This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json) Hash identifier: jxVRI5y653hNe3Uemiuo9mLmQq4OM18UCuvTy9Jvdr8= Subject key identifier: A0:43:B5:B8:C9:C7:7F:F0:A0:39:69:3B:CC:1C:97:36:6B:A8:1E:38 Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd Certificate serial: 019B390EF3832E700116A45EF514B1D2B061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 00:00:39 +0000 Manifest this update: Sat 20 Dec 2025 00:00:39 +0000 Manifest next update: Sun 21 Dec 2025 00:00:39 +0000 Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: YI3rhKCpkqj/j/y92fuczAMZ76ByTrSnupp9KlOz8NA=) 2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:f3:83:2e:70:01:16:a4:5e:f5:14:b1:d2:b0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd Validity Not Before: Dec 20 00:00:39 2025 GMT Not After : Dec 21 00:00:39 2025 GMT Subject: CN=a043b5b8c9c77ff0a039693bcc1c97366ba81e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:d1:83:92:21:06:0a:6f:01:10:7e:62:72: a0:d2:45:aa:58:0c:24:a3:28:11:d5:f0:7d:09:e8: 0a:9c:a1:5f:74:29:47:eb:ef:26:d6:44:31:bc:a4: d7:ad:86:89:0f:55:66:6b:e6:8e:54:84:cc:c0:98: 32:6e:65:5c:8f:5d:79:98:1a:23:a6:29:75:ba:1a: ae:ae:0e:f9:4e:c7:13:32:dc:fd:bc:27:12:8d:4f: 3a:89:2f:0d:8d:21:ef:d0:c7:d2:4b:90:c5:6e:91: 23:e7:b6:ab:0d:78:82:c6:3b:77:7c:73:30:4b:eb: 04:47:82:61:a7:73:08:6f:93:f1:ba:57:34:cc:92: 4b:1a:72:ff:aa:88:b9:ed:67:64:5b:c8:8d:c9:d0: 32:df:e8:7f:98:3b:59:59:8b:74:76:e5:b4:cc:3f: 4f:02:5c:84:b0:21:07:f0:fb:c9:d2:7a:a1:52:bc: da:39:6f:cf:85:f6:17:d6:fe:4a:fb:50:2e:b4:b1: ba:76:87:ca:92:72:36:df:37:df:bc:d3:1e:c6:f6: 1e:6b:8e:14:4f:95:b3:12:fc:38:24:84:fb:51:8f: 9f:1f:68:05:87:4d:39:b5:a5:55:82:01:1c:0a:72: f1:e9:3c:8a:a8:ec:71:7e:75:d7:50:dd:c7:72:17: f3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:43:B5:B8:C9:C7:7F:F0:A0:39:69:3B:CC:1C:97:36:6B:A8:1E:38 X509v3 Authority Key Identifier: keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:84:52:62:03:99:b2:61:ce:7a:a4:31:56:94:49:9a:a7:6c: f7:db:a7:48:cb:35:3c:f8:51:48:13:8d:13:f4:fe:92:a1:c6: 48:45:8e:7c:b4:ea:1f:fd:6f:da:bb:09:3e:11:81:01:80:58: b8:f6:fa:2e:b6:0d:de:09:87:ce:50:37:62:65:b2:5e:eb:c3: 85:d0:e7:c6:77:c1:11:40:6e:36:dd:02:25:84:ab:4d:ef:2c: 92:0b:e0:f3:5f:71:8c:24:af:6e:7e:62:65:3e:8d:c0:2c:76: 98:ef:ec:63:3a:20:14:86:00:fe:e1:83:17:15:db:9d:c2:31: 28:97:dc:6f:45:d1:4b:37:26:a7:17:fa:6f:7a:3a:4e:82:9c: 53:63:4a:38:f8:0c:be:9a:0b:bd:e3:c7:6d:5e:69:a4:90:13: 4f:ea:67:30:92:2d:69:3b:27:49:f1:f7:7f:97:9d:b1:8d:92: 0a:23:04:76:4c:dc:01:7d:5b:1e:47:9f:44:83:24:74:2d:6b: 60:48:e1:aa:61:c9:62:cb:8c:5e:a4:b0:5c:7d:f6:79:34:79: a0:8a:94:3d:2b:65:6e:6f:ca:ae:a5:0d:f4:d7:48:fe:de:db: 35:ce:22:e3:ed:3c:83:9d:5e:e8:b7:8e:68:93:c5:1c:e1:6c: ee:99:61:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DvODLnABFqRe9RSx0rBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOGYxMGEyYzc5MmQwZDM2NTY3OGEzNmNhN2Y3ZjE0MDlj YTNhZmQwHhcNMjUxMjIwMDAwMDM5WhcNMjUxMjIxMDAwMDM5WjAzMTEwLwYDVQQD EyhhMDQzYjViOGM5Yzc3ZmYwYTAzOTY5M2JjYzFjOTczNjZiYTgxZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4zRg5IhBgpvARB+YnKg0kWqWAwk oygR1fB9CegKnKFfdClH6+8m1kQxvKTXrYaJD1Vma+aOVITMwJgybmVcj115mBoj pil1uhqurg75TscTMtz9vCcSjU86iS8NjSHv0MfSS5DFbpEj57arDXiCxjt3fHMw S+sER4Jhp3MIb5Pxulc0zJJLGnL/qoi57WdkW8iNydAy3+h/mDtZWYt0duW0zD9P AlyEsCEH8PvJ0nqhUrzaOW/PhfYX1v5K+1AutLG6dofKknI23zffvNMexvYea44U T5WzEvw4JIT7UY+fH2gFh005taVVggEcCnLx6TyKqOxxfnXXUN3HchfzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBDtbjJx3/woDlpO8wclzZrqB44MB8GA1UdIwQY MBaAFOOPEKLHktDTZWeKNsp/fxQJyjr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjct ODM1M2FhNDBiYWViLzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjctODM1M2FhNDBiYWVi LzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIRSYgOZ smHOeqQxVpRJmqds99unSMs1PPhRSBONE/T+kqHGSEWOfLTqH/1v2rsJPhGBAYBY uPb6LrYN3gmHzlA3YmWyXuvDhdDnxnfBEUBuNt0CJYSrTe8skgvg819xjCSvbn5i ZT6NwCx2mO/sYzogFIYA/uGDFxXbncIxKJfcb0XRSzcmpxf6b3o6ToKcU2NKOPgM vpoLvePHbV5ppJATT+pnMJItaTsnSfH3f5edsY2SCiMEdkzcAX1bHkefRIMkdC1r YEjhqmHJYsuMXqSwXH32eTR5oIqUPStlbm/KrqUN9NdI/t7bNc4i4+08g51e6LeO aJPFHOFs7plhwg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:09 2025 by rpki-client