This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json) Hash identifier: ihQf8+cO6C0a9lOlxj7Kf+Qzu0FH09nnUfMay1ocjhs= Subject key identifier: FE:6C:B1:E7:A5:8D:47:9F:A0:D6:DC:6C:FD:53:CA:4C:57:A2:FF:50 Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac Certificate serial: 019B0F6E410768D7C026FBE2940BAFB74F33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft Manifest number: 057E Signing time: Thu 11 Dec 2025 22:00:42 +0000 Manifest this update: Thu 11 Dec 2025 22:00:42 +0000 Manifest next update: Fri 12 Dec 2025 22:00:42 +0000 Files and hashes: 1: 0MlTaxTSqs7exW9T9UwJnI13N48.roa (hash: tFPjdFZ8VQwwFGSe9O82bqMhmvn5QbzxecPzG4FY10Y=) 2: A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa (hash: ldoqGlxkskwlUGFcvsBCWW2juWo6FhsFHoXDckpMuNw=) 3: CIfkNcs_dPG1243KuyQzPUhrSqE.roa (hash: vq82qZoa17x2oFYdWbGJVFocqNvpvLo719jmFST2KLk=) 4: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: iy6dMMwctM6FJ6NpYNhFTdfT4NwN4o7IbBfoRlcC6qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:41:07:68:d7:c0:26:fb:e2:94:0b:af:b7:4f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac Validity Not Before: Dec 11 22:00:42 2025 GMT Not After : Dec 12 22:00:42 2025 GMT Subject: CN=fe6cb1e7a58d479fa0d6dc6cfd53ca4c57a2ff50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:1e:80:bb:b7:46:da:7e:e1:7d:c4:52:88: 84:01:9f:10:d2:64:9a:39:d5:cd:9d:78:9a:d1:02: ef:2f:c6:91:c4:87:7c:cb:2c:ac:37:d6:70:d3:b8: 69:38:39:c5:9e:3e:51:94:51:c2:b1:26:1e:48:40: 48:fb:4b:8c:2f:55:6a:0e:f7:0f:6e:39:e3:67:80: bd:35:1b:c8:17:b8:02:db:98:a2:45:08:ae:e1:db: da:ef:b1:c8:fb:90:c2:1a:87:87:7b:3d:a0:6d:d7: 26:c1:c9:4f:0b:73:a9:d9:bd:65:f7:d5:aa:ce:80: b3:69:bf:90:02:fc:70:e5:0a:69:b0:0f:96:3d:99: 39:df:1b:99:77:9e:8d:ab:e0:d5:17:b2:b5:f8:cf: ff:00:8f:42:20:13:3f:b3:82:29:5e:9f:58:ce:bc: 3b:55:9d:85:44:5b:bd:a4:e7:48:85:6e:ac:05:65: 41:4a:eb:5d:97:9e:12:00:a7:cf:eb:a0:77:7e:f5: 61:38:8c:c0:44:b1:7c:d4:fc:c1:71:5c:4c:bf:0e: f0:56:29:96:a6:7b:53:a7:ea:59:15:eb:36:09:e5: 7f:82:17:21:2a:51:82:c7:e6:d8:4c:70:b4:b9:b4: 24:2f:f7:68:51:94:31:d8:ad:c9:84:3b:d7:1f:e5: 76:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6C:B1:E7:A5:8D:47:9F:A0:D6:DC:6C:FD:53:CA:4C:57:A2:FF:50 X509v3 Authority Key Identifier: keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f2:cc:06:07:53:cb:c9:3f:ac:7a:7a:0e:e7:24:db:5a:4e: 9d:63:25:d1:fe:c4:eb:2b:24:09:a7:4f:50:e3:07:76:7d:74: bb:45:e9:47:0d:30:be:a3:8e:53:a8:5b:00:87:4f:47:63:2a: 88:33:62:71:52:c1:03:15:7a:a5:3e:67:d6:d8:4e:c7:a3:e6: ff:b3:2b:9b:9a:23:ac:49:fa:70:4b:ea:92:8d:df:95:b9:7e: 0c:ac:52:97:f2:6f:30:d7:5d:58:88:0a:92:16:85:1e:78:f3: f8:6c:dd:f8:0a:98:9e:1c:31:e2:91:9b:b2:30:ef:8c:44:8f: a7:0b:ad:74:f0:24:b6:0b:5c:91:8e:40:a9:95:94:80:1a:94: f2:54:e6:83:9b:f0:77:5c:52:a5:42:0b:d0:1b:77:4e:54:02: 67:5e:41:41:92:c5:2f:5a:7b:11:4b:ec:1e:ce:2a:cd:bc:29: 0a:7d:f1:36:78:e9:dd:ee:15:a3:f0:4b:84:cf:a3:10:e5:71: 9d:54:fa:f7:33:46:81:d1:d9:bf:da:57:81:57:bc:4a:75:ab: 64:b8:81:96:73:f1:cb:bf:53:a9:38:41:2e:66:b4:d6:b6:c7: 65:5d:e5:82:bf:81:d5:03:48:21:57:7c:af:84:25:20:77:1a: d2:2c:79:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbkEHaNfAJvvilAuvt08zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzhiZjY4YjY2NzVlMmE1YTNhNzkyMmY2NDc3ZDJhZmIz NTdmYWMwHhcNMjUxMjExMjIwMDQyWhcNMjUxMjEyMjIwMDQyWjAzMTEwLwYDVQQD EyhmZTZjYjFlN2E1OGQ0NzlmYTBkNmRjNmNmZDUzY2E0YzU3YTJmZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+4egLu3Rtp+4X3EUoiEAZ8Q0mSa OdXNnXia0QLvL8aRxId8yyysN9Zw07hpODnFnj5RlFHCsSYeSEBI+0uML1VqDvcP bjnjZ4C9NRvIF7gC25iiRQiu4dva77HI+5DCGoeHez2gbdcmwclPC3Op2b1l99Wq zoCzab+QAvxw5QppsA+WPZk53xuZd56Nq+DVF7K1+M//AI9CIBM/s4IpXp9Yzrw7 VZ2FRFu9pOdIhW6sBWVBSutdl54SAKfP66B3fvVhOIzARLF81PzBcVxMvw7wVimW pntTp+pZFes2CeV/ghchKlGCx+bYTHC0ubQkL/doUZQx2K3JhDvXH+V20wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5sseeljUefoNbcbP1TykxXov9QMB8GA1UdIwQY MBaAFEY4v2i2Z14qWjp5IvZHfSr7NX+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMt ODcwNzNmNDM0YjAzLzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMtODcwNzNmNDM0YjAz LzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPLMBgdT y8k/rHp6Duck21pOnWMl0f7E6yskCadPUOMHdn10u0XpRw0wvqOOU6hbAIdPR2Mq iDNicVLBAxV6pT5n1thOx6Pm/7Mrm5ojrEn6cEvqko3flbl+DKxSl/JvMNddWIgK khaFHnjz+Gzd+AqYnhwx4pGbsjDvjESPpwutdPAktgtckY5AqZWUgBqU8lTmg5vw d1xSpUIL0Bt3TlQCZ15BQZLFL1p7EUvsHs4qzbwpCn3xNnjp3e4Vo/BLhM+jEOVx nVT69zNGgdHZv9pXgVe8SnWrZLiBlnPxy79TqThBLma01rbHZV3lgr+B1QNIIVd8 r4QlIHca0ix58g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:24:23 2025 by rpki-client