This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json) Hash identifier: lgcv4UaSiYg3/Gfsvcpv0pHrFcuZ2uwq0Vq9e7KL3f0= Subject key identifier: 18:C7:26:2F:A8:41:F7:F0:74:12:B4:2C:7E:32:E2:56:4E:1E:E8:7D Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46 Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46 Certificate serial: 019AF0F5D94E883D75AE6017BF9CF79082C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft Manifest number: 0131 Signing time: Sat 06 Dec 2025 00:00:34 +0000 Manifest this update: Sat 06 Dec 2025 00:00:34 +0000 Manifest next update: Sun 07 Dec 2025 00:00:34 +0000 Files and hashes: 1: LkJWDbjbslz0nNAtvCL992PnNAo.roa (hash: RL1MW6ZhRKLWTzPdhCcY/dLPWGU6pPW/YpPEx5flQPg=) 2: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: 0/DUZ1C9YZiqfqdDM3TQMMb1nHkVn1fYvLdOLDPrcgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d9:4e:88:3d:75:ae:60:17:bf:9c:f7:90:82:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46 Validity Not Before: Dec 6 00:00:34 2025 GMT Not After : Dec 7 00:00:34 2025 GMT Subject: CN=18c7262fa841f7f07412b42c7e32e2564e1ee87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:ff:76:2d:90:2f:ae:04:92:77:6a:b5:64: 95:41:55:32:0e:37:8f:bd:f9:31:85:e8:11:88:7a: d1:ce:40:59:0a:c1:db:eb:11:a3:ab:4d:cc:4e:4d: 78:c7:3c:40:4c:77:94:ce:15:b5:6f:a0:8f:ee:70: 68:57:ed:25:34:71:8c:d2:53:8c:b3:10:83:26:bd: 71:5e:8a:d8:15:cf:ef:cb:1c:ec:dc:c8:f6:f1:f1: b9:64:d0:d9:ef:51:d0:c2:b4:da:e3:13:3e:b8:1b: f4:4b:2a:f1:a9:92:8a:82:0f:4d:61:18:7a:1c:fc: 2e:c6:f4:6b:02:34:15:1d:3d:30:47:be:7b:2d:fc: 08:01:71:06:19:45:1b:11:3c:8c:44:5a:c3:71:35: d5:f4:c9:ad:34:70:25:db:6c:d6:5e:83:0b:2f:ae: 29:35:74:de:a8:9b:a9:64:84:c9:d2:46:37:68:e1: 77:08:e4:17:e3:72:5f:14:00:85:a1:b2:f7:52:d7: 8f:21:e1:94:99:27:b5:59:fb:5c:9d:a2:73:39:b4: c9:08:17:bf:52:ac:11:7f:eb:cb:4f:89:7c:97:0d: a1:32:2c:d4:e8:00:48:80:66:a2:13:9d:fb:95:50: 23:ab:40:80:56:a5:fd:a0:17:51:c8:cb:d8:ae:ca: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C7:26:2F:A8:41:F7:F0:74:12:B4:2C:7E:32:E2:56:4E:1E:E8:7D X509v3 Authority Key Identifier: keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:44:8a:1f:c2:12:1f:9e:80:d2:21:02:c2:97:a6:5b:87:e3: 87:09:e6:39:31:98:43:33:62:45:2f:5d:31:9a:de:bb:71:99: ca:6e:5c:19:76:40:70:85:11:a9:a6:ee:86:b3:59:52:c6:6d: 1e:29:64:d6:f2:c3:f9:06:e9:b3:90:dd:17:5c:82:b5:1c:a9: ee:9c:30:96:28:27:45:3b:2e:74:6a:de:4e:05:b0:1c:7f:7a: 69:b3:2f:38:b2:03:fb:87:ba:80:61:d7:e8:1e:b6:ed:a1:63: 15:72:81:ef:7d:41:57:4b:ec:bb:a9:24:6b:55:97:28:d7:48: 3c:0c:9e:76:72:f3:15:43:df:e7:71:e5:db:ff:89:86:82:eb: cc:52:2e:9c:1c:45:16:f0:12:82:88:63:de:21:a2:92:23:96: 24:05:f3:d6:53:77:93:42:66:93:ce:79:02:05:65:ce:ea:d3: 3f:ef:96:07:51:94:d3:00:44:4a:c4:18:1f:b2:0f:a5:34:e5: 58:41:7a:91:dc:66:6b:f0:3e:5a:a2:2b:81:6f:7f:b5:07:37: 25:69:2d:fa:a3:ee:06:32:9f:31:6d:51:e6:66:99:20:30:70: a2:53:85:4e:4b:fc:de:85:31:d7:30:3e:89:a6:34:7c:d5:62: c1:33:ba:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dlOiD11rmAXv5z3kILEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NTM2MGYzYTE5MmRjYWExZDNkMTk0ZGI2NGMwMjU0YzM3 NGJkNDYwHhcNMjUxMjA2MDAwMDM0WhcNMjUxMjA3MDAwMDM0WjAzMTEwLwYDVQQD EygxOGM3MjYyZmE4NDFmN2YwNzQxMmI0MmM3ZTMyZTI1NjRlMWVlODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHP/di2QL64EkndqtWSVQVUyDjeP vfkxhegRiHrRzkBZCsHb6xGjq03MTk14xzxATHeUzhW1b6CP7nBoV+0lNHGM0lOM sxCDJr1xXorYFc/vyxzs3Mj28fG5ZNDZ71HQwrTa4xM+uBv0SyrxqZKKgg9NYRh6 HPwuxvRrAjQVHT0wR757LfwIAXEGGUUbETyMRFrDcTXV9MmtNHAl22zWXoMLL64p NXTeqJupZITJ0kY3aOF3COQX43JfFACFobL3UtePIeGUmSe1WftcnaJzObTJCBe/ UqwRf+vLT4l8lw2hMizU6ABIgGaiE537lVAjq0CAVqX9oBdRyMvYrsoMdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjHJi+oQffwdBK0LH4y4lZOHuh9MB8GA1UdIwQY MBaAFEdTYPOhktyqHT0ZTbZMAlTDdL1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC82MjQ0OTctNTA5MS00MDJiLTkxMjkt YjAzYmE0YWIwYzU0LzEvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC82MjQ0OTctNTA5MS00MDJiLTkxMjktYjAzYmE0YWIwYzU0 LzEvUjFOZzg2R1MzS29kUFJsTnRrd0NWTU4wdlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUSKH8IS H56A0iECwpemW4fjhwnmOTGYQzNiRS9dMZreu3GZym5cGXZAcIURqabuhrNZUsZt Hilk1vLD+Qbps5DdF1yCtRyp7pwwlignRTsudGreTgWwHH96abMvOLID+4e6gGHX 6B627aFjFXKB731BV0vsu6kka1WXKNdIPAyednLzFUPf53Hl2/+JhoLrzFIunBxF FvASgohj3iGikiOWJAXz1lN3k0Jmk855AgVlzurTP++WB1GU0wBESsQYH7IPpTTl WEF6kdxma/A+WqIrgW9/tQc3JWkt+qPuBjKfMW1R5maZIDBwolOFTkv83oUx1zA+ iaY0fNViwTO6bA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:01 2025 by rpki-client