This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json) Hash identifier: ez+ooFyvSshPsX0P+P7ta4T6zgAZds7A6qMRTUenJKU= Subject key identifier: 4F:88:40:DE:23:E3:70:52:E1:52:10:4D:A7:FD:31:46:AB:80:6B:61 Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Certificate serial: 019B12030ABF604774DAB4762D54EB685A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft Manifest number: 0640 Signing time: Fri 12 Dec 2025 10:02:27 +0000 Manifest this update: Fri 12 Dec 2025 10:02:27 +0000 Manifest next update: Sat 13 Dec 2025 10:02:27 +0000 Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=) 2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=) 3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: cMI5qD3IsBt+483IgSZmE8vZSfZk2622PkO5GisJz+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:0a:bf:60:47:74:da:b4:76:2d:54:eb:68:5a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4 Validity Not Before: Dec 12 10:02:27 2025 GMT Not After : Dec 13 10:02:27 2025 GMT Subject: CN=4f8840de23e37052e152104da7fd3146ab806b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:81:24:4b:de:89:b3:f2:9a:49:cf:e9:0f:99: 60:29:46:cd:2d:61:9f:12:ad:c7:ef:38:51:ea:73: 69:09:db:f4:86:12:fb:c6:09:43:2d:f8:c9:c3:e1: 49:45:0a:cf:d2:b8:c2:f7:73:ce:fb:1c:c5:86:c0: 49:e4:26:43:ac:6f:17:5c:83:82:fd:11:8c:7e:28: a9:b4:21:64:68:34:e8:b5:75:77:c6:26:29:44:fe: ca:85:28:a0:c9:d2:30:23:3e:1a:07:89:50:42:32: 9d:45:8f:85:8c:c5:16:58:ca:9b:5d:2b:05:70:f8: cf:a8:e2:26:af:64:ac:22:10:ed:9c:9d:80:41:7a: 38:01:64:7e:20:f4:7b:e0:0b:7d:68:02:9d:f4:c7: 44:20:ca:00:f0:f4:26:4c:cf:9f:df:58:9a:45:b0: 46:5a:f3:b0:7a:85:b4:27:db:56:d6:ec:53:11:60: 35:90:50:19:1c:9c:20:60:57:60:f9:0a:6d:8c:87: 95:09:5b:61:72:ec:7c:c2:66:15:33:4a:3b:47:9b: d8:28:6b:0e:d7:3c:32:63:ef:9b:6b:d4:61:d2:15: 6c:7e:4c:f0:2c:67:db:87:4d:f4:30:2d:84:e9:fe: 73:ae:67:07:cf:a5:d3:29:de:18:4f:b5:55:9c:cb: b2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:88:40:DE:23:E3:70:52:E1:52:10:4D:A7:FD:31:46:AB:80:6B:61 X509v3 Authority Key Identifier: keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:27:e6:65:cc:59:c5:f8:64:c5:52:79:bf:c0:29:7d:78:17: c1:75:08:71:0f:dd:20:bf:67:0c:c9:b9:f4:3b:18:83:43:13: c1:9f:75:e4:4b:92:b3:07:93:e3:31:5e:6c:c7:68:5b:36:83: e6:f3:08:9d:e2:ce:bc:91:82:9a:a1:2d:05:8b:c2:dc:62:c7: 9e:74:e2:3c:92:4b:eb:35:00:74:a2:35:35:e2:fd:67:5e:15: 4a:7d:a2:1c:d1:6e:3d:16:a1:4e:fd:d8:b9:49:50:40:b1:e5: 23:6e:d1:fc:66:39:8f:14:1e:ed:f4:f5:64:c5:0e:b6:fd:bf: d2:3f:4e:60:11:c9:7f:2a:e6:68:be:68:a6:27:b2:24:06:93: cb:84:c5:db:1f:2d:a3:3a:8d:f6:9f:d1:a7:e8:52:be:47:d6: 6a:23:89:07:84:07:62:e5:33:62:fd:d1:61:6a:b1:8e:39:9f: bc:38:e8:c4:27:53:9c:b2:17:50:b5:af:3d:b6:f8:b6:b4:e8: 19:42:6f:b9:2c:d0:9d:d6:1b:ac:cc:4e:4e:f0:aa:28:63:20: 91:53:8c:5d:73:4c:c8:82:df:28:53:f2:45:62:8a:88:53:cb: 1b:ba:d6:e4:77:11:a4:c0:00:6c:dc:c7:67:b1:db:34:26:94: 10:66:be:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAwq/YEd02rR2LVTraFoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMzdjZjRiMWZkNGNlNTY3ODhlZDgwYjdhMmUxMWM2MWI0 NTZhYjQwHhcNMjUxMjEyMTAwMjI3WhcNMjUxMjEzMTAwMjI3WjAzMTEwLwYDVQQD Eyg0Zjg4NDBkZTIzZTM3MDUyZTE1MjEwNGRhN2ZkMzE0NmFiODA2YjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYEkS96Js/KaSc/pD5lgKUbNLWGf Eq3H7zhR6nNpCdv0hhL7xglDLfjJw+FJRQrP0rjC93PO+xzFhsBJ5CZDrG8XXIOC /RGMfiiptCFkaDTotXV3xiYpRP7KhSigydIwIz4aB4lQQjKdRY+FjMUWWMqbXSsF cPjPqOImr2SsIhDtnJ2AQXo4AWR+IPR74At9aAKd9MdEIMoA8PQmTM+f31iaRbBG WvOweoW0J9tW1uxTEWA1kFAZHJwgYFdg+QptjIeVCVthcux8wmYVM0o7R5vYKGsO 1zwyY++ba9Rh0hVsfkzwLGfbh030MC2E6f5zrmcHz6XTKd4YT7VVnMuyOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+IQN4j43BS4VIQTaf9MUargGthMB8GA1UdIwQY MBaAFK43z0sf1M5WeI7YC3ouEcYbRWq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAt MWVhMmE4ZWExNTQzLzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yYzUzYmQtNGExOS00NDI4LWI1NTAtMWVhMmE4ZWExNTQz LzEvcmpmUFN4X1V6bFo0anRnTGVpNFJ4aHRGYXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSfmZcxZ xfhkxVJ5v8ApfXgXwXUIcQ/dIL9nDMm59DsYg0MTwZ915EuSsweT4zFebMdoWzaD 5vMIneLOvJGCmqEtBYvC3GLHnnTiPJJL6zUAdKI1NeL9Z14VSn2iHNFuPRahTv3Y uUlQQLHlI27R/GY5jxQe7fT1ZMUOtv2/0j9OYBHJfyrmaL5opieyJAaTy4TF2x8t ozqN9p/Rp+hSvkfWaiOJB4QHYuUzYv3RYWqxjjmfvDjoxCdTnLIXULWvPbb4trTo GUJvuSzQndYbrMxOTvCqKGMgkVOMXXNMyILfKFPyRWKKiFPLG7rW5HcRpMAAbNzH Z7HbNCaUEGa+Dg== -----END CERTIFICATE-----Generated at Fri Dec 12 14:21:19 2025 by rpki-client