This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json) Hash identifier: HG3u/J6OUquQls0DZTTOHDlbq1bJ0G3NriROSsPgeKk= Subject key identifier: B8:C8:80:7F:E9:C6:17:DE:44:48:ED:7F:7B:29:B6:51:85:80:E9:53 Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90 Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290 Certificate serial: 019AF19B674ACBBE2C4CC10AA9E68D91F111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft Manifest number: 1671 Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: wPSoS6RMnwN+250nueLojmssnIh7tBgj2zNcEI55DgY=) 2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:67:4a:cb:be:2c:4c:c1:0a:a9:e6:8d:91:f1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290 Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=b8c8807fe9c617de4448ed7f7b29b6518580e953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1e:2e:d9:ef:07:ec:00:f8:b6:61:b1:d4:33: 70:11:29:30:f4:27:76:cf:5a:96:31:88:e2:00:91: cd:17:12:56:d3:8a:9c:c2:f3:fb:b7:61:6c:46:80: 5d:ff:04:e2:09:68:10:a9:1a:a1:f9:ec:f0:a8:6b: f9:c3:5e:71:f3:b6:e5:31:60:54:19:d7:9d:87:3f: f9:06:50:42:cb:56:dc:79:a0:30:43:c8:f9:12:b8: b2:33:0c:36:99:f2:7c:26:a6:5c:32:0c:8b:54:ec: 38:3d:8e:89:44:ef:6a:b8:4f:21:fe:79:7c:f7:b8: e4:9d:53:38:4e:01:a6:04:7c:7e:54:d8:2b:c2:d1: 11:d4:46:4b:bc:01:e2:cb:9f:1b:39:91:bc:c2:68: 5b:a8:5a:ad:42:13:5f:dc:2b:d1:92:50:77:83:7c: 6f:3e:11:79:c0:4c:cf:22:c1:ee:35:3b:89:15:65: 8c:a5:4a:87:31:ce:0e:3f:51:b6:6a:29:a8:9a:dd: ae:26:c3:d2:16:6b:5e:f2:b1:23:25:b6:6b:bc:a2: 47:07:90:1d:51:05:a8:fa:da:7e:3c:70:42:3c:a9: 5e:7c:ba:97:02:58:ad:1d:24:26:9e:84:69:06:26: 28:b3:bd:f9:23:1e:32:9b:85:77:5c:e8:cf:8c:8f: 36:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C8:80:7F:E9:C6:17:DE:44:48:ED:7F:7B:29:B6:51:85:80:E9:53 X509v3 Authority Key Identifier: keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3a:7c:80:c2:7b:50:b6:45:a2:b2:20:8d:f7:53:73:7e:d4: 81:32:9f:e3:ca:41:a7:5d:3f:15:b3:cc:f4:18:21:f7:3b:61: 22:47:b6:98:12:ce:5e:82:0d:f3:de:61:37:74:a0:6c:c1:47: 1d:67:89:14:e0:e7:36:6f:12:59:b4:f5:65:a3:43:a5:32:1d: 03:13:24:25:77:34:0a:96:c7:2d:49:fb:71:48:3d:36:2d:8f: ec:b3:40:11:b8:3c:6d:dd:d5:66:ca:a2:24:7a:2b:3d:48:e0: 56:4d:95:09:be:62:7e:de:a1:5c:e1:14:70:53:c3:4e:31:e1: b6:c3:cc:5a:50:e6:41:79:6a:53:0b:af:d3:31:6e:fa:76:fb: 2d:d9:26:f6:dc:c9:9f:2a:75:64:41:08:a7:8b:f7:de:21:6c: dc:51:86:bf:01:6e:80:7a:ce:64:eb:61:bf:e7:bd:d3:29:bf: 08:f8:68:d3:1b:4f:63:b9:4d:94:12:45:ed:47:de:74:29:c6: ac:4c:ad:4f:24:0d:88:c3:42:6a:6e:99:7b:ba:b8:cf:47:a5: 60:51:a5:b0:6f:26:c3:a6:53:a0:0c:61:81:c9:c1:8c:d7:d1: 36:64:99:51:53:9d:4c:bf:dd:5b:21:4f:39:78:c5:70:70:f1: 26:2b:e6:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2dKy74sTMEKqeaNkfERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3 M2MyOTAwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD EyhiOGM4ODA3ZmU5YzYxN2RlNDQ0OGVkN2Y3YjI5YjY1MTg1ODBlOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B4u2e8H7AD4tmGx1DNwESkw9Cd2 z1qWMYjiAJHNFxJW04qcwvP7t2FsRoBd/wTiCWgQqRqh+ezwqGv5w15x87blMWBU Gdedhz/5BlBCy1bceaAwQ8j5EriyMww2mfJ8JqZcMgyLVOw4PY6JRO9quE8h/nl8 97jknVM4TgGmBHx+VNgrwtER1EZLvAHiy58bOZG8wmhbqFqtQhNf3CvRklB3g3xv PhF5wEzPIsHuNTuJFWWMpUqHMc4OP1G2aimomt2uJsPSFmte8rEjJbZrvKJHB5Ad UQWo+tp+PHBCPKlefLqXAlitHSQmnoRpBiYos735Ix4ym4V3XOjPjI82NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjIgH/pxhfeREjtf3sptlGFgOlTMB8GA1UdIwQY MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct YWQ0YmQ3ZjIzY2U0LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0 LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDp8gMJ7 ULZForIgjfdTc37UgTKf48pBp10/FbPM9Bgh9zthIke2mBLOXoIN895hN3SgbMFH HWeJFODnNm8SWbT1ZaNDpTIdAxMkJXc0CpbHLUn7cUg9Ni2P7LNAEbg8bd3VZsqi JHorPUjgVk2VCb5ift6hXOEUcFPDTjHhtsPMWlDmQXlqUwuv0zFu+nb7Ldkm9tzJ nyp1ZEEIp4v33iFs3FGGvwFugHrOZOthv+e90ym/CPho0xtPY7lNlBJF7UfedCnG rEytTyQNiMNCam6Ze7q4z0elYFGlsG8mw6ZToAxhgcnBjNfRNmSZUVOdTL/dWyFP OXjFcHDxJivmZw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:20 2025 by rpki-client