This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json) Hash identifier: M/NHq4ECv+bUZSvxLkUpwzDxO//Ez5vwoSN2nxp5KMQ= Subject key identifier: E7:DF:A3:46:53:02:82:47:46:E7:04:77:E4:96:8A:1F:9B:81:BA:92 Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b Certificate serial: 019B5A515BB06F50C3732F4C67D392D874FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft Manifest number: 0B9D Signing time: Fri 26 Dec 2025 11:00:39 +0000 Manifest this update: Fri 26 Dec 2025 11:00:39 +0000 Manifest next update: Sat 27 Dec 2025 11:00:39 +0000 Files and hashes: 1: 47oAZ7ALtnjytAXw6azuJ79q9jI.roa (hash: CqBkSTQVbCb2uDCbL2m8QddnjqjXpjXCwL7OFoKHIQU=) 2: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: OLRXMGrLBBqZkx4SupHmBM5CEzbRMC9UfpbY8a6u6rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:5b:b0:6f:50:c3:73:2f:4c:67:d3:92:d8:74:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b Validity Not Before: Dec 26 11:00:39 2025 GMT Not After : Dec 27 11:00:39 2025 GMT Subject: CN=e7dfa3465302824746e70477e4968a1f9b81ba92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:07:b3:8a:09:f0:e6:46:08:6f:73:cb:e4: 0c:6e:d4:0b:90:15:8a:84:f8:bd:68:f5:94:a3:bd: 03:cc:a5:64:5c:88:23:93:9f:73:26:82:e6:9c:9d: 5c:e8:4d:ae:a7:12:c2:fe:44:54:e5:df:e4:62:bd: 8e:60:3c:a2:88:d1:db:23:fc:e1:86:cb:72:c3:f5: e5:28:4e:ea:3e:c2:2c:c2:df:11:a9:22:23:3f:e2: 2b:e7:64:92:0c:28:6f:8b:d1:5c:6b:e9:c0:d9:9b: 8c:da:db:48:ad:4e:cc:cf:24:77:bb:d9:a8:71:ec: 11:9b:12:4a:63:11:d5:ab:b7:c4:e9:b2:cf:df:70: c0:ef:d1:1b:31:6e:b1:45:d9:86:11:28:fc:51:2e: ce:66:74:38:ae:c5:b7:c5:62:61:34:b6:fc:d1:45: 0a:19:10:af:e4:c0:e2:ab:34:2d:e9:ee:d8:26:9b: da:cc:6b:af:58:89:7f:1f:aa:91:bb:6a:83:f2:93: 10:05:d8:8d:1a:f9:5f:48:41:06:bd:6a:69:13:52: 1e:a1:51:81:61:37:5a:3f:e6:ce:a9:92:e8:5e:26: 98:f3:ab:19:2c:e1:88:ac:70:64:7c:ac:f8:0f:1a: 69:3c:c1:97:71:9f:17:a9:d1:82:01:07:f6:da:10: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DF:A3:46:53:02:82:47:46:E7:04:77:E4:96:8A:1F:9B:81:BA:92 X509v3 Authority Key Identifier: keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:04:68:17:93:06:67:0f:9e:89:d8:09:1b:33:ca:80:64:98: 27:f3:4c:7f:01:3e:2a:37:0f:10:98:fc:d6:d2:55:90:e5:05: 91:ba:eb:ce:32:44:48:b7:e8:05:9f:a4:05:e3:2b:a6:12:64: f2:4e:44:e1:f7:8b:5d:23:ea:9c:d9:f1:88:9f:1b:24:ae:42: 62:aa:2c:1d:10:e6:23:c5:1c:fd:e1:ca:43:66:d0:21:8a:e9: 25:ca:0f:7b:ef:1e:f4:bb:0f:e8:a6:52:26:29:75:24:86:02: f8:31:c8:1c:5e:70:e0:b6:9f:03:be:fc:3e:99:06:b7:b5:41: 46:ca:5a:b7:e2:47:0c:45:18:e9:84:06:f6:32:53:94:4e:f8: 87:08:d5:10:01:d6:d3:66:f0:23:9e:a9:57:60:90:e0:c8:64: 79:4d:e9:df:78:b1:6b:dd:30:fe:72:43:f2:eb:a1:f9:01:cb: a8:2e:f0:fa:18:f3:7a:8b:98:35:1e:c7:8d:78:aa:11:d3:1b: ce:0e:0f:e7:d2:40:38:26:ff:0a:48:79:49:96:32:81:2e:10: 0d:8b:ae:de:70:0d:ec:3f:52:c6:ca:48:96:7c:52:a5:47:16: ca:ff:44:8e:4a:e4:2d:b2:c1:d7:68:c7:ee:ec:37:9c:b8:b2: ae:02:b7:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVuwb1DDcy9MZ9OS2HT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzVkYTNhMjA4NzllNTVmZTk2ODUzZTBkN2FlZWZmNTMz ODZlOGIwHhcNMjUxMjI2MTEwMDM5WhcNMjUxMjI3MTEwMDM5WjAzMTEwLwYDVQQD EyhlN2RmYTM0NjUzMDI4MjQ3NDZlNzA0NzdlNDk2OGExZjliODFiYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kEHs4oJ8OZGCG9zy+QMbtQLkBWK hPi9aPWUo70DzKVkXIgjk59zJoLmnJ1c6E2upxLC/kRU5d/kYr2OYDyiiNHbI/zh hstyw/XlKE7qPsIswt8RqSIjP+Ir52SSDChvi9Fca+nA2ZuM2ttIrU7MzyR3u9mo cewRmxJKYxHVq7fE6bLP33DA79EbMW6xRdmGESj8US7OZnQ4rsW3xWJhNLb80UUK GRCv5MDiqzQt6e7YJpvazGuvWIl/H6qRu2qD8pMQBdiNGvlfSEEGvWppE1IeoVGB YTdaP+bOqZLoXiaY86sZLOGIrHBkfKz4DxppPMGXcZ8XqdGCAQf22hBS6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOffo0ZTAoJHRucEd+SWih+bgbqSMB8GA1UdIwQY MBaAFEY12jogh55V/paFPg167v9TOG6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1Yjgt YzQwY2UzMmI2Zjc2LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1YjgtYzQwY2UzMmI2Zjc2 LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwRoF5MG Zw+eidgJGzPKgGSYJ/NMfwE+KjcPEJj81tJVkOUFkbrrzjJESLfoBZ+kBeMrphJk 8k5E4feLXSPqnNnxiJ8bJK5CYqosHRDmI8Uc/eHKQ2bQIYrpJcoPe+8e9LsP6KZS Jil1JIYC+DHIHF5w4LafA778PpkGt7VBRspat+JHDEUY6YQG9jJTlE74hwjVEAHW 02bwI56pV2CQ4MhkeU3p33ixa90w/nJD8uuh+QHLqC7w+hjzeouYNR7HjXiqEdMb zg4P59JAOCb/Ckh5SZYygS4QDYuu3nAN7D9SxspIlnxSpUcWyv9EjkrkLbLB12jH 7uw3nLiyrgK3uA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:01 2025 by rpki-client