This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft File: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json) Hash identifier: ecWPgge8iI4g0E7IUyTlUG+8QQVEzWoP/A+scId93q0= Subject key identifier: 02:03:57:51:3F:F4:D1:D8:03:C5:3B:FD:C4:7C:35:57:BE:A5:C9:6A Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB Certificate issuer: /CN=46f6eebf80bd64dff5ab1012b90a556865a848db Certificate serial: 019B34FB8C04C200934CE306A5A127B811B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft Manifest number: 0626 Signing time: Fri 19 Dec 2025 05:00:59 +0000 Manifest this update: Fri 19 Dec 2025 05:00:59 +0000 Manifest next update: Sat 20 Dec 2025 05:00:59 +0000 Files and hashes: 1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: dZkmCuNw8ewIq3cOFsfksO3QqJQcLx18ybvT7gbPzWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:8c:04:c2:00:93:4c:e3:06:a5:a1:27:b8:11:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db Validity Not Before: Dec 19 05:00:59 2025 GMT Not After : Dec 20 05:00:59 2025 GMT Subject: CN=020357513ff4d1d803c53bfdc47c3557bea5c96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:60:e2:6c:04:ba:9d:09:fc:be:1a:4d:5b: 9d:ac:70:d9:5e:a5:ee:8e:08:e6:e9:3d:ac:c4:4b: 0e:c5:53:52:22:52:98:0f:96:30:c2:91:a5:bc:be: 73:ab:9c:91:89:31:ef:98:1f:fb:0a:f3:e6:44:91: fd:5e:db:17:88:ca:3f:8d:6e:f7:89:43:8f:aa:07: ee:a0:a0:7f:6c:fb:ec:69:dd:5b:75:2e:2e:2d:58: d4:c4:71:17:36:0e:77:8a:b0:9e:d6:ae:bf:5c:3a: 24:bf:ae:b8:91:3f:b2:dd:63:69:64:71:5a:cb:e8: 9a:ea:90:10:10:1c:e1:4f:87:07:e8:1a:9b:ae:0f: a2:c8:8d:6f:5a:0d:5d:62:ba:2b:18:d5:39:43:2c: 27:4c:06:cf:ec:c3:41:a2:07:0e:6f:83:d0:17:b9: cf:7d:54:cb:40:a6:39:08:ad:bd:e5:7e:e0:56:34: a3:5f:b6:09:a6:61:cb:ef:d9:ad:79:2a:0f:b1:31: e8:c5:9b:27:6c:1a:40:da:1f:bf:13:3f:98:d4:90: 55:c8:ae:da:81:67:de:3f:51:7c:51:03:c4:14:8e: 7b:fd:39:6f:68:3a:91:3c:88:cb:1f:aa:e2:58:43: 5f:f6:68:57:ac:c8:9a:31:26:ef:44:23:d7:46:5c: 86:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:03:57:51:3F:F4:D1:D8:03:C5:3B:FD:C4:7C:35:57:BE:A5:C9:6A X509v3 Authority Key Identifier: keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:9b:04:6e:ec:9b:1e:77:94:a6:79:44:7c:ab:9a:16:5f:d3: e2:e8:e1:86:fa:d9:70:a8:e6:27:ad:11:a7:6f:64:02:19:92: 7a:4c:51:a8:af:34:b5:4b:b1:71:d1:f9:5c:2b:4b:a1:14:e6: 5f:d3:bf:b8:0e:83:62:4c:8d:21:72:86:24:c2:47:e5:aa:57: c0:12:12:b7:d6:c1:0a:fc:6b:32:b0:d6:4b:eb:28:7c:b7:46: fa:ce:52:e4:be:93:41:79:1b:d3:4f:53:e5:6e:58:06:e6:41: b9:fe:71:5e:0e:22:c1:06:81:b7:2a:f0:0b:5d:33:4c:be:3a: 38:aa:d2:5e:b6:3f:ec:ea:2a:19:79:58:3e:23:e3:52:4b:5d: a0:63:cc:e2:6f:a2:24:de:1d:64:16:e1:fb:c1:36:0f:40:02: 6c:5a:5b:be:d9:61:b6:37:13:d3:f2:fc:e7:e9:b1:03:9f:b7: 47:04:a4:ae:0f:0c:6b:6f:6c:41:80:76:af:3e:1b:99:22:e9: 24:fa:bf:e5:c5:01:fc:93:2f:c4:c5:16:52:b6:08:22:71:ef: ab:fb:bf:f4:f2:93:f5:6d:11:57:07:63:99:13:b9:a2:d4:3e: 25:ee:d6:cc:4c:04:92:bf:40:88:a6:a5:2c:37:6f:30:df:91: 6c:40:64:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+4wEwgCTTOMGpaEnuBG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZjZlZWJmODBiZDY0ZGZmNWFiMTAxMmI5MGE1NTY4NjVh ODQ4ZGIwHhcNMjUxMjE5MDUwMDU5WhcNMjUxMjIwMDUwMDU5WjAzMTEwLwYDVQQD EygwMjAzNTc1MTNmZjRkMWQ4MDNjNTNiZmRjNDdjMzU1N2JlYTVjOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mpg4mwEup0J/L4aTVudrHDZXqXu jgjm6T2sxEsOxVNSIlKYD5YwwpGlvL5zq5yRiTHvmB/7CvPmRJH9XtsXiMo/jW73 iUOPqgfuoKB/bPvsad1bdS4uLVjUxHEXNg53irCe1q6/XDokv664kT+y3WNpZHFa y+ia6pAQEBzhT4cH6Bqbrg+iyI1vWg1dYrorGNU5QywnTAbP7MNBogcOb4PQF7nP fVTLQKY5CK295X7gVjSjX7YJpmHL79mteSoPsTHoxZsnbBpA2h+/Ez+Y1JBVyK7a gWfeP1F8UQPEFI57/TlvaDqRPIjLH6riWENf9mhXrMiaMSbvRCPXRlyGJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIDV1E/9NHYA8U7/cR8NVe+pclqMB8GA1UdIwQY MBaAFEb27r+AvWTf9asQErkKVWhlqEjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMt OWJkYmI2MjZiNTk1LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81NzhmYWEtMGEwMy00NmFjLWJiNWMtOWJkYmI2MjZiNTk1 LzEvUnZidXY0QzlaTl8xcXhBU3VRcFZhR1dvU05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpsEbuyb HneUpnlEfKuaFl/T4ujhhvrZcKjmJ60Rp29kAhmSekxRqK80tUuxcdH5XCtLoRTm X9O/uA6DYkyNIXKGJMJH5apXwBISt9bBCvxrMrDWS+sofLdG+s5S5L6TQXkb009T 5W5YBuZBuf5xXg4iwQaBtyrwC10zTL46OKrSXrY/7OoqGXlYPiPjUktdoGPM4m+i JN4dZBbh+8E2D0ACbFpbvtlhtjcT0/L85+mxA5+3RwSkrg8Ma29sQYB2rz4bmSLp JPq/5cUB/JMvxMUWUrYIInHvq/u/9PKT9W0RVwdjmRO5otQ+Je7WzEwEkr9AiKal LDdvMN+RbEBkFg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:31:12 2025 by rpki-client