98:65:8a:b8:ed:de:5a:4f:3d:90:3b:41:dc:bc:3d: 71:00:31:fd:b3:df:2e:31:2b:fb:c3:78:1c:fb:00: 71:97:f7:4e:70:fa:25:de:5a:22:e1:16:d2:3a:68: 54:f4:1c:0e:eb:e0:dc:8f:4f:c3:20:94:cb:61:6d: e9:0a:82:c9:03:a8:92:6b:f3:90:2b:b3:79:0e:e3: 55:8f:54:ac:b3:a0:83:ae:9f:22:74:5e:ea:86:c6: d2:b4:79:51:24:da:27:76:ef:d0:e8:7f:3d:40:40: e8:b4:a2:b9:dd:d3:59:b5:85:6f:2e:9e:b3:b2:4d: 09:27:6a:19:fe:82:5d:48:c2:99:bb:b1:06:3c:19: e8:1d:bc:0f:fa:9f:1d:52:40:00:f5:df:ef:11:83: a6:60:5e:78:39:da:67:87:96:f2:49:31:01:25:2f: 43:21:e1:ee:aa:9f:0d:3b:bc:e0:12:c5:05:15:40: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D6:21:B3:17:98:C4:9F:04:BC:BC:D8:D7:B2:12:F3:41:3B:EE:77 X509v3 Authority Key Identifier: keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:80:ad:30:46:da:dd:56:fc:8e:dc:6f:44:90:d9:a3:82:1b: 8f:b5:6b:6b:4f:25:49:75:41:b7:0e:ed:c2:34:db:7d:2a:af: b5:83:4c:2d:a4:3b:8b:bf:71:00:57:b3:3b:a5:f8:a6:a4:3b: 2c:0d:58:3e:be:21:cd:c3:8e:3c:92:23:5e:d6:54:46:22:32: 10:24:f3:cb:17:b2:49:87:c7:0d:b9:b3:01:56:52:fc:e4:b9: a2:ab:5e:c7:3d:57:58:f7:75:b2:87:49:14:e9:69:41:36:80: ab:9e:bd:dc:95:3e:c1:f5:30:58:9f:af:1c:af:27:71:ed:ea: 16:a3:3b:bb:2c:6d:f4:0a:73:84:a2:ba:36:59:88:68:d6:99: e9:ea:e7:56:4b:89:9b:70:bd:3e:60:fa:bd:40:06:72:8b:58: de:0e:07:9c:9d:fb:9a:46:39:98:fe:ef:f1:5d:b5:b5:e9:16: 51:1f:4a:19:e1:dd:ca:72:9f:a3:ff:30:3f:6b:eb:21:f9:42: 97:a2:aa:63:9b:52:80:f3:a3:38:f3:31:a5:2a:08:ad:07:1e: 9b:dc:5f:fe:1e:1d:61:81:2f:e4:43:d4:ee:73:9c:8b:ce:85: 07:df:b3:8d:00:ac:22:3f:a6:5e:81:4a:01:63:64:15:3a:41: 97:2b:cb:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kUVPOlBdvFxX/+ubfqkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2M2Y5MTcwNzdmOGYzZDBlMzM4Yzc0MmVhMjFkNjQzNThk MTlkNTIwHhcNMjUxMjIwMDcwMjM3WhcNMjUxMjIxMDcwMjM3WjAzMTEwLwYDVQQD Eyg1OGQ2MjFiMzE3OThjNDlmMDRiY2JjZDhkN2IyMTJmMzQxM2JlZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziGiX0Cr4c3QigCKn8ikOOc98dVH dDgvYeBRcxqW5Nu1LsnvHzFwSn6GjApbBDvbjGobdye5EQug3YH866vkjIV2OM0U 29Rhy0SYZYq47d5aTz2QO0HcvD1xADH9s98uMSv7w3gc+wBxl/dOcPol3loi4RbS OmhU9BwO6+Dcj0/DIJTLYW3pCoLJA6iSa/OQK7N5DuNVj1Sss6CDrp8idF7qhsbS tHlRJNondu/Q6H89QEDotKK53dNZtYVvLp6zsk0JJ2oZ/oJdSMKZu7EGPBnoHbwP +p8dUkAA9d/vEYOmYF54Odpnh5bySTEBJS9DIeHuqp8NO7zgEsUFFUBcvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjWIbMXmMSfBLy82NeyEvNBO+53MB8GA1UdIwQY MBaAFEY/kXB3+PPQ4zjHQuoh1kNY0Z1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmIt MjVhNDBjMDc1ZjEyLzEvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84YjVmN2MtYjNhZS00YjU4LTgxYmItMjVhNDBjMDc1ZjEy LzEvUmotUmNIZjQ4OURqT01kQzZpSFdRMWpSblZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYCtMEba 3Vb8jtxvRJDZo4Ibj7Vra08lSXVBtw7twjTbfSqvtYNMLaQ7i79xAFezO6X4pqQ7 LA1YPr4hzcOOPJIjXtZURiIyECTzyxeySYfHDbmzAVZS/OS5oqtexz1XWPd1sodJ FOlpQTaAq5693JU+wfUwWJ+vHK8nce3qFqM7uyxt9ApzhKK6NlmIaNaZ6ernVkuJ m3C9PmD6vUAGcotY3g4HnJ37mkY5mP7v8V21tekWUR9KGeHdynKfo/8wP2vrIflC l6KqY5tSgPOjOPMxpSoIrQcem9xf/h4dYYEv5EPU7nOci86FB9+zjQCsIj+mXoFK AWNkFTpBlyvL4g== -----END CERTIFICATE-----Generated at Sat Dec 20 08:56:29 2025 by rpki-client