This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json) Hash identifier: QdaFbxuJizZZYL1Mp3HjTJkuEgUkXfH7J1oGZmo2i4Y= Subject key identifier: 8A:73:45:E6:F6:1B:A1:5B:86:81:FC:DE:D9:D5:F2:C0:11:7D:FC:22 Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29 Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29 Certificate serial: 019B2175E38206CEDF664A3C189E4606BAB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft Manifest number: 09DC Signing time: Mon 15 Dec 2025 10:02:12 +0000 Manifest this update: Mon 15 Dec 2025 10:02:12 +0000 Manifest next update: Tue 16 Dec 2025 10:02:12 +0000 Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: Zmq11qxkJR2Ps676i2kGCX1Bquok593lNOWketkmOAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:e3:82:06:ce:df:66:4a:3c:18:9e:46:06:ba:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29 Validity Not Before: Dec 15 10:02:12 2025 GMT Not After : Dec 16 10:02:12 2025 GMT Subject: CN=8a7345e6f61ba15b8681fcded9d5f2c0117dfc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:ca:99:c1:89:e4:c6:66:06:2c:f5:27:a4: 05:89:43:5f:56:0a:2a:1e:9e:95:e2:18:5e:42:13: 3f:8d:af:26:4a:5f:6a:66:c2:e8:49:7d:a3:9d:38: 92:c5:63:cf:f7:c1:b3:d9:43:7c:93:8f:f3:02:57: 54:d6:cf:87:85:62:d8:0f:d3:6e:95:58:26:7e:c0: 98:bb:a2:81:c6:26:7e:7e:b4:78:28:f5:4f:0b:d5: 30:3a:9e:a9:1e:5a:d3:f2:19:62:5e:07:94:2f:5d: 35:08:7a:c7:50:5c:1a:1a:f1:22:7b:9f:d2:8c:17: bb:45:66:13:e3:cd:25:7e:b2:b8:90:b5:e1:ea:c3: a0:b6:7c:66:f4:50:aa:64:40:84:10:5a:e1:8f:fe: 73:56:46:69:f7:93:24:35:ad:c1:1b:59:7b:7b:ad: bd:32:55:19:5a:c9:8e:90:f4:1c:f5:56:d6:3f:15: 7f:e0:a9:3c:28:aa:42:44:f5:b7:89:8d:40:03:5c: f3:6c:c1:2c:a2:ae:ca:ee:5d:19:e5:68:c3:11:22: 7c:cd:4e:da:73:c3:22:a5:bb:aa:dc:5c:8c:20:73: 80:fd:27:91:85:ad:1a:78:07:98:b2:dc:14:a2:43: fb:b6:35:6e:3d:42:a3:78:dd:17:fc:be:ab:ec:d2: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:73:45:E6:F6:1B:A1:5B:86:81:FC:DE:D9:D5:F2:C0:11:7D:FC:22 X509v3 Authority Key Identifier: keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:50:23:1e:05:c8:25:a0:f4:a3:92:d3:59:ed:a5:3d:3d:dd: 13:21:b2:5e:10:cd:13:b8:79:9a:c0:df:b6:09:c4:70:71:7e: 9c:ce:6b:a9:93:5a:7c:32:94:17:49:db:b4:81:14:53:46:ff: 26:0a:2d:96:c7:74:26:b7:43:7f:ad:58:a6:c0:60:e9:6c:aa: e8:f3:be:89:91:a3:fc:69:d2:0f:65:31:d3:78:5f:34:10:28: 84:a4:70:5b:d0:3f:21:2c:82:ba:ba:f5:09:74:13:de:09:f9: b7:80:af:fb:e7:41:a7:ff:17:39:99:02:30:02:1e:26:ce:18: 97:67:e6:cc:8e:7d:7d:81:1d:eb:2a:07:e4:4d:ee:a6:0c:bd: 11:ab:28:88:9a:c0:99:33:42:8a:32:26:84:f2:2d:fb:21:5e: c4:5c:8f:01:6c:86:87:3e:e4:e8:a4:e6:1d:ea:b4:11:d2:05: c8:6f:77:54:d9:63:a7:6a:52:08:13:bc:85:75:a6:57:c1:9a: 25:a2:19:58:aa:d9:ec:4a:31:ae:b8:74:78:df:b7:06:27:ef: 9f:ef:c9:27:53:69:e6:80:96:39:02:cf:6f:8c:cf:56:54:73: bc:3d:cf:23:e0:97:59:e0:e5:6a:83:10:57:9d:e7:9b:6c:6d: 9c:15:04:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdeOCBs7fZko8GJ5GBrqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OTQ3YzVjM2Q0YzJmYzRjNGE0YTc0MjhiNjIyYTdmZWYz OTJlMjkwHhcNMjUxMjE1MTAwMjEyWhcNMjUxMjE2MTAwMjEyWjAzMTEwLwYDVQQD Eyg4YTczNDVlNmY2MWJhMTViODY4MWZjZGVkOWQ1ZjJjMDExN2RmYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoXKmcGJ5MZmBiz1J6QFiUNfVgoq Hp6V4hheQhM/ja8mSl9qZsLoSX2jnTiSxWPP98Gz2UN8k4/zAldU1s+HhWLYD9Nu lVgmfsCYu6KBxiZ+frR4KPVPC9UwOp6pHlrT8hliXgeUL101CHrHUFwaGvEie5/S jBe7RWYT480lfrK4kLXh6sOgtnxm9FCqZECEEFrhj/5zVkZp95MkNa3BG1l7e629 MlUZWsmOkPQc9VbWPxV/4Kk8KKpCRPW3iY1AA1zzbMEsoq7K7l0Z5WjDESJ8zU7a c8Mipbuq3FyMIHOA/SeRha0aeAeYstwUokP7tjVuPUKjeN0X/L6r7NLATQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpzReb2G6FbhoH83tnV8sARffwiMB8GA1UdIwQY MBaAFEaUfFw9TC/ExKSnQotiKn/vOS4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUt OGY5MzRlNzE3NjdjLzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUtOGY5MzRlNzE3Njdj LzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFAjHgXI JaD0o5LTWe2lPT3dEyGyXhDNE7h5msDftgnEcHF+nM5rqZNafDKUF0nbtIEUU0b/ Jgotlsd0JrdDf61YpsBg6Wyq6PO+iZGj/GnSD2Ux03hfNBAohKRwW9A/ISyCurr1 CXQT3gn5t4Cv++dBp/8XOZkCMAIeJs4Yl2fmzI59fYEd6yoH5E3upgy9EasoiJrA mTNCijImhPIt+yFexFyPAWyGhz7k6KTmHeq0EdIFyG93VNljp2pSCBO8hXWmV8Ga JaIZWKrZ7Eoxrrh0eN+3Bifvn+/JJ1Np5oCWOQLPb4zPVlRzvD3PI+CXWeDlaoMQ V53nm2xtnBUE+w== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:38 2025 by rpki-client