This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft File: 93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json) Hash identifier: MqC+WqeqWWt/norJlTwKEpyBAJgCydX+KWfHwqPC2A0= Subject key identifier: 44:70:FD:63:A8:7A:F1:AB:72:9B:8F:C4:3B:5D:58:1B:B7:3B:45:2D Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec Certificate serial: 019B4815A5D76D4D6D892133FAAD8334F5B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft Manifest number: 1795 Signing time: Mon 22 Dec 2025 22:02:16 +0000 Manifest this update: Mon 22 Dec 2025 22:02:16 +0000 Manifest next update: Tue 23 Dec 2025 22:02:16 +0000 Files and hashes: 1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: OzmxnXlyu+Ys20CQW1ZoTsbQ4tc90IgpcdsKEWIcGVY=) 2: FIrgG9lOckS2whhTIp5aX9dzDrk.roa (hash: w3cwGYtOKvfw8oY9fh8sMYPgttcg8puA2TGSCPuXrrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:a5:d7:6d:4d:6d:89:21:33:fa:ad:83:34:f5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec Validity Not Before: Dec 22 22:02:16 2025 GMT Not After : Dec 23 22:02:16 2025 GMT Subject: CN=4470fd63a87af1ab729b8fc43b5d581bb73b452d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:df:83:ae:66:91:0e:7a:7d:27:bb:b5:9a: 42:6e:15:1a:67:c7:32:a8:8e:23:e6:2f:0d:bf:b4: 0d:49:37:56:6e:7b:ab:48:c4:1b:ba:99:91:31:76: 59:1f:27:79:94:38:ac:05:a8:59:9d:c2:10:a6:62: e0:09:74:b5:e6:1e:19:ee:fc:9a:ac:df:00:64:2d: 77:9e:f0:a9:b0:55:c3:ba:2c:72:95:f9:92:81:11: 38:46:65:bc:7e:92:50:b6:6a:2a:f1:6e:83:68:ef: 68:66:8b:7f:cd:cc:54:83:10:b7:16:f1:e4:54:c9: 10:be:a3:fc:06:4b:23:77:f8:20:6a:00:f9:73:ec: 06:ad:8b:5c:16:c7:b2:6e:5b:3e:10:5f:c5:4f:f7: e6:4d:ac:b8:12:31:90:de:4b:38:f6:af:25:f8:3e: bf:39:5b:ed:2f:14:2f:46:90:d8:05:f2:d1:72:b6: f3:a7:3b:ce:4b:30:ed:34:ea:ea:6c:eb:9c:05:13: f3:bf:5e:ef:7d:df:8b:9e:84:c1:0e:f0:29:10:69: 8d:cd:e4:62:9a:b3:50:75:14:2d:b2:f3:a4:96:15: e1:24:a0:04:f3:93:6c:84:8c:16:f8:f1:86:78:6f: 93:07:c1:2c:80:fc:45:f1:23:73:e7:99:02:d4:7a: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:70:FD:63:A8:7A:F1:AB:72:9B:8F:C4:3B:5D:58:1B:B7:3B:45:2D X509v3 Authority Key Identifier: keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:dd:3d:3a:01:89:e9:00:0b:a7:b6:6e:3e:de:a2:8b:2e:e6: 84:6e:69:b3:3d:3f:bd:85:3d:36:43:64:4b:2e:d9:df:0a:1e: dc:54:06:67:25:e9:a5:49:9f:5f:09:ed:47:2c:9e:08:cd:3e: e3:4f:f8:61:f1:92:d1:1e:83:31:36:16:aa:59:8e:2a:1e:5d: 1c:00:d6:32:15:af:93:41:8b:bc:b5:0b:05:1f:2f:ab:0c:c2: ae:4f:38:03:9e:eb:5f:89:11:f5:80:23:af:a7:8e:01:2f:34: c6:39:57:e8:8b:8e:7e:5e:27:d9:f3:1c:07:7e:6a:37:37:0c: 20:f4:63:02:ee:70:d9:1e:68:e9:cb:83:60:5b:08:38:0b:cb: 3b:03:53:4b:6e:f9:30:ca:fe:81:60:1d:e2:f8:6e:8f:9a:82: 2a:d6:b6:9a:17:86:1d:56:a6:87:80:30:b5:4b:d6:2c:e9:23: d9:67:aa:1e:ff:2d:c0:1b:02:12:b0:b7:31:9a:19:9b:89:84: 41:dd:7f:ae:bc:ef:7f:85:c3:3f:40:c2:a6:e4:05:71:b7:90: 8c:65:58:2e:d6:82:11:66:a3:c2:8e:ff:e2:f3:60:a6:49:fb: b3:70:05:03:47:7b:80:ec:1d:7e:5f:d2:0c:2d:a3:6c:25:0c: ea:1b:61:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFaXXbU1tiSEz+q2DNPW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzlmNWYwMjg4OTg1YWJkZTA5ODI3ZTAzZDc4N2E1MjE0 OWU3ZWMwHhcNMjUxMjIyMjIwMjE2WhcNMjUxMjIzMjIwMjE2WjAzMTEwLwYDVQQD Eyg0NDcwZmQ2M2E4N2FmMWFiNzI5YjhmYzQzYjVkNTgxYmI3M2I0NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwunfg65mkQ56fSe7tZpCbhUaZ8cy qI4j5i8Nv7QNSTdWbnurSMQbupmRMXZZHyd5lDisBahZncIQpmLgCXS15h4Z7vya rN8AZC13nvCpsFXDuixylfmSgRE4RmW8fpJQtmoq8W6DaO9oZot/zcxUgxC3FvHk VMkQvqP8Bksjd/ggagD5c+wGrYtcFseybls+EF/FT/fmTay4EjGQ3ks49q8l+D6/ OVvtLxQvRpDYBfLRcrbzpzvOSzDtNOrqbOucBRPzv17vfd+LnoTBDvApEGmNzeRi mrNQdRQtsvOklhXhJKAE85NshIwW+PGGeG+TB8EsgPxF8SNz55kC1HrR9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERw/WOoevGrcpuPxDtdWBu3O0UtMB8GA1UdIwQY MBaAFPd59fAoiYWr3gmCfgPXh6UhSefsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMt ZmU3OTYzYmVjN2QzLzEvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hZWQzODEtNDVjYy00NGJjLWE1YzMtZmU3OTYzYmVjN2Qz LzEvOTNuMThDaUpoYXZlQ1lKLUE5ZUhwU0ZKNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADt09OgGJ 6QALp7ZuPt6iiy7mhG5psz0/vYU9NkNkSy7Z3woe3FQGZyXppUmfXwntRyyeCM0+ 40/4YfGS0R6DMTYWqlmOKh5dHADWMhWvk0GLvLULBR8vqwzCrk84A57rX4kR9YAj r6eOAS80xjlX6IuOfl4n2fMcB35qNzcMIPRjAu5w2R5o6cuDYFsIOAvLOwNTS275 MMr+gWAd4vhuj5qCKta2mheGHVamh4AwtUvWLOkj2WeqHv8twBsCErC3MZoZm4mE Qd1/rrzvf4XDP0DCpuQFcbeQjGVYLtaCEWajwo7/4vNgpkn7s3AFA0d7gOwdfl/S DC2jbCUM6hthpg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:51:09 2025 by rpki-client