This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json) Hash identifier: V9k9/RFogrgsFATK425036EwJSMM8T4yKhrjeatQgYM= Subject key identifier: FD:F3:DB:1F:58:BF:00:EE:4A:44:76:B3:38:BE:54:CA:46:69:92:24 Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f Certificate serial: 019B476FE1C311D49279B5FEDA4D970B9B65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft Manifest number: 0682 Signing time: Mon 22 Dec 2025 19:01:13 +0000 Manifest this update: Mon 22 Dec 2025 19:01:13 +0000 Manifest next update: Tue 23 Dec 2025 19:01:13 +0000 Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: 5US9tYUwcVEOyB2bV0YN2E+ha25Z3tv+omcbGsZmwgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:e1:c3:11:d4:92:79:b5:fe:da:4d:97:0b:9b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f Validity Not Before: Dec 22 19:01:13 2025 GMT Not After : Dec 23 19:01:13 2025 GMT Subject: CN=fdf3db1f58bf00ee4a4476b338be54ca46699224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:65:f3:18:7e:ff:c8:c0:01:e2:d1:fa:21: b0:68:ca:63:40:ee:1d:aa:93:39:c5:b3:f8:ed:c1: 0b:a6:8e:55:d5:c3:d6:9a:4b:b0:9b:6f:7d:71:a7: e7:f3:7b:4c:92:1c:51:e1:e7:38:27:83:57:cf:1e: 93:cc:c5:e6:a8:2a:94:22:9b:5c:a9:f7:76:81:fc: 5c:54:c6:0a:fe:51:1a:28:6b:e5:0d:2c:fd:f1:47: 4d:12:a1:18:18:78:19:38:28:51:b0:2c:10:10:b7: a1:a1:b5:3c:cb:7e:3d:a7:c7:46:aa:0a:9c:8b:b7: 63:4c:22:ff:03:9c:5e:44:8e:cc:5f:0d:2e:ff:c1: 9a:66:8a:9b:1a:8e:14:20:a0:6f:0d:db:ec:24:76: 7c:e3:9c:7b:dc:05:2c:d8:31:1f:e1:ee:74:ee:7d: 4b:f5:d0:1b:ff:98:37:55:f0:44:05:89:18:aa:9e: 35:20:97:a2:be:14:29:ff:79:bb:f6:c3:e6:3e:d7: ae:15:95:ac:3d:dc:ad:d2:98:30:af:12:4a:b9:b1: 1f:0a:9e:c9:e3:32:08:19:0c:06:78:7f:16:bd:cc: 49:d2:02:9c:f0:3a:53:70:59:18:4f:7f:18:9d:29: 82:50:b0:4a:b6:3a:84:6d:0b:ce:cb:29:a7:dd:4e: b3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F3:DB:1F:58:BF:00:EE:4A:44:76:B3:38:BE:54:CA:46:69:92:24 X509v3 Authority Key Identifier: keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0b:fb:fd:d7:9f:78:d5:bf:72:20:87:7b:e3:9d:c3:b8:f3: 76:fc:73:68:a7:53:a8:9a:76:41:be:90:96:41:bb:62:8d:b4: c6:9c:0f:68:e8:00:db:fe:73:7b:b9:b3:f2:af:8a:37:8b:a1: 1c:91:8d:59:35:15:19:cd:e8:83:41:14:d9:88:4c:1f:4f:1a: 00:aa:b6:1c:17:6b:07:08:45:c8:02:01:b1:ec:ae:06:87:9e: be:fc:a7:41:ea:0d:8f:87:08:51:f8:83:84:6e:87:17:39:a5: cf:f2:7a:59:6b:c8:1e:db:e3:95:f0:28:79:78:6b:8c:ee:e8: 83:7c:89:e9:9c:2f:56:0c:c5:a9:84:03:cb:d9:df:d6:cc:96: 9c:a1:f9:8f:e2:d5:4b:57:6e:eb:4e:0d:1e:47:7a:fe:44:33: ef:d2:97:01:e7:18:92:96:af:01:73:08:10:3b:54:0e:46:c1: 82:18:54:fb:fd:50:eb:b0:58:5f:ce:4a:b0:85:e7:10:99:73: 85:44:1a:86:e3:11:2a:cd:0c:26:e6:a6:ce:df:80:ab:71:d0: 2b:38:88:5d:37:b6:e3:8b:1d:93:87:72:57:da:3e:74:59:6c: 41:e8:02:56:f7:4b:29:ab:e9:48:25:ac:92:1a:b4:45:df:ee: 3a:bb:2f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb+HDEdSSebX+2k2XC5tlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2Q2NTdhMTIwNTMyZGYzM2RlNTBmZTFhYzJiMzYyMGFj NGFlNGYwHhcNMjUxMjIyMTkwMTEzWhcNMjUxMjIzMTkwMTEzWjAzMTEwLwYDVQQD EyhmZGYzZGIxZjU4YmYwMGVlNGE0NDc2YjMzOGJlNTRjYTQ2Njk5MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ahl8xh+/8jAAeLR+iGwaMpjQO4d qpM5xbP47cELpo5V1cPWmkuwm299cafn83tMkhxR4ec4J4NXzx6TzMXmqCqUIptc qfd2gfxcVMYK/lEaKGvlDSz98UdNEqEYGHgZOChRsCwQELehobU8y349p8dGqgqc i7djTCL/A5xeRI7MXw0u/8GaZoqbGo4UIKBvDdvsJHZ845x73AUs2DEf4e507n1L 9dAb/5g3VfBEBYkYqp41IJeivhQp/3m79sPmPteuFZWsPdyt0pgwrxJKubEfCp7J 4zIIGQwGeH8WvcxJ0gKc8DpTcFkYT38YnSmCULBKtjqEbQvOyymn3U6zEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3z2x9YvwDuSkR2szi+VMpGaZIkMB8GA1UdIwQY MBaAFOPNZXoSBTLfM95Q/hrCs2IKxK5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQt MGY5NTZjYWY4MDNjLzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQtMGY5NTZjYWY4MDNj LzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagv7/def eNW/ciCHe+Odw7jzdvxzaKdTqJp2Qb6QlkG7Yo20xpwPaOgA2/5ze7mz8q+KN4uh HJGNWTUVGc3og0EU2YhMH08aAKq2HBdrBwhFyAIBseyuBoeevvynQeoNj4cIUfiD hG6HFzmlz/J6WWvIHtvjlfAoeXhrjO7og3yJ6ZwvVgzFqYQDy9nf1syWnKH5j+LV S1du604NHkd6/kQz79KXAecYkpavAXMIEDtUDkbBghhU+/1Q67BYX85KsIXnEJlz hUQahuMRKs0MJuamzt+Aq3HQKziIXTe244sdk4dyV9o+dFlsQegCVvdLKavpSCWs khq0Rd/uOrsv3Q== -----END CERTIFICATE-----Generated at Mon Dec 22 20:47:05 2025 by rpki-client