This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json) Hash identifier: gaxJ7/GRkrJPcK9nmFskunnzd5YahL7PoWGMoIVtcac= Subject key identifier: E8:6C:5F:12:6C:E9:CC:4D:C7:B0:6D:07:44:2D:34:52:C4:38:D0:64 Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f Certificate serial: 019B32D628A0750E787042ABF65F6DFEF87D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft Manifest number: 0F84 Signing time: Thu 18 Dec 2025 19:00:54 +0000 Manifest this update: Thu 18 Dec 2025 19:00:54 +0000 Manifest next update: Fri 19 Dec 2025 19:00:54 +0000 Files and hashes: 1: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (hash: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=) 2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: Du/X/I9Ml6dJ3pk0niiCd2+OxflbfuJAQejsQkm6aJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:28:a0:75:0e:78:70:42:ab:f6:5f:6d:fe:f8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f Validity Not Before: Dec 18 19:00:54 2025 GMT Not After : Dec 19 19:00:54 2025 GMT Subject: CN=e86c5f126ce9cc4dc7b06d07442d3452c438d064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:c8:9f:f2:d3:d0:63:ad:44:1b:55:3e:c6: c0:51:ae:5a:40:d2:b5:1a:3d:1b:ad:14:9f:f8:99: 66:08:8e:3e:d5:d1:57:35:a1:d1:fd:d0:0c:6a:d0: de:12:3e:46:a1:4c:5b:cf:4f:70:45:2f:f3:ec:b3: aa:44:cc:c1:8b:f2:1e:50:22:bc:f4:8e:4f:80:14: a5:33:73:56:c2:60:b3:09:af:7b:19:e5:9d:22:5c: 37:b6:16:20:95:6e:10:d3:58:b6:5e:84:90:fd:b9: 5d:91:16:14:80:ee:46:0b:3f:e1:0d:4d:61:4c:dc: 44:8c:d7:20:71:62:2b:06:df:f8:12:fb:b7:40:fa: 69:20:61:6a:7b:b7:09:98:63:30:2c:ba:63:f3:c0: 56:eb:e5:09:c2:2f:e7:78:39:1e:d3:76:25:76:53: dc:9c:d8:f5:b0:82:14:7f:8e:c3:06:7c:14:e9:1a: 4b:70:9c:b2:bd:b7:d1:b4:0d:b0:20:1e:6d:61:26: 2f:6b:9a:5b:fd:78:f5:e7:42:b7:41:3b:44:8d:32: 61:53:9d:6e:17:4b:9d:55:f9:c9:13:98:18:5d:8e: b9:4d:5f:d2:33:16:2a:65:e0:c6:fe:de:80:b8:a6: 54:9a:3d:50:b6:16:49:e6:1a:03:28:06:a6:f1:c3: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6C:5F:12:6C:E9:CC:4D:C7:B0:6D:07:44:2D:34:52:C4:38:D0:64 X509v3 Authority Key Identifier: keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:63:39:c8:f2:18:98:f2:fa:54:58:a4:e2:35:0b:e2:06:fa: de:34:1f:99:85:ea:47:2d:c7:5c:9f:bd:32:f4:7a:0a:92:d0: d2:17:19:90:d6:5a:3e:de:03:2a:12:4f:9d:e6:e2:b7:ac:f0: 99:66:e5:65:f8:9d:c5:73:57:cf:4f:dd:8f:66:b4:b0:69:11: 86:ac:c7:2b:f6:e0:66:46:0b:92:b5:b7:13:85:98:25:99:fd: b5:8d:84:72:2a:19:eb:8f:bf:ea:12:18:7b:b3:ec:3e:2a:86: 52:78:a8:28:a3:9e:52:30:49:88:f5:6a:c2:6b:85:ab:8c:cc: a8:99:fb:bf:2e:f6:8b:9f:18:46:24:2b:29:0c:11:cf:8c:ff: 18:39:ae:09:4e:96:3b:1d:98:f8:ed:e2:f2:53:0f:81:a7:0e: c9:7b:18:b4:eb:bd:b8:a3:07:c4:a3:2e:de:46:55:c3:09:16: d0:5e:ac:18:ef:70:d7:87:f9:f1:2f:d2:d1:f9:8a:7c:00:42: e5:51:52:f8:27:f7:de:88:8d:3a:f6:b6:74:17:df:78:7b:4e: 0e:22:35:c3:f1:8f:b2:6f:ec:09:e7:8c:88:03:33:b6:6d:f9: 9d:00:ff:44:45:55:be:a6:79:48:83:7c:f6:68:77:d3:8f:2c: 18:95:c5:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1iigdQ54cEKr9l9t/vh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczOGU2NWZiMDNlNmQ2MDdkOGJlMjA0MzQ1ZDZlMDVhNDYw YjlhNGYwHhcNMjUxMjE4MTkwMDU0WhcNMjUxMjE5MTkwMDU0WjAzMTEwLwYDVQQD EyhlODZjNWYxMjZjZTljYzRkYzdiMDZkMDc0NDJkMzQ1MmM0MzhkMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23XIn/LT0GOtRBtVPsbAUa5aQNK1 Gj0brRSf+JlmCI4+1dFXNaHR/dAMatDeEj5GoUxbz09wRS/z7LOqRMzBi/IeUCK8 9I5PgBSlM3NWwmCzCa97GeWdIlw3thYglW4Q01i2XoSQ/bldkRYUgO5GCz/hDU1h TNxEjNcgcWIrBt/4Evu3QPppIGFqe7cJmGMwLLpj88BW6+UJwi/neDke03YldlPc nNj1sIIUf47DBnwU6RpLcJyyvbfRtA2wIB5tYSYva5pb/Xj150K3QTtEjTJhU51u F0udVfnJE5gYXY65TV/SMxYqZeDG/t6AuKZUmj1QthZJ5hoDKAam8cMRQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhsXxJs6cxNx7BtB0QtNFLEONBkMB8GA1UdIwQY MBaAFHOOZfsD5tYH2L4gQ0XW4FpGC5pPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmIt ZGQ1MTVlNjNjZmNiLzEvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iYTYxY2UtOWM4Ni00MmVmLTkwZmItZGQ1MTVlNjNjZmNi LzEvYzQ1bC13UG0xZ2ZZdmlCRFJkYmdXa1lMbWs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGM5yPIY mPL6VFik4jUL4gb63jQfmYXqRy3HXJ+9MvR6CpLQ0hcZkNZaPt4DKhJPnebit6zw mWblZfidxXNXz0/dj2a0sGkRhqzHK/bgZkYLkrW3E4WYJZn9tY2EcioZ64+/6hIY e7PsPiqGUnioKKOeUjBJiPVqwmuFq4zMqJn7vy72i58YRiQrKQwRz4z/GDmuCU6W Ox2Y+O3i8lMPgacOyXsYtOu9uKMHxKMu3kZVwwkW0F6sGO9w14f58S/S0fmKfABC 5VFS+Cf33oiNOva2dBffeHtODiI1w/GPsm/sCeeMiAMztm35nQD/REVVvqZ5SIN8 9mh3048sGJXFpA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:34:03 2025 by rpki-client