This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json) Hash identifier: LJCMBvmrrdTy9AnRXGCKw9Jos35N+eB43TXV3LESrlw= Subject key identifier: 97:FE:3B:3D:A4:D5:59:0B:FA:74:AD:1A:AA:D3:77:F5:E1:35:A8:7C Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Certificate serial: 019B24ACB3971EE66CA706F0718442C8F2A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft Manifest number: 067B Signing time: Tue 16 Dec 2025 01:00:56 +0000 Manifest this update: Tue 16 Dec 2025 01:00:56 +0000 Manifest next update: Wed 17 Dec 2025 01:00:56 +0000 Files and hashes: 1: 3MSuooCKHgIIUe741NoPew7fM6U.roa (hash: XKzD8YwrOGRcbqdlpu8IePXtpBqyVK3W7mHC5tD4SHY=) 2: D0IiHp-JRFUBLBIMco4yz6rCtC8.roa (hash: RH04SIPsMKZVw07b+Tt+/enaXnFcPsETZoWJ4h4XK54=) 3: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: FEDEpURHlWwlncL8EJIx93QC0RzclG+2RSSJhbucDag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:b3:97:1e:e6:6c:a7:06:f0:71:84:42:c8:f2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Validity Not Before: Dec 16 01:00:56 2025 GMT Not After : Dec 17 01:00:56 2025 GMT Subject: CN=97fe3b3da4d5590bfa74ad1aaad377f5e135a87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e1:43:b9:8d:74:5a:da:8f:a5:4e:f5:38:67: 3c:22:21:b1:d4:59:00:0b:af:cd:eb:58:86:2d:64: e5:96:f6:28:07:93:70:70:55:dc:ed:b7:fc:46:b5: 51:89:ec:18:66:2f:3c:db:10:c8:f5:aa:ef:62:57: d3:8c:ec:d1:d6:e2:3c:ac:6e:13:e5:4e:11:94:61: 1c:7a:a2:3f:18:1a:a9:e3:95:d1:71:84:0f:97:52: 5c:64:d6:52:05:c0:4e:3d:60:16:60:6b:b2:4d:32: 0b:06:1f:01:6d:50:e1:23:96:0d:c4:28:7f:f1:75: 2f:49:18:d2:73:e8:7f:a5:f0:8a:cd:2c:68:c1:47: 38:3e:26:69:c4:54:4e:47:1d:88:13:15:b6:f8:10: f1:a0:33:d7:0a:a8:82:d4:25:15:98:10:77:12:95: e8:a2:98:97:20:a5:ae:73:a9:60:9a:eb:08:a2:13: c4:8d:6d:29:46:7c:f5:ca:4a:01:4c:37:9e:90:b8: c4:ca:00:27:9a:fa:94:31:54:48:21:4b:74:19:0d: 24:ab:64:94:09:f7:44:b9:f4:a6:70:91:c3:fb:c4: 0d:90:1c:ed:5d:51:be:02:98:0b:75:d0:b9:55:63: f2:83:17:0e:e5:be:11:8f:7c:a3:d9:62:9f:b5:70: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FE:3B:3D:A4:D5:59:0B:FA:74:AD:1A:AA:D3:77:F5:E1:35:A8:7C X509v3 Authority Key Identifier: keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3c:74:dd:fb:f4:62:b0:44:3f:c1:e3:a6:ef:6a:88:d6:21: 22:99:f9:1f:ee:94:74:2e:ff:da:c2:a5:59:e6:f8:f9:bf:76: b2:06:11:84:5e:b1:6a:2c:e7:43:4c:7a:43:d0:dd:c9:b8:96: 68:8b:dd:6a:2e:55:c5:e3:e4:15:58:9f:27:7f:ec:c2:ae:13: 30:65:be:b7:5b:3f:ca:5a:8f:4e:32:18:29:0a:67:7a:7c:e0: 28:3d:86:52:6e:a4:9e:3d:c6:e2:3f:6a:04:00:42:cb:f7:61: d6:24:b1:72:aa:6d:f8:24:5f:c1:c2:4e:8e:ca:85:9c:7d:f8: a6:c5:b1:f2:03:0e:2d:a0:c7:63:b3:29:3b:38:3e:4f:38:99: ca:c9:b1:fa:fa:90:fd:16:e8:4c:87:75:4f:66:73:a8:4e:46: e8:8d:52:58:ae:bc:a1:8a:8d:b6:62:ba:25:2d:b0:c3:f1:16: b2:15:57:63:d3:59:f6:c0:2d:1f:5e:cb:8b:f9:11:23:52:57: 46:18:9f:37:31:ba:13:f5:03:9e:50:a5:08:e5:23:b3:13:02: f4:1b:1e:b1:88:e0:4b:e0:2f:65:73:9b:17:f4:75:60:ca:33: c7:19:4f:46:ff:85:8a:23:cd:68:c4:26:af:b2:41:01:ac:ae: 0c:54:55:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrLOXHuZspwbwcYRCyPKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi ZDNjNmUwHhcNMjUxMjE2MDEwMDU2WhcNMjUxMjE3MDEwMDU2WjAzMTEwLwYDVQQD Eyg5N2ZlM2IzZGE0ZDU1OTBiZmE3NGFkMWFhYWQzNzdmNWUxMzVhODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuFDuY10WtqPpU71OGc8IiGx1FkA C6/N61iGLWTllvYoB5NwcFXc7bf8RrVRiewYZi882xDI9arvYlfTjOzR1uI8rG4T 5U4RlGEceqI/GBqp45XRcYQPl1JcZNZSBcBOPWAWYGuyTTILBh8BbVDhI5YNxCh/ 8XUvSRjSc+h/pfCKzSxowUc4PiZpxFRORx2IExW2+BDxoDPXCqiC1CUVmBB3EpXo opiXIKWuc6lgmusIohPEjW0pRnz1ykoBTDeekLjEygAnmvqUMVRIIUt0GQ0kq2SU CfdEufSmcJHD+8QNkBztXVG+ApgLddC5VWPygxcO5b4Rj3yj2WKftXB2cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJf+Oz2k1VkL+nStGqrTd/XhNah8MB8GA1UdIwQY MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt NTBkNzA5YmZmZWI1LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1 LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDx03fv0 YrBEP8Hjpu9qiNYhIpn5H+6UdC7/2sKlWeb4+b92sgYRhF6xaiznQ0x6Q9DdybiW aIvdai5VxePkFVifJ3/swq4TMGW+t1s/ylqPTjIYKQpnenzgKD2GUm6knj3G4j9q BABCy/dh1iSxcqpt+CRfwcJOjsqFnH34psWx8gMOLaDHY7MpOzg+TziZysmx+vqQ /RboTId1T2ZzqE5G6I1SWK68oYqNtmK6JS2ww/EWshVXY9NZ9sAtH17Li/kRI1JX RhifNzG6E/UDnlClCOUjsxMC9BsesYjgS+AvZXObF/R1YMozxxlPRv+FiiPNaMQm r7JBAayuDFRVdQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:43:01 2025 by rpki-client