This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft File: r633xfgtvAsdujKChi1T7Ih9XGY.mft (raw, json) Hash identifier: P/0935pPGzGI3ZO27ZB/NYJZICrUs/COVUPD2nXZnsc= Subject key identifier: F9:48:B5:25:D1:E3:32:91:C0:6C:D9:7A:DD:5B:5C:46:25:13:0E:C8 Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Certificate serial: 019B597697BE9E2E348D84CC3EAE3A27D70A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:01:42 +0000 Manifest this update: Fri 26 Dec 2025 07:01:42 +0000 Manifest next update: Sat 27 Dec 2025 07:01:42 +0000 Files and hashes: 1: G_uyP800qF9xq38CufvzcASfUJk.roa (hash: wXXcLrJ9H/mm6fOwDIgDVncWMj2oRMLhDL41bJPAtPA=) 2: r633xfgtvAsdujKChi1T7Ih9XGY.crl (hash: 1M6/kbE9spSDXP8ikDoCJQnmIQUg+poeHMp171WweJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:97:be:9e:2e:34:8d:84:cc:3e:ae:3a:27:d7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Validity Not Before: Dec 26 07:01:42 2025 GMT Not After : Dec 27 07:01:42 2025 GMT Subject: CN=f948b525d1e33291c06cd97add5b5c4625130ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:43:c1:1b:e5:a2:cc:eb:79:e1:73:09:c9: 7f:fd:dc:c9:cd:86:df:53:92:af:98:fa:b2:86:4b: 5b:62:a5:16:5c:7c:44:dc:06:9a:fd:84:b9:1a:32: d8:72:0e:71:64:d6:5f:f6:7e:c8:46:a5:41:f7:7c: 70:42:6a:00:27:6e:64:80:23:dd:5a:f9:eb:97:cd: 4e:f9:78:35:a5:fe:f5:bf:aa:31:21:d9:62:24:cb: 5a:cb:43:89:33:66:1a:99:77:2f:d0:5b:48:46:a3: 88:b6:52:10:1f:53:34:76:c2:2d:f3:a7:b8:7d:70: 30:e4:44:12:3b:ec:42:05:c3:d6:d5:e4:99:11:54: 8e:fc:68:01:e6:83:29:9e:ed:bd:57:fa:49:d5:c9: ca:b0:09:3c:16:9b:ce:eb:b9:4e:7e:d1:ea:f1:7d: 4a:70:41:10:36:7a:81:3f:af:75:9e:d9:81:b4:1b: 06:50:fd:60:83:16:fe:18:22:3d:1a:b5:e3:18:27: 05:3d:b6:e0:08:1d:13:4d:bd:e3:63:89:42:73:72: 46:a4:24:05:0f:21:45:6a:db:b2:d7:f3:07:99:b2: 89:a6:15:8c:de:44:0f:33:38:39:8b:99:5e:29:13: c6:b4:74:f8:d1:f4:79:cf:91:05:fb:d6:92:25:40: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:48:B5:25:D1:E3:32:91:C0:6C:D9:7A:DD:5B:5C:46:25:13:0E:C8 X509v3 Authority Key Identifier: keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:58:ac:af:02:1f:da:1c:92:31:44:b0:f7:87:91:00:b5:d0: d3:b1:3f:57:b9:92:24:e6:e1:ec:ce:6f:bb:f2:0e:8c:4f:8a: 24:fc:47:15:6c:c5:9f:eb:b8:5b:3c:f2:ed:de:6f:0e:6f:0a: 26:f4:02:c6:bc:1e:9e:25:ef:aa:df:4e:82:4b:c0:79:db:25: 35:c9:5c:a7:7a:b0:9a:ce:50:98:1e:f6:41:39:86:3c:a1:f8: 7f:2c:23:58:a7:7f:d2:5f:ad:3d:60:5c:13:ad:bf:d0:30:e1: 03:24:dd:b2:35:5f:52:35:c2:5d:33:71:5f:2a:54:88:5c:12: 2f:0f:e6:f3:ac:20:7d:c8:ee:c0:0b:16:cc:46:58:3c:55:5c: 55:13:67:1e:86:4c:a6:86:bf:3d:82:d4:d2:32:51:e3:03:65: c0:40:e6:f3:42:91:71:34:29:11:9e:70:9d:c1:ae:3e:c3:3c: c8:c8:c6:dd:2f:72:80:e8:61:b3:e7:4a:ec:3b:99:76:a2:3e: 40:31:ce:3a:9c:17:89:4b:93:b5:63:d7:56:d6:69:62:6a:ed: 00:99:ec:95:2c:62:b6:6b:86:44:2f:6c:a1:ff:1d:61:a1:af: 82:96:3e:fd:6c:66:a7:85:cb:7a:e0:80:a1:3a:39:94:df:bc: 8d:1b:1c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpe+ni40jYTMPq46J9cKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWRmN2M1ZjgyZGJjMGIxZGJhMzI4Mjg2MmQ1M2VjODg3 ZDVjNjYwHhcNMjUxMjI2MDcwMTQyWhcNMjUxMjI3MDcwMTQyWjAzMTEwLwYDVQQD EyhmOTQ4YjUyNWQxZTMzMjkxYzA2Y2Q5N2FkZDViNWM0NjI1MTMwZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0dDwRvloszreeFzCcl//dzJzYbf U5KvmPqyhktbYqUWXHxE3Aaa/YS5GjLYcg5xZNZf9n7IRqVB93xwQmoAJ25kgCPd Wvnrl81O+Xg1pf71v6oxIdliJMtay0OJM2YamXcv0FtIRqOItlIQH1M0dsIt86e4 fXAw5EQSO+xCBcPW1eSZEVSO/GgB5oMpnu29V/pJ1cnKsAk8FpvO67lOftHq8X1K cEEQNnqBP691ntmBtBsGUP1ggxb+GCI9GrXjGCcFPbbgCB0TTb3jY4lCc3JGpCQF DyFFatuy1/MHmbKJphWM3kQPMzg5i5leKRPGtHT40fR5z5EF+9aSJUD0ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlItSXR4zKRwGzZet1bXEYlEw7IMB8GA1UdIwQY MBaAFK+t98X4LbwLHboygoYtU+yIfVxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAt NzhmNmM4MDQ3NzNkLzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAtNzhmNmM4MDQ3NzNk LzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1isrwIf 2hySMUSw94eRALXQ07E/V7mSJObh7M5vu/IOjE+KJPxHFWzFn+u4Wzzy7d5vDm8K JvQCxrweniXvqt9OgkvAedslNclcp3qwms5QmB72QTmGPKH4fywjWKd/0l+tPWBc E62/0DDhAyTdsjVfUjXCXTNxXypUiFwSLw/m86wgfcjuwAsWzEZYPFVcVRNnHoZM poa/PYLU0jJR4wNlwEDm80KRcTQpEZ5wncGuPsM8yMjG3S9ygOhhs+dK7DuZdqI+ QDHOOpwXiUuTtWPXVtZpYmrtAJnslSxitmuGRC9sof8dYaGvgpY+/Wxmp4XLeuCA oTo5lN+8jRscDQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:22 2025 by rpki-client