This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json) Hash identifier: eccFoAy6hBzsavN7V9QTb0Z3Lw8Qk6MoQlQTLcJ2Buc= Subject key identifier: F2:33:2D:3E:75:3D:1B:66:EB:D8:13:76:DE:77:C9:3E:D1:BF:3B:47 Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb Certificate serial: 019AF31BB95C74F5C9A71330FFC9ECFC62F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft Manifest number: 090A Signing time: Sat 06 Dec 2025 10:01:11 +0000 Manifest this update: Sat 06 Dec 2025 10:01:11 +0000 Manifest next update: Sun 07 Dec 2025 10:01:11 +0000 Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: vUalXsbYUnbyDHsHGPAUAiT1jYWstGMciLBi4S9l2zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b9:5c:74:f5:c9:a7:13:30:ff:c9:ec:fc:62:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb Validity Not Before: Dec 6 10:01:11 2025 GMT Not After : Dec 7 10:01:11 2025 GMT Subject: CN=f2332d3e753d1b66ebd81376de77c93ed1bf3b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:2e:30:b4:fb:5a:fe:36:f3:c8:d9:f4:dd: 7a:e3:07:48:39:47:33:ae:78:dd:10:45:fd:28:24: 4a:c1:a6:45:87:b9:99:0e:6d:5b:b9:76:e2:01:b1: 58:53:28:f5:58:88:d3:3e:a0:06:0b:67:26:ce:55: b1:b6:e5:39:52:39:01:70:64:4d:bd:1a:c2:b9:55: 9b:cb:66:30:d3:87:a6:53:40:7b:d0:7c:05:fe:a2: 37:01:31:31:04:3a:e0:35:0e:6b:1a:de:f7:82:a4: 00:9e:09:ac:15:32:02:25:e4:34:e3:f8:8d:46:05: 47:d6:67:85:9a:b2:9d:e0:be:7c:93:aa:ac:a6:5b: a9:bb:de:2c:70:46:41:b3:f9:1f:a1:a8:57:74:d8: 33:15:2d:ad:f4:cc:40:b4:fe:d1:81:27:94:4e:4e: 41:5d:af:fb:87:2d:e7:80:9e:da:9f:11:d2:9a:1d: f4:37:f5:eb:79:1b:c1:77:51:bb:9f:82:53:77:5f: ad:20:81:69:d6:eb:b9:d2:6e:3a:07:96:e2:6c:9f: 37:57:65:91:e6:82:e9:4a:d9:d8:20:80:5a:4f:f8: e9:83:98:2e:07:33:b6:2f:f3:ba:4a:6e:77:f2:d0: e5:99:14:e4:56:a9:7a:66:96:57:80:f1:52:b0:70: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:33:2D:3E:75:3D:1B:66:EB:D8:13:76:DE:77:C9:3E:D1:BF:3B:47 X509v3 Authority Key Identifier: keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:46:a3:1e:28:36:59:60:d9:b1:3a:e6:4f:59:2d:46:05:55: a6:60:ca:ff:a4:55:9b:3f:69:d7:cc:fc:fd:dc:b2:25:f4:4e: dd:d3:90:2a:15:31:fb:8c:58:97:97:e0:8c:6d:1b:a0:95:44: 56:bf:d9:69:07:40:41:de:c5:9b:98:3d:00:86:64:b2:8f:73: 32:c0:ca:51:9f:e0:d5:09:3a:6b:d8:4b:dc:b0:a7:77:78:62: 82:ec:30:cf:6c:26:39:d0:b2:ca:e4:d8:c6:76:15:fd:2f:2f: 01:bd:de:f8:76:10:dd:d0:30:2a:67:42:f6:81:ab:f5:f8:af: 5f:f7:de:59:5d:b4:8c:5c:62:d5:95:00:d7:a9:a3:e9:43:de: 3c:9c:81:a1:c3:9a:fe:53:21:5f:0d:00:b5:d3:4d:7c:0d:74: 5f:bb:50:d5:37:26:b7:66:05:44:22:75:52:eb:26:eb:13:61: 85:64:4a:53:8e:a7:1b:56:a3:20:be:40:9e:76:e8:c2:2c:db: e6:d1:c9:27:66:09:a9:fd:70:3e:8b:21:53:79:72:7a:3f:c4: bc:5a:e4:51:93:e3:3c:61:ca:e1:c5:54:be:02:ff:29:bc:fe: 7c:11:c9:5a:2b:0b:08:73:69:d7:d4:6e:22:6a:e8:89:9e:64: 95:47:a5:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7lcdPXJpxMw/8ns/GLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YTQ3YTg1M2I1NTI4NzZhNzFiNzU3MGQwMDE0ZTA2NGI0 MzgwZmIwHhcNMjUxMjA2MTAwMTExWhcNMjUxMjA3MTAwMTExWjAzMTEwLwYDVQQD EyhmMjMzMmQzZTc1M2QxYjY2ZWJkODEzNzZkZTc3YzkzZWQxYmYzYjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV8uMLT7Wv4288jZ9N164wdIOUcz rnjdEEX9KCRKwaZFh7mZDm1buXbiAbFYUyj1WIjTPqAGC2cmzlWxtuU5UjkBcGRN vRrCuVWby2Yw04emU0B70HwF/qI3ATExBDrgNQ5rGt73gqQAngmsFTICJeQ04/iN RgVH1meFmrKd4L58k6qsplupu94scEZBs/kfoahXdNgzFS2t9MxAtP7RgSeUTk5B Xa/7hy3ngJ7anxHSmh30N/XreRvBd1G7n4JTd1+tIIFp1uu50m46B5bibJ83V2WR 5oLpStnYIIBaT/jpg5guBzO2L/O6Sm538tDlmRTkVql6ZpZXgPFSsHDwgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIzLT51PRtm69gTdt53yT7RvztHMB8GA1UdIwQY MBaAFJWkeoU7VSh2pxt1cNABTgZLQ4D7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGIt ZTg2NWZkOWE2MjJmLzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yNjdmYTMtNjIxZi00NmIzLWFhZGItZTg2NWZkOWE2MjJm LzEvbGFSNmhUdFZLSGFuRzNWdzBBRk9Ca3REZ1BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUajHig2 WWDZsTrmT1ktRgVVpmDK/6RVmz9p18z8/dyyJfRO3dOQKhUx+4xYl5fgjG0boJVE Vr/ZaQdAQd7Fm5g9AIZkso9zMsDKUZ/g1Qk6a9hL3LCnd3higuwwz2wmOdCyyuTY xnYV/S8vAb3e+HYQ3dAwKmdC9oGr9fivX/feWV20jFxi1ZUA16mj6UPePJyBocOa /lMhXw0AtdNNfA10X7tQ1Tcmt2YFRCJ1Uusm6xNhhWRKU46nG1ajIL5Annbowizb 5tHJJ2YJqf1wPoshU3lyej/EvFrkUZPjPGHK4cVUvgL/Kbz+fBHJWisLCHNp19Ru ImroiZ5klUel4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:32 2025 by rpki-client