This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json) Hash identifier: Om3zNLhwY8te1ntn8EtLsYBMcbS1ttTUlgATnQmS8As= Subject key identifier: 7A:49:FF:2A:A4:C2:FE:8D:61:1F:13:D5:39:88:5C:D4:8F:E5:43:06 Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390 Certificate serial: 019AF1642ED157E55DBEC65F70A75F23B746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft Manifest number: 21 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: J1HQF+l5UQ2/QlAL5k6I/WjROdEjd6q9L0ZfzI/ZtHU=) 2: sb-HAVMafNmHL9QenVGesGVke-Q.roa (hash: nHrOUnqGNx4wf54/RmOPoYz+21S/NMpXYL06TIB1PUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2e:d1:57:e5:5d:be:c6:5f:70:a7:5f:23:b7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=7a49ff2aa4c2fe8d611f13d539885cd48fe54306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:6d:11:8e:f7:b3:93:9b:76:b6:df:77:e8: 7b:df:32:df:dc:93:48:60:58:c9:bf:f6:5c:cd:23: 93:95:fc:0c:06:d5:e4:d1:bc:56:e0:fd:9d:3c:17: 15:19:b2:23:ad:e2:c9:f2:85:7d:b5:eb:18:85:34: 21:8a:3c:99:ca:ff:9b:94:a7:60:5c:67:7d:6f:71: 88:fe:a1:c4:a7:7d:36:97:d9:bc:41:60:2c:18:66: 01:1d:c0:97:05:7b:fe:31:97:f3:56:d4:65:da:95: 5d:26:d5:d4:59:b4:7b:31:db:78:7b:af:96:b4:60: b1:23:cb:c3:7b:48:ff:d8:f5:5c:f3:a4:5e:35:19: fc:a2:71:64:92:b4:1f:2b:ea:8c:bf:bb:97:d7:7c: 40:13:d4:82:7d:a1:cb:92:5a:68:21:d3:87:f0:2e: 28:9d:0e:0f:39:ab:b6:23:71:a4:50:07:47:e8:d7: 3f:6a:6b:57:23:9c:86:2c:fe:d5:94:38:a6:8f:45: a6:c2:b9:71:50:18:d6:43:aa:27:68:8e:83:9a:35: af:0e:b9:a1:bc:79:38:73:5f:3e:d0:b9:7d:40:a9: db:39:e0:6e:86:20:4c:7e:cf:30:71:1d:9e:68:cb: ba:fb:29:f2:ca:4b:64:56:11:1c:a0:b5:5e:d2:ae: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:49:FF:2A:A4:C2:FE:8D:61:1F:13:D5:39:88:5C:D4:8F:E5:43:06 X509v3 Authority Key Identifier: keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:cd:2f:6c:dd:53:14:32:74:5a:3c:eb:01:eb:47:97:10:70: 24:8a:ed:0b:1e:df:25:42:a1:69:27:30:e6:09:f7:2f:ec:e0: 31:cf:fb:47:35:52:ea:38:23:41:0b:d0:83:1e:13:b4:c2:57: 05:b5:19:c6:ac:1d:b1:4d:bf:61:16:7a:be:e0:4c:a5:4d:bd: 3c:aa:0f:b5:0d:7d:1d:c3:3f:fb:2b:b2:d4:b4:a7:9f:0f:d4: cf:55:9c:b1:7e:d2:1d:a4:1c:ba:54:35:14:15:60:4f:4a:43: 2e:a1:da:09:64:c0:e5:34:3c:fe:bd:62:d2:ba:a4:9a:72:10: 9a:3d:21:3e:0a:75:80:64:98:54:9d:2f:2b:b8:b2:d0:12:0f: 68:9f:fe:c9:f2:eb:aa:47:76:9c:55:11:c6:b8:bb:90:0b:07: 99:63:97:03:05:5e:70:03:51:ac:c6:28:96:75:36:be:b1:18: a4:44:b4:af:0d:6e:f4:5a:4a:d8:97:45:f6:40:50:ce:1b:7b: d5:a0:aa:0a:02:f5:54:ea:e5:a3:c5:8b:c6:9c:d3:a4:b4:e5: 19:05:ed:f8:82:0d:c8:b5:e2:9e:81:11:b0:0c:a7:27:6f:c6: 47:ce:71:0e:43:fb:d2:5e:2c:2d:a6:01:a5:87:ae:5e:91:d4: d1:25:6a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZC7RV+VdvsZfcKdfI7dGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MmJjYjFiNTI4ZGE5OTQ0YmQ5NTQ0YmM3YjM4OGNlZTFh MDEzOTAwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD Eyg3YTQ5ZmYyYWE0YzJmZThkNjExZjEzZDUzOTg4NWNkNDhmZTU0MzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTZtEY73s5Obdrbfd+h73zLf3JNI YFjJv/ZczSOTlfwMBtXk0bxW4P2dPBcVGbIjreLJ8oV9tesYhTQhijyZyv+blKdg XGd9b3GI/qHEp302l9m8QWAsGGYBHcCXBXv+MZfzVtRl2pVdJtXUWbR7Mdt4e6+W tGCxI8vDe0j/2PVc86ReNRn8onFkkrQfK+qMv7uX13xAE9SCfaHLklpoIdOH8C4o nQ4POau2I3GkUAdH6Nc/amtXI5yGLP7VlDimj0WmwrlxUBjWQ6onaI6DmjWvDrmh vHk4c18+0Ll9QKnbOeBuhiBMfs8wcR2eaMu6+ynyyktkVhEcoLVe0q7K5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpJ/yqkwv6NYR8T1TmIXNSP5UMGMB8GA1UdIwQY MBaAFEYryxtSjamUS9lUS8eziM7hoBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUt YWFmZThhOGMxNjVlLzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUtYWFmZThhOGMxNjVl LzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMs0vbN1T FDJ0WjzrAetHlxBwJIrtCx7fJUKhaScw5gn3L+zgMc/7RzVS6jgjQQvQgx4TtMJX BbUZxqwdsU2/YRZ6vuBMpU29PKoPtQ19HcM/+yuy1LSnnw/Uz1WcsX7SHaQculQ1 FBVgT0pDLqHaCWTA5TQ8/r1i0rqkmnIQmj0hPgp1gGSYVJ0vK7iy0BIPaJ/+yfLr qkd2nFURxri7kAsHmWOXAwVecANRrMYolnU2vrEYpES0rw1u9FpK2JdF9kBQzht7 1aCqCgL1VOrlo8WLxpzTpLTlGQXt+IINyLXinoERsAynJ2/GR85xDkP70l4sLaYB pYeuXpHU0SVqCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:03 2025 by rpki-client