This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft File: rRIanMsoPqIejQoHCi4LakDph30.mft (raw, json) Hash identifier: CmqsKq5BXoKO+F2nPFLM1zgv5h5faAjDk+6mUEvbnLo= Subject key identifier: 4E:58:D5:CC:BD:C5:99:B7:2B:5D:73:A8:47:C6:30:79:A2:89:24:1A Authority key identifier: AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D Certificate issuer: /CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d Certificate serial: 019B34C43414095EB89780DA3077E5F686A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft Manifest number: 1780 Signing time: Fri 19 Dec 2025 04:00:32 +0000 Manifest this update: Fri 19 Dec 2025 04:00:32 +0000 Manifest next update: Sat 20 Dec 2025 04:00:32 +0000 Files and hashes: 1: rRIanMsoPqIejQoHCi4LakDph30.crl (hash: ROnwyV4RRdMcpX/yQI8dfrAT47ants4rFcDJWeEBz7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:34:14:09:5e:b8:97:80:da:30:77:e5:f6:86:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d Validity Not Before: Dec 19 04:00:32 2025 GMT Not After : Dec 20 04:00:32 2025 GMT Subject: CN=4e58d5ccbdc599b72b5d73a847c63079a289241a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:a4:a0:5f:34:d0:24:86:c6:93:ad:d6:35: ec:30:31:70:ac:91:0e:5d:94:da:f1:77:3c:bd:40: db:f5:2b:0f:d4:a6:7d:b5:c4:3d:ac:7e:4f:8a:be: bd:9e:e7:8b:0a:d1:dc:5e:1e:34:49:76:05:90:fa: d1:62:e4:66:ee:1b:f6:ff:93:37:3b:08:75:2f:4a: 4e:cc:76:eb:c7:87:29:f5:68:67:d4:0b:3b:3d:1f: 1f:28:f9:b8:18:26:5f:3d:73:ef:e0:5a:ef:e2:60: ed:b9:1a:d3:e8:7e:ab:02:f9:b0:65:d3:20:00:86: 03:1f:43:37:eb:87:29:5f:87:0a:fe:97:35:6c:40: ce:b8:84:0a:c0:0e:f3:ec:89:8a:65:bc:d0:ae:88: 78:25:8c:81:74:02:09:99:7e:8e:f6:46:73:1a:92: d5:c6:46:1d:bd:07:46:5c:22:5b:de:18:5b:ec:5a: 0d:f5:14:3d:c2:91:a5:7a:30:3d:4f:72:61:52:56: d2:5e:cc:16:b5:60:bb:7b:64:d9:34:55:42:51:a0: 2d:c6:9a:2c:ff:58:b0:62:52:6f:07:1d:a9:1e:18: 49:f5:6b:0b:32:18:85:bc:d8:61:d5:47:00:98:4b: fc:f7:78:77:bb:b6:ac:f5:91:81:ec:64:16:bb:40: 60:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:58:D5:CC:BD:C5:99:B7:2B:5D:73:A8:47:C6:30:79:A2:89:24:1A X509v3 Authority Key Identifier: keyid:AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bb:3d:9c:10:d3:ba:fe:c2:23:d0:9d:09:c1:61:c5:f6:03: a1:bb:24:b7:42:1d:54:1b:48:02:d6:d6:a0:54:fe:9a:99:32: 00:ba:ad:c1:e6:0b:0b:ea:e4:36:61:8b:8b:bb:2a:0c:54:62: 90:cd:81:ca:aa:3d:c2:83:2b:0a:c7:c5:7b:6b:b7:b4:29:2c: 1c:d9:15:c1:7a:9b:4e:6e:16:87:fb:cd:64:a3:f3:9e:67:3c: b1:a8:2d:24:09:6c:fc:ba:1c:2b:a9:3b:1d:e6:b3:ab:46:ce: a0:8d:f2:10:22:cc:c8:b1:64:69:47:38:15:42:0f:02:74:b8: a1:06:91:74:38:ff:33:43:c8:dd:c9:3e:f7:57:3e:8a:65:06: 3e:05:ca:bf:36:cb:d8:4e:1d:3f:96:ac:ea:7e:a6:f2:60:8e: 76:d2:90:d0:0e:93:2d:e0:2b:d0:4b:45:50:dd:c1:bd:72:63: 5e:86:9c:ca:42:eb:df:18:61:89:04:4b:8b:b3:95:c5:5a:44: 4e:00:1f:02:60:2b:69:8d:31:df:ff:d9:48:94:ac:fd:42:00: 60:ec:63:24:67:b3:fe:11:a1:85:1d:98:b6:ae:bd:80:30:5d: d5:7f:72:e2:75:2d:3f:52:a7:1d:3b:11:eb:22:6b:0c:e8:04: b6:6e:23:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xDQUCV64l4DaMHfl9oahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTIxYTljY2IyODNlYTIxZThkMGEwNzBhMmUwYjZhNDBl OTg3N2QwHhcNMjUxMjE5MDQwMDMyWhcNMjUxMjIwMDQwMDMyWjAzMTEwLwYDVQQD Eyg0ZTU4ZDVjY2JkYzU5OWI3MmI1ZDczYTg0N2M2MzA3OWEyODkyNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR+koF800CSGxpOt1jXsMDFwrJEO XZTa8Xc8vUDb9SsP1KZ9tcQ9rH5Pir69nueLCtHcXh40SXYFkPrRYuRm7hv2/5M3 Owh1L0pOzHbrx4cp9Whn1As7PR8fKPm4GCZfPXPv4Frv4mDtuRrT6H6rAvmwZdMg AIYDH0M364cpX4cK/pc1bEDOuIQKwA7z7ImKZbzQroh4JYyBdAIJmX6O9kZzGpLV xkYdvQdGXCJb3hhb7FoN9RQ9wpGlejA9T3JhUlbSXswWtWC7e2TZNFVCUaAtxpos /1iwYlJvBx2pHhhJ9WsLMhiFvNhh1UcAmEv893h3u7as9ZGB7GQWu0BgRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5Y1cy9xZm3K11zqEfGMHmiiSQaMB8GA1UdIwQY MBaAFK0SGpzLKD6iHo0KBwouC2pA6Yd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJJYW5Nc29QcUllalFvSENpNExha0RwaDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yN2Y3ZmEtYjAxOS00ODQyLWE2YTYt NTlkZjczZDNiYjkxLzEvclJJYW5Nc29QcUllalFvSENpNExha0RwaDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8yN2Y3ZmEtYjAxOS00ODQyLWE2YTYtNTlkZjczZDNiYjkx LzEvclJJYW5Nc29QcUllalFvSENpNExha0RwaDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7s9nBDT uv7CI9CdCcFhxfYDobskt0IdVBtIAtbWoFT+mpkyALqtweYLC+rkNmGLi7sqDFRi kM2Byqo9woMrCsfFe2u3tCksHNkVwXqbTm4Wh/vNZKPznmc8sagtJAls/LocK6k7 Heazq0bOoI3yECLMyLFkaUc4FUIPAnS4oQaRdDj/M0PI3ck+91c+imUGPgXKvzbL 2E4dP5as6n6m8mCOdtKQ0A6TLeAr0EtFUN3BvXJjXoacykLr3xhhiQRLi7OVxVpE TgAfAmAraY0x3//ZSJSs/UIAYOxjJGez/hGhhR2Ytq69gDBd1X9y4nUtP1KnHTsR 6yJrDOgEtm4joQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:10:26 2025 by rpki-client