This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json) Hash identifier: BNwTDWSrp+7qogYUfptQltLPYIM6KkNxwwSbIKlv6hU= Subject key identifier: E4:EE:7A:B6:19:38:2A:C8:92:AF:C5:F5:FC:FB:67:8C:46:9C:5C:F9 Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9 Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9 Certificate serial: 019AF276B7069CCE14943921DA0449BC036B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft Manifest number: 0B70 Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=) 2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: jU7/qOy3BUB50SOxt1gAE5gbC+AAO8HVtOuXL7vtSvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b7:06:9c:ce:14:94:39:21:da:04:49:bc:03:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9 Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=e4ee7ab619382ac892afc5f5fcfb678c469c5cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:7f:5b:33:f2:90:eb:b2:ff:06:cd:49:85: cc:80:de:8f:03:3e:45:d1:27:37:a1:a6:3f:95:55: b2:63:e5:16:92:f3:3d:d2:cf:d0:ce:0a:af:da:4d: fa:ce:5f:d3:d5:23:7b:63:d7:de:d9:e1:95:0d:9e: 0d:e5:60:64:54:69:34:70:e1:e4:72:64:a5:a5:46: 35:f8:3f:c7:28:fd:21:ae:2d:a5:2b:ec:83:bb:4e: 73:49:bf:d7:e7:0e:76:09:18:ee:20:c8:46:5e:68: 0e:99:aa:44:69:7e:ab:63:92:51:53:88:7b:51:3e: 1b:a7:bd:76:fc:1d:e9:12:50:e0:c7:54:71:1d:fb: 23:ba:e2:1a:4a:20:c1:f0:fd:d6:3f:c1:37:0c:04: b2:83:fd:d1:84:ea:52:98:af:4f:67:bf:44:ed:95: ee:c4:ff:09:31:59:91:8b:fc:2a:ab:93:08:f1:b6: 47:85:34:e8:e9:f4:a1:1a:48:b4:61:6c:87:f7:28: b4:af:69:b3:28:52:c9:24:b2:80:1a:6f:8e:24:66: 46:52:5c:52:d2:bd:54:aa:cc:7b:da:85:ec:08:c7: d5:61:1e:0f:9a:45:af:92:7e:41:8f:83:9f:2b:ab: 14:8f:75:39:87:2f:8b:00:c1:e9:f8:3d:d7:e2:08: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EE:7A:B6:19:38:2A:C8:92:AF:C5:F5:FC:FB:67:8C:46:9C:5C:F9 X509v3 Authority Key Identifier: keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:74:5a:8f:78:e4:2f:ae:27:96:58:8c:4f:ae:b8:e5:86:1b: 12:b8:e3:13:c2:7d:1e:6f:db:9d:08:b9:78:f2:a2:aa:c7:62: 0e:f3:65:ec:0d:61:a9:0a:72:79:62:9b:86:de:1e:10:c5:f5: de:4f:31:ab:90:ec:b0:a8:61:0d:9b:2f:30:9a:27:94:b3:86: 36:9b:dc:a5:c9:5a:08:9f:ac:1f:f1:f7:2f:c4:77:31:67:47: 67:43:15:61:9f:da:55:ed:df:fa:b0:cb:ad:fd:50:bc:f0:7b: 28:3d:bf:26:7b:b8:1b:79:24:88:3d:7d:13:c5:f7:e5:bb:0a: b1:20:34:b1:90:54:4f:6c:e5:8b:e6:98:6d:de:9f:8e:ee:24: 45:70:70:2c:8e:54:57:0c:a0:1b:bc:1f:94:99:48:f8:e4:68: 3e:64:50:68:09:21:6d:e9:39:b1:53:cd:85:b2:18:77:22:16: 97:2e:86:26:5e:d2:bb:fd:92:f1:4f:d2:a6:b6:64:74:7d:f7: d6:a4:0d:48:60:c5:f1:2e:4b:2e:ab:9e:c9:6d:73:cb:1a:20: 1f:81:32:c0:e9:5d:cd:74:3f:7e:90:48:cf:1d:eb:cc:54:73: 17:b5:3a:a9:ad:6b:33:8e:6f:96:f8:af:b0:c4:48:ca:7b:87: 30:b6:0c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrcGnM4UlDkh2gRJvANrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNTZmNWMyM2NjZWM2NDY0MDY4NWU0NGQ1OWJjNGI2ZDQ0 ZGFhYjkwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD EyhlNGVlN2FiNjE5MzgyYWM4OTJhZmM1ZjVmY2ZiNjc4YzQ2OWM1Y2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDt/WzPykOuy/wbNSYXMgN6PAz5F 0Sc3oaY/lVWyY+UWkvM90s/Qzgqv2k36zl/T1SN7Y9fe2eGVDZ4N5WBkVGk0cOHk cmSlpUY1+D/HKP0hri2lK+yDu05zSb/X5w52CRjuIMhGXmgOmapEaX6rY5JRU4h7 UT4bp712/B3pElDgx1RxHfsjuuIaSiDB8P3WP8E3DASyg/3RhOpSmK9PZ79E7ZXu xP8JMVmRi/wqq5MI8bZHhTTo6fShGki0YWyH9yi0r2mzKFLJJLKAGm+OJGZGUlxS 0r1Uqsx72oXsCMfVYR4PmkWvkn5Bj4OfK6sUj3U5hy+LAMHp+D3X4ggRswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTuerYZOCrIkq/F9fz7Z4xGnFz5MB8GA1UdIwQY MBaAFONW9cI8zsZGQGheRNWbxLbUTaq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMt M2NhZGVjNDZlNWMzLzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMtM2NhZGVjNDZlNWMz LzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInRaj3jk L64nlliMT6645YYbErjjE8J9Hm/bnQi5ePKiqsdiDvNl7A1hqQpyeWKbht4eEMX1 3k8xq5DssKhhDZsvMJonlLOGNpvcpclaCJ+sH/H3L8R3MWdHZ0MVYZ/aVe3f+rDL rf1QvPB7KD2/Jnu4G3kkiD19E8X35bsKsSA0sZBUT2zli+aYbd6fju4kRXBwLI5U VwygG7wflJlI+ORoPmRQaAkhbek5sVPNhbIYdyIWly6GJl7Su/2S8U/SprZkdH33 1qQNSGDF8S5LLqueyW1zyxogH4EywOldzXQ/fpBIzx3rzFRzF7U6qa1rM45vlviv sMRIynuHMLYMeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:36 2025 by rpki-client