This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json) Hash identifier: Y95nrEj1oSqXmibwj7R2JTA8H/ENrVgvAQlK4gWPylc= Subject key identifier: EB:C6:6D:B9:09:30:C7:BF:00:AC:C8:1C:86:80:29:98:2A:29:E3:9C Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd Certificate serial: 019B378E93F4143D43D01B696C0F4BD2784E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 17:00:49 +0000 Manifest this update: Fri 19 Dec 2025 17:00:49 +0000 Manifest next update: Sat 20 Dec 2025 17:00:49 +0000 Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: ERjAg/ihPdD/IW/QbrirveMTzo+4ydtR0yM6dD/gliM=) 2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:93:f4:14:3d:43:d0:1b:69:6c:0f:4b:d2:78:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd Validity Not Before: Dec 19 17:00:49 2025 GMT Not After : Dec 20 17:00:49 2025 GMT Subject: CN=ebc66db90930c7bf00acc81c868029982a29e39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:22:dd:47:ff:3d:49:f7:2a:d4:46:cb:f2: 3e:61:6d:8d:ad:14:eb:d1:20:af:81:c6:14:53:d8: 87:44:04:81:fe:77:c5:68:12:09:b5:1e:de:a4:38: 58:67:73:41:5a:74:39:4b:65:6f:12:61:69:14:c2: b7:9b:03:4d:72:2f:86:dc:d9:f1:ab:88:d0:2a:8f: 30:69:9e:0e:fb:54:1a:a5:26:9e:72:ff:e6:0b:9f: 38:00:79:54:44:74:61:35:ce:95:db:8f:5f:a8:a0: 1b:97:ec:c3:d3:46:38:04:0c:1f:28:fc:0c:19:e7: 2a:67:87:6a:12:8c:6f:38:25:e4:c7:e5:73:ab:a5: 68:3e:d2:13:b1:67:fd:25:39:dc:18:70:08:dd:55: 67:3e:8e:84:29:13:51:48:22:11:2d:0e:0c:e3:bb: b0:71:c7:82:f2:01:a7:d8:e5:be:bc:db:60:1e:88: ac:a8:05:0c:b3:2e:d1:64:9f:3a:45:2b:dc:3c:55: 82:f8:53:3c:0f:0a:ff:0d:bb:5e:0f:30:74:89:65: 08:f6:9a:e8:b6:46:0f:3d:7d:8e:4a:25:e6:b6:4f: 26:71:f5:97:d0:42:1b:a2:68:da:c5:f2:8e:92:d9: a5:2a:94:b5:70:95:af:4b:84:79:20:30:19:89:80: ca:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C6:6D:B9:09:30:C7:BF:00:AC:C8:1C:86:80:29:98:2A:29:E3:9C X509v3 Authority Key Identifier: keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:77:22:b0:f3:a6:8c:67:81:fc:06:cb:9d:6d:86:d5:bf:e2: 48:9f:97:3c:3a:f8:ee:7e:c3:b1:16:0d:5b:f5:cb:d6:e7:84: 6c:a8:70:d3:1e:2c:d1:ff:4a:6a:99:b0:44:7b:a4:1b:25:27: 92:34:c1:a8:27:0c:1f:4f:02:72:27:4a:ce:34:15:b9:e2:6a: 3c:d6:5e:2a:0f:57:8b:11:67:9d:cf:1b:7e:df:aa:8f:db:f6: 02:73:fd:dc:c4:84:be:ea:ad:e9:61:b8:8e:8c:25:e9:af:0e: d4:05:c6:d4:2c:17:b1:3d:f3:37:32:2d:7f:22:b0:63:e5:01: 48:c7:49:c3:58:96:af:0b:b5:10:05:0d:bd:11:1e:b9:ec:58: d6:7d:83:ad:dd:51:76:eb:f1:00:58:5e:21:fc:64:9c:27:e0: 4d:84:85:46:e9:3a:98:3a:95:15:bd:43:e2:5f:c9:f1:9c:ec: 3a:32:17:c6:40:e7:52:d9:79:07:de:b2:b7:22:35:7a:f2:ad: 92:08:a3:75:81:d4:fd:1f:c6:0f:80:ce:6a:48:e7:48:11:47: f6:19:81:44:40:a2:32:32:d9:f5:b6:f9:52:6e:b3:e5:9c:8d: 13:81:15:8c:79:1f:b7:1d:e7:2d:e0:ad:fc:6f:7b:0b:00:1c: 48:9c:ac:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jpP0FD1D0BtpbA9L0nhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYzg1YzM3YWQyNTI3NGM3MTJjMjQ0NzNlMDc4YWRjZTcz MmMxZGQwHhcNMjUxMjE5MTcwMDQ5WhcNMjUxMjIwMTcwMDQ5WjAzMTEwLwYDVQQD EyhlYmM2NmRiOTA5MzBjN2JmMDBhY2M4MWM4NjgwMjk5ODJhMjllMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJsi3Uf/PUn3KtRGy/I+YW2NrRTr 0SCvgcYUU9iHRASB/nfFaBIJtR7epDhYZ3NBWnQ5S2VvEmFpFMK3mwNNci+G3Nnx q4jQKo8waZ4O+1QapSaecv/mC584AHlURHRhNc6V249fqKAbl+zD00Y4BAwfKPwM GecqZ4dqEoxvOCXkx+Vzq6VoPtITsWf9JTncGHAI3VVnPo6EKRNRSCIRLQ4M47uw cceC8gGn2OW+vNtgHoisqAUMsy7RZJ86RSvcPFWC+FM8Dwr/DbteDzB0iWUI9pro tkYPPX2OSiXmtk8mcfWX0EIbomjaxfKOktmlKpS1cJWvS4R5IDAZiYDKGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvGbbkJMMe/AKzIHIaAKZgqKeOcMB8GA1UdIwQY MBaAFOPIXDetJSdMcSwkRz4HitznMsHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUt ZGNlM2ZhM2ZiYWU5LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUtZGNlM2ZhM2ZiYWU5 LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhncisPOm jGeB/AbLnW2G1b/iSJ+XPDr47n7DsRYNW/XL1ueEbKhw0x4s0f9KapmwRHukGyUn kjTBqCcMH08CcidKzjQVueJqPNZeKg9XixFnnc8bft+qj9v2AnP93MSEvuqt6WG4 jowl6a8O1AXG1CwXsT3zNzItfyKwY+UBSMdJw1iWrwu1EAUNvREeuexY1n2Drd1R duvxAFheIfxknCfgTYSFRuk6mDqVFb1D4l/J8ZzsOjIXxkDnUtl5B96ytyI1evKt kgijdYHU/R/GD4DOakjnSBFH9hmBRECiMjLZ9bb5Um6z5ZyNE4EVjHkftx3nLeCt /G97CwAcSJys5g== -----END CERTIFICATE-----Generated at Fri Dec 19 21:59:16 2025 by rpki-client