This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json) Hash identifier: dWrNmiUUuae6U74fTL/UdUBuydKIO3e878xFiQN/VUY= Subject key identifier: 01:66:61:E1:6E:91:32:BA:EB:F5:CD:AF:AB:4F:8F:1A:BA:63:99:05 Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33 Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33 Certificate serial: 019B5A51694930CABECBE66A0F3554EC15F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft Manifest number: 0F5E Signing time: Fri 26 Dec 2025 11:00:43 +0000 Manifest this update: Fri 26 Dec 2025 11:00:43 +0000 Manifest next update: Sat 27 Dec 2025 11:00:43 +0000 Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: fNOWFTK7eldlO1806WUhOxMAth93ktp+JwPOeiWXpl4=) 2: UjkL1yTwH0Ugfy2br2JpH0C8VqU.roa (hash: byfiFTAulr+F8qmR9o1/fYHwOTE6vMHjzS05/tD7xBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:69:49:30:ca:be:cb:e6:6a:0f:35:54:ec:15:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33 Validity Not Before: Dec 26 11:00:43 2025 GMT Not After : Dec 27 11:00:43 2025 GMT Subject: CN=016661e16e9132baebf5cdafab4f8f1aba639905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:93:93:c5:a8:55:af:26:65:af:e4:95:47:61: ed:2c:00:bd:28:b0:95:0d:39:79:0e:a7:66:d7:f3: e3:7f:18:d4:d3:a4:30:14:c7:9b:41:e8:5b:0a:e5: 5a:c0:c6:c5:b7:b3:4a:0a:75:20:23:e7:18:96:16: b6:51:0c:94:7e:8b:27:71:48:c0:01:de:e3:3f:70: bc:b8:ba:0f:c3:a2:b3:ef:b6:71:18:ae:7c:15:82: 46:0e:c1:df:71:2a:57:b4:88:6b:e5:e6:10:a8:0e: 88:35:92:77:3c:77:75:73:7d:1d:6d:8d:a4:1f:f8: fb:bc:84:d3:15:fc:24:11:b5:ce:f5:5f:50:41:57: 1f:b6:67:c1:c5:69:35:16:70:f2:19:46:1a:01:af: 68:00:05:09:86:58:f9:32:f4:23:30:5b:d0:c2:f9: 96:2d:5a:bb:51:b2:a2:05:41:23:dd:f9:fc:d6:80: d5:1d:6b:65:e2:ef:ec:ef:ef:54:18:82:76:b8:a0: 31:4a:78:e4:cb:13:f1:a4:c2:f1:03:6b:5a:e4:9c: 86:57:c9:3b:7d:90:6c:78:5e:8d:70:92:6a:1a:33: fa:12:93:46:f6:f9:85:e4:01:09:06:d4:fc:4d:db: 1c:1e:ec:fe:e9:b2:2d:fe:38:55:b2:d5:5d:11:3a: b8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:66:61:E1:6E:91:32:BA:EB:F5:CD:AF:AB:4F:8F:1A:BA:63:99:05 X509v3 Authority Key Identifier: keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:20:9a:f4:5c:a1:97:0f:9a:58:d5:12:e1:22:08:9c:27:bc: a9:4e:96:3e:7a:dc:98:34:8b:d0:85:0e:d4:8b:49:53:64:47: 16:51:61:4b:33:2a:8f:f0:26:3f:e0:94:25:78:49:fa:ae:2f: d3:5e:f2:78:84:1b:50:46:5d:90:4c:8b:3b:56:b4:3a:cb:ae: dc:86:bc:63:ac:40:74:ce:8d:c5:25:a8:1c:3a:a0:1d:ca:1f: d9:e0:d5:8d:c7:da:ab:d6:6d:af:fa:01:c2:28:f4:34:a6:f8: 17:20:94:bb:4c:bd:aa:7d:7b:0d:24:f9:8e:f7:05:6a:6f:04: 77:9a:8e:b7:ce:8b:8c:8b:cd:a0:82:1a:03:d9:d7:c5:b5:23: cb:3e:e7:af:56:04:e1:7b:42:dd:a6:d8:82:a2:17:4b:7b:37: 7e:a5:ac:eb:11:67:78:a5:90:40:59:fb:24:15:e1:55:7c:53: 5a:29:37:b8:b0:67:e2:4e:b3:1f:01:f9:9c:e5:56:4e:d8:36: a7:79:c2:07:c0:c2:52:63:da:de:a5:69:e6:2f:31:d0:bf:8a: 8d:1b:79:c9:2f:dd:94:68:2b:f7:a5:af:e5:98:ee:6c:3d:c3: 38:8f:ce:05:5d:fc:a4:1a:04:13:23:9e:5f:25:e6:f3:03:bf: 6d:9f:72:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWlJMMq+y+ZqDzVU7BX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ODE0ZWE3ZTgzYjQwMTliZmQ1Nzk3ZWJhOTg5ZGEwNmRk OTBlMzMwHhcNMjUxMjI2MTEwMDQzWhcNMjUxMjI3MTEwMDQzWjAzMTEwLwYDVQQD EygwMTY2NjFlMTZlOTEzMmJhZWJmNWNkYWZhYjRmOGYxYWJhNjM5OTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJOTxahVryZlr+SVR2HtLAC9KLCV DTl5Dqdm1/PjfxjU06QwFMebQehbCuVawMbFt7NKCnUgI+cYlha2UQyUfosncUjA Ad7jP3C8uLoPw6Kz77ZxGK58FYJGDsHfcSpXtIhr5eYQqA6INZJ3PHd1c30dbY2k H/j7vITTFfwkEbXO9V9QQVcftmfBxWk1FnDyGUYaAa9oAAUJhlj5MvQjMFvQwvmW LVq7UbKiBUEj3fn81oDVHWtl4u/s7+9UGIJ2uKAxSnjkyxPxpMLxA2ta5JyGV8k7 fZBseF6NcJJqGjP6EpNG9vmF5AEJBtT8TdscHuz+6bIt/jhVstVdETq4WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFmYeFukTK66/XNr6tPjxq6Y5kFMB8GA1UdIwQY MBaAFESBTqfoO0AZv9V5frqYnaBt2Q4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYWM0NGItNTY1YS00Mjg2LWE0MGMt ZDdlMDFhYzAyYTc1LzEvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zYWM0NGItNTY1YS00Mjg2LWE0MGMtZDdlMDFhYzAyYTc1 LzEvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCCa9Fyh lw+aWNUS4SIInCe8qU6WPnrcmDSL0IUO1ItJU2RHFlFhSzMqj/AmP+CUJXhJ+q4v 017yeIQbUEZdkEyLO1a0Osuu3Ia8Y6xAdM6NxSWoHDqgHcof2eDVjcfaq9Ztr/oB wij0NKb4FyCUu0y9qn17DST5jvcFam8Ed5qOt86LjIvNoIIaA9nXxbUjyz7nr1YE 4XtC3abYgqIXS3s3fqWs6xFneKWQQFn7JBXhVXxTWik3uLBn4k6zHwH5nOVWTtg2 p3nCB8DCUmPa3qVp5i8x0L+KjRt5yS/dlGgr96Wv5ZjubD3DOI/OBV38pBoEEyOe XyXm8wO/bZ9yMA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:47 2025 by rpki-client