This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft File: 81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json) Hash identifier: LCthqLSbuSjUhJbCk3zixFeJT8UGqizPORHu5m13FGo= Subject key identifier: BC:A9:48:97:93:BF:28:83:D6:52:EB:53:8C:E1:A5:27:35:99:DD:A9 Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2 Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2 Certificate serial: 019B23D193D84F9BA0B654C06E77596F31B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft Manifest number: 0CD3 Signing time: Mon 15 Dec 2025 21:01:35 +0000 Manifest this update: Mon 15 Dec 2025 21:01:35 +0000 Manifest next update: Tue 16 Dec 2025 21:01:35 +0000 Files and hashes: 1: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: 4ibEHOuDWoo99MgsFB0htCmJa9L0t/Ny8+xxwQqFNH8=) 2: 9R7qE2JixKC-vbV8JeqORUi7upg.roa (hash: qMwpouu0cneK+WPX+gDmDCVwU3yx/zaa1DbEZEykJcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:93:d8:4f:9b:a0:b6:54:c0:6e:77:59:6f:31:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2 Validity Not Before: Dec 15 21:01:35 2025 GMT Not After : Dec 16 21:01:35 2025 GMT Subject: CN=bca9489793bf2883d652eb538ce1a5273599dda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:9d:f3:1b:b8:c4:05:11:64:6e:08:1f:8d: cc:85:c8:8b:63:34:9f:11:0e:81:0f:8d:33:78:c1: 7b:cb:5c:b3:26:05:eb:d3:af:13:9e:2c:f8:15:05: 30:fc:21:e0:ed:3a:5b:a2:78:92:d1:01:78:f5:47: 92:69:ec:9b:d4:d6:18:48:86:8b:b0:36:f0:1b:99: 15:e9:9d:4e:7f:95:d8:77:91:4d:7a:88:69:bd:57: 0c:ba:16:0b:fb:bf:90:bd:4a:b2:d6:32:46:6d:54: 3e:53:46:e6:81:97:d3:74:53:df:50:4c:94:70:07: 08:76:35:1d:64:3d:74:15:b7:71:63:34:ae:97:ce: 30:93:78:85:b5:32:b1:d9:aa:f3:2b:71:96:7c:0f: c6:69:bb:95:86:79:b8:26:f0:13:94:88:e2:ac:9f: db:6d:7a:b7:dd:2d:33:6f:07:0b:17:6e:f7:26:cd: a3:24:2f:25:48:30:52:55:6e:13:8c:a9:21:eb:98: 90:77:57:e7:b8:6a:1f:f1:66:89:92:21:18:95:0e: 91:27:70:54:96:b6:05:34:e7:ed:de:2d:59:e5:a8: d0:23:81:cf:d3:5c:0c:6e:aa:ce:f8:67:c2:00:d6: 7d:f9:fb:0c:3a:45:4e:bc:1e:80:04:4e:29:a4:cb: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A9:48:97:93:BF:28:83:D6:52:EB:53:8C:E1:A5:27:35:99:DD:A9 X509v3 Authority Key Identifier: keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:4f:5f:9c:31:36:c0:94:44:b9:5c:58:59:81:22:08:a2:56: fe:01:21:c8:90:ca:5c:68:36:aa:a5:37:3f:c7:0f:ca:00:dd: a6:ab:87:eb:38:6e:a1:8f:75:6e:7f:95:e5:d5:e9:01:4b:5a: 22:2c:0e:a1:65:16:07:bd:8a:8a:35:ef:48:9a:9e:16:23:e8: 17:a6:5f:ec:a2:b7:c3:7a:f6:da:2b:83:7a:4a:82:4e:d3:82: 63:9a:ae:26:c9:ed:2b:36:b1:95:1f:c7:9e:48:da:5d:f0:ee: 61:64:93:84:05:f2:3f:bc:2e:03:6e:5d:6d:06:17:5f:6e:69: 04:ae:15:e3:64:8c:49:91:87:13:28:0d:92:67:e3:9d:07:1b: 5b:6e:df:fe:56:a0:68:ac:d3:3b:81:a6:70:51:ca:f9:1e:3e: 24:60:0b:eb:e8:97:b8:3e:53:8f:1c:ef:71:80:2f:0f:70:0f: 01:cf:dc:ac:76:c5:2f:4c:b6:0a:20:65:7e:6e:0e:0d:71:7c: 2c:a9:41:74:31:37:bd:cf:b2:d6:19:7a:84:c6:13:50:1c:67: af:25:44:a3:bf:9a:58:05:0e:23:c2:e6:f0:1d:26:a5:a7:94: a8:90:62:4e:19:60:8d:8d:1e:e4:4f:fc:27:97:b3:15:d6:0d: 8d:50:7c:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0ZPYT5ugtlTAbndZbzG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNTRlNTIwZTdiYjdlMTNmNTMyY2VjZjA1YTgyZDJiNzk3 OTUyYTIwHhcNMjUxMjE1MjEwMTM1WhcNMjUxMjE2MjEwMTM1WjAzMTEwLwYDVQQD EyhiY2E5NDg5NzkzYmYyODgzZDY1MmViNTM4Y2UxYTUyNzM1OTlkZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVud8xu4xAURZG4IH43MhciLYzSf EQ6BD40zeMF7y1yzJgXr068Tniz4FQUw/CHg7TpboniS0QF49UeSaeyb1NYYSIaL sDbwG5kV6Z1Of5XYd5FNeohpvVcMuhYL+7+QvUqy1jJGbVQ+U0bmgZfTdFPfUEyU cAcIdjUdZD10FbdxYzSul84wk3iFtTKx2arzK3GWfA/GabuVhnm4JvATlIjirJ/b bXq33S0zbwcLF273Js2jJC8lSDBSVW4TjKkh65iQd1fnuGof8WaJkiEYlQ6RJ3BU lrYFNOft3i1Z5ajQI4HP01wMbqrO+GfCANZ9+fsMOkVOvB6ABE4ppMvj2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLypSJeTvyiD1lLrU4zhpSc1md2pMB8GA1UdIwQY MBaAFPNU5SDnu34T9TLOzwWoLSt5eVKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzkt Y2E1MWZiMzBlZGRmLzEvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzktY2E1MWZiMzBlZGRm LzEvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN09fnDE2 wJREuVxYWYEiCKJW/gEhyJDKXGg2qqU3P8cPygDdpquH6zhuoY91bn+V5dXpAUta IiwOoWUWB72KijXvSJqeFiPoF6Zf7KK3w3r22iuDekqCTtOCY5quJsntKzaxlR/H nkjaXfDuYWSThAXyP7wuA25dbQYXX25pBK4V42SMSZGHEygNkmfjnQcbW27f/lag aKzTO4GmcFHK+R4+JGAL6+iXuD5TjxzvcYAvD3APAc/crHbFL0y2CiBlfm4ODXF8 LKlBdDE3vc+y1hl6hMYTUBxnryVEo7+aWAUOI8Lm8B0mpaeUqJBiThlgjY0e5E/8 J5ezFdYNjVB8BA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:59:20 2025 by rpki-client