This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json) Hash identifier: DLDyFr1cXHHY1o7R+WFT51kxFSfJy5ZF/STMO7onVZA= Subject key identifier: 32:63:66:B9:07:09:6D:F2:A8:FF:D0:3B:58:87:BE:AF:04:0F:1F:E2 Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Certificate serial: 019AF12E6A433FABFEB235A056DE17BE7718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:22 +0000 Manifest this update: Sat 06 Dec 2025 01:02:22 +0000 Manifest next update: Sun 07 Dec 2025 01:02:22 +0000 Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: rqJRfUwIregRVO7JNC5wHUxDdqHbeRRZh4hOiBtagK8=) 2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=) 3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6a:43:3f:ab:fe:b2:35:a0:56:de:17:be:77:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Validity Not Before: Dec 6 01:02:22 2025 GMT Not After : Dec 7 01:02:22 2025 GMT Subject: CN=326366b907096df2a8ffd03b5887beaf040f1fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:62:a8:40:43:da:2b:b7:e3:bc:20:59:05: 72:e0:65:9d:4d:bf:83:5d:6d:52:7e:20:b8:7f:17: 8f:cd:8b:99:fb:fa:c0:39:f6:fa:9e:ba:d9:38:e4: 0e:6b:01:eb:fb:b7:fa:02:cb:47:3d:b2:11:37:5b: e0:85:af:83:c6:c6:5c:17:f1:c7:26:68:be:b0:c7: 8a:8a:f9:a1:54:3e:e5:d7:69:8b:98:b9:8a:a8:c1: 85:7a:ea:e8:45:2c:c7:be:d1:ff:86:8a:e8:74:d3: 34:c4:9f:53:b4:34:98:f3:2c:d5:d8:11:93:94:6a: 5d:23:34:be:61:58:52:12:44:fd:09:24:aa:91:6b: 6d:3a:ec:95:5a:aa:3c:e2:65:da:c1:25:fa:8c:3d: 1e:38:94:0f:80:06:fc:ca:0e:7d:82:77:33:97:72: 75:54:d0:0c:59:05:7e:43:ff:d4:9e:e0:cc:83:cf: 75:fb:6c:fb:21:86:59:fe:e0:a3:02:ed:bf:d6:03: fe:38:38:13:ca:7c:34:d3:27:9c:e3:36:86:25:ab: 7c:51:a5:02:ed:a7:b0:dd:81:ba:e0:85:2a:67:44: 2a:83:13:26:e1:da:3e:11:c0:7b:f7:18:79:63:6a: c8:0d:82:7a:6f:5e:e4:b9:94:aa:81:62:0c:ef:2a: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:63:66:B9:07:09:6D:F2:A8:FF:D0:3B:58:87:BE:AF:04:0F:1F:E2 X509v3 Authority Key Identifier: keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cb:f7:9a:5a:61:20:a1:e3:10:54:91:9a:98:be:2b:5a:d9: 3b:f4:a1:67:6a:2a:ea:d8:17:1c:bb:66:18:9a:be:95:7b:c0: 58:32:40:03:d2:f7:33:2a:bd:a7:ab:cc:36:78:65:d9:fb:ce: 49:39:4e:87:03:83:72:c1:e9:4d:c9:66:48:da:67:0b:fb:1a: ac:8d:ae:d3:35:24:57:83:b1:23:5e:ba:d8:31:cd:6b:b2:d0: ba:00:3d:00:5f:a4:8f:91:d4:7a:d3:dd:4f:60:7d:d8:62:67: 91:7b:f4:0a:91:78:5f:b4:4c:78:14:8b:cc:7d:45:62:2c:8d: b7:ab:af:19:19:4a:f9:7a:94:08:d8:88:d8:d8:a2:37:9d:85: ed:60:07:f3:eb:57:2f:f8:6d:b3:ba:88:36:cf:94:93:a8:c0: 97:8e:93:7f:d5:f3:20:8e:9a:ce:1a:76:41:46:0d:ae:d3:f8: 38:4c:d2:9f:58:d5:c0:a2:c3:51:fa:e5:79:e6:ea:74:ba:1b: 55:ae:01:1f:9b:69:a2:2f:a4:80:48:7e:dd:f0:ff:17:f9:1a: 9b:69:bc:67:4d:81:a3:ce:ad:82:e3:a7:77:d6:31:26:de:b5: e4:46:58:72:bc:cd:bd:45:24:54:43:a3:05:bb:d0:3e:3f:4f: ae:96:98:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmpDP6v+sjWgVt4XvncYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2NhYjc0NzlhNGUwZDhhNDE3NzM1MGEwMGE2OWJkODgz YjA0OGQwHhcNMjUxMjA2MDEwMjIyWhcNMjUxMjA3MDEwMjIyWjAzMTEwLwYDVQQD EygzMjYzNjZiOTA3MDk2ZGYyYThmZmQwM2I1ODg3YmVhZjA0MGYxZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyBiqEBD2iu347wgWQVy4GWdTb+D XW1SfiC4fxePzYuZ+/rAOfb6nrrZOOQOawHr+7f6AstHPbIRN1vgha+DxsZcF/HH Jmi+sMeKivmhVD7l12mLmLmKqMGFeuroRSzHvtH/horodNM0xJ9TtDSY8yzV2BGT lGpdIzS+YVhSEkT9CSSqkWttOuyVWqo84mXawSX6jD0eOJQPgAb8yg59gnczl3J1 VNAMWQV+Q//UnuDMg891+2z7IYZZ/uCjAu2/1gP+ODgTynw00yec4zaGJat8UaUC 7aew3YG64IUqZ0QqgxMm4do+EcB79xh5Y2rIDYJ6b17kuZSqgWIM7yoVbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJjZrkHCW3yqP/QO1iHvq8EDx/iMB8GA1UdIwQY MBaAFEbMq3R5pODYpBdzUKAKab2IOwSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgt MmYzMDI1MmViNDQyLzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgtMmYzMDI1MmViNDQy LzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsv3mlph IKHjEFSRmpi+K1rZO/ShZ2oq6tgXHLtmGJq+lXvAWDJAA9L3Myq9p6vMNnhl2fvO STlOhwODcsHpTclmSNpnC/sarI2u0zUkV4OxI1662DHNa7LQugA9AF+kj5HUetPd T2B92GJnkXv0CpF4X7RMeBSLzH1FYiyNt6uvGRlK+XqUCNiI2NiiN52F7WAH8+tX L/hts7qINs+Uk6jAl46Tf9XzII6azhp2QUYNrtP4OEzSn1jVwKLDUfrleebqdLob Va4BH5tpoi+kgEh+3fD/F/kam2m8Z02Bo86tguOnd9YxJt615EZYcrzNvUUkVEOj BbvQPj9PrpaYlQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:44 2025 by rpki-client