This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json) Hash identifier: gLRhIdil3yppVSTDB/ZXH+i3qpzYkozX1e7ZT3TnGzs= Subject key identifier: 00:33:81:82:C5:E6:BB:06:74:3A:B5:E2:E7:CE:FA:05:2B:39:5D:4F Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a Certificate serial: 019B21ABD0AC5230EEE6424DF495FAFEACB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 11:01:06 +0000 Manifest this update: Mon 15 Dec 2025 11:01:06 +0000 Manifest next update: Tue 16 Dec 2025 11:01:06 +0000 Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: oa3uFXm5Lk4ZpFD5un7w0hUZ5HN38VSaN1Avu2ZvrGI=) 2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:d0:ac:52:30:ee:e6:42:4d:f4:95:fa:fe:ac:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a Validity Not Before: Dec 15 11:01:06 2025 GMT Not After : Dec 16 11:01:06 2025 GMT Subject: CN=00338182c5e6bb06743ab5e2e7cefa052b395d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:b9:cc:9b:13:c8:b9:03:19:a1:39:54:ac: a4:53:48:42:e0:c8:f7:12:2e:94:09:56:70:2a:9a: ae:1e:e5:92:d4:72:76:7e:22:51:15:b3:89:e4:f4: 57:11:49:6e:13:02:28:5f:71:5b:3e:b5:cc:4d:c0: c6:44:42:19:d7:88:5b:ac:78:2b:95:21:18:a8:94: f8:3a:57:fc:64:91:d9:71:b4:87:a5:c6:40:4f:93: 78:8a:c4:86:b4:78:20:00:84:df:5e:b6:a2:65:d3: d9:f1:87:39:3f:6d:bd:8a:75:19:77:b4:21:03:31: ff:ff:ac:17:e1:ed:99:99:0e:cb:e4:3e:b3:e7:4f: 42:f1:d7:b3:0e:83:62:b9:ba:57:a7:f9:77:4a:49: 4d:09:e1:d2:ed:5d:c5:cc:1c:e4:c5:b8:c2:5b:07: 42:93:1a:ab:6d:f4:da:1d:5f:0c:06:69:90:61:cb: 49:a5:f3:62:de:b3:96:3c:31:32:d7:96:5a:d5:91: 30:56:ab:c9:32:25:f4:ea:61:b9:52:e4:c2:c6:1b: 53:03:d8:72:c8:8b:b2:89:d6:a5:7e:61:12:0a:1d: d2:36:58:bb:90:05:15:60:5b:f6:23:8b:18:06:40: 33:3e:43:21:e6:b4:b2:2e:7a:8e:38:2e:6c:9e:97: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:81:82:C5:E6:BB:06:74:3A:B5:E2:E7:CE:FA:05:2B:39:5D:4F X509v3 Authority Key Identifier: keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:c3:46:67:32:d5:b3:3a:1e:75:1a:ba:8b:fe:89:02:40:a5: 51:4d:51:72:86:2d:84:33:48:db:8c:0e:47:05:2d:a5:7e:8a: 92:61:5f:63:36:65:3d:15:c4:01:b3:dd:8d:05:2f:43:41:86: ff:45:83:6f:79:18:06:63:49:fe:20:13:d0:4e:c7:11:a1:cd: c6:b1:bb:2a:40:2f:27:26:c9:e7:ef:41:58:47:ba:fb:9e:e9: 00:24:09:8a:bc:6f:8b:c7:7b:6e:92:49:77:de:1f:43:52:3b: a1:46:70:0f:96:91:0d:27:f1:3d:08:80:87:c9:28:c0:ac:2f: ba:12:3c:d6:cc:49:62:15:78:1a:b0:70:78:3f:50:ba:8e:25: f0:91:1a:74:5f:34:4a:f4:31:4f:0e:62:89:74:45:67:32:50: a6:be:68:73:1a:98:de:86:7f:12:0d:34:59:26:63:98:fe:50: fa:9a:8f:08:6a:21:a5:f6:f7:a0:b9:a4:08:9c:32:7e:96:23: fa:22:ee:72:ba:d9:20:02:72:5c:7e:5e:db:67:b6:18:42:4f: 21:78:97:c8:ea:be:17:6f:0e:8f:b8:05:a2:17:3f:20:59:24: 94:66:49:85:d2:7c:a6:7e:f1:45:6a:b8:4c:49:cd:a4:59:60: 13:91:ce:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq9CsUjDu5kJN9JX6/qy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZWRmOGYxYmYwYzRmYmM0NjllNzFjOTlkODI0ODllYTFm M2RhNGEwHhcNMjUxMjE1MTEwMTA2WhcNMjUxMjE2MTEwMTA2WjAzMTEwLwYDVQQD EygwMDMzODE4MmM1ZTZiYjA2NzQzYWI1ZTJlN2NlZmEwNTJiMzk1ZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDW5zJsTyLkDGaE5VKykU0hC4Mj3 Ei6UCVZwKpquHuWS1HJ2fiJRFbOJ5PRXEUluEwIoX3FbPrXMTcDGREIZ14hbrHgr lSEYqJT4Olf8ZJHZcbSHpcZAT5N4isSGtHggAITfXraiZdPZ8Yc5P229inUZd7Qh AzH//6wX4e2ZmQ7L5D6z509C8dezDoNiubpXp/l3SklNCeHS7V3FzBzkxbjCWwdC kxqrbfTaHV8MBmmQYctJpfNi3rOWPDEy15Za1ZEwVqvJMiX06mG5UuTCxhtTA9hy yIuyidalfmESCh3SNli7kAUVYFv2I4sYBkAzPkMh5rSyLnqOOC5snpeYvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAzgYLF5rsGdDq14ufO+gUrOV1PMB8GA1UdIwQY MBaAFEft+PG/DE+8Rp5xyZ2CSJ6h89pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2Yt OTIwNGMxOTdhYTY1LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2YtOTIwNGMxOTdhYTY1 LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA18NGZzLV szoedRq6i/6JAkClUU1RcoYthDNI24wORwUtpX6KkmFfYzZlPRXEAbPdjQUvQ0GG /0WDb3kYBmNJ/iAT0E7HEaHNxrG7KkAvJybJ5+9BWEe6+57pACQJirxvi8d7bpJJ d94fQ1I7oUZwD5aRDSfxPQiAh8kowKwvuhI81sxJYhV4GrBweD9Quo4l8JEadF80 SvQxTw5iiXRFZzJQpr5ocxqY3oZ/Eg00WSZjmP5Q+pqPCGohpfb3oLmkCJwyfpYj +iLucrrZIAJyXH5e22e2GEJPIXiXyOq+F28Oj7gFohc/IFkklGZJhdJ8pn7xRWq4 TEnNpFlgE5HOJg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:48 2025 by rpki-client