This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json) Hash identifier: KDde86vZho4h6XGWiPP7W+Xw4XNL0f6FOR9uDm9JjP0= Subject key identifier: 42:DB:5C:30:B1:CA:E2:57:0A:A2:F2:7C:0D:B1:3E:FC:51:5D:3F:96 Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f Certificate serial: 019B4A7148CFC44186FF86ED4B61FACEC03B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft Manifest number: 070A Signing time: Tue 23 Dec 2025 09:01:36 +0000 Manifest this update: Tue 23 Dec 2025 09:01:36 +0000 Manifest next update: Wed 24 Dec 2025 09:01:36 +0000 Files and hashes: 1: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: Pj1j4sSk5mFg7zo5GtPk129b0oZKEI4WDKp/2bOZtWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:48:cf:c4:41:86:ff:86:ed:4b:61:fa:ce:c0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f Validity Not Before: Dec 23 09:01:36 2025 GMT Not After : Dec 24 09:01:36 2025 GMT Subject: CN=42db5c30b1cae2570aa2f27c0db13efc515d3f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:9e:5f:d6:e9:9b:f0:3a:b0:17:b8:78:dc: ab:78:fe:04:17:75:78:a5:0c:a1:97:fc:46:81:b7: 17:11:0a:27:bd:d3:51:ef:3d:cd:4f:e7:d5:31:bc: 78:44:a6:99:02:b0:9a:de:33:80:4f:1d:d6:99:a9: d3:09:c6:48:3f:79:04:a1:c4:d9:95:c1:7c:fc:34: 7e:a6:03:48:44:11:e0:8f:b8:a0:eb:e9:5c:bc:9d: 19:6a:5a:3f:63:53:f3:98:58:b0:9f:50:39:31:e8: bd:b6:eb:61:4c:b2:83:cc:77:81:5e:1e:38:2d:33: a4:0c:4f:d5:94:31:a5:ba:a7:cc:cc:16:ee:67:2a: 36:f6:cd:d9:de:ee:06:de:bb:1f:20:d3:c0:78:98: 04:1d:67:87:84:4b:08:6f:2c:0a:82:c0:81:be:77: 79:51:65:45:d3:b6:f4:a7:65:5c:5a:ab:74:a0:d9: 45:df:fc:6b:d9:8a:ee:db:ff:c2:46:e2:e6:94:f8: 30:ff:c5:c6:1d:82:a0:c0:0c:14:de:a1:85:4e:4d: df:34:4f:9d:0d:14:18:21:22:c6:fd:c4:24:df:35: 7b:6c:c0:87:36:a5:c1:ca:53:06:3f:a7:4a:35:02: 11:05:b6:cd:98:8c:90:94:f4:e1:61:c3:85:ff:a5: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DB:5C:30:B1:CA:E2:57:0A:A2:F2:7C:0D:B1:3E:FC:51:5D:3F:96 X509v3 Authority Key Identifier: keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c0:d9:53:ff:b5:38:54:59:67:cf:02:30:51:25:69:f9:58: ef:86:06:ad:65:2a:be:7b:1c:9f:b4:4f:9a:76:38:f4:42:92: 6a:8c:af:5e:d9:36:0f:be:01:c0:b6:9e:f7:60:e3:06:05:f3: 37:47:31:fa:1f:19:0a:bb:97:ac:4a:2d:03:29:ec:40:a5:7e: 8e:53:c7:48:96:40:25:7b:02:6d:0b:e4:58:03:24:64:df:4b: d6:bb:7b:8c:42:12:30:3b:f7:40:67:9a:5d:42:d1:cb:3c:55: 0c:d5:36:06:a0:a8:6a:ae:56:b5:58:2c:de:c5:d6:ae:c8:25: 32:d6:ed:7f:9a:5e:39:7f:b8:fc:bd:3e:df:43:94:2a:29:dc: c5:25:a5:be:4c:bd:fa:07:dd:91:ff:e2:e0:c2:78:03:41:a5: 82:f5:d2:70:e6:8e:b6:79:9a:50:8a:ca:c0:71:4e:f4:6d:5e: 9d:ae:8c:dd:c1:cb:21:63:fc:ac:be:41:83:86:de:b8:67:48: e3:d4:1d:39:2a:e7:20:c8:0f:c8:97:5a:5b:89:45:34:22:e9: 33:54:13:21:df:de:d4:42:15:cc:45:a5:c1:56:0b:73:ee:0c: b4:18:2a:ea:dd:0b:96:62:18:ef:bc:7f:ba:27:26:5f:22:3e: 56:64:9a:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcUjPxEGG/4btS2H6zsA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDg1MmFmNWE4ZTQzNmIyZDRkYTcyZTkyYjY0MTE0ZTFm NGQxNWYwHhcNMjUxMjIzMDkwMTM2WhcNMjUxMjI0MDkwMTM2WjAzMTEwLwYDVQQD Eyg0MmRiNWMzMGIxY2FlMjU3MGFhMmYyN2MwZGIxM2VmYzUxNWQzZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO6eX9bpm/A6sBe4eNyreP4EF3V4 pQyhl/xGgbcXEQonvdNR7z3NT+fVMbx4RKaZArCa3jOATx3WmanTCcZIP3kEocTZ lcF8/DR+pgNIRBHgj7ig6+lcvJ0Zalo/Y1PzmFiwn1A5Mei9tuthTLKDzHeBXh44 LTOkDE/VlDGluqfMzBbuZyo29s3Z3u4G3rsfINPAeJgEHWeHhEsIbywKgsCBvnd5 UWVF07b0p2VcWqt0oNlF3/xr2Yru2//CRuLmlPgw/8XGHYKgwAwU3qGFTk3fNE+d DRQYISLG/cQk3zV7bMCHNqXBylMGP6dKNQIRBbbNmIyQlPThYcOF/6VZNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELbXDCxyuJXCqLyfA2xPvxRXT+WMB8GA1UdIwQY MBaAFKwIUq9ajkNrLU2nLpK2QRTh9NFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEt NTAwN2RkZTM1MDQ1LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80ZGJjYjItM2E5Ni00ODE3LTk5NzEtNTAwN2RkZTM1MDQ1 LzEvckFoU3IxcU9RMnN0VGFjdWtyWkJGT0gwMFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMDZU/+1 OFRZZ88CMFElaflY74YGrWUqvnscn7RPmnY49EKSaoyvXtk2D74BwLae92DjBgXz N0cx+h8ZCruXrEotAynsQKV+jlPHSJZAJXsCbQvkWAMkZN9L1rt7jEISMDv3QGea XULRyzxVDNU2BqCoaq5WtVgs3sXWrsglMtbtf5peOX+4/L0+30OUKincxSWlvky9 +gfdkf/i4MJ4A0GlgvXScOaOtnmaUIrKwHFO9G1ena6M3cHLIWP8rL5Bg4beuGdI 49QdOSrnIMgPyJdaW4lFNCLpM1QTId/e1EIVzEWlwVYLc+4MtBgq6t0LlmIY77x/ uicmXyI+VmSaSg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:21:31 2025 by rpki-client