This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json) Hash identifier: Hf2AMRTfTfXJKRn+gm4Hdjdsgi6lPcy8Sw0spbjvRyQ= Subject key identifier: 0D:63:6E:25:EF:82:DF:6C:2F:1C:DD:60:51:B5:CC:D5:69:11:EA:64 Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84 Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884 Certificate serial: 019AF12EE3E7DCB7CE495EC850A152F4C21A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: RP+/UmxafasjG2rO36RYHuxZfJW9dyRkLbU8A4BtsKY=) 2: oFJDhlIxFUNhw_-HBfRNlNTaZxk.roa (hash: X5zMaPXKmmEjg88Z3XtKkZigQqgVKFsASLy1XTJf6Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e3:e7:dc:b7:ce:49:5e:c8:50:a1:52:f4:c2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884 Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=0d636e25ef82df6c2f1cdd6051b5ccd56911ea64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:18:43:3d:69:d0:03:4b:a5:1d:0f:ce:30: c5:e8:70:11:66:70:78:0f:ce:ac:9f:17:a6:af:fc: cd:da:77:2e:95:0e:67:45:eb:9a:ca:06:5e:e8:a3: d8:ae:5f:b9:53:14:6e:39:09:7b:af:af:64:b2:51: 10:1a:de:ac:e5:f9:6e:81:e0:21:01:12:06:e0:d9: 68:f8:32:ce:f7:5a:63:5b:ce:d0:3f:c9:22:eb:3d: ed:90:df:1d:05:f3:9e:48:55:71:55:af:26:6b:6e: 8c:d3:c5:7c:05:4a:2d:4c:0f:a7:3b:4a:2e:f3:34: 0a:e8:3f:4a:1e:29:2d:17:ee:3c:94:0f:ad:d3:34: 25:e0:bc:7b:f6:f0:0b:00:84:1d:76:c5:dc:d9:2d: 1c:b4:2f:00:f9:02:5b:54:e2:01:b6:e5:66:2e:79: 76:d9:51:09:aa:84:66:5e:ba:9e:90:6a:16:02:e9: 0b:6e:35:a8:76:2d:25:23:60:22:dc:42:b6:8b:10: 3a:5c:8b:fb:c1:4d:c5:95:75:40:73:44:82:4e:da: fa:e9:a4:40:d7:cb:93:3a:3c:58:70:69:26:22:47: 97:c8:33:1f:75:d2:f1:b5:42:a3:ba:81:27:dc:be: cb:29:df:0a:db:0e:29:d1:09:c8:d4:c6:bc:36:8c: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:63:6E:25:EF:82:DF:6C:2F:1C:DD:60:51:B5:CC:D5:69:11:EA:64 X509v3 Authority Key Identifier: keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ba:57:c1:c2:a4:9c:3f:56:fc:0f:4d:db:29:fc:97:6e:3a: 5b:1d:ca:23:78:e9:72:f2:b5:aa:76:8d:92:60:81:45:ea:61: e1:9d:09:78:2f:66:ab:9f:1e:19:bb:21:32:44:be:89:86:92: e6:c5:e7:53:9c:8e:c7:e2:8c:88:ae:78:a5:32:ea:77:bc:be: eb:c4:c3:44:3e:df:51:e9:0f:87:b4:3f:53:26:53:fc:e8:f7: 4c:df:a8:d2:b7:2f:58:ad:4e:dd:e4:d7:3a:44:a6:bb:22:36: 9f:6c:97:ee:7d:88:cf:87:bb:d2:1f:48:05:cb:27:e9:aa:60: 08:a1:51:b0:89:c7:14:4f:2b:ff:04:23:46:19:8f:77:7b:4b: 06:f9:f2:4c:bc:05:f1:79:8f:97:a4:fc:41:1a:5a:2f:f0:11: ce:55:55:51:36:7f:41:0a:ab:37:f5:35:ee:87:ca:ed:d6:f3: 04:5d:3f:6e:6d:b4:34:17:1b:e8:6b:52:5c:fa:a3:c8:04:37: 69:00:62:17:c9:a2:8e:bc:71:c2:b3:2e:73:73:13:59:35:e9: f3:ad:6c:12:76:c1:fc:bf:95:1a:4a:6b:4f:f4:66:08:e6:0e: b4:03:ce:c1:45:9b:7f:51:83:ed:1e:33:e7:94:75:aa:be:ab: f8:2d:9a:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuPn3LfOSV7IUKFS9MIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNWEwNTZjODI0Mjk3MWQxYTkwYjBiZmE5OGIxYjdhOTMw NTI4ODQwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD EygwZDYzNmUyNWVmODJkZjZjMmYxY2RkNjA1MWI1Y2NkNTY5MTFlYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFQYQz1p0ANLpR0PzjDF6HARZnB4 D86snxemr/zN2nculQ5nReuaygZe6KPYrl+5UxRuOQl7r69kslEQGt6s5flugeAh ARIG4Nlo+DLO91pjW87QP8ki6z3tkN8dBfOeSFVxVa8ma26M08V8BUotTA+nO0ou 8zQK6D9KHiktF+48lA+t0zQl4Lx79vALAIQddsXc2S0ctC8A+QJbVOIBtuVmLnl2 2VEJqoRmXrqekGoWAukLbjWodi0lI2Ai3EK2ixA6XIv7wU3FlXVAc0SCTtr66aRA 18uTOjxYcGkmIkeXyDMfddLxtUKjuoEn3L7LKd8K2w4p0QnI1Ma8Nox1XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1jbiXvgt9sLxzdYFG1zNVpEepkMB8GA1UdIwQY MBaAFONaBWyCQpcdGpCwv6mLG3qTBSiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODIt YWFiNGJkOGZjZTlkLzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODItYWFiNGJkOGZjZTlk LzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7pXwcKk nD9W/A9N2yn8l246Wx3KI3jpcvK1qnaNkmCBReph4Z0JeC9mq58eGbshMkS+iYaS 5sXnU5yOx+KMiK54pTLqd7y+68TDRD7fUekPh7Q/UyZT/Oj3TN+o0rcvWK1O3eTX OkSmuyI2n2yX7n2Iz4e70h9IBcsn6apgCKFRsInHFE8r/wQjRhmPd3tLBvnyTLwF 8XmPl6T8QRpaL/ARzlVVUTZ/QQqrN/U17ofK7dbzBF0/bm20NBcb6GtSXPqjyAQ3 aQBiF8mijrxxwrMuc3MTWTXp861sEnbB/L+VGkprT/RmCOYOtAPOwUWbf1GD7R4z 55R1qr6r+C2aqg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:08 2025 by rpki-client