This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json) Hash identifier: 1Uv7eWCxGiTg8ZTjThbHsBmnlNByOLKoOJj6FjtzhIo= Subject key identifier: 08:C8:7F:9D:FF:40:C8:52:E8:A7:F7:BA:5D:8B:D4:5A:52:AD:7B:40 Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Certificate serial: 019AF61C714C56B3ED89B22841A9D97974C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft Manifest number: 0699 Signing time: Sun 07 Dec 2025 00:00:50 +0000 Manifest this update: Sun 07 Dec 2025 00:00:50 +0000 Manifest next update: Mon 08 Dec 2025 00:00:50 +0000 Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=) 2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=) 3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: ZcpI9yCZVPnI37+ntT5f/t5XsqHaekktybuPBuZq9jI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:71:4c:56:b3:ed:89:b2:28:41:a9:d9:79:74:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Validity Not Before: Dec 7 00:00:50 2025 GMT Not After : Dec 8 00:00:50 2025 GMT Subject: CN=08c87f9dff40c852e8a7f7ba5d8bd45a52ad7b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:4e:2d:5e:42:89:b6:a5:39:27:66:5f:2f: 46:53:59:b7:ae:1d:ab:a4:15:d7:42:36:4e:44:5f: a0:e3:30:f3:8a:3e:de:32:e0:98:95:01:c5:18:cd: 89:49:d8:63:02:89:c8:7e:f8:3e:c4:e8:8a:4e:59: 54:a1:d4:1d:6d:83:de:ba:d3:bc:2a:8e:c7:fe:03: 09:24:43:b3:82:04:12:d3:b7:3a:11:55:5f:95:22: 15:ba:03:ef:eb:46:85:6b:a2:19:40:98:57:59:fe: 03:c8:70:fe:c1:a9:ec:f4:54:37:9c:04:a1:d6:4f: 36:d3:72:08:cf:84:3d:6b:30:9e:00:8c:55:e0:f1: d9:ce:4b:c6:4c:d7:30:59:2e:18:86:6b:b6:b1:e4: 79:01:2a:3c:a1:fc:6b:d5:83:5a:c0:d2:56:ee:9b: c9:ea:5f:47:e4:f8:1c:fe:e3:68:d5:b3:7d:1b:c8: 06:1e:8b:43:15:c9:b8:4e:88:c5:67:b6:cb:39:aa: 36:45:8e:39:8a:d4:85:de:b3:33:53:46:2b:33:11: 5b:e1:b8:a8:a3:5a:18:f7:3c:e2:52:39:2a:34:c6: 43:e6:94:8c:19:f3:7a:f3:4f:6e:5c:bd:77:b7:45: 79:5d:31:a9:38:13:99:28:78:5f:f0:e8:eb:cf:42: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C8:7F:9D:FF:40:C8:52:E8:A7:F7:BA:5D:8B:D4:5A:52:AD:7B:40 X509v3 Authority Key Identifier: keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c2:2f:64:c1:5a:bd:71:a5:1d:94:bd:2c:d0:d0:3d:93:aa: bd:22:7f:a1:76:c0:6b:b5:45:78:7f:6b:1d:99:fe:a5:00:51: ee:59:fa:fa:3c:19:8a:50:4c:fc:df:59:40:e2:bc:68:0b:13: 1e:b2:d3:83:dd:92:46:6c:25:f1:da:7d:b0:01:9e:82:b8:ba: 85:23:01:b6:d6:41:99:81:73:4b:a1:2a:01:84:7e:53:b1:f0: 4b:e8:f8:79:57:8f:9a:2b:e6:3b:5e:35:39:08:22:52:68:67: 16:d3:78:7c:23:10:97:10:78:93:cf:7f:53:64:07:27:22:9c: ac:9d:3a:b8:e2:f8:01:b3:52:be:d2:3a:f1:d7:2b:5f:7d:d8: 44:c2:4d:ff:19:c7:35:8e:d5:07:ad:c0:1b:ff:e1:c2:7d:23: 92:24:ee:2a:7e:b6:b8:d7:78:bb:43:13:b0:72:22:fb:b9:aa: 90:5a:78:6d:68:01:51:71:89:ea:39:6b:dd:69:0d:de:ab:e0: 8a:1f:e7:fb:f3:05:44:01:83:4a:3d:dd:32:56:c2:03:b9:e9: 79:e7:e1:9b:63:de:5f:28:24:f0:3a:60:8b:1a:b3:3f:1a:55: 45:df:8e:e7:c9:90:19:9f:31:60:88:f2:d3:ed:96:ab:2c:d2: f5:e8:e2:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HHFMVrPtibIoQanZeXTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz MGYyNWEwHhcNMjUxMjA3MDAwMDUwWhcNMjUxMjA4MDAwMDUwWjAzMTEwLwYDVQQD EygwOGM4N2Y5ZGZmNDBjODUyZThhN2Y3YmE1ZDhiZDQ1YTUyYWQ3YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMJOLV5CibalOSdmXy9GU1m3rh2r pBXXQjZORF+g4zDzij7eMuCYlQHFGM2JSdhjAonIfvg+xOiKTllUodQdbYPeutO8 Ko7H/gMJJEOzggQS07c6EVVflSIVugPv60aFa6IZQJhXWf4DyHD+wans9FQ3nASh 1k8203IIz4Q9azCeAIxV4PHZzkvGTNcwWS4Yhmu2seR5ASo8ofxr1YNawNJW7pvJ 6l9H5Pgc/uNo1bN9G8gGHotDFcm4TojFZ7bLOao2RY45itSF3rMzU0YrMxFb4bio o1oY9zziUjkqNMZD5pSMGfN6809uXL13t0V5XTGpOBOZKHhf8Ojrz0IZ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjIf53/QMhS6Kf3ul2L1FpSrXtAMB8GA1UdIwQY MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcIvZMFa vXGlHZS9LNDQPZOqvSJ/oXbAa7VFeH9rHZn+pQBR7ln6+jwZilBM/N9ZQOK8aAsT HrLTg92SRmwl8dp9sAGegri6hSMBttZBmYFzS6EqAYR+U7HwS+j4eVePmivmO141 OQgiUmhnFtN4fCMQlxB4k89/U2QHJyKcrJ06uOL4AbNSvtI68dcrX33YRMJN/xnH NY7VB63AG//hwn0jkiTuKn62uNd4u0MTsHIi+7mqkFp4bWgBUXGJ6jlr3WkN3qvg ih/n+/MFRAGDSj3dMlbCA7npeefhm2PeXygk8DpgixqzPxpVRd+O58mQGZ8xYIjy 0+2WqyzS9ejiiw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:29 2025 by rpki-client