This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft File: Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json) Hash identifier: NfApC0ULs1rH4jSr/DKuhhWaYzUukApuAuYARG34aQ8= Subject key identifier: C3:5B:E9:14:B1:FB:2F:F3:7A:6C:94:7F:D1:E6:B7:2F:D0:46:7E:3F Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F Certificate issuer: /CN=46fe7b56722245116d4234be484a02a48a1dde1f Certificate serial: 019B0DB708D1A5E4C6024C5FA5715A841416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft Manifest number: 10F6 Signing time: Thu 11 Dec 2025 14:00:57 +0000 Manifest this update: Thu 11 Dec 2025 14:00:57 +0000 Manifest next update: Fri 12 Dec 2025 14:00:57 +0000 Files and hashes: 1: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: XckT+Z//Bn397SqaEaLMgnTX2lH5rQLZASdjenuwqXk=) 2: _E2OmhB2yle657BPHBkkbqhw_cY.roa (hash: VPPxuzZKdPP1hP61NjVI6jsXIa9blTuhi90OFpPUsB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:08:d1:a5:e4:c6:02:4c:5f:a5:71:5a:84:14:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f Validity Not Before: Dec 11 14:00:57 2025 GMT Not After : Dec 12 14:00:57 2025 GMT Subject: CN=c35be914b1fb2ff37a6c947fd1e6b72fd0467e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:58:5b:c0:16:52:87:29:b1:c0:f3:6f:34:85: bf:33:09:4f:8d:ea:98:dc:a9:e1:49:8d:9c:b9:bf: 49:7f:74:96:16:6f:8f:f6:1f:47:b8:dd:89:7f:15: 37:42:d2:15:ab:91:a9:61:c2:c7:b0:dc:fa:fd:b7: 7d:05:46:89:6b:69:c4:49:95:c1:0c:83:6f:f7:2a: 71:35:bf:8b:28:e8:ee:b3:4e:22:6c:90:59:a3:20: 55:d7:9c:be:c2:5e:d4:5e:a8:2b:2b:77:9f:b2:82: 98:ab:2d:0c:05:8b:38:d2:7c:26:62:0d:73:b0:f7: 4e:30:c8:e7:c7:1c:de:89:f8:70:51:6d:4a:f2:f3: da:cc:37:62:c2:d2:5d:f3:8f:f3:2e:de:5b:ac:65: b0:4b:4b:7c:76:c7:09:bd:61:69:0e:38:b7:6b:5c: 2c:74:af:74:db:d3:31:b9:1b:db:04:05:64:38:76: 6e:2c:4c:f3:7f:f0:18:e4:09:de:82:bb:03:e1:a6: 2b:ef:98:88:a9:87:0c:a9:84:f7:51:6e:eb:cb:be: b1:5f:a5:c8:32:6f:a5:49:e8:e7:1b:01:ca:2c:b6: 1f:37:e3:aa:d4:f6:ed:89:f1:22:9c:5b:77:96:04: 19:c6:74:48:d3:3c:d8:03:2a:07:3e:05:fe:ae:28: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5B:E9:14:B1:FB:2F:F3:7A:6C:94:7F:D1:E6:B7:2F:D0:46:7E:3F X509v3 Authority Key Identifier: keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:71:a7:a2:23:4f:9f:1a:df:b5:b3:5e:0d:1f:4e:83:da:c9: 9f:f0:4a:35:71:ed:b1:18:fc:4e:9a:d5:a6:74:21:63:31:6b: 75:4a:20:16:72:a8:37:69:42:bb:93:e2:b3:e5:7a:27:f2:dc: b4:55:06:d7:7d:d0:59:f6:be:a4:cc:bd:93:53:e7:8b:bd:44: bd:3a:6d:5b:b5:0d:5d:1e:81:f2:ae:fc:b9:29:d2:68:e5:4b: f4:ed:52:2d:b3:15:61:85:96:be:e0:a3:ab:60:83:99:e6:8b: 74:ad:4a:06:c4:d2:09:a2:5e:c8:bc:83:04:84:18:34:99:be: c1:d0:71:99:8d:7a:e2:b0:95:6d:46:64:d8:a1:ec:28:0c:b0: b7:ff:cf:e9:38:a2:f3:42:c7:0c:f8:22:13:00:9b:d5:4e:7c: 44:d6:1f:6d:08:1c:95:2a:c4:c5:5e:b4:b9:50:aa:cb:7d:50: ad:ec:ca:70:cf:0f:70:7e:c1:d2:e1:0d:94:43:a3:ff:c8:a4: 44:52:2a:f3:e9:c9:17:0f:69:9c:97:69:12:93:cf:6b:18:90: ab:70:61:42:95:ec:e0:1e:20:ae:7b:ab:1b:1f:d8:2c:c4:49: b9:c1:ca:05:69:45:56:db:d0:ec:5f:ca:d9:8e:0b:45:d1:dd: 11:06:7c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtwjRpeTGAkxfpXFahBQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZmU3YjU2NzIyMjQ1MTE2ZDQyMzRiZTQ4NGEwMmE0OGEx ZGRlMWYwHhcNMjUxMjExMTQwMDU3WhcNMjUxMjEyMTQwMDU3WjAzMTEwLwYDVQQD EyhjMzViZTkxNGIxZmIyZmYzN2E2Yzk0N2ZkMWU2YjcyZmQwNDY3ZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lhbwBZShymxwPNvNIW/MwlPjeqY 3KnhSY2cub9Jf3SWFm+P9h9HuN2JfxU3QtIVq5GpYcLHsNz6/bd9BUaJa2nESZXB DINv9ypxNb+LKOjus04ibJBZoyBV15y+wl7UXqgrK3efsoKYqy0MBYs40nwmYg1z sPdOMMjnxxzeifhwUW1K8vPazDdiwtJd84/zLt5brGWwS0t8dscJvWFpDji3a1ws dK9029MxuRvbBAVkOHZuLEzzf/AY5AnegrsD4aYr75iIqYcMqYT3UW7ry76xX6XI Mm+lSejnGwHKLLYfN+Oq1PbtifEinFt3lgQZxnRI0zzYAyoHPgX+rijYrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNb6RSx+y/zemyUf9Hmty/QRn4/MB8GA1UdIwQY MBaAFEb+e1ZyIkURbUI0vkhKAqSKHd4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTct NGJkMzM5MmQ1NWQxLzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTctNGJkMzM5MmQ1NWQx LzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHGnoiNP nxrftbNeDR9Og9rJn/BKNXHtsRj8TprVpnQhYzFrdUogFnKoN2lCu5Pis+V6J/Lc tFUG133QWfa+pMy9k1Pni71EvTptW7UNXR6B8q78uSnSaOVL9O1SLbMVYYWWvuCj q2CDmeaLdK1KBsTSCaJeyLyDBIQYNJm+wdBxmY164rCVbUZk2KHsKAywt//P6Tii 80LHDPgiEwCb1U58RNYfbQgclSrExV60uVCqy31QrezKcM8PcH7B0uENlEOj/8ik RFIq8+nJFw9pnJdpEpPPaxiQq3BhQpXs4B4grnurGx/YLMRJucHKBWlFVtvQ7F/K 2Y4LRdHdEQZ8gw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:01:21 2025 by rpki-client