This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft File: Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json) Hash identifier: jiOvlDliixILnSu+DNNMBz1VnZQjCWx7vW09HYl93bA= Subject key identifier: F8:D1:30:4E:A3:01:9A:50:9D:BF:C6:2A:16:60:50:18:C7:4E:6B:E8 Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2 Certificate issuer: /CN=463eddb91b538f83e8aedf5565c960df0b107ea2 Certificate serial: 019B281B6B582F09299410027F1FE96F9069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft Manifest number: 0BDE Signing time: Tue 16 Dec 2025 17:00:44 +0000 Manifest this update: Tue 16 Dec 2025 17:00:44 +0000 Manifest next update: Wed 17 Dec 2025 17:00:44 +0000 Files and hashes: 1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: Ki3ot6F8L4VTYV93vmVgXGtwz+s0RrCDNl2fAKcoXZc=) 2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:6b:58:2f:09:29:94:10:02:7f:1f:e9:6f:90:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2 Validity Not Before: Dec 16 17:00:44 2025 GMT Not After : Dec 17 17:00:44 2025 GMT Subject: CN=f8d1304ea3019a509dbfc62a16605018c74e6be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:35:97:5e:97:0c:10:f8:87:e0:56:e6:b2: 27:1c:5c:53:df:ca:de:ad:0a:c5:f5:da:4d:b2:93: 14:88:ef:9d:ed:ff:07:00:e8:e7:d9:e5:e5:05:21: 4d:09:b8:d7:60:82:f5:9a:7e:ae:88:af:65:58:ae: 1a:5d:fb:4b:4e:b1:9a:23:31:8f:78:ae:59:97:90: d1:2a:db:46:35:0a:55:35:72:d3:35:c0:3d:b9:c3: 9d:c4:f3:df:88:c5:e7:6f:3f:c1:e8:99:f7:4e:4a: 55:ca:7b:3b:94:74:6b:8c:75:83:3d:25:ad:85:e0: 94:bf:64:0c:ec:d0:99:48:78:32:10:b2:50:3f:e9: 31:3f:e2:2b:be:8d:9b:de:01:df:e2:81:4c:66:cf: 0c:b2:0d:b7:c6:38:36:8b:e5:38:43:3d:00:70:35: 03:2e:0a:1a:0a:8d:6c:b5:75:cc:c0:cb:bd:a4:67: 5b:eb:91:a6:6a:29:d2:85:9e:41:ed:3d:d8:c6:e5: d8:e5:fd:14:37:56:7b:d9:39:1f:60:bc:1d:2a:f7: 58:af:a5:e2:53:b0:39:b9:c3:77:a3:67:4a:09:ff: 0e:ad:58:bf:92:58:d5:46:14:03:95:3a:d1:52:b1: 5a:13:94:3f:af:6e:8b:cb:11:f6:0c:a2:7f:ce:7c: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D1:30:4E:A3:01:9A:50:9D:BF:C6:2A:16:60:50:18:C7:4E:6B:E8 X509v3 Authority Key Identifier: keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e5:1b:04:fe:4b:70:98:cd:7d:f2:46:e4:61:5a:0f:80:7c: a9:05:19:3c:b8:ec:92:c4:5c:46:9e:e9:1f:a1:61:38:2b:9b: 73:9e:2d:26:ea:18:47:92:84:c5:b4:18:26:dc:7e:c2:7d:2b: d3:0e:ed:b9:21:4c:17:4e:13:d3:3b:fb:3c:c3:7c:3e:39:9c: 45:26:be:0d:bf:a3:76:1d:80:fe:d1:ac:a1:ac:2d:7c:fb:ae: b3:63:ac:77:2d:7e:d1:b1:01:38:69:73:d3:f2:9a:5b:93:b6: 5e:87:a3:46:ff:d3:99:19:52:5a:2f:4d:f5:48:3a:a4:a9:8c: e3:42:65:a9:56:a3:f9:3e:c0:e3:30:90:1c:ec:e9:ce:02:4b: 8f:5e:16:96:c0:43:61:5d:a3:17:c3:eb:ee:85:d2:13:4f:6b: dc:04:5e:1b:0a:af:ca:41:b7:cc:23:b8:59:10:0a:2e:35:39: 42:d8:43:f0:85:b9:d1:d5:a6:da:54:b4:b3:c6:32:9c:14:26: 0e:e7:87:b0:5b:12:dd:9e:4a:56:39:a1:ca:7b:2c:a3:59:16: ad:99:52:44:e3:cc:54:13:c0:81:7b:1c:9f:44:c1:03:ec:b5: a7:8d:e5:4a:7e:ac:21:71:50:11:39:c9:bb:a1:60:fa:84:a5: f8:c3:06:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG2tYLwkplBACfx/pb5BpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2M2VkZGI5MWI1MzhmODNlOGFlZGY1NTY1Yzk2MGRmMGIx MDdlYTIwHhcNMjUxMjE2MTcwMDQ0WhcNMjUxMjE3MTcwMDQ0WjAzMTEwLwYDVQQD EyhmOGQxMzA0ZWEzMDE5YTUwOWRiZmM2MmExNjYwNTAxOGM3NGU2YmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorU1l16XDBD4h+BW5rInHFxT38re rQrF9dpNspMUiO+d7f8HAOjn2eXlBSFNCbjXYIL1mn6uiK9lWK4aXftLTrGaIzGP eK5Zl5DRKttGNQpVNXLTNcA9ucOdxPPfiMXnbz/B6Jn3TkpVyns7lHRrjHWDPSWt heCUv2QM7NCZSHgyELJQP+kxP+Irvo2b3gHf4oFMZs8Msg23xjg2i+U4Qz0AcDUD LgoaCo1stXXMwMu9pGdb65GmainShZ5B7T3YxuXY5f0UN1Z72TkfYLwdKvdYr6Xi U7A5ucN3o2dKCf8OrVi/kljVRhQDlTrRUrFaE5Q/r26LyxH2DKJ/znxtGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjRME6jAZpQnb/GKhZgUBjHTmvoMB8GA1UdIwQY MBaAFEY+3bkbU4+D6K7fVWXJYN8LEH6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMDNmYzktMmNiZi00MGJmLTk2MjUt MTg3NjI1MDBmZTI1LzEvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMDNmYzktMmNiZi00MGJmLTk2MjUtMTg3NjI1MDBmZTI1 LzEvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuUbBP5L cJjNffJG5GFaD4B8qQUZPLjsksRcRp7pH6FhOCubc54tJuoYR5KExbQYJtx+wn0r 0w7tuSFMF04T0zv7PMN8PjmcRSa+Db+jdh2A/tGsoawtfPuus2Osdy1+0bEBOGlz 0/KaW5O2XoejRv/TmRlSWi9N9Ug6pKmM40JlqVaj+T7A4zCQHOzpzgJLj14WlsBD YV2jF8Pr7oXSE09r3AReGwqvykG3zCO4WRAKLjU5QthD8IW50dWm2lS0s8YynBQm DueHsFsS3Z5KVjmhynsso1kWrZlSROPMVBPAgXscn0TBA+y1p43lSn6sIXFQETnJ u6Fg+oSl+MMGfg== -----END CERTIFICATE-----Generated at Tue Dec 16 23:04:10 2025 by rpki-client