This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft File: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft (raw, json) Hash identifier: vchE7KYGvUsElfZBMcAD+k9dLwUsJIR7rSfDtuTwT+U= Subject key identifier: 73:85:44:52:9E:81:14:50:21:31:EB:13:40:05:2F:F7:84:89:1C:37 Authority key identifier: 46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A Certificate issuer: /CN=467350d5975a272a88bfb8810af45981cd55935a Certificate serial: 019AF1D1CFC1870FC9ED3B4D415E36422B51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft Manifest number: 105C Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl (hash: jRnrYKkw+7zzzwifChI4OdLBT4Bj0wSDa0ZMdmFgWhU=) 2: cM594o8l7Xh7Dw0EOXhcxgvWLYI.roa (hash: 1Ym4804A2QtxpGJhVDPpEbLS0giUeOdd5FG8xMIV330=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cf:c1:87:0f:c9:ed:3b:4d:41:5e:36:42:2b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=467350d5975a272a88bfb8810af45981cd55935a Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=738544529e8114502131eb1340052ff784891c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:77:0d:51:56:db:33:a6:d4:69:01:66:e2:ae: a9:2e:d0:bc:10:d3:da:ed:93:b2:50:95:f0:e2:05: 3c:51:85:4b:16:46:21:6b:db:c5:b1:43:22:8c:04: e4:08:58:a5:78:9f:02:49:24:ab:ef:d9:10:94:a6: 3d:33:af:01:9f:04:d3:a3:ac:06:14:91:ef:5a:fe: dc:d8:3d:83:cf:34:50:96:fe:de:61:be:c0:f3:72: 26:da:16:a3:43:a5:81:6d:cb:aa:7e:84:bd:96:0b: f9:98:db:d2:c1:7f:b4:42:e3:1b:ea:67:f3:ae:b0: 86:1e:8d:68:a9:51:a9:ab:42:3b:88:b8:0a:aa:da: 25:c2:0e:64:cd:07:6c:a5:e4:20:48:7b:22:59:f7: e7:6d:36:f9:62:36:01:19:ca:d5:50:5f:df:b5:2c: 1c:19:f8:6c:60:76:5b:0e:bc:50:e4:13:ed:82:a9: fe:11:da:37:d0:41:3a:be:de:e8:12:1d:fc:32:e1: 7a:39:cd:63:47:d4:e7:5f:65:80:1e:b1:55:5f:ab: 73:35:c3:2a:8d:de:4b:31:96:ee:5b:03:0b:08:8c: d9:ef:49:16:8b:b3:a2:62:25:99:e9:58:75:a7:c2: e0:94:09:9a:da:6a:0a:3a:dc:37:09:a0:89:7d:cf: 40:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:85:44:52:9E:81:14:50:21:31:EB:13:40:05:2F:F7:84:89:1C:37 X509v3 Authority Key Identifier: keyid:46:73:50:D5:97:5A:27:2A:88:BF:B8:81:0A:F4:59:81:CD:55:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c57b75-10a7-4723-94ea-e857477a7008/1/RnNQ1ZdaJyqIv7iBCvRZgc1Vk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d1:97:b3:ef:fb:37:06:15:76:32:16:e4:5c:97:fa:0b:58: 74:67:fd:20:46:ec:49:de:90:8a:40:cf:4b:68:8a:47:22:af: f1:04:0b:e9:b5:79:40:4e:df:82:b5:49:24:b1:4a:c1:8b:f8: 0c:40:c9:b8:d1:b1:ff:51:d3:88:28:80:03:22:53:b0:29:03: b8:54:86:ce:c8:ee:7f:c7:af:f0:e9:6d:f4:44:9e:07:ec:b3: 4c:c0:55:d6:12:88:34:f0:ee:3c:d8:31:22:3d:26:f9:47:da: ac:53:3d:e6:b8:e7:12:66:75:a7:5e:d2:82:f3:45:a4:91:f0: 70:35:39:ba:85:0a:3f:f6:64:bc:fe:a9:f4:65:85:e7:9d:66: d9:6e:ed:c9:60:cb:62:a3:6b:85:c3:bd:ae:d7:f5:7e:29:7c: 5b:79:58:4f:ba:62:24:60:fb:2e:c4:a8:33:f5:f2:f3:34:f7: 4e:ab:a6:74:ee:11:03:ae:30:19:77:17:5e:d4:7e:96:ca:30: 7d:9d:d6:56:0c:0e:6d:c8:c0:d5:9d:60:c5:00:5a:65:8c:76: c2:80:16:60:a5:64:84:ab:d3:bc:db:c4:b4:05:de:8c:e2:01: 48:07:31:bc:40:5a:ae:51:b4:23:10:04:a2:1c:e6:62:10:40: 95:86:1a:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c/Bhw/J7TtNQV42QitRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NzM1MGQ1OTc1YTI3MmE4OGJmYjg4MTBhZjQ1OTgxY2Q1 NTkzNWEwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD Eyg3Mzg1NDQ1MjllODExNDUwMjEzMWViMTM0MDA1MmZmNzg0ODkxYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XcNUVbbM6bUaQFm4q6pLtC8ENPa 7ZOyUJXw4gU8UYVLFkYha9vFsUMijATkCFileJ8CSSSr79kQlKY9M68BnwTTo6wG FJHvWv7c2D2DzzRQlv7eYb7A83Im2hajQ6WBbcuqfoS9lgv5mNvSwX+0QuMb6mfz rrCGHo1oqVGpq0I7iLgKqtolwg5kzQdspeQgSHsiWffnbTb5YjYBGcrVUF/ftSwc GfhsYHZbDrxQ5BPtgqn+Edo30EE6vt7oEh38MuF6Oc1jR9TnX2WAHrFVX6tzNcMq jd5LMZbuWwMLCIzZ70kWi7OiYiWZ6Vh1p8LglAma2moKOtw3CaCJfc9AewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOFRFKegRRQITHrE0AFL/eEiRw3MB8GA1UdIwQY MBaAFEZzUNWXWicqiL+4gQr0WYHNVZNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm5OUTFaZGFKeXFJdjdpQkN2UlpnYzFWazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jNTdiNzUtMTBhNy00NzIzLTk0ZWEt ZTg1NzQ3N2E3MDA4LzEvUm5OUTFaZGFKeXFJdjdpQkN2UlpnYzFWazFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jNTdiNzUtMTBhNy00NzIzLTk0ZWEtZTg1NzQ3N2E3MDA4 LzEvUm5OUTFaZGFKeXFJdjdpQkN2UlpnYzFWazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9GXs+/7 NwYVdjIW5FyX+gtYdGf9IEbsSd6QikDPS2iKRyKv8QQL6bV5QE7fgrVJJLFKwYv4 DEDJuNGx/1HTiCiAAyJTsCkDuFSGzsjuf8ev8Olt9ESeB+yzTMBV1hKINPDuPNgx Ij0m+UfarFM95rjnEmZ1p17SgvNFpJHwcDU5uoUKP/ZkvP6p9GWF551m2W7tyWDL YqNrhcO9rtf1fil8W3lYT7piJGD7LsSoM/Xy8zT3TqumdO4RA64wGXcXXtR+lsow fZ3WVgwObcjA1Z1gxQBaZYx2woAWYKVkhKvTvNvEtAXejOIBSAcxvEBarlG0IxAE ohzmYhBAlYYazQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:30 2025 by rpki-client