This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json) Hash identifier: 6bf+uj+pA+inq51xymN5Dxz6UJ4gaZIihk6kuaeZn10= Subject key identifier: 00:02:08:6A:D1:29:C8:D6:F0:9B:65:CA:48:62:2F:0D:E3:89:C1:9D Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e Certificate serial: 019B4ADEA9DAD2014520FC710EE5365F4F01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft Manifest number: 0E61 Signing time: Tue 23 Dec 2025 11:01:04 +0000 Manifest this update: Tue 23 Dec 2025 11:01:04 +0000 Manifest next update: Wed 24 Dec 2025 11:01:04 +0000 Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: iHP6i2EDNDHTt8fthFxLtHXxbJvlK+1NUUrxl6pPcBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:a9:da:d2:01:45:20:fc:71:0e:e5:36:5f:4f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e385733213b34236019a140ff19c5398ed71730e Validity Not Before: Dec 23 11:01:04 2025 GMT Not After : Dec 24 11:01:04 2025 GMT Subject: CN=0002086ad129c8d6f09b65ca48622f0de389c19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3f:c3:8d:5c:7a:16:7d:38:89:ea:e2:2f:b7: 45:c7:30:cb:f8:2d:43:8c:17:2a:82:c4:c1:39:a4: 51:7e:46:79:f5:13:90:88:8e:4f:98:73:a3:f4:ea: ba:5b:d1:63:2b:da:8b:4b:89:8b:74:04:1d:f5:1c: 2d:33:a5:8c:66:7b:c1:62:46:7c:d4:be:10:c5:75: 42:4b:39:ae:30:ba:49:e8:c8:7d:00:f0:27:37:cf: 97:3c:d9:7f:0a:20:34:22:16:1d:0f:a5:65:9b:ca: 0b:cb:29:b2:fc:7e:1c:57:39:4b:67:ef:d0:5b:99: 93:2c:53:04:09:7f:74:c2:70:7f:8b:22:2f:d5:77: 7f:dc:3a:92:41:8a:b9:eb:74:09:3e:79:2c:04:a8: 05:03:69:f4:3c:e4:ef:0d:45:86:7e:e2:a2:35:b1: e6:50:3f:ab:3f:48:b7:cc:34:90:b4:4a:f5:af:3f: 93:1d:39:77:3c:ad:9d:7e:a8:37:4e:cf:37:97:bb: ed:ef:93:98:c4:61:cc:74:52:90:20:b0:28:47:1c: 45:12:cc:ec:2c:91:22:99:bc:59:6c:f7:ec:7b:cf: a2:0e:e1:94:b5:0d:9b:0c:3b:75:1f:10:58:2b:e9: 76:05:e9:72:d8:54:7f:e3:6d:47:b8:e9:e8:df:af: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:02:08:6A:D1:29:C8:D6:F0:9B:65:CA:48:62:2F:0D:E3:89:C1:9D X509v3 Authority Key Identifier: keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c5:0e:4e:03:75:6f:56:2a:e0:17:91:79:2b:98:dc:6f:d8: 0c:d8:c3:88:2e:5c:c4:12:dd:c7:e7:25:60:eb:06:79:f3:d6: 67:f2:a1:94:53:16:66:f2:ee:a8:8b:d7:c2:9b:09:4d:a0:72: 02:16:3f:9d:42:65:a3:13:9f:1c:85:7d:bd:2c:fd:8a:b6:6b: 38:37:99:2f:05:8b:97:ec:9d:3e:e9:e5:70:77:d1:fe:2f:ce: 58:0a:61:c6:23:af:71:c8:56:f9:de:28:16:c6:30:a0:3f:99: b7:86:d4:c4:8b:57:bf:97:b2:81:0a:9f:d9:36:01:32:21:3e: 25:5a:0a:c2:19:85:75:1e:dd:63:1e:c7:d4:07:f2:49:58:38: 9b:13:7b:f4:69:0c:2d:24:e3:35:62:13:fd:d5:62:16:63:87: 7f:38:aa:5b:cf:8f:f8:2e:71:fb:47:6e:ed:66:0e:f8:11:f0: 07:2f:3d:e9:77:a9:d1:8d:44:a5:d1:09:80:af:83:c5:ca:64: 24:72:eb:86:93:1d:5f:ff:4e:d0:80:e0:a0:ac:a2:20:d6:fb: 9b:cf:d3:90:6d:20:31:c3:fa:0e:f8:49:46:0b:16:58:e8:9a: c3:b3:e2:53:2b:70:78:eb:85:57:4f:67:4e:14:6b:08:81:1e: 07:e5:2d:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3qna0gFFIPxxDuU2X08BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzODU3MzMyMTNiMzQyMzYwMTlhMTQwZmYxOWM1Mzk4ZWQ3 MTczMGUwHhcNMjUxMjIzMTEwMTA0WhcNMjUxMjI0MTEwMTA0WjAzMTEwLwYDVQQD EygwMDAyMDg2YWQxMjljOGQ2ZjA5YjY1Y2E0ODYyMmYwZGUzODljMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9T/DjVx6Fn04ieriL7dFxzDL+C1D jBcqgsTBOaRRfkZ59ROQiI5PmHOj9Oq6W9FjK9qLS4mLdAQd9RwtM6WMZnvBYkZ8 1L4QxXVCSzmuMLpJ6Mh9APAnN8+XPNl/CiA0IhYdD6Vlm8oLyymy/H4cVzlLZ+/Q W5mTLFMECX90wnB/iyIv1Xd/3DqSQYq563QJPnksBKgFA2n0POTvDUWGfuKiNbHm UD+rP0i3zDSQtEr1rz+THTl3PK2dfqg3Ts83l7vt75OYxGHMdFKQILAoRxxFEszs LJEimbxZbPfse8+iDuGUtQ2bDDt1HxBYK+l2Bely2FR/421HuOno36/kewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAACCGrRKcjW8JtlykhiLw3jicGdMB8GA1UdIwQY MBaAFOOFczITs0I2AZoUD/GcU5jtcXMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYt ODc3ZDNmYWMyNjY3LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYtODc3ZDNmYWMyNjY3 LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcUOTgN1 b1Yq4BeReSuY3G/YDNjDiC5cxBLdx+clYOsGefPWZ/KhlFMWZvLuqIvXwpsJTaBy AhY/nUJloxOfHIV9vSz9irZrODeZLwWLl+ydPunlcHfR/i/OWAphxiOvcchW+d4o FsYwoD+Zt4bUxItXv5eygQqf2TYBMiE+JVoKwhmFdR7dYx7H1AfySVg4mxN79GkM LSTjNWIT/dViFmOHfziqW8+P+C5x+0du7WYO+BHwBy896Xep0Y1EpdEJgK+Dxcpk JHLrhpMdX/9O0IDgoKyiINb7m8/TkG0gMcP6DvhJRgsWWOiaw7PiUytweOuFV09n ThRrCIEeB+UtLg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:57:51 2025 by rpki-client