This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft File: RDNmA3i76zplxtyp7Qp3b70gRhA.mft (raw, json) Hash identifier: qbQo70ng35VoOOIlVvMUaF7Zm10D/Op0hlmtUUnkl8Y= Subject key identifier: 75:7B:5D:0C:A1:97:3D:41:32:06:1D:06:40:BE:AC:E6:5A:D0:DB:C8 Authority key identifier: 44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10 Certificate issuer: /CN=4433660378bbeb3a65c6dca9ed0a776fbd204610 Certificate serial: 019B33B19528586B75511867700F6DCBECF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft Manifest number: 04C0 Signing time: Thu 18 Dec 2025 23:00:34 +0000 Manifest this update: Thu 18 Dec 2025 23:00:34 +0000 Manifest next update: Fri 19 Dec 2025 23:00:34 +0000 Files and hashes: 1: RDNmA3i76zplxtyp7Qp3b70gRhA.crl (hash: 6S6S2hRBShtPGjP3iKSDjSRCpny1HJuKm5js/PVt4r0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:95:28:58:6b:75:51:18:67:70:0f:6d:cb:ec:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4433660378bbeb3a65c6dca9ed0a776fbd204610 Validity Not Before: Dec 18 23:00:34 2025 GMT Not After : Dec 19 23:00:34 2025 GMT Subject: CN=757b5d0ca1973d4132061d0640beace65ad0dbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:31:f0:26:44:e4:6f:14:07:27:c3:b5:0b: 71:e3:73:49:62:90:98:ae:1d:a5:9d:6e:8b:2f:7a: 7a:7b:37:ae:e8:a6:fb:b9:03:14:4a:9a:41:3b:70: 37:9c:5d:d9:f1:69:a4:4b:e8:da:fd:fe:42:40:ba: 8b:e5:10:35:8e:cd:ed:63:03:b3:e8:f4:74:48:df: cb:69:37:50:e1:02:74:c1:dd:46:c9:73:da:61:ba: 82:05:78:82:6f:f0:ca:f5:78:53:83:ee:a1:46:20: cf:84:27:be:34:70:65:94:b2:ab:c6:b6:45:6f:33: b4:6d:e8:1c:7e:95:c4:45:f8:5a:c7:df:89:76:a5: 42:90:d7:e0:69:69:4f:26:e9:75:e3:72:25:74:ab: 29:16:d2:fd:9c:45:6a:85:7b:f3:33:c5:20:db:9d: b0:dd:df:98:35:12:d2:bd:3b:11:2c:3f:ae:56:19: 29:b8:28:6e:30:2c:38:b4:a8:bc:61:d7:fb:21:b4: c9:5b:2b:ce:1e:54:c6:fc:8f:ac:d9:82:1e:25:55: ab:73:82:5c:84:92:a6:be:0d:dc:b6:54:cb:2a:13: 3d:e3:84:84:cd:c4:c3:28:8d:7c:ff:d3:20:b8:96: 4a:69:de:83:a2:3a:a1:f8:ea:eb:99:22:73:a1:d1: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7B:5D:0C:A1:97:3D:41:32:06:1D:06:40:BE:AC:E6:5A:D0:DB:C8 X509v3 Authority Key Identifier: keyid:44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:2c:db:8f:2c:d8:15:03:84:09:35:09:d4:59:a9:bf:30:b2: f0:f4:6a:0d:3e:3b:b6:21:c9:b5:cc:42:bd:92:b4:0f:03:ce: 00:41:ff:14:64:77:82:20:d1:08:f2:4e:86:23:bb:4f:11:ef: fd:b6:e0:db:91:11:0b:5f:f3:ac:5b:ac:c3:ab:cb:09:81:4c: b4:3e:0d:da:89:56:8e:bb:21:58:96:ec:58:ad:c7:c6:d7:1e: 20:a2:c2:94:cd:53:5c:2a:20:58:a9:7c:e2:33:b7:af:5f:83: 39:6d:ba:5a:fb:8b:0b:f1:b1:1a:8c:29:d7:f7:a2:bd:25:f9: b3:c6:92:61:d5:11:f1:97:d8:3f:99:cd:a4:d8:32:52:b9:09: 52:dd:8e:55:fd:87:7c:9d:0b:ac:f5:8c:3d:3d:bb:a0:f1:48: ef:ff:03:84:aa:3b:56:2e:8b:0a:3a:c3:ac:3d:fe:3d:0e:ad: 44:b0:a4:98:22:98:b1:d7:93:c5:17:2c:7d:5d:09:e1:7f:2c: 2c:79:92:61:f7:2c:87:db:8c:46:54:1a:3d:d6:cf:c9:a9:26: c3:ac:40:b5:00:4e:f2:a8:54:46:3e:e0:c4:6f:62:56:9c:8a: c4:1d:8f:ec:19:db:e9:e2:f0:81:f0:ad:1d:47:06:8b:00:31: b9:63:4d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZUoWGt1URhncA9ty+z4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MzM2NjAzNzhiYmViM2E2NWM2ZGNhOWVkMGE3NzZmYmQy MDQ2MTAwHhcNMjUxMjE4MjMwMDM0WhcNMjUxMjE5MjMwMDM0WjAzMTEwLwYDVQQD Eyg3NTdiNWQwY2ExOTczZDQxMzIwNjFkMDY0MGJlYWNlNjVhZDBkYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHEx8CZE5G8UByfDtQtx43NJYpCY rh2lnW6LL3p6ezeu6Kb7uQMUSppBO3A3nF3Z8WmkS+ja/f5CQLqL5RA1js3tYwOz 6PR0SN/LaTdQ4QJ0wd1GyXPaYbqCBXiCb/DK9XhTg+6hRiDPhCe+NHBllLKrxrZF bzO0begcfpXERfhax9+JdqVCkNfgaWlPJul143IldKspFtL9nEVqhXvzM8Ug252w 3d+YNRLSvTsRLD+uVhkpuChuMCw4tKi8Ydf7IbTJWyvOHlTG/I+s2YIeJVWrc4Jc hJKmvg3ctlTLKhM944SEzcTDKI18/9MguJZKad6Dojqh+OrrmSJzodFVWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHV7XQyhlz1BMgYdBkC+rOZa0NvIMB8GA1UdIwQY MBaAFEQzZgN4u+s6Zcbcqe0Kd2+9IEYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkRObUEzaTc2enBseHR5cDdRcDNiNzBnUmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMjlmYzYtNzdkMy00NGQxLWI4Yzgt ZTA3ZjBhYzc4NTMwLzEvUkRObUEzaTc2enBseHR5cDdRcDNiNzBnUmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMjlmYzYtNzdkMy00NGQxLWI4YzgtZTA3ZjBhYzc4NTMw LzEvUkRObUEzaTc2enBseHR5cDdRcDNiNzBnUmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSzbjyzY FQOECTUJ1FmpvzCy8PRqDT47tiHJtcxCvZK0DwPOAEH/FGR3giDRCPJOhiO7TxHv /bbg25ERC1/zrFusw6vLCYFMtD4N2olWjrshWJbsWK3HxtceIKLClM1TXCogWKl8 4jO3r1+DOW26WvuLC/GxGowp1/eivSX5s8aSYdUR8ZfYP5nNpNgyUrkJUt2OVf2H fJ0LrPWMPT27oPFI7/8DhKo7Vi6LCjrDrD3+PQ6tRLCkmCKYsdeTxRcsfV0J4X8s LHmSYfcsh9uMRlQaPdbPyakmw6xAtQBO8qhURj7gxG9iVpyKxB2P7Bnb6eLwgfCt HUcGiwAxuWNNWg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:48:25 2025 by rpki-client