This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft File: RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json) Hash identifier: 9gz5FLJawUJ9fsW+uA98MsYFYM0DWagZaKCif1DzHQg= Subject key identifier: 33:AA:FE:D5:B7:CC:68:45:41:F8:55:6D:C6:59:66:B2:60:5A:4C:15 Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D Certificate issuer: /CN=44b9c489b4bbc85de734417ebba4e137b17c079d Certificate serial: 019B4B83455D2BB4A487C3E058CD7C2A86A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft Manifest number: 0667 Signing time: Tue 23 Dec 2025 14:00:52 +0000 Manifest this update: Tue 23 Dec 2025 14:00:52 +0000 Manifest next update: Wed 24 Dec 2025 14:00:52 +0000 Files and hashes: 1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: OAIbM/nBMxpf/EIwskSnAYLgAfWFLoHtWhyzTnacYAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:45:5d:2b:b4:a4:87:c3:e0:58:cd:7c:2a:86:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d Validity Not Before: Dec 23 14:00:52 2025 GMT Not After : Dec 24 14:00:52 2025 GMT Subject: CN=33aafed5b7cc684541f8556dc65966b2605a4c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:28:01:bc:27:f8:f0:d8:54:bf:dd:88:98:3e: ee:e1:7d:95:99:ec:5a:e0:cf:75:ce:1b:40:12:41: 8d:f6:86:a4:5c:4a:d0:92:90:a0:70:c8:68:ae:37: 30:da:e2:99:7b:7e:e7:41:62:d6:77:9c:fd:05:f4: 21:e8:10:f2:5e:24:f2:9b:b8:a1:86:5f:29:73:dc: 9a:a3:0f:4a:19:55:e6:af:cb:14:62:37:1c:ea:69: 67:c5:0e:c1:2a:82:0c:0d:f2:2c:73:f0:d2:70:c2: 20:1b:85:75:3b:ec:88:83:e8:8f:3b:b6:1b:89:da: f2:fb:b0:05:2b:71:f6:93:60:55:09:ab:ea:92:9a: 47:04:81:4a:a0:1d:82:0a:ca:77:e2:50:bd:76:da: 46:d8:5b:fb:4e:47:71:b3:2f:53:df:ce:0d:64:59: 46:88:13:3f:69:17:96:64:db:35:f1:45:55:5c:f6: d2:51:09:72:62:b0:8a:b5:d8:03:6d:3a:55:f9:d8: 2b:4a:5e:5c:f7:9a:cf:a7:5f:c2:f8:43:97:bb:67: 38:31:10:09:26:39:f3:f3:9b:85:f0:2a:c9:36:3c: d9:f6:e4:25:5b:58:fa:cb:18:e0:83:4e:3a:15:b1: d4:b4:0c:d3:96:a6:c7:44:6a:e6:64:5b:99:d6:52: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AA:FE:D5:B7:CC:68:45:41:F8:55:6D:C6:59:66:B2:60:5A:4C:15 X509v3 Authority Key Identifier: keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:06:3b:92:32:f3:83:eb:e2:e4:8c:05:48:6e:cc:5c:2c:0b: 17:4f:2a:c8:90:ec:59:5e:96:c2:ba:af:2d:a4:97:b0:93:9a: 71:78:b9:e0:be:5c:54:87:67:81:ac:29:00:d5:9f:0b:0e:bd: 5b:47:88:b5:3d:67:e0:02:de:0a:85:46:ba:34:3e:ae:9c:52: be:bd:7d:30:a1:24:82:bf:6f:b7:3a:30:05:a5:4d:c0:91:ca: 2d:5e:7b:19:bc:bc:b9:7f:31:12:72:d7:ea:e1:7d:8f:9d:b2: 61:05:4e:91:8f:2c:ce:d2:82:1a:73:56:e2:fa:5b:99:8d:43: f1:d3:21:89:85:a5:2b:fb:24:01:be:fc:f8:55:95:76:cf:3a: ec:d8:78:cc:35:5b:17:6c:a7:1b:a9:cf:29:f1:7f:f2:75:a3: 03:bb:d4:3c:93:ce:9d:ce:d7:fe:4e:58:d0:5d:1a:64:d7:05: 2e:f1:93:8a:14:7b:e8:35:46:5a:6e:f5:82:1e:9d:4c:6a:2c: 96:57:ec:99:a9:e2:8c:5a:be:2f:4b:b5:1d:bb:df:a9:14:66: 2c:36:0f:6e:27:ef:00:4d:75:2f:3e:60:d9:18:99:1d:f1:49: 17:e1:7f:0c:14:0c:47:22:e0:6a:f6:a9:c5:2a:7c:03:62:60: b4:0e:1e:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLg0VdK7Skh8PgWM18KoalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YjljNDg5YjRiYmM4NWRlNzM0NDE3ZWJiYTRlMTM3YjE3 YzA3OWQwHhcNMjUxMjIzMTQwMDUyWhcNMjUxMjI0MTQwMDUyWjAzMTEwLwYDVQQD EygzM2FhZmVkNWI3Y2M2ODQ1NDFmODU1NmRjNjU5NjZiMjYwNWE0YzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SgBvCf48NhUv92ImD7u4X2Vmexa 4M91zhtAEkGN9oakXErQkpCgcMhorjcw2uKZe37nQWLWd5z9BfQh6BDyXiTym7ih hl8pc9yaow9KGVXmr8sUYjcc6mlnxQ7BKoIMDfIsc/DScMIgG4V1O+yIg+iPO7Yb idry+7AFK3H2k2BVCavqkppHBIFKoB2CCsp34lC9dtpG2Fv7Tkdxsy9T384NZFlG iBM/aReWZNs18UVVXPbSUQlyYrCKtdgDbTpV+dgrSl5c95rPp1/C+EOXu2c4MRAJ Jjnz85uF8CrJNjzZ9uQlW1j6yxjgg046FbHUtAzTlqbHRGrmZFuZ1lLeLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOq/tW3zGhFQfhVbcZZZrJgWkwVMB8GA1UdIwQY MBaAFES5xIm0u8hd5zRBfruk4TexfAedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkxuRWliUzd5RjNuTkVGLXU2VGhON0Y4QjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82Njk1NTQtMzY5Ny00ZDI5LThmYTMt NGViOTZlOWFjYjE2LzEvUkxuRWliUzd5RjNuTkVGLXU2VGhON0Y4QjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS82Njk1NTQtMzY5Ny00ZDI5LThmYTMtNGViOTZlOWFjYjE2 LzEvUkxuRWliUzd5RjNuTkVGLXU2VGhON0Y4QjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxgY7kjLz g+vi5IwFSG7MXCwLF08qyJDsWV6WwrqvLaSXsJOacXi54L5cVIdngawpANWfCw69 W0eItT1n4ALeCoVGujQ+rpxSvr19MKEkgr9vtzowBaVNwJHKLV57Gby8uX8xEnLX 6uF9j52yYQVOkY8sztKCGnNW4vpbmY1D8dMhiYWlK/skAb78+FWVds867Nh4zDVb F2ynG6nPKfF/8nWjA7vUPJPOnc7X/k5Y0F0aZNcFLvGTihR76DVGWm71gh6dTGos llfsmanijFq+L0u1HbvfqRRmLDYPbifvAE11Lz5g2RiZHfFJF+F/DBQMRyLgavap xSp8A2JgtA4ejQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:01:07 2025 by rpki-client