This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json) Hash identifier: rW7c98x4/wBSnisNSzO0zfJTzHroDbx2TJQQEUHkjLA= Subject key identifier: A7:07:53:CA:0E:4B:5D:0D:04:E2:01:81:A3:FE:0C:F1:DF:8D:9A:8B Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390 Certificate serial: 019B59AD135B9C20BA274411DB5F1FBED33F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft Manifest number: 57 Signing time: Fri 26 Dec 2025 08:01:13 +0000 Manifest this update: Fri 26 Dec 2025 08:01:13 +0000 Manifest next update: Sat 27 Dec 2025 08:01:13 +0000 Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: oOOBd3RrwpQ96AV2qHumPkPUrXcCxmNQeShHk/HqwCQ=) 2: sb-HAVMafNmHL9QenVGesGVke-Q.roa (hash: nHrOUnqGNx4wf54/RmOPoYz+21S/NMpXYL06TIB1PUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:13:5b:9c:20:ba:27:44:11:db:5f:1f:be:d3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390 Validity Not Before: Dec 26 08:01:13 2025 GMT Not After : Dec 27 08:01:13 2025 GMT Subject: CN=a70753ca0e4b5d0d04e20181a3fe0cf1df8d9a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:4f:1a:44:a6:89:3d:19:31:bc:8a:49:aa: 2b:65:a5:57:41:5a:35:77:fd:14:24:70:00:07:f6: 5f:02:b8:d6:4c:fb:35:87:e7:4d:7f:8d:e6:69:1f: 42:d1:a8:2c:14:33:77:37:c5:8c:4b:1d:b6:83:75: 6e:1a:07:a2:79:6d:6a:e4:58:af:0e:4f:0b:3b:08: 79:93:3b:ce:b8:91:ce:12:d4:73:51:cb:ea:cc:63: 43:b7:03:dd:5c:bc:ca:b7:b5:b3:c1:57:de:db:57: 94:e6:b9:36:6c:2e:ec:57:61:b9:0c:8f:7c:a8:dd: 4e:24:43:dc:56:af:0e:87:24:ca:f2:08:5a:2f:fd: e4:92:d3:10:80:bd:e9:8f:ca:64:12:6a:4b:3d:fc: ea:5e:80:c3:f5:8a:da:d3:bd:52:c6:b5:a6:2f:e3: 0c:ea:98:49:be:36:d6:51:ff:85:e2:21:13:eb:94: e6:13:93:15:12:70:69:c8:46:0a:aa:38:0e:e6:9e: 7c:81:fd:15:ff:6b:9d:a0:ef:94:e6:9b:0a:24:c3: a8:1d:cd:bd:43:c1:44:67:b0:e8:2e:ef:04:ee:cc: 0b:2c:23:59:73:89:0c:97:fa:92:75:40:65:66:af: f2:b8:f2:48:0f:c0:27:a2:0f:1b:77:1a:c2:ef:de: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:53:CA:0E:4B:5D:0D:04:E2:01:81:A3:FE:0C:F1:DF:8D:9A:8B X509v3 Authority Key Identifier: keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:57:f8:65:c7:98:2e:b2:82:9b:86:a3:26:db:f0:4e:01:2a: a1:d8:59:b0:c1:71:e4:3f:b2:95:a8:cf:10:b3:8b:2d:99:3d: b4:44:d5:04:04:24:e3:0d:74:a0:80:ea:5e:ce:73:0e:68:9f: 1e:31:1e:26:24:7b:95:db:7c:92:67:75:c7:df:93:14:e7:42: 9b:29:3b:2c:d4:67:8b:c4:48:1e:77:c6:2b:5d:22:49:3a:21: fb:e4:02:2a:4b:f0:0e:b4:84:5d:e3:02:06:80:4f:60:7c:68: 81:eb:55:a5:99:48:70:09:c1:87:e7:63:2e:19:b3:17:82:47: 6e:9b:ac:a5:6e:01:d9:8f:94:8e:3d:78:07:bc:c8:ad:52:c0: eb:f8:a2:c0:8c:a8:5b:68:15:f1:c6:85:3a:4d:56:fb:ab:a1: 05:cc:d4:4f:0f:fc:f8:bd:7c:cf:a8:9f:bc:79:7a:4a:36:64: 6f:89:7d:bf:f4:78:31:ce:30:ef:ca:c6:e8:51:ee:74:20:f0: b9:ea:d1:38:28:be:6e:3f:dd:cc:9e:97:1b:ca:f9:a3:1a:71: 19:87:9c:31:ef:b6:97:e5:93:83:77:86:75:2c:82:f5:d4:3d: 63:e5:3d:b3:01:84:13:ca:fc:30:85:93:bf:a1:2a:0e:73:d9: 0a:29:9a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrRNbnCC6J0QR218fvtM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MmJjYjFiNTI4ZGE5OTQ0YmQ5NTQ0YmM3YjM4OGNlZTFh MDEzOTAwHhcNMjUxMjI2MDgwMTEzWhcNMjUxMjI3MDgwMTEzWjAzMTEwLwYDVQQD EyhhNzA3NTNjYTBlNGI1ZDBkMDRlMjAxODFhM2ZlMGNmMWRmOGQ5YThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx95PGkSmiT0ZMbyKSaorZaVXQVo1 d/0UJHAAB/ZfArjWTPs1h+dNf43maR9C0agsFDN3N8WMSx22g3VuGgeieW1q5Fiv Dk8LOwh5kzvOuJHOEtRzUcvqzGNDtwPdXLzKt7WzwVfe21eU5rk2bC7sV2G5DI98 qN1OJEPcVq8OhyTK8ghaL/3kktMQgL3pj8pkEmpLPfzqXoDD9Yra071SxrWmL+MM 6phJvjbWUf+F4iET65TmE5MVEnBpyEYKqjgO5p58gf0V/2udoO+U5psKJMOoHc29 Q8FEZ7DoLu8E7swLLCNZc4kMl/qSdUBlZq/yuPJID8Anog8bdxrC7961swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcHU8oOS10NBOIBgaP+DPHfjZqLMB8GA1UdIwQY MBaAFEYryxtSjamUS9lUS8eziM7hoBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUt YWFmZThhOGMxNjVlLzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUtYWFmZThhOGMxNjVl LzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVf4ZceY LrKCm4ajJtvwTgEqodhZsMFx5D+ylajPELOLLZk9tETVBAQk4w10oIDqXs5zDmif HjEeJiR7ldt8kmd1x9+TFOdCmyk7LNRni8RIHnfGK10iSToh++QCKkvwDrSEXeMC BoBPYHxogetVpZlIcAnBh+djLhmzF4JHbpuspW4B2Y+Ujj14B7zIrVLA6/iiwIyo W2gV8caFOk1W+6uhBczUTw/8+L18z6ifvHl6SjZkb4l9v/R4Mc4w78rG6FHudCDw uerROCi+bj/dzJ6XG8r5oxpxGYecMe+2l+WTg3eGdSyC9dQ9Y+U9swGEE8r8MIWT v6EqDnPZCimaFw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:14 2025 by rpki-client