This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json) Hash identifier: 6bqnoonDHD5Dhq4zmtqKb27AIMujiwQ1ics88pmAajs= Subject key identifier: 88:E5:9A:99:15:91:DC:02:67:AD:C6:2B:09:26:74:26:27:7D:5D:50 Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19 Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519 Certificate serial: 019B10B83672C9DE7A67C47352F18C7046CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft Manifest number: 177E Signing time: Fri 12 Dec 2025 04:01:06 +0000 Manifest this update: Fri 12 Dec 2025 04:01:06 +0000 Manifest next update: Sat 13 Dec 2025 04:01:06 +0000 Files and hashes: 1: 1h6I7yathuhdvJgvI7zWaIqhF1I.roa (hash: eS/E0Xfzx+BcTRnP1WHF9rHrs364VBPb5lL4n4E58IM=) 2: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: JrCz6zGzXq7Ab2HNNxVqjmTGgox/CvJfCfzsDWMZ6iQ=) 3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:36:72:c9:de:7a:67:c4:73:52:f1:8c:70:46:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519 Validity Not Before: Dec 12 04:01:06 2025 GMT Not After : Dec 13 04:01:06 2025 GMT Subject: CN=88e59a991591dc0267adc62b09267426277d5d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:c4:a8:36:f9:59:58:55:56:15:27:ba:a7: dd:88:66:49:ac:13:71:1f:07:e8:b0:b9:fd:05:c4: 52:be:6c:c7:c5:f6:c7:0c:26:64:6d:3b:08:ab:5a: e0:d2:a6:0e:bb:46:c6:da:18:bc:47:cb:ef:a7:06: 0f:ac:73:f3:e9:f0:65:58:4c:c8:1f:71:75:26:37: bc:f0:b6:88:01:f9:8e:66:b3:3f:73:64:5b:b4:44: 7f:19:f0:b9:5f:81:d2:33:67:40:a4:b8:28:40:f4: 07:56:46:23:8b:44:fd:3d:37:39:f2:96:bd:60:02: 0f:78:20:48:3b:10:82:d3:ae:b7:fe:a7:0d:f1:00: 1f:50:11:60:3a:c7:1c:4b:b5:c7:dd:d6:1c:f6:06: 37:9b:ce:b2:f6:fa:a7:05:f8:79:7c:14:53:63:12: 7e:8d:51:ff:7f:ac:d7:99:86:4b:b3:44:bf:aa:69: 33:10:7e:68:53:35:03:3b:22:d0:33:64:2c:17:4e: e6:c4:cb:69:48:db:bb:6d:3f:b5:4b:55:55:b2:fa: df:5f:ab:f8:89:bc:e9:4e:ef:66:a6:34:e4:4b:e4: d1:5c:6d:db:43:c8:71:d1:2d:f4:dc:07:d7:eb:52: 1b:cc:0c:25:f1:6a:8f:3a:50:84:63:9f:9b:0f:de: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E5:9A:99:15:91:DC:02:67:AD:C6:2B:09:26:74:26:27:7D:5D:50 X509v3 Authority Key Identifier: keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:61:15:7c:45:77:36:de:ec:8b:a9:84:a9:1f:f7:f7:f2:c6: 51:22:b5:2f:e9:06:e5:3c:6d:9e:6f:9c:49:32:82:fd:55:2b: 1f:17:71:45:ee:35:32:f0:3c:51:1c:22:a8:37:73:d1:1f:b2: 18:f5:d6:3a:53:85:48:a9:36:c2:da:98:2c:61:d8:a9:e8:53: c9:b2:49:56:13:d4:c1:27:01:a3:6c:08:28:81:77:7a:d8:28: 17:0a:b6:fa:2e:9c:c6:50:cc:57:c1:37:5e:0d:bd:33:94:4c: 20:b5:12:2a:b0:77:26:45:45:44:ca:13:84:e3:eb:72:fb:42: 5d:d9:c4:33:8c:4d:7a:83:4c:f5:c8:0b:87:19:56:02:94:49: 5c:3f:59:51:33:f3:f6:e3:ea:22:3f:af:8c:9b:07:80:cc:8d: a3:a8:fa:cd:82:0c:16:d1:d1:61:ec:d4:28:a6:de:1a:4b:f4: a3:0f:5b:bd:94:d5:9c:97:2e:dd:d7:84:ff:88:fb:f3:9d:fe: 34:b2:6e:45:52:92:b5:96:f5:f1:77:11:c9:b8:f3:f4:45:bb: e9:bb:3a:9f:5d:f1:83:23:f6:29:09:23:1f:91:f0:15:60:5e: 61:0d:a6:61:07:bd:5b:61:30:03:7a:0b:8b:51:1a:60:50:40: 82:b7:6b:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuDZyyd56Z8RzUvGMcEbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZjllMzJmZjZhZjNkNWU1ZDc3YmRiYjk4ZGEzN2QwYjhl NDQ1MTkwHhcNMjUxMjEyMDQwMTA2WhcNMjUxMjEzMDQwMTA2WjAzMTEwLwYDVQQD Eyg4OGU1OWE5OTE1OTFkYzAyNjdhZGM2MmIwOTI2NzQyNjI3N2Q1ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAbEqDb5WVhVVhUnuqfdiGZJrBNx HwfosLn9BcRSvmzHxfbHDCZkbTsIq1rg0qYOu0bG2hi8R8vvpwYPrHPz6fBlWEzI H3F1Jje88LaIAfmOZrM/c2RbtER/GfC5X4HSM2dApLgoQPQHVkYji0T9PTc58pa9 YAIPeCBIOxCC0663/qcN8QAfUBFgOsccS7XH3dYc9gY3m86y9vqnBfh5fBRTYxJ+ jVH/f6zXmYZLs0S/qmkzEH5oUzUDOyLQM2QsF07mxMtpSNu7bT+1S1VVsvrfX6v4 ibzpTu9mpjTkS+TRXG3bQ8hx0S303AfX61IbzAwl8WqPOlCEY5+bD94b9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjlmpkVkdwCZ63GKwkmdCYnfV1QMB8GA1UdIwQY MBaAFEX54y/2rz1eXXe9u5jaN9C45EUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYt OGVlMGExMmEzNTliLzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85ZGVmMDgtNzU1Mi00YjVhLTk2NmYtOGVlMGExMmEzNTli LzEvUmZuakxfYXZQVjVkZDcyN21ObzMwTGprUlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmEVfEV3 Nt7si6mEqR/39/LGUSK1L+kG5Txtnm+cSTKC/VUrHxdxRe41MvA8URwiqDdz0R+y GPXWOlOFSKk2wtqYLGHYqehTybJJVhPUwScBo2wIKIF3etgoFwq2+i6cxlDMV8E3 Xg29M5RMILUSKrB3JkVFRMoThOPrcvtCXdnEM4xNeoNM9cgLhxlWApRJXD9ZUTPz 9uPqIj+vjJsHgMyNo6j6zYIMFtHRYezUKKbeGkv0ow9bvZTVnJcu3deE/4j7853+ NLJuRVKStZb18XcRybjz9EW76bs6n13xgyP2KQkjH5HwFWBeYQ2mYQe9W2EwA3oL i1EaYFBAgrdrmg== -----END CERTIFICATE-----Generated at Fri Dec 12 09:09:53 2025 by rpki-client