This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft File: RrLFRAI1IgBtccF5VhxL0wW6030.mft (raw, json) Hash identifier: VXOYIyPWR6BG7r/no+/LfFrUmJPFhR3YprEt0fHHckw= Subject key identifier: F1:5D:38:DD:29:5A:2F:52:56:F4:4C:E4:81:52:01:3C:AA:D3:DB:D8 Authority key identifier: 46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D Certificate issuer: /CN=46b2c544023522006d71c179561c4bd305bad37d Certificate serial: 019B476FEBB745077D95163480F22C999E1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft Manifest number: 0910 Signing time: Mon 22 Dec 2025 19:01:15 +0000 Manifest this update: Mon 22 Dec 2025 19:01:15 +0000 Manifest next update: Tue 23 Dec 2025 19:01:15 +0000 Files and hashes: 1: RrLFRAI1IgBtccF5VhxL0wW6030.crl (hash: tBN2DsMcaxXuE0i5Te65dhVlZTDrK39fppUvCG1LEAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:eb:b7:45:07:7d:95:16:34:80:f2:2c:99:9e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b2c544023522006d71c179561c4bd305bad37d Validity Not Before: Dec 22 19:01:15 2025 GMT Not After : Dec 23 19:01:15 2025 GMT Subject: CN=f15d38dd295a2f5256f44ce48152013caad3dbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:87:81:b2:61:da:f3:3b:a9:9d:3b:14:56:a8: c4:57:6c:58:26:21:44:05:5b:7b:d5:19:13:90:a3: 83:8a:8a:25:5c:8f:ec:58:08:8b:27:9f:ae:60:9a: a6:a9:f5:2a:eb:e3:42:ef:f8:16:ac:7c:a3:aa:57: 6c:e2:81:c5:ac:66:cb:e9:79:3a:72:b7:23:6b:19: a9:57:4f:b5:43:45:d3:3b:a7:bd:e1:60:e0:5c:0c: e2:c2:ff:24:b3:3a:be:3e:13:ca:30:14:1f:ad:27: 0f:0f:3c:6a:3a:1f:3a:c3:7d:98:1a:1e:52:c0:3f: 45:b0:67:41:fc:93:48:fe:53:eb:b6:70:8c:4d:4c: 38:dd:45:2c:09:7a:03:af:53:71:c9:79:f8:c6:6a: ac:b1:b0:ea:a9:2c:7e:ca:ad:64:dd:7b:5e:ac:72: a5:00:a4:4b:41:7c:f8:b1:b5:ca:b6:63:e2:7e:3b: 9c:58:5f:93:8e:28:96:af:a1:5e:8d:fc:96:77:e7: f8:98:3c:5e:8d:1b:71:ae:8a:b9:71:ae:24:69:f0: 71:e3:01:bc:eb:e5:8a:0a:47:23:d6:ee:6d:f1:82: b5:42:e5:08:db:1e:43:7b:ed:a9:07:ec:16:6f:19: 9b:6a:68:b3:05:63:1e:f6:41:55:4c:4f:c3:2a:18: ee:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5D:38:DD:29:5A:2F:52:56:F4:4C:E4:81:52:01:3C:AA:D3:DB:D8 X509v3 Authority Key Identifier: keyid:46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:05:72:53:1c:39:e8:a7:ff:af:d2:cf:62:8b:e6:b3:d8:8c: 90:7b:de:b0:bf:23:07:29:bd:cb:78:5f:bc:b1:ac:67:8c:8f: fc:23:44:87:85:de:63:8f:59:1b:77:3b:99:bd:ce:16:59:9a: 48:e2:4a:5b:36:d9:dd:ee:a3:7e:85:39:fe:01:13:30:26:a8: c2:6e:b3:17:13:c9:b5:04:88:34:51:70:0b:96:4a:4c:45:b7: 30:1c:bf:64:4b:1a:94:f3:09:a0:82:c0:5b:b7:ef:75:26:a6: 7f:2b:29:85:99:bb:0a:24:c5:39:ae:b4:75:14:72:68:0c:de: 15:8b:cf:1d:0e:cb:e6:dc:a6:60:48:a6:c4:dc:d4:fd:d1:52: e2:ed:76:83:c7:1f:47:2a:ed:5b:cf:f4:45:60:6a:7e:cc:94: 55:ae:2f:4d:8b:32:5a:cd:a3:ce:5b:c6:c3:da:00:ec:73:a7: f7:e1:32:54:0f:0a:87:8d:26:87:12:e3:9a:2e:91:eb:1a:28: 43:c7:a3:89:73:f3:5d:ab:b5:18:b9:f4:08:e2:9b:d4:7b:77: 3e:53:86:57:fb:55:b5:44:6a:e1:b2:97:9f:b5:46:c4:a4:ad: bc:55:7a:df:ea:5e:5d:a2:4d:f0:cc:3c:81:7f:7a:91:0b:8c: 05:5f:51:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb+u3RQd9lRY0gPIsmZ4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YjJjNTQ0MDIzNTIyMDA2ZDcxYzE3OTU2MWM0YmQzMDVi YWQzN2QwHhcNMjUxMjIyMTkwMTE1WhcNMjUxMjIzMTkwMTE1WjAzMTEwLwYDVQQD EyhmMTVkMzhkZDI5NWEyZjUyNTZmNDRjZTQ4MTUyMDEzY2FhZDNkYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoeBsmHa8zupnTsUVqjEV2xYJiFE BVt71RkTkKODioolXI/sWAiLJ5+uYJqmqfUq6+NC7/gWrHyjqlds4oHFrGbL6Xk6 crcjaxmpV0+1Q0XTO6e94WDgXAziwv8kszq+PhPKMBQfrScPDzxqOh86w32YGh5S wD9FsGdB/JNI/lPrtnCMTUw43UUsCXoDr1NxyXn4xmqssbDqqSx+yq1k3XterHKl AKRLQXz4sbXKtmPifjucWF+TjiiWr6FejfyWd+f4mDxejRtxroq5ca4kafBx4wG8 6+WKCkcj1u5t8YK1QuUI2x5De+2pB+wWbxmbamizBWMe9kFVTE/DKhjufwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFdON0pWi9SVvRM5IFSATyq09vYMB8GA1UdIwQY MBaAFEayxUQCNSIAbXHBeVYcS9MFutN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNWI0YWMtNDk1My00MDBmLWI1ZDUt ZTBhYzdhNGE0ZmVjLzEvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNWI0YWMtNDk1My00MDBmLWI1ZDUtZTBhYzdhNGE0ZmVj LzEvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwVyUxw5 6Kf/r9LPYovms9iMkHvesL8jBym9y3hfvLGsZ4yP/CNEh4XeY49ZG3c7mb3OFlma SOJKWzbZ3e6jfoU5/gETMCaowm6zFxPJtQSINFFwC5ZKTEW3MBy/ZEsalPMJoILA W7fvdSamfysphZm7CiTFOa60dRRyaAzeFYvPHQ7L5tymYEimxNzU/dFS4u12g8cf RyrtW8/0RWBqfsyUVa4vTYsyWs2jzlvGw9oA7HOn9+EyVA8Kh40mhxLjmi6R6xoo Q8ejiXPzXau1GLn0COKb1Ht3PlOGV/tVtURq4bKXn7VGxKStvFV63+peXaJN8Mw8 gX96kQuMBV9RTQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:46:14 2025 by rpki-client