This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft File: RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json) Hash identifier: v6aSHNWeLzGDq2vDT1PO8bzOM/MmnRUPtSwP/WeMkjQ= Subject key identifier: C1:B9:F4:3D:27:E0:EF:1C:05:3A:CF:89:95:1A:6F:14:31:9B:58:53 Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f Certificate serial: 019B1871E1B4D055C64BFBD286C0BC956708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft Manifest number: 1170 Signing time: Sat 13 Dec 2025 16:01:15 +0000 Manifest this update: Sat 13 Dec 2025 16:01:15 +0000 Manifest next update: Sun 14 Dec 2025 16:01:15 +0000 Files and hashes: 1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: VOhPBwMYqNAyh36F6S9ABHzxism9iIegJiEJNTipwZc=) 2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:e1:b4:d0:55:c6:4b:fb:d2:86:c0:bc:95:67:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f Validity Not Before: Dec 13 16:01:15 2025 GMT Not After : Dec 14 16:01:15 2025 GMT Subject: CN=c1b9f43d27e0ef1c053acf89951a6f14319b5853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:56:13:60:fa:5a:9a:8c:77:46:ce:2b:5b: 9b:a7:d3:97:07:6e:b1:94:8d:ba:c0:4d:51:4d:7d: 17:7c:51:ad:f7:4a:f3:b9:69:4d:e4:21:85:0e:5c: 76:7e:66:fb:f1:78:f9:5b:dd:1e:3e:0d:77:ce:aa: b9:cd:c4:ed:a2:90:45:c8:c6:b5:f8:e3:02:a8:c6: 5d:11:74:5b:33:6e:81:23:68:94:b2:a9:45:c3:51: 01:ca:30:46:00:3d:77:3d:76:c9:11:ba:e7:81:89: 9c:5e:76:9c:1b:59:5d:8f:b6:6e:5c:dd:4b:f2:d8: ee:25:1b:b4:06:93:0b:71:fb:18:ee:ec:53:5f:07: 6b:16:fa:a0:f2:53:99:1e:aa:72:9e:ae:a4:c7:b4: f6:ea:3e:ea:1a:6a:4e:79:eb:9d:16:c4:9c:37:21: 5f:2c:5f:3c:fc:22:4b:2e:54:99:94:8d:68:a8:fb: 57:86:57:f8:13:6a:0c:13:06:0b:62:b9:c4:3a:c0: f0:c1:a0:39:38:df:26:64:ab:d4:30:ba:c9:b3:8f: a1:3b:0a:66:d5:d6:1f:0e:ab:0b:85:d3:da:2a:63: c6:5c:9b:18:94:b7:50:56:b5:4a:02:44:32:51:f7: 07:72:61:30:ed:69:b4:a8:3a:f7:44:28:25:6f:e5: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B9:F4:3D:27:E0:EF:1C:05:3A:CF:89:95:1A:6F:14:31:9B:58:53 X509v3 Authority Key Identifier: keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:48:e3:18:b3:8f:58:77:0a:16:26:f6:d9:7e:ef:48:43:91: 68:a6:38:6d:bc:55:78:69:ed:36:bf:23:61:6b:13:06:02:8f: 46:06:fc:fe:8a:ef:8b:00:04:4b:38:57:1d:a8:cb:56:80:3e: dd:a5:8c:5e:8c:1e:f6:01:e9:89:ff:b2:59:30:88:24:74:d3: 91:3b:06:b1:11:f9:94:ab:24:ec:f3:a6:77:1b:af:a6:cd:a3: 75:b7:01:42:d9:b9:10:80:e0:96:a9:78:a1:50:75:2b:61:25: 09:d6:b4:dc:1f:5e:46:b3:0b:a2:01:b7:56:9a:bd:30:91:2e: 92:f1:3f:e0:d8:ce:72:8c:7d:1b:6c:fe:41:c4:1e:b0:2b:39: 4f:f4:f0:c3:b8:7b:a4:fb:de:c9:e8:6c:91:26:73:13:d0:4a: 1a:6e:c6:2b:38:37:b4:02:87:2d:80:d9:26:c7:15:a9:cf:5d: b8:f9:3a:c6:5d:6d:4b:30:26:6c:e6:45:40:06:c4:b7:ff:56: 99:7d:bf:c2:e4:bc:77:c1:67:29:e7:06:0a:2d:9a:65:6f:27: b1:0a:37:9b:f2:ba:e4:cb:13:5b:ba:4f:05:1b:1b:3a:7b:5f: 4d:e7:90:ac:c0:f4:2b:a8:76:7b:b0:cb:ce:64:3a:10:d0:9e: 76:ae:62:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYceG00FXGS/vShsC8lWcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZjNmOWI0MWY0NWEwZjk3YjJhNmE4MTFjYTY3YTA0MDJh MDQ3N2YwHhcNMjUxMjEzMTYwMTE1WhcNMjUxMjE0MTYwMTE1WjAzMTEwLwYDVQQD EyhjMWI5ZjQzZDI3ZTBlZjFjMDUzYWNmODk5NTFhNmYxNDMxOWI1ODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CRWE2D6WpqMd0bOK1ubp9OXB26x lI26wE1RTX0XfFGt90rzuWlN5CGFDlx2fmb78Xj5W90ePg13zqq5zcTtopBFyMa1 +OMCqMZdEXRbM26BI2iUsqlFw1EByjBGAD13PXbJEbrngYmcXnacG1ldj7ZuXN1L 8tjuJRu0BpMLcfsY7uxTXwdrFvqg8lOZHqpynq6kx7T26j7qGmpOeeudFsScNyFf LF88/CJLLlSZlI1oqPtXhlf4E2oMEwYLYrnEOsDwwaA5ON8mZKvUMLrJs4+hOwpm 1dYfDqsLhdPaKmPGXJsYlLdQVrVKAkQyUfcHcmEw7Wm0qDr3RCglb+UXNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMG59D0n4O8cBTrPiZUabxQxm1hTMB8GA1UdIwQY MBaAFEbz+bQfRaD5eypqgRymegQCoEd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yNWRhYTQtZjdmYS00MGZhLTkyNTAt OTk2MzI2Y2E3ZGQ2LzEvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yNWRhYTQtZjdmYS00MGZhLTkyNTAtOTk2MzI2Y2E3ZGQ2 LzEvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEjjGLOP WHcKFib22X7vSEORaKY4bbxVeGntNr8jYWsTBgKPRgb8/orviwAESzhXHajLVoA+ 3aWMXowe9gHpif+yWTCIJHTTkTsGsRH5lKsk7POmdxuvps2jdbcBQtm5EIDglql4 oVB1K2ElCda03B9eRrMLogG3Vpq9MJEukvE/4NjOcox9G2z+QcQesCs5T/Tww7h7 pPveyehskSZzE9BKGm7GKzg3tAKHLYDZJscVqc9duPk6xl1tSzAmbOZFQAbEt/9W mX2/wuS8d8FnKecGCi2aZW8nsQo3m/K65MsTW7pPBRsbOntfTeeQrMD0K6h2e7DL zmQ6ENCedq5iYg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:01 2025 by rpki-client