This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json) Hash identifier: FOdpGs1y0QCeDPPtA3gDGyCjB2RbsMndILr1DQtUxJM= Subject key identifier: 08:43:FA:E8:CC:9A:76:18:62:BF:33:3C:D1:07:F8:D6:F7:4C:E4:B4 Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30 Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830 Certificate serial: 019B48F04A1229528AA47DE1940A084267C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 02:01:05 +0000 Manifest this update: Tue 23 Dec 2025 02:01:05 +0000 Manifest next update: Wed 24 Dec 2025 02:01:05 +0000 Files and hashes: 1: csdHd_e7Tx65D2MBS9ZtbLUxU90.roa (hash: fNuNtwuPS3v94+W5VQY9K+dMsKggefc0dwxaWQUAwyY=) 2: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: NHzyI18VQmmXo9Jl356zG7M+GSedY/XWoIUBm3Y+n/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:4a:12:29:52:8a:a4:7d:e1:94:0a:08:42:67:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830 Validity Not Before: Dec 23 02:01:05 2025 GMT Not After : Dec 24 02:01:05 2025 GMT Subject: CN=0843fae8cc9a761862bf333cd107f8d6f74ce4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:c8:31:5d:9e:d0:60:8d:34:6e:98:6f:a8: 5b:76:1b:5a:e1:6d:4f:96:5c:01:2f:c6:6e:65:ac: d5:be:5a:1b:05:7c:4a:08:65:7c:1f:c7:94:bd:e7: bd:55:68:52:50:7e:b0:45:73:0a:3a:82:88:c1:69: a1:72:b6:ff:08:53:63:37:3c:4f:e3:5b:3e:be:6b: 2c:e9:cb:0c:cc:6c:02:a0:7a:90:15:97:65:1d:74: 2b:ff:46:b3:a3:a2:67:ea:2d:d9:7c:ac:10:ba:29: dd:67:57:30:c7:8e:07:aa:bd:da:bc:84:30:e1:4b: d5:f4:64:ff:ee:e9:df:30:5c:9f:d8:a3:38:ee:35: 2d:37:6a:b7:8a:89:9c:04:65:3e:7b:5c:ad:de:e6: 68:be:f7:6e:86:d9:37:8e:55:16:de:a1:04:3d:e7: 33:bd:8c:b1:22:d7:64:97:e0:69:39:35:80:dd:dc: b8:43:ee:21:5f:92:d2:33:88:74:b6:24:25:4c:69: ef:85:d0:f8:30:58:49:01:f4:03:4f:04:19:98:ae: 47:b3:9a:93:28:08:7b:05:fc:92:74:97:e8:f2:d7: 4f:72:95:de:d7:35:08:70:b9:15:87:c6:49:9d:72: a9:25:81:aa:c2:2b:8c:e4:c8:61:a7:f1:16:d5:8f: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:43:FA:E8:CC:9A:76:18:62:BF:33:3C:D1:07:F8:D6:F7:4C:E4:B4 X509v3 Authority Key Identifier: keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ec:d9:20:1b:ec:c1:bb:be:83:83:f5:4e:bf:5f:4a:2a:58: c4:20:d1:1c:54:9f:95:36:b7:93:24:26:89:d1:0e:48:ec:fe: fd:36:a6:3f:8a:32:9a:33:13:3f:0d:8a:ba:4a:04:10:0b:45: 31:cd:7f:b6:05:75:fd:68:7a:5e:4b:4d:c8:67:eb:9b:d4:b5: f4:4f:a6:c2:40:88:61:be:b1:a4:9e:7b:d5:7b:c8:20:70:47: 95:35:85:61:e8:62:ae:fb:4e:fc:5d:30:71:04:ca:e3:dd:ea: 26:c8:98:a6:86:2a:d2:13:ae:af:b9:cc:1a:bb:8e:f4:1f:d0: a5:59:2e:ca:74:d0:22:b9:ac:de:2d:27:de:98:84:5e:0c:4a: c1:9b:c4:df:c3:98:da:27:5e:d2:2a:d8:7a:b2:8c:4d:b4:fe: 8d:bf:12:02:fc:e2:41:f9:38:67:48:cf:15:f7:41:90:38:b3: e0:ef:d1:6b:35:bb:03:4b:60:f7:8b:d9:3d:ca:dc:e3:16:27: bf:f8:6e:3f:d3:c0:a6:ba:12:03:26:a5:ce:06:85:89:33:f0: 9d:3e:79:f5:55:03:9c:c9:77:ce:a4:1a:96:7e:29:3a:b3:62: 86:35:29:1c:17:77:a2:c7:65:e6:ce:4d:2b:a3:5c:27:6f:15: 49:66:05:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8EoSKVKKpH3hlAoIQmfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZmQ5MGNiMzU3NDJmOWU1ODFlOGNiZGYwZTNlMTIzYTg0 OWM4MzAwHhcNMjUxMjIzMDIwMTA1WhcNMjUxMjI0MDIwMTA1WjAzMTEwLwYDVQQD EygwODQzZmFlOGNjOWE3NjE4NjJiZjMzM2NkMTA3ZjhkNmY3NGNlNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+jIMV2e0GCNNG6Yb6hbdhta4W1P llwBL8ZuZazVvlobBXxKCGV8H8eUvee9VWhSUH6wRXMKOoKIwWmhcrb/CFNjNzxP 41s+vmss6csMzGwCoHqQFZdlHXQr/0azo6Jn6i3ZfKwQuindZ1cwx44Hqr3avIQw 4UvV9GT/7unfMFyf2KM47jUtN2q3iomcBGU+e1yt3uZovvduhtk3jlUW3qEEPecz vYyxItdkl+BpOTWA3dy4Q+4hX5LSM4h0tiQlTGnvhdD4MFhJAfQDTwQZmK5Hs5qT KAh7BfySdJfo8tdPcpXe1zUIcLkVh8ZJnXKpJYGqwiuM5Mhhp/EW1Y/ZcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhD+ujMmnYYYr8zPNEH+Nb3TOS0MB8GA1UdIwQY MBaAFK39kMs1dC+eWB6MvfDj4SOoScgwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83ZTIyNGQtZjE1NC00Zjc1LWEyYTgt ZWI3ZWM0ZDdkY2E4LzEvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83ZTIyNGQtZjE1NC00Zjc1LWEyYTgtZWI3ZWM0ZDdkY2E4 LzEvcmYyUXl6VjBMNTVZSG95OThPUGhJNmhKeURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+zZIBvs wbu+g4P1Tr9fSipYxCDRHFSflTa3kyQmidEOSOz+/TamP4oymjMTPw2KukoEEAtF Mc1/tgV1/Wh6XktNyGfrm9S19E+mwkCIYb6xpJ571XvIIHBHlTWFYehirvtO/F0w cQTK493qJsiYpoYq0hOur7nMGruO9B/QpVkuynTQIrms3i0n3piEXgxKwZvE38OY 2ide0irYerKMTbT+jb8SAvziQfk4Z0jPFfdBkDiz4O/RazW7A0tg94vZPcrc4xYn v/huP9PAproSAyalzgaFiTPwnT559VUDnMl3zqQaln4pOrNihjUpHBd3osdl5s5N K6NcJ28VSWYFYQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:52 2025 by rpki-client