This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json) Hash identifier: myQsDK86xkbVszrda+WlqlQjyjjTvBaR9nk++gOIyyo= Subject key identifier: F8:11:17:C5:9A:8D:EA:FA:3B:79:D8:6E:08:AF:70:3A:A4:B7:57:06 Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd Certificate serial: 019B469403D7CB0BEE3A91E321F46AB225B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 15:01:03 +0000 Manifest this update: Mon 22 Dec 2025 15:01:03 +0000 Manifest next update: Tue 23 Dec 2025 15:01:03 +0000 Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: VKv8HumX/bB/zQwjXzhkXOH4vvisxbgI5j/yn2tnVw8=) 2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:03:d7:cb:0b:ee:3a:91:e3:21:f4:6a:b2:25:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd Validity Not Before: Dec 22 15:01:03 2025 GMT Not After : Dec 23 15:01:03 2025 GMT Subject: CN=f81117c59a8deafa3b79d86e08af703aa4b75706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a6:c9:d9:95:87:49:e6:a1:16:af:36:63:ca: b2:9f:49:7b:71:4e:4c:be:80:a8:f4:54:c7:18:a4: 9b:c6:35:44:90:9c:9f:43:89:1d:c3:d5:34:7d:bc: ef:ee:08:61:fa:72:bf:ab:7b:37:5b:87:45:bd:12: e3:a3:d1:09:22:c0:8d:d7:58:2e:18:11:fb:0a:72: 7b:65:8f:11:73:6a:2d:8d:ab:53:5c:5b:72:72:34: 52:a3:49:06:6c:ed:b6:b8:98:c4:49:21:c7:b5:5a: 9c:67:32:b0:65:77:7d:c5:ef:16:40:72:23:97:0a: a6:71:3c:90:6a:8b:68:92:d0:b2:24:7b:c3:2d:b9: d9:bc:50:85:ef:5c:af:36:c5:b6:f8:4d:e9:80:50: 8f:eb:66:81:c9:8c:dd:e0:90:43:1e:29:32:b9:3c: bf:d0:0a:72:2e:8c:2f:23:14:13:a5:04:76:70:02: 72:0f:77:2a:45:19:64:e9:cf:5c:c3:d8:12:3c:0c: b6:d3:d7:16:2a:50:4c:33:8e:9b:e5:72:eb:92:1f: 66:82:5c:3a:a8:0d:fc:a7:99:74:90:28:de:1a:35: cb:28:f7:53:60:2a:25:09:de:77:b5:7b:29:1d:ab: 33:12:a0:79:f1:74:47:8c:8e:94:f2:c3:85:9a:7f: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:11:17:C5:9A:8D:EA:FA:3B:79:D8:6E:08:AF:70:3A:A4:B7:57:06 X509v3 Authority Key Identifier: keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:97:58:13:8e:7d:4c:6e:eb:21:47:b0:09:8b:dc:6b:f2: f3:37:c2:45:bb:45:63:2a:68:95:d7:48:40:4c:69:4f:4e:d0: 17:ea:a6:74:15:34:ea:6a:93:27:a9:39:9a:f1:ba:63:09:ab: 2d:d8:9b:9e:28:61:69:8c:17:a1:13:ab:54:cc:fd:4c:3a:82: 62:6b:62:df:36:12:b6:26:af:40:07:c7:8a:c7:11:82:96:0d: 56:cb:13:6f:28:6d:c7:54:c7:e9:51:25:43:17:c2:91:54:e9: 11:a0:2e:92:4e:09:ec:7c:b6:ce:a7:d0:2b:9e:54:34:70:15: eb:91:f4:66:c1:7a:92:08:9f:d6:d7:53:ff:87:5e:38:a6:bc: 96:23:c2:ba:9f:76:b3:e9:c7:4d:af:3c:3b:89:60:55:0a:f9: ad:a2:01:c8:d5:18:3a:fa:fd:82:4d:d4:2e:76:fd:f9:4c:12: 13:7e:a2:98:62:8e:4c:fd:8f:31:b3:fa:3c:6d:22:76:9a:b2: ec:70:47:82:f7:af:5d:c9:fe:50:19:04:2f:63:c5:71:ee:25: 6a:c9:a5:6f:47:ff:26:fe:e3:93:01:cc:31:fa:18:60:e1:8e: 60:f4:4c:44:cd:40:a7:33:b2:98:96:d5:82:7b:21:fe:fa:03: 25:91:87:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlAPXywvuOpHjIfRqsiW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOGYxMGEyYzc5MmQwZDM2NTY3OGEzNmNhN2Y3ZjE0MDlj YTNhZmQwHhcNMjUxMjIyMTUwMTAzWhcNMjUxMjIzMTUwMTAzWjAzMTEwLwYDVQQD EyhmODExMTdjNTlhOGRlYWZhM2I3OWQ4NmUwOGFmNzAzYWE0Yjc1NzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KbJ2ZWHSeahFq82Y8qyn0l7cU5M voCo9FTHGKSbxjVEkJyfQ4kdw9U0fbzv7ghh+nK/q3s3W4dFvRLjo9EJIsCN11gu GBH7CnJ7ZY8Rc2otjatTXFtycjRSo0kGbO22uJjESSHHtVqcZzKwZXd9xe8WQHIj lwqmcTyQaotoktCyJHvDLbnZvFCF71yvNsW2+E3pgFCP62aByYzd4JBDHikyuTy/ 0ApyLowvIxQTpQR2cAJyD3cqRRlk6c9cw9gSPAy209cWKlBMM46b5XLrkh9mglw6 qA38p5l0kCjeGjXLKPdTYColCd53tXspHaszEqB58XRHjI6U8sOFmn8wSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgRF8Wajer6O3nYbgivcDqkt1cGMB8GA1UdIwQY MBaAFOOPEKLHktDTZWeKNsp/fxQJyjr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjct ODM1M2FhNDBiYWViLzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjctODM1M2FhNDBiYWVi LzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe2XWBOO fUxu6yFHsAmL3Gvy8zfCRbtFYypolddIQExpT07QF+qmdBU06mqTJ6k5mvG6Ywmr LdibnihhaYwXoROrVMz9TDqCYmti3zYStiavQAfHiscRgpYNVssTbyhtx1TH6VEl QxfCkVTpEaAukk4J7Hy2zqfQK55UNHAV65H0ZsF6kgif1tdT/4deOKa8liPCup92 s+nHTa88O4lgVQr5raIByNUYOvr9gk3ULnb9+UwSE36imGKOTP2PMbP6PG0idpqy 7HBHgvevXcn+UBkEL2PFce4lasmlb0f/Jv7jkwHMMfoYYOGOYPRMRM1ApzOymJbV gnsh/voDJZGHOQ== -----END CERTIFICATE-----Generated at Mon Dec 22 22:33:30 2025 by rpki-client