This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json) Hash identifier: SACZMyDjknoXIaKtRWMj/iAK9Um2cH/xY6+QKTPVbM0= Subject key identifier: 8D:4E:2B:7D:77:D0:3A:2C:2C:46:41:15:E5:5D:D0:A1:01:F0:D6:1D Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11 Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311 Certificate serial: 019B39B42234C76D1A426D438192D9D39FC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft Manifest number: 0442 Signing time: Sat 20 Dec 2025 03:01:04 +0000 Manifest this update: Sat 20 Dec 2025 03:01:04 +0000 Manifest next update: Sun 21 Dec 2025 03:01:04 +0000 Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: +uUWKPuOX4VnC89o31hDuEOY4GG2n95oCSj8Gkwbs3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:22:34:c7:6d:1a:42:6d:43:81:92:d9:d3:9f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311 Validity Not Before: Dec 20 03:01:04 2025 GMT Not After : Dec 21 03:01:04 2025 GMT Subject: CN=8d4e2b7d77d03a2c2c464115e55dd0a101f0d61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:9d:f5:7d:05:06:75:28:df:98:03:7d:39: fe:35:62:51:c1:53:63:56:f5:78:f2:6e:94:0c:ea: 05:7b:f6:0a:77:99:97:4c:e8:f8:b6:ae:1e:61:dc: 07:2a:36:f0:e8:0f:06:ff:ab:61:98:52:e0:ac:03: f6:f4:21:f3:16:af:d3:2b:07:00:f6:83:6b:82:e8: 73:b9:a0:24:7d:6d:eb:3c:36:73:fa:b8:fe:0b:57: e0:11:c9:71:ca:d7:2b:55:ef:99:e6:8d:d8:76:05: f9:60:f4:68:d1:53:d5:ee:b3:fe:e7:4d:5d:7f:4f: 37:6c:da:7c:d7:a7:ef:46:00:90:f7:8c:af:f2:4b: 1f:20:56:2f:97:dc:14:03:b4:25:88:82:ee:42:e2: 1a:22:42:73:ad:23:42:54:5b:a0:b2:9f:44:91:43: e3:ae:7b:e9:cd:53:1e:5f:b1:c6:35:a1:93:a7:fc: f8:4e:35:1e:be:59:46:d6:8b:5b:52:03:ed:d9:86: 05:07:97:90:6b:9f:92:bd:92:5b:ce:f6:b9:48:a5: 4a:f4:ce:e5:a7:9b:96:c1:a7:84:aa:76:c2:29:47: 02:a4:7a:08:22:62:04:f9:89:be:68:6b:33:88:01: cb:88:f6:fd:4c:55:08:0c:61:7d:a4:9a:41:c7:55: 15:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:2B:7D:77:D0:3A:2C:2C:46:41:15:E5:5D:D0:A1:01:F0:D6:1D X509v3 Authority Key Identifier: keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:69:be:94:45:85:ed:75:38:c0:43:cf:82:6d:c2:a3:68:3e: c2:b2:3f:81:54:79:3e:45:b2:1a:99:f6:d1:34:42:e3:39:ce: 91:89:14:52:7e:07:fc:23:88:e6:2b:e0:1b:80:62:0b:f6:a4: 2c:8f:37:12:d7:a7:e8:79:1c:a4:ce:82:1c:2e:95:de:24:89: 6b:9d:fb:20:9c:7b:a5:40:eb:49:c2:d8:95:8c:02:09:45:7f: fc:be:f6:30:fe:01:15:f3:28:00:f2:12:84:5a:8d:38:77:8b: a2:5e:55:f5:c5:07:0b:0e:d5:3d:12:ce:a0:60:f8:87:b7:f4: 17:30:50:ba:19:2f:f7:2b:73:72:d6:35:45:da:72:90:95:9c: 76:3f:33:9d:d0:b6:a4:6d:82:ed:b7:1b:6f:05:62:1c:30:db: 03:93:d4:68:90:eb:9e:82:d9:68:74:a7:2f:a8:fe:e4:dc:1b: 54:9a:ad:95:82:77:86:27:e3:27:3a:74:a3:72:f3:dd:ee:bb: 52:21:ff:72:29:c2:fb:a1:5b:56:b5:77:69:d4:22:4a:88:e8: 04:24:b4:b5:a3:49:f8:ff:f1:64:99:1a:75:55:ae:8f:de:67: c3:2f:ff:10:8f:58:ee:02:7d:54:a3:ed:ff:ad:2f:ff:ea:3c: 58:fd:d1:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tCI0x20aQm1DgZLZ05/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGE2M2Q0ZmUxMGEzNDZiODEyZmJmMzU5YzliMzM3Nzhj ZDQzMTEwHhcNMjUxMjIwMDMwMTA0WhcNMjUxMjIxMDMwMTA0WjAzMTEwLwYDVQQD Eyg4ZDRlMmI3ZDc3ZDAzYTJjMmM0NjQxMTVlNTVkZDBhMTAxZjBkNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk6d9X0FBnUo35gDfTn+NWJRwVNj VvV48m6UDOoFe/YKd5mXTOj4tq4eYdwHKjbw6A8G/6thmFLgrAP29CHzFq/TKwcA 9oNrguhzuaAkfW3rPDZz+rj+C1fgEclxytcrVe+Z5o3YdgX5YPRo0VPV7rP+501d f083bNp816fvRgCQ94yv8ksfIFYvl9wUA7QliILuQuIaIkJzrSNCVFugsp9EkUPj rnvpzVMeX7HGNaGTp/z4TjUevllG1otbUgPt2YYFB5eQa5+SvZJbzva5SKVK9M7l p5uWwaeEqnbCKUcCpHoIImIE+Ym+aGsziAHLiPb9TFUIDGF9pJpBx1UVEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1OK3130DosLEZBFeVd0KEB8NYdMB8GA1UdIwQY MBaAFEdKY9T+EKNGuBL781nJszd4zUMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEt N2I3ZmM3YWFiMTQ0LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEtN2I3ZmM3YWFiMTQ0 LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2m+lEWF 7XU4wEPPgm3Co2g+wrI/gVR5PkWyGpn20TRC4znOkYkUUn4H/COI5ivgG4BiC/ak LI83Eten6HkcpM6CHC6V3iSJa537IJx7pUDrScLYlYwCCUV//L72MP4BFfMoAPIS hFqNOHeLol5V9cUHCw7VPRLOoGD4h7f0FzBQuhkv9ytzctY1RdpykJWcdj8zndC2 pG2C7bcbbwViHDDbA5PUaJDrnoLZaHSnL6j+5NwbVJqtlYJ3hifjJzp0o3Lz3e67 UiH/cinC+6FbVrV3adQiSojoBCS0taNJ+P/xZJkadVWuj95nwy//EI9Y7gJ9VKPt /60v/+o8WP3Rcg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:40:25 2025 by rpki-client