This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json) Hash identifier: JtLo0VA+amHd4vRxDoeDVS2chDpDoRHJ70z0PJUATCU= Subject key identifier: AC:86:C0:48:AF:38:59:B4:6A:03:3A:52:34:85:13:26:8E:5A:A0:93 Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90 Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290 Certificate serial: 019B2F672652EE83CD4B0ED9A83FB54F78A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft Manifest number: 1691 Signing time: Thu 18 Dec 2025 03:00:47 +0000 Manifest this update: Thu 18 Dec 2025 03:00:47 +0000 Manifest next update: Fri 19 Dec 2025 03:00:47 +0000 Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: CDqpkTpYtnszxq67XWg30Wif8H33IZ6KTsHIPijENQk=) 2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:26:52:ee:83:cd:4b:0e:d9:a8:3f:b5:4f:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290 Validity Not Before: Dec 18 03:00:47 2025 GMT Not After : Dec 19 03:00:47 2025 GMT Subject: CN=ac86c048af3859b46a033a52348513268e5aa093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a9:e4:c1:b9:49:84:22:ea:40:6c:94:3e:cf: 36:0a:f3:6f:18:4b:62:f2:c0:01:d6:ea:df:09:ec: 04:34:0d:94:ad:c7:63:bd:8d:55:6b:9e:ad:e7:25: 48:57:62:b5:31:62:7a:60:50:28:bb:6a:4a:8b:b7: 4a:a6:0e:95:5c:1c:86:ec:3b:b0:a8:2b:35:21:38: ec:a6:1e:b4:c2:3e:e1:e8:7c:26:6d:42:c0:30:fb: b4:34:2f:20:ef:9e:93:1d:06:4f:8c:c2:e8:61:e6: 3e:0a:1c:d3:69:d7:03:41:4c:fd:de:f4:79:9e:8a: 89:41:12:98:c3:14:cc:63:cb:40:8a:e4:19:28:c8: 56:4f:9e:ec:34:5c:0f:7f:62:9f:9b:02:e1:79:4f: 66:e9:5a:81:69:21:c2:57:6a:c6:17:99:7a:82:3b: 37:83:34:f7:24:cb:9c:7f:2b:4e:db:25:29:02:26: 3a:96:14:7d:5a:f9:3e:0a:cb:d2:19:a4:ee:cf:0b: 72:c0:68:a9:16:25:82:07:c4:ab:29:eb:2d:a6:6c: 16:e9:d4:33:ee:e9:99:bd:2e:c2:c7:7b:3a:6b:d1: b2:18:0c:5b:58:07:4f:0d:29:81:b9:0d:34:39:69: a3:f5:ce:9f:21:67:cd:cf:a8:a4:33:af:4d:84:67: 5d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:86:C0:48:AF:38:59:B4:6A:03:3A:52:34:85:13:26:8E:5A:A0:93 X509v3 Authority Key Identifier: keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:75:1d:72:29:17:d0:00:8f:73:e5:c9:b0:f6:84:39:1f:9f: 1f:c9:a6:41:14:41:dc:83:63:ce:95:94:9e:72:e8:8d:c3:aa: 55:4d:bf:a1:11:34:79:3b:2f:c3:85:72:1a:9d:14:2a:04:81: fe:25:e5:50:72:07:1b:83:95:1a:43:cb:b3:1e:4d:ed:f4:09: 0a:4a:91:67:21:93:6b:66:6b:93:29:ca:9d:51:43:80:0a:64: 07:dc:fa:16:be:f0:61:77:d5:55:a4:65:43:59:0a:18:57:ed: 0a:c3:dd:c1:5b:22:94:59:c4:b7:e5:1e:10:31:d6:3c:7b:6d: 0e:6a:4c:ad:78:a8:cd:29:2d:79:78:8d:3d:5a:38:2f:91:cb: a8:af:f2:fd:66:0e:0c:0b:59:6d:26:4a:f6:64:de:0b:d3:3e: bd:17:09:2e:a3:58:bc:f7:35:c2:eb:2f:f8:62:b6:49:4e:82: 01:e1:58:69:a4:40:02:f2:c1:92:39:7b:47:e5:55:de:1a:07: d6:91:6e:01:aa:93:2b:f7:ef:e9:23:88:63:11:55:87:94:25: 20:2b:87:9d:c1:12:58:04:1c:e8:3f:1b:75:fa:f7:8f:d4:13: 8d:79:1d:cb:47:1c:93:e5:87:38:4b:22:c2:4b:ae:bb:2a:5f: 58:12:1f:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyZS7oPNSw7ZqD+1T3igMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3 M2MyOTAwHhcNMjUxMjE4MDMwMDQ3WhcNMjUxMjE5MDMwMDQ3WjAzMTEwLwYDVQQD EyhhYzg2YzA0OGFmMzg1OWI0NmEwMzNhNTIzNDg1MTMyNjhlNWFhMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ankwblJhCLqQGyUPs82CvNvGEti 8sAB1urfCewENA2UrcdjvY1Va56t5yVIV2K1MWJ6YFAou2pKi7dKpg6VXByG7Duw qCs1ITjsph60wj7h6HwmbULAMPu0NC8g756THQZPjMLoYeY+ChzTadcDQUz93vR5 noqJQRKYwxTMY8tAiuQZKMhWT57sNFwPf2KfmwLheU9m6VqBaSHCV2rGF5l6gjs3 gzT3JMucfytO2yUpAiY6lhR9Wvk+CsvSGaTuzwtywGipFiWCB8SrKestpmwW6dQz 7umZvS7Cx3s6a9GyGAxbWAdPDSmBuQ00OWmj9c6fIWfNz6ikM69NhGddrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyGwEivOFm0agM6UjSFEyaOWqCTMB8GA1UdIwQY MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct YWQ0YmQ3ZjIzY2U0LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0 LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHUdcikX 0ACPc+XJsPaEOR+fH8mmQRRB3INjzpWUnnLojcOqVU2/oRE0eTsvw4VyGp0UKgSB /iXlUHIHG4OVGkPLsx5N7fQJCkqRZyGTa2ZrkynKnVFDgApkB9z6Fr7wYXfVVaRl Q1kKGFftCsPdwVsilFnEt+UeEDHWPHttDmpMrXiozSkteXiNPVo4L5HLqK/y/WYO DAtZbSZK9mTeC9M+vRcJLqNYvPc1wusv+GK2SU6CAeFYaaRAAvLBkjl7R+VV3hoH 1pFuAaqTK/fv6SOIYxFVh5QlICuHncESWAQc6D8bdfr3j9QTjXkdy0cck+WHOEsi wkuuuypfWBIfEA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:42:10 2025 by rpki-client