This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: Y2b9/GMX2xrdc8+qilcQlY458b6NMKa4TMEzS8z+mjI= Subject key identifier: 59:20:E8:02:51:58:23:21:D6:95:3D:E2:12:08:A2:EA:0B:33:F8:C9 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019B0E5C17921A56AF97B496B71A5C443CF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1972 Signing time: Thu 11 Dec 2025 17:01:14 +0000 Manifest this update: Thu 11 Dec 2025 17:01:14 +0000 Manifest next update: Fri 12 Dec 2025 17:01:14 +0000 Files and hashes: 1: 23RE10a8noL3iz6lnGD9G2SOce8.roa (hash: HcnY6nBuyi3+A7v+2u63PVG5+bedAphVEMnhj96wEZg=) 2: KumaOhSQ1_mncFf0ZkCQhvDH-Lo.roa (hash: 0SuemogzHjG4lYfHbDePATRRaFFo9hyJ2zL/inmV6J0=) 3: P-v3vv0KtPcU5ckoJuioqfAvCBA.roa (hash: RGoV+ttam68ElUsAZjdRegMArcfjEbAdwWH0ALqYdx4=) 4: SYEjevclwiM2IUvlBue1SOh9bGs.roa (hash: UFjPgHR+7hB6t2fsS+1gtbHRxilk5aI3yi0dletWuDk=) 5: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=) 6: UxAe-vuq0LASbymfXY97A2tyW0I.roa (hash: wK0TUb6+fwtEAOQM+tFuYJCxYRBZyTLv6liL52P7etQ=) 7: UxYRiME_CynJL3Z4PeaSszWfcKU.roa (hash: TGPUOMFk3KB0382uXjIllR7Ek5Xq7ZkNwkj4QNmYXCo=) 8: ZcoCLAuMS0FD4SRSBrl4rRHwFtI.roa (hash: g9p+MnHrqDz1zdwz25+f7URDMFu0+pb3qO13uPcQ0yI=) 9: j2dInOKpWqZNeq23W-YQp9_TTtI.roa (hash: Y7lLCeMhmVVAzQkmAPLy3meqPRfE8Cd9MxVgH5sdtHc=) 10: lQ5sD4sASnM8FucWRrfJ9N_JO3U.roa (hash: QILaZH2AQC3yUfJPEC77NKji+krwGACsw0GKn5Sbj3I=) 11: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=) 12: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: JCHUntHrt3n5q2HhzEyFMyyYf2UDGodp+vAWgjcJsAs=) 13: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=) 14: xJHtgm2-OFN9JdMVf8BciDO1B5c.roa (hash: teyWoGjs54a3oOIvqgD/eJbTWRioFr7aS8TrGk8QxPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:17:92:1a:56:af:97:b4:96:b7:1a:5c:44:3c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Dec 11 17:01:14 2025 GMT Not After : Dec 12 17:01:14 2025 GMT Subject: CN=5920e80251582321d6953de21208a2ea0b33f8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:da:d2:51:07:00:fe:88:8b:c0:9e:ab:61: ba:b8:3b:71:fb:18:d3:66:64:c1:02:b2:41:91:43: d6:12:e1:d0:28:c3:19:5b:63:64:da:72:9f:59:45: c2:57:0f:4c:dc:a8:ab:c7:6a:18:ff:c6:dc:b5:12: de:6b:34:9c:39:1b:84:33:9b:4f:31:18:5e:2b:5e: db:ad:d1:e2:80:f8:db:ef:2e:c3:eb:3f:a1:d2:a9: d2:8d:31:56:04:81:de:c6:9d:b6:73:a5:0e:ef:e9: 41:ba:38:4b:e5:8d:ae:5b:a9:cb:4c:0a:09:98:b0: 25:d5:68:44:0c:1e:10:e5:26:52:2e:c6:64:89:11: 94:5e:5a:f1:9a:b4:a2:15:6a:c3:14:43:a6:dc:5e: 17:eb:68:4f:3b:fd:af:61:a2:59:a7:78:75:3b:c6: 8a:5c:80:c8:2a:46:a0:13:d7:57:09:4d:9a:41:b6: b0:70:f0:1f:4b:c6:70:ff:6c:f6:3d:82:e3:3f:e0: 63:2f:15:d0:48:fa:64:27:8b:de:af:1d:9b:e9:e5: ed:df:ec:27:f6:e9:e8:40:06:82:1a:47:e8:9c:7c: 2b:2c:6f:79:f9:00:03:48:97:78:12:ff:65:3f:b0: b0:68:0a:56:bf:6f:d9:07:a0:25:3c:a7:46:4e:b5: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:20:E8:02:51:58:23:21:D6:95:3D:E2:12:08:A2:EA:0B:33:F8:C9 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:59:5c:51:af:49:f0:1f:db:bb:30:4d:63:56:5a:59:2d:7e: 9a:bc:4a:f5:43:39:bf:be:a2:38:6e:fb:fd:ef:dd:ea:cb:99: 5b:c1:c6:cb:43:ae:40:be:a1:7d:d1:0e:3c:73:72:c9:2e:45: 98:fa:48:7c:83:9d:02:7d:c1:4d:3a:63:2d:74:5e:f5:42:7a: 6c:0e:e5:ca:f5:da:c6:fe:6c:72:c4:ad:2e:ec:86:38:85:9f: e4:7c:c3:16:96:60:ed:47:ca:bd:58:85:06:0a:3d:16:1c:dd: 0d:41:d0:08:67:32:78:05:08:42:47:75:c8:cd:8f:18:94:92: 23:ad:73:46:87:c4:37:f6:68:f8:af:33:73:47:9e:8d:3a:27: b2:cb:29:ef:96:47:ba:b0:fb:61:73:ca:c4:64:41:04:fd:14: f9:0d:98:6c:65:1d:6d:a7:97:c4:8b:57:45:7e:96:9e:1e:84: a6:5f:6c:2e:55:5b:b5:90:bc:de:92:f8:48:0d:4e:43:c9:47: 82:35:85:2e:76:21:47:a7:b1:27:de:d4:62:76:a8:e0:bc:a9: 9b:3a:b9:1d:e3:d4:1d:38:3d:ff:1b:e3:46:2a:7f:6c:5f:89: 06:af:94:e6:2d:c7:5a:34:28:5d:4a:5d:1b:5e:a0:7c:43:16: 98:d0:98:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXBeSGlavl7SWtxpcRDz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUxMjExMTcwMTE0WhcNMjUxMjEyMTcwMTE0WjAzMTEwLwYDVQQD Eyg1OTIwZTgwMjUxNTgyMzIxZDY5NTNkZTIxMjA4YTJlYTBiMzNmOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLPa0lEHAP6Ii8Ceq2G6uDtx+xjT ZmTBArJBkUPWEuHQKMMZW2Nk2nKfWUXCVw9M3Kirx2oY/8bctRLeazScORuEM5tP MRheK17brdHigPjb7y7D6z+h0qnSjTFWBIHexp22c6UO7+lBujhL5Y2uW6nLTAoJ mLAl1WhEDB4Q5SZSLsZkiRGUXlrxmrSiFWrDFEOm3F4X62hPO/2vYaJZp3h1O8aK XIDIKkagE9dXCU2aQbawcPAfS8Zw/2z2PYLjP+BjLxXQSPpkJ4verx2b6eXt3+wn 9unoQAaCGkfonHwrLG95+QADSJd4Ev9lP7CwaApWv2/ZB6AlPKdGTrV3CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkg6AJRWCMh1pU94hIIouoLM/jJMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVlcUa9J 8B/buzBNY1ZaWS1+mrxK9UM5v76iOG77/e/d6suZW8HGy0OuQL6hfdEOPHNyyS5F mPpIfIOdAn3BTTpjLXRe9UJ6bA7lyvXaxv5scsStLuyGOIWf5HzDFpZg7UfKvViF Bgo9FhzdDUHQCGcyeAUIQkd1yM2PGJSSI61zRofEN/Zo+K8zc0eejTonsssp75ZH urD7YXPKxGRBBP0U+Q2YbGUdbaeXxItXRX6Wnh6Epl9sLlVbtZC83pL4SA1OQ8lH gjWFLnYhR6exJ97UYnao4Lypmzq5HePUHTg9/xvjRip/bF+JBq+U5i3HWjQoXUpd G16gfEMWmNCYXg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:25:25 2025 by rpki-client