This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json) Hash identifier: szVodg9YMFOwtcvdDTQ6gjm8wk+CDOloO/OT8Cp1v9k= Subject key identifier: A3:13:CE:15:C8:12:36:1A:61:56:6F:EF:FF:85:DD:70:16:A1:67:72 Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11 Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311 Certificate serial: 019AF051165AD713538C4B7086D94269C212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft Manifest number: 041C Signing time: Fri 05 Dec 2025 21:00:37 +0000 Manifest this update: Fri 05 Dec 2025 21:00:37 +0000 Manifest next update: Sat 06 Dec 2025 21:00:37 +0000 Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: gYoOkljHF8QmQ2vqOYiVqywa8InR31FMbhD/4oOA1uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:16:5a:d7:13:53:8c:4b:70:86:d9:42:69:c2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311 Validity Not Before: Dec 5 21:00:37 2025 GMT Not After : Dec 6 21:00:37 2025 GMT Subject: CN=a313ce15c812361a61566fefff85dd7016a16772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:93:a9:ee:1c:9f:34:a3:3f:4b:9a:06:cf: f2:ac:03:e5:fc:5f:06:c0:41:05:e1:0e:ff:e7:ab: 57:ea:c1:7f:66:ae:d3:00:c7:33:a1:b0:63:b2:58: 6b:c7:45:0d:ea:55:ff:30:ac:97:df:2d:f9:ce:a5: 3d:a4:1b:df:bc:c7:06:61:f5:19:20:72:99:f7:54: 26:3a:d2:07:07:4f:05:9d:60:d5:55:5f:32:86:c9: 1e:1a:d9:09:12:df:1d:b6:66:16:0e:0f:22:5d:ff: 46:b8:d8:42:2a:34:fc:14:c6:8d:16:f7:21:2c:a6: b8:95:6a:12:8f:60:a9:6a:98:61:1d:1e:30:e0:9e: 67:28:f4:f0:88:03:e8:39:e7:3b:a1:08:b0:79:ff: 7e:e1:39:83:1c:c1:87:0b:5c:ca:b8:6d:4a:5b:6b: c1:ef:0c:2c:94:ba:09:91:9a:60:f4:fd:81:d8:7d: 5f:95:4d:45:0f:af:2a:0a:e7:08:30:03:80:1e:26: e9:3b:be:fb:a4:21:d7:54:34:4a:82:06:9b:88:50: c0:bd:6f:99:0e:f2:c8:9a:f7:1e:28:12:6e:1c:fb: ca:b2:62:4c:28:d4:92:11:e9:59:81:15:9c:6a:55: 3f:65:6b:00:dd:9d:bd:e1:a5:67:8d:53:1f:41:10: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:13:CE:15:C8:12:36:1A:61:56:6F:EF:FF:85:DD:70:16:A1:67:72 X509v3 Authority Key Identifier: keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:06:d9:77:d9:2d:2e:d2:54:43:eb:cb:18:63:88:7d:72:b1: 57:1b:3f:be:86:a4:16:cf:f4:85:af:db:93:e4:7d:d7:02:12: 7f:de:c1:54:eb:08:cc:b2:82:c3:8d:50:ea:fc:ca:3c:16:0a: c3:f2:09:40:90:a5:23:73:b7:9a:89:07:03:c5:a1:0c:8f:04: 1c:60:35:e9:63:dd:c3:47:78:74:f6:33:73:8c:b1:34:3a:8c: 21:44:c5:52:d4:b2:d4:03:8b:43:c7:2c:e4:bd:f6:35:4f:3a: b0:cb:4b:d3:fb:7c:16:dc:69:e8:90:62:d5:50:d7:7a:43:d0: f1:8a:b0:5f:15:af:1d:68:65:1c:7f:fc:d4:50:b7:61:80:aa: 22:ef:c2:c3:85:51:bd:82:fb:f4:53:5e:e9:a8:91:51:45:ba: 2a:92:84:24:f8:d6:58:01:a7:b7:8a:6e:a2:ab:2d:21:95:52: b0:47:2f:fe:d0:3f:fe:a9:2e:8d:6b:ed:40:3b:ba:6e:7c:85: f9:04:6f:60:cd:93:2c:37:9f:5a:dc:cf:44:31:e2:bc:8c:9a: db:f7:ed:c3:d5:d4:e6:67:a6:41:31:f4:77:a4:ce:86:f7:04: d9:04:2d:2c:61:72:05:37:88:b0:6c:d3:07:89:c4:b5:65:ca: 96:62:a5:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwURZa1xNTjEtwhtlCacISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGE2M2Q0ZmUxMGEzNDZiODEyZmJmMzU5YzliMzM3Nzhj ZDQzMTEwHhcNMjUxMjA1MjEwMDM3WhcNMjUxMjA2MjEwMDM3WjAzMTEwLwYDVQQD EyhhMzEzY2UxNWM4MTIzNjFhNjE1NjZmZWZmZjg1ZGQ3MDE2YTE2NzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhmTqe4cnzSjP0uaBs/yrAPl/F8G wEEF4Q7/56tX6sF/Zq7TAMczobBjslhrx0UN6lX/MKyX3y35zqU9pBvfvMcGYfUZ IHKZ91QmOtIHB08FnWDVVV8yhskeGtkJEt8dtmYWDg8iXf9GuNhCKjT8FMaNFvch LKa4lWoSj2CpaphhHR4w4J5nKPTwiAPoOec7oQiwef9+4TmDHMGHC1zKuG1KW2vB 7wwslLoJkZpg9P2B2H1flU1FD68qCucIMAOAHibpO777pCHXVDRKggabiFDAvW+Z DvLImvceKBJuHPvKsmJMKNSSEelZgRWcalU/ZWsA3Z294aVnjVMfQRDRlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMTzhXIEjYaYVZv7/+F3XAWoWdyMB8GA1UdIwQY MBaAFEdKY9T+EKNGuBL781nJszd4zUMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEt N2I3ZmM3YWFiMTQ0LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEtN2I3ZmM3YWFiMTQ0 LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgbZd9kt LtJUQ+vLGGOIfXKxVxs/voakFs/0ha/bk+R91wISf97BVOsIzLKCw41Q6vzKPBYK w/IJQJClI3O3mokHA8WhDI8EHGA16WPdw0d4dPYzc4yxNDqMIUTFUtSy1AOLQ8cs 5L32NU86sMtL0/t8Ftxp6JBi1VDXekPQ8YqwXxWvHWhlHH/81FC3YYCqIu/Cw4VR vYL79FNe6aiRUUW6KpKEJPjWWAGnt4puoqstIZVSsEcv/tA//qkujWvtQDu6bnyF +QRvYM2TLDefWtzPRDHivIya2/ftw9XU5memQTH0d6TOhvcE2QQtLGFyBTeIsGzT B4nEtWXKlmKlPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:10 2025 by rpki-client