This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft File: Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json) Hash identifier: 7Rae8+uRKiWv/mrtwOnG8KDXLIEYmwh1dBVo8rIdqHI= Subject key identifier: 9C:00:BB:C8:9B:10:B5:39:BB:D6:B8:F9:C3:D1:2C:C1:AC:6D:E6:93 Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f Certificate serial: 019B49952EFD865757680122444635E6CDB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft Manifest number: 1115 Signing time: Tue 23 Dec 2025 05:01:12 +0000 Manifest this update: Tue 23 Dec 2025 05:01:12 +0000 Manifest next update: Wed 24 Dec 2025 05:01:12 +0000 Files and hashes: 1: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: SYQgD7ZlvIRDvOZDOtjTquGbo46q0cqwhZozfgokSPM=) 2: _E2OmhB2yle657BPHBkkbqhw_cY.roa (hash: VPPxuzZKdPP1hP61NjVI6jsXIa9blTuhi90OFpPUsB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:2e:fd:86:57:57:68:01:22:44:46:35:e6:cd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f Validity Not Before: Dec 23 05:01:12 2025 GMT Not After : Dec 24 05:01:12 2025 GMT Subject: CN=9c00bbc89b10b539bbd6b8f9c3d12cc1ac6de693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:85:32:8a:fe:ac:cc:07:81:0b:12:5b:d6: 91:e0:36:e9:ae:66:84:56:14:b7:4d:d0:12:66:ec: 65:d0:78:14:f5:3f:fd:f2:9c:9f:bd:bb:d9:09:a8: 9d:2d:7e:ea:e8:dd:67:18:37:6f:2f:c9:61:99:54: f4:0b:3d:94:1c:94:c2:3d:fa:07:52:92:70:c0:f9: f0:0f:2e:8c:ed:8e:5d:58:e7:0e:51:7e:e5:fc:b4: f1:86:92:63:18:25:af:5d:a6:cb:33:37:38:b3:9d: 52:29:a4:b0:02:ee:69:de:1d:e3:82:f7:d5:c2:1d: c1:fd:16:ff:34:15:55:cd:bd:91:6e:dd:e8:0d:a6: 26:0e:02:a8:67:09:fc:37:79:1b:6c:98:a1:7f:ce: 44:ec:69:32:29:43:d3:6c:d9:0d:6c:bf:39:98:8a: f5:7f:14:8d:bc:c4:89:95:00:dc:65:40:32:94:db: d8:84:75:c4:43:6f:42:93:fe:e2:c9:21:a6:98:9b: f8:b4:86:96:23:83:d1:d8:2d:36:96:e9:04:6c:a3: 4a:40:f4:20:69:b4:c0:b0:73:90:2b:29:64:52:9e: 4c:35:0e:4d:1d:1d:ee:54:4f:a7:87:1d:db:0e:4b: c4:0a:ba:92:dd:83:c8:95:09:d3:d2:aa:6c:f3:18: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:00:BB:C8:9B:10:B5:39:BB:D6:B8:F9:C3:D1:2C:C1:AC:6D:E6:93 X509v3 Authority Key Identifier: keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0d:f3:ec:c5:87:08:8a:56:26:9e:49:2b:9c:cf:e9:5c:13: 00:79:a6:7e:2f:c0:53:74:66:71:a8:68:5d:f3:89:01:58:bb: 7e:d0:1b:01:13:76:ab:21:21:f1:b5:8a:61:d0:6a:3a:a1:1b: 6c:67:6a:3b:21:48:76:78:26:d3:10:b1:7a:fa:1a:29:6d:96: 1d:8d:c9:d3:4d:ac:a5:cf:83:36:ff:71:51:5d:78:c0:6a:e6: 98:64:e8:f5:5d:0b:a5:e4:dd:ea:5f:20:de:5c:80:38:fd:a1: e3:87:99:6d:e4:a6:4c:14:33:88:65:62:24:46:30:0b:14:a9: 72:25:ed:67:d0:87:2e:32:87:17:ff:e5:cd:75:3d:b1:ad:30: 37:39:bb:83:a7:60:be:24:bb:c1:37:8d:82:fd:bc:01:2e:fd: 6a:30:ac:2a:a6:14:e3:aa:50:0c:bd:f4:32:34:4c:c0:4c:d3: 9b:be:2f:f5:65:ab:7b:8c:a2:d5:38:16:1b:53:6a:b9:7e:34: 29:9b:ae:64:93:a7:86:18:7f:be:b8:45:36:40:24:d1:58:89: 3f:22:59:72:67:3f:5d:59:87:c9:c1:db:f5:1d:2b:34:eb:60: c5:5f:e3:9b:83:68:b7:56:c8:60:7a:8c:58:76:0e:f0:6c:30: 25:6c:a8:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlS79hldXaAEiREY15s2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZmU3YjU2NzIyMjQ1MTE2ZDQyMzRiZTQ4NGEwMmE0OGEx ZGRlMWYwHhcNMjUxMjIzMDUwMTEyWhcNMjUxMjI0MDUwMTEyWjAzMTEwLwYDVQQD Eyg5YzAwYmJjODliMTBiNTM5YmJkNmI4ZjljM2QxMmNjMWFjNmRlNjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LSFMor+rMwHgQsSW9aR4DbprmaE VhS3TdASZuxl0HgU9T/98pyfvbvZCaidLX7q6N1nGDdvL8lhmVT0Cz2UHJTCPfoH UpJwwPnwDy6M7Y5dWOcOUX7l/LTxhpJjGCWvXabLMzc4s51SKaSwAu5p3h3jgvfV wh3B/Rb/NBVVzb2Rbt3oDaYmDgKoZwn8N3kbbJihf85E7GkyKUPTbNkNbL85mIr1 fxSNvMSJlQDcZUAylNvYhHXEQ29Ck/7iySGmmJv4tIaWI4PR2C02lukEbKNKQPQg abTAsHOQKylkUp5MNQ5NHR3uVE+nhx3bDkvECrqS3YPIlQnT0qps8xgKzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwAu8ibELU5u9a4+cPRLMGsbeaTMB8GA1UdIwQY MBaAFEb+e1ZyIkURbUI0vkhKAqSKHd4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTct NGJkMzM5MmQ1NWQxLzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTctNGJkMzM5MmQ1NWQx LzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEA3z7MWH CIpWJp5JK5zP6VwTAHmmfi/AU3RmcahoXfOJAVi7ftAbARN2qyEh8bWKYdBqOqEb bGdqOyFIdngm0xCxevoaKW2WHY3J002spc+DNv9xUV14wGrmmGTo9V0LpeTd6l8g 3lyAOP2h44eZbeSmTBQziGViJEYwCxSpciXtZ9CHLjKHF//lzXU9sa0wNzm7g6dg viS7wTeNgv28AS79ajCsKqYU46pQDL30MjRMwEzTm74v9WWre4yi1TgWG1NquX40 KZuuZJOnhhh/vrhFNkAk0ViJPyJZcmc/XVmHycHb9R0rNOtgxV/jm4Not1bIYHqM WHYO8GwwJWyokA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:55:57 2025 by rpki-client