This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json) Hash identifier: PNe9UnGlx/tgh1kgwWSUGdJDxBtL51Dt2uaNSjXOUVo= Subject key identifier: F3:8B:BD:21:65:DD:98:25:E7:C4:74:56:84:55:7E:76:59:9F:F8:0D Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4 Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4 Certificate serial: 019AF12D10781BDF6A3D3774B48034DD862F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: zN1Biybm6bqeCKZtMPEl1Hl6cvJynt1tL1zPcfFL57s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:10:78:1b:df:6a:3d:37:74:b4:80:34:dd:86:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4 Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=f38bbd2165dd9825e7c4745684557e76599ff80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7a:f6:6f:dd:16:13:20:b1:d4:35:0d:ab:c8: 70:43:01:c6:98:47:a2:c7:37:83:98:e1:8c:6f:66: 0c:5e:b8:f7:c4:2d:3f:77:17:42:5e:e0:c4:8f:25: 8b:13:b9:a3:64:44:c5:1a:37:24:f2:2d:e7:85:83: 70:17:de:3b:59:4d:2a:58:1d:c4:47:d4:04:4d:b5: bf:71:99:b6:bd:40:5e:23:8f:f0:6b:98:5b:c8:2d: 45:af:f4:d8:01:d2:52:b1:ab:ab:91:29:c9:95:bb: 43:22:6b:db:47:c5:c9:c9:4f:6b:76:4f:3f:7a:da: 3d:47:26:02:04:2d:45:ec:d4:70:1e:cb:e5:9f:9f: 61:68:fa:d2:c1:8b:f3:78:94:d2:c6:91:c7:62:db: 7b:5d:ec:1c:40:ce:76:ae:dd:5b:f3:06:49:e8:44: ab:3c:69:22:75:39:40:c4:95:c1:cc:ca:03:73:d1: 96:2a:73:14:c8:30:2e:e5:64:98:19:ac:8f:87:f9: 9c:36:c9:90:7d:d0:f6:01:90:18:30:fa:75:cf:29: 1c:09:8c:fa:1e:b2:21:f6:ad:e4:de:cf:b4:8d:f3: 62:ad:fb:89:da:22:c8:05:83:36:33:f9:a2:16:c1: 28:d1:f2:90:ce:d8:d6:01:43:e9:4b:29:f3:b6:bb: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8B:BD:21:65:DD:98:25:E7:C4:74:56:84:55:7E:76:59:9F:F8:0D X509v3 Authority Key Identifier: keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5e:98:a1:2d:d3:f7:a0:1e:d4:3e:f8:d4:56:23:59:a6:44: 00:eb:45:9b:ad:57:5e:88:15:a1:ba:f2:64:dd:62:5e:be:bb: c8:4c:de:7e:9d:3b:2f:35:df:04:b5:58:38:ce:77:aa:a8:2b: 84:73:76:68:ba:69:09:11:b8:2b:e9:19:9c:33:dc:eb:44:66: 8b:a8:50:36:4e:09:28:1d:74:b0:18:f2:85:aa:66:e3:45:57: 90:ae:1e:df:68:f5:0f:bb:5f:0e:7d:bb:6b:26:6d:72:5d:b2: 51:20:e9:20:58:d7:14:30:57:49:2e:33:09:2e:b3:48:73:9d: 30:fc:12:d8:37:51:fd:94:84:22:92:c7:de:27:2b:ff:79:a9: d2:21:a4:51:a1:ad:86:46:13:73:08:8f:2e:72:b4:6b:fa:8a: 39:db:a0:e6:d4:b8:1b:aa:7d:60:bf:44:f0:8b:3e:2a:fe:20: 46:94:e2:11:e4:d3:7d:60:d1:46:20:a1:d5:bd:25:c3:ac:f3: f7:a8:a6:5b:b5:d3:14:10:2f:c7:16:6a:2e:1a:60:af:d6:e8: 50:33:b4:72:ef:fd:57:bf:8a:3c:a4:e5:f6:4b:ec:fd:31:53: 55:9d:80:9a:ae:1e:cd:44:96:a1:04:31:15:b7:4a:d8:4f:5d: c7:0e:81:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRB4G99qPTd0tIA03YYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MjhiZGQwYzhlMWI1MDRkMjk0ZjhhMzkwNGM4ZDU3YWU2 MzgzZjQwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD EyhmMzhiYmQyMTY1ZGQ5ODI1ZTdjNDc0NTY4NDU1N2U3NjU5OWZmODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknr2b90WEyCx1DUNq8hwQwHGmEei xzeDmOGMb2YMXrj3xC0/dxdCXuDEjyWLE7mjZETFGjck8i3nhYNwF947WU0qWB3E R9QETbW/cZm2vUBeI4/wa5hbyC1Fr/TYAdJSsaurkSnJlbtDImvbR8XJyU9rdk8/ eto9RyYCBC1F7NRwHsvln59haPrSwYvzeJTSxpHHYtt7XewcQM52rt1b8wZJ6ESr PGkidTlAxJXBzMoDc9GWKnMUyDAu5WSYGayPh/mcNsmQfdD2AZAYMPp1zykcCYz6 HrIh9q3k3s+0jfNirfuJ2iLIBYM2M/miFsEo0fKQztjWAUPpSynztrsOfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOLvSFl3Zgl58R0VoRVfnZZn/gNMB8GA1UdIwQY MBaAFEYovdDI4bUE0pT4o5BMjVeuY4P0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmlpOTBNamh0UVRTbFBpamtFeU5WNjVqZ19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYTc1NzMtOTE2MS00NWJhLWI5M2It NWY4YjYzYjExZjBiLzEvUmlpOTBNamh0UVRTbFBpamtFeU5WNjVqZ19RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYTc1NzMtOTE2MS00NWJhLWI5M2ItNWY4YjYzYjExZjBi LzEvUmlpOTBNamh0UVRTbFBpamtFeU5WNjVqZ19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG16YoS3T 96Ae1D741FYjWaZEAOtFm61XXogVobryZN1iXr67yEzefp07LzXfBLVYOM53qqgr hHN2aLppCRG4K+kZnDPc60Rmi6hQNk4JKB10sBjyhapm40VXkK4e32j1D7tfDn27 ayZtcl2yUSDpIFjXFDBXSS4zCS6zSHOdMPwS2DdR/ZSEIpLH3icr/3mp0iGkUaGt hkYTcwiPLnK0a/qKOdug5tS4G6p9YL9E8Is+Kv4gRpTiEeTTfWDRRiCh1b0lw6zz 96imW7XTFBAvxxZqLhpgr9boUDO0cu/9V7+KPKTl9kvs/TFTVZ2Amq4ezUSWoQQx FbdK2E9dxw6BGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:16 2025 by rpki-client