This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json) Hash identifier: U+EovylbiV7yxEnM3CuIskS2r0a9MsfGbkRHbXATrsU= Subject key identifier: 53:AB:BD:BC:DD:12:09:E7:0C:55:B0:CA:FD:99:CE:2D:33:07:EA:78 Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84 Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884 Certificate serial: 019B1F87038CB13E7CDC62CD23EE84E0A0FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 01:01:40 +0000 Manifest this update: Mon 15 Dec 2025 01:01:40 +0000 Manifest next update: Tue 16 Dec 2025 01:01:40 +0000 Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: dExhYytp3zVbACziuIF6DmITpww1WQj9+XnzI8IUJwU=) 2: oFJDhlIxFUNhw_-HBfRNlNTaZxk.roa (hash: X5zMaPXKmmEjg88Z3XtKkZigQqgVKFsASLy1XTJf6Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:87:03:8c:b1:3e:7c:dc:62:cd:23:ee:84:e0:a0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884 Validity Not Before: Dec 15 01:01:40 2025 GMT Not After : Dec 16 01:01:40 2025 GMT Subject: CN=53abbdbcdd1209e70c55b0cafd99ce2d3307ea78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:18:f3:89:f2:b4:5c:00:77:4f:89:18:81: ba:8e:a9:f7:58:cd:f0:2a:fa:1f:5e:a1:9c:e6:ae: 3f:fd:41:a8:b5:1e:83:e7:0a:5f:38:9a:4b:83:5d: 72:af:7e:2e:32:2c:72:0f:b8:e3:e8:fa:75:39:b7: 70:b6:ea:49:2d:3e:3c:9d:a1:3e:6c:76:c7:53:90: 92:d9:21:fd:11:c0:9a:91:99:bd:36:ab:66:ae:27: e1:b0:58:93:a2:bc:78:81:7c:56:23:79:81:0b:e2: 86:0b:e8:8c:8b:2b:5a:b3:e5:02:9a:40:1e:4f:51: 40:f2:97:69:1a:30:e9:2e:f1:a1:ca:f2:5e:09:5a: 61:8d:94:c8:0c:7e:c9:43:8f:5b:8a:7c:37:a7:90: 4e:6a:06:2a:41:05:80:9c:bc:ed:78:5e:8c:60:2f: 38:a5:80:75:17:5d:ff:a2:a9:f9:59:55:f7:fe:5e: b7:72:d9:85:76:71:5d:1e:d6:12:19:02:24:57:de: 01:66:89:ac:1a:0f:8f:aa:bf:3b:75:a0:ee:4b:46: e2:09:96:43:93:61:ab:71:ba:67:37:8b:fc:63:ab: 54:e3:f7:14:a8:d8:f3:7e:0e:df:c8:86:02:ae:de: c2:26:0d:a2:bb:73:92:48:a0:24:87:c3:1a:5b:32: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AB:BD:BC:DD:12:09:E7:0C:55:B0:CA:FD:99:CE:2D:33:07:EA:78 X509v3 Authority Key Identifier: keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7f:e7:13:ca:12:bd:71:6e:e7:29:d7:e2:74:8f:cd:c8:6a: 50:5e:7f:31:d4:9d:86:bb:0e:bb:9e:d4:e3:5f:99:28:26:93: e4:8b:f3:52:0d:10:a1:6f:91:1b:a5:fb:3c:35:f5:0f:78:4a: b1:ce:3d:f1:68:3f:39:5b:b7:3f:df:1a:63:90:de:be:c4:fb: 37:a0:bc:dc:08:99:41:7d:c8:b4:df:be:c9:fa:69:98:e9:50: 21:34:46:8a:03:00:25:f4:07:d8:4c:33:c0:c0:ce:a6:a3:da: e2:8e:0d:a5:b1:5c:a7:a2:0d:1e:39:10:f0:d1:f8:1a:01:80: df:06:7e:29:1d:69:c9:cc:c7:e8:e8:12:40:e0:19:bf:6c:b8: a8:0b:ca:05:3f:ea:9a:b3:09:f2:04:ac:48:d8:d4:97:fd:74: 6b:31:6a:29:a5:0a:07:1a:94:e6:71:fa:85:f8:f6:eb:4d:79: 1d:bc:d6:d1:b1:8c:1d:37:bc:b3:67:74:47:b0:a3:05:ca:3e: 57:53:ef:ce:4a:81:d1:f9:ea:53:a2:1c:25:47:8a:17:10:86: 1c:f7:18:84:de:00:87:de:32:34:2e:84:01:d6:3e:22:a2:ec: 61:54:73:db:99:8f:79:53:65:18:70:22:79:b8:f2:fc:12:e9: be:1c:bc:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhwOMsT583GLNI+6E4KD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNWEwNTZjODI0Mjk3MWQxYTkwYjBiZmE5OGIxYjdhOTMw NTI4ODQwHhcNMjUxMjE1MDEwMTQwWhcNMjUxMjE2MDEwMTQwWjAzMTEwLwYDVQQD Eyg1M2FiYmRiY2RkMTIwOWU3MGM1NWIwY2FmZDk5Y2UyZDMzMDdlYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukgY84nytFwAd0+JGIG6jqn3WM3w KvofXqGc5q4//UGotR6D5wpfOJpLg11yr34uMixyD7jj6Pp1ObdwtupJLT48naE+ bHbHU5CS2SH9EcCakZm9NqtmrifhsFiTorx4gXxWI3mBC+KGC+iMiytas+UCmkAe T1FA8pdpGjDpLvGhyvJeCVphjZTIDH7JQ49binw3p5BOagYqQQWAnLzteF6MYC84 pYB1F13/oqn5WVX3/l63ctmFdnFdHtYSGQIkV94BZomsGg+Pqr87daDuS0biCZZD k2GrcbpnN4v8Y6tU4/cUqNjzfg7fyIYCrt7CJg2iu3OSSKAkh8MaWzKQ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOrvbzdEgnnDFWwyv2Zzi0zB+p4MB8GA1UdIwQY MBaAFONaBWyCQpcdGpCwv6mLG3qTBSiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODIt YWFiNGJkOGZjZTlkLzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODItYWFiNGJkOGZjZTlk LzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3/nE8oS vXFu5ynX4nSPzchqUF5/MdSdhrsOu57U41+ZKCaT5IvzUg0QoW+RG6X7PDX1D3hK sc498Wg/OVu3P98aY5DevsT7N6C83AiZQX3ItN++yfppmOlQITRGigMAJfQH2Ewz wMDOpqPa4o4NpbFcp6INHjkQ8NH4GgGA3wZ+KR1pyczH6OgSQOAZv2y4qAvKBT/q mrMJ8gSsSNjUl/10azFqKaUKBxqU5nH6hfj26015HbzW0bGMHTe8s2d0R7CjBco+ V1PvzkqB0fnqU6IcJUeKFxCGHPcYhN4Ah94yNC6EAdY+IqLsYVRz25mPeVNlGHAi ebjy/BLpvhy80w== -----END CERTIFICATE-----Generated at Mon Dec 15 06:49:48 2025 by rpki-client