This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft File: Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft (raw, json) Hash identifier: FU0uVfCXw7jUaou++mSiXxCkx1gUINSotc1hCMF/xL8= Subject key identifier: 77:88:E9:6C:6F:A9:EF:BE:B6:F0:5D:71:AE:A3:8C:3F:98:BB:A9:57 Authority key identifier: 45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53 Certificate issuer: /CN=45ed111630e05297795dddd298ea1fb29e695c53 Certificate serial: 019B34C603A8A95745E82801D4792B994AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft Manifest number: 0E67 Signing time: Fri 19 Dec 2025 04:02:30 +0000 Manifest this update: Fri 19 Dec 2025 04:02:30 +0000 Manifest next update: Sat 20 Dec 2025 04:02:30 +0000 Files and hashes: 1: FdZc5w6NQTxVaX5pVim2SXSRdFw.roa (hash: 3yS2WlAT7COs2QdB7b8/iS1aVVb5UF5pqjux+yVKvWo=) 2: Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl (hash: TJ7y6yqhmpmyuRPaP7W6eDY51b7+XW1cgnNMlEXc970=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:03:a8:a9:57:45:e8:28:01:d4:79:2b:99:4a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45ed111630e05297795dddd298ea1fb29e695c53 Validity Not Before: Dec 19 04:02:30 2025 GMT Not After : Dec 20 04:02:30 2025 GMT Subject: CN=7788e96c6fa9efbeb6f05d71aea38c3f98bba957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:7a:ad:64:77:d4:7d:7a:fe:07:65:47:a9: bf:0a:eb:f1:c9:e6:94:d4:9f:e1:2e:ed:34:1e:5b: eb:a1:f1:a0:7a:ee:3e:9f:cf:c2:7f:21:5d:25:70: 1e:9e:aa:cf:9b:d3:17:94:e0:fe:d3:a3:32:2c:4b: 51:35:76:5f:7f:59:cc:e9:03:68:e0:af:75:47:57: 29:a5:d3:b5:39:1e:6e:dd:da:b4:6f:54:8c:a2:9e: f3:da:9e:8c:65:ef:ba:a5:80:06:d5:e4:30:d7:2a: 8d:4c:ea:6c:8e:bd:b3:28:06:f2:83:a1:81:22:98: 96:3b:df:a8:ba:07:92:b8:02:36:9e:06:f0:d6:e7: c5:7e:03:27:4f:5e:f9:bc:95:2a:fd:d6:77:5a:af: 9c:33:c3:6b:e4:54:0a:65:32:78:59:89:7b:3a:7f: 35:33:a0:5c:89:31:31:1b:ae:93:33:f5:3c:3b:41: cf:00:d2:fd:1a:6a:c1:10:ec:2c:2e:d5:d1:92:49: c8:a1:61:ef:d9:4a:b2:63:00:2c:ce:07:54:68:50: 8e:ca:e0:95:5a:25:9d:75:c2:7f:2f:82:12:93:be: 61:d9:8d:88:16:d0:0e:38:c6:82:5f:3a:1b:d2:f1: ce:c6:5e:f8:a5:97:ee:b0:5f:ab:66:96:8a:6e:2b: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:88:E9:6C:6F:A9:EF:BE:B6:F0:5D:71:AE:A3:8C:3F:98:BB:A9:57 X509v3 Authority Key Identifier: keyid:45:ED:11:16:30:E0:52:97:79:5D:DD:D2:98:EA:1F:B2:9E:69:5C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re0RFjDgUpd5Xd3SmOofsp5pXFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/Re0RFjDgUpd5Xd3SmOofsp5pXFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ad:7d:ca:dd:a6:b4:27:64:29:cf:b2:5a:2d:08:34:cf:c5: 81:64:f8:85:bb:5b:56:b2:b4:cc:b5:31:11:13:8e:c5:41:98: 1b:81:bf:e7:67:91:17:f0:67:b9:06:b5:98:eb:02:89:87:10: 32:35:de:e7:d3:13:d1:e9:2d:f3:a6:dc:00:24:08:6e:0a:f4: ae:dc:8c:cd:1f:17:40:6e:95:e1:65:0c:55:57:2e:0e:2a:20: 81:6c:d2:ae:6a:46:d8:f6:b4:d3:9f:7b:c0:c4:ba:03:f5:0c: 18:d3:8e:e4:e4:b5:4a:e4:53:d2:89:69:90:c9:c5:ff:72:68: 26:26:e0:6d:4a:cd:82:19:30:69:b4:87:9c:93:db:67:9a:ec: 73:05:24:13:98:0d:9b:3a:98:37:df:5a:88:fa:d3:cf:2a:9b: 28:2c:15:19:20:2f:a9:08:1d:c8:1d:e5:67:c8:32:d3:21:d1: d5:06:52:f0:3e:5a:85:1c:49:65:4a:ff:ef:31:19:de:e6:c6: d9:36:7b:41:d9:33:41:00:43:a7:a0:24:24:6f:57:ac:8c:5b: 8d:b4:bf:9c:1a:60:b9:21:98:f8:af:89:f0:8f:c2:ea:b6:f6: cd:c0:d0:d2:2f:22:31:35:e0:c5:2b:73:6f:f5:39:0e:0e:86: b1:03:71:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xgOoqVdF6CgB1HkrmUrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZWQxMTE2MzBlMDUyOTc3OTVkZGRkMjk4ZWExZmIyOWU2 OTVjNTMwHhcNMjUxMjE5MDQwMjMwWhcNMjUxMjIwMDQwMjMwWjAzMTEwLwYDVQQD Eyg3Nzg4ZTk2YzZmYTllZmJlYjZmMDVkNzFhZWEzOGMzZjk4YmJhOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS16rWR31H16/gdlR6m/CuvxyeaU 1J/hLu00HlvrofGgeu4+n8/CfyFdJXAenqrPm9MXlOD+06MyLEtRNXZff1nM6QNo 4K91R1cppdO1OR5u3dq0b1SMop7z2p6MZe+6pYAG1eQw1yqNTOpsjr2zKAbyg6GB IpiWO9+ougeSuAI2ngbw1ufFfgMnT175vJUq/dZ3Wq+cM8Nr5FQKZTJ4WYl7On81 M6BciTExG66TM/U8O0HPANL9GmrBEOwsLtXRkknIoWHv2UqyYwAszgdUaFCOyuCV WiWddcJ/L4ISk75h2Y2IFtAOOMaCXzob0vHOxl74pZfusF+rZpaKbiuoFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeI6Wxvqe++tvBdca6jjD+Yu6lXMB8GA1UdIwQY MBaAFEXtERYw4FKXeV3d0pjqH7KeaVxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQt YTAzOGVmMWVmZjM5LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80NTQ0MTItYzA2Mi00YjQ1LWE2NDQtYTAzOGVmMWVmZjM5 LzEvUmUwUkZqRGdVcGQ1WGQzU21Pb2ZzcDVwWEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAga19yt2m tCdkKc+yWi0INM/FgWT4hbtbVrK0zLUxEROOxUGYG4G/52eRF/BnuQa1mOsCiYcQ MjXe59MT0ekt86bcACQIbgr0rtyMzR8XQG6V4WUMVVcuDioggWzSrmpG2Pa00597 wMS6A/UMGNOO5OS1SuRT0olpkMnF/3JoJibgbUrNghkwabSHnJPbZ5rscwUkE5gN mzqYN99aiPrTzyqbKCwVGSAvqQgdyB3lZ8gy0yHR1QZS8D5ahRxJZUr/7zEZ3ubG 2TZ7QdkzQQBDp6AkJG9XrIxbjbS/nBpguSGY+K+J8I/C6rb2zcDQ0i8iMTXgxStz b/U5Dg6GsQNxqw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:22 2025 by rpki-client