This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json) Hash identifier: k3QqhVQje+VP0V4Pj/tbrPUS78cGPp664K/+O7zyD0k= Subject key identifier: 21:07:71:70:5A:59:B9:1E:1B:C2:3F:72:3A:0F:1D:09:6A:15:A0:6C Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08 Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08 Certificate serial: 019AF1D1A7B5B7441B406DE1BEBD55698B06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft Manifest number: 04B1 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: seU9y32z18EyJ+3q5CWqh/DWqt1KPNZZvmR3U1ga4eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a7:b5:b7:44:1b:40:6d:e1:be:bd:55:69:8b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=210771705a59b91e1bc23f723a0f1d096a15a06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:ff:1c:21:02:c9:19:70:98:55:b8:e5:43: ed:ad:ab:bf:4c:98:75:73:63:8b:13:2c:b2:b9:88: 3f:6a:6c:59:43:24:8a:ca:38:3a:77:ea:42:86:fa: 23:2e:c5:8b:6e:fa:aa:4e:15:21:75:f4:c2:4f:31: 64:a9:c3:4f:63:eb:96:fd:89:7c:a7:66:86:1c:16: 89:bd:f4:b2:97:65:99:87:2a:bc:64:8c:20:f6:75: 99:91:64:5a:2a:b4:72:fe:0b:9a:38:65:0d:e5:74: aa:c6:0b:84:3c:a4:2c:e0:e6:28:30:7b:a8:e8:e5: 84:52:eb:5a:06:63:77:ac:34:db:c9:ba:39:f8:40: e9:51:ca:86:85:00:59:a9:35:19:4d:fc:a3:4d:ac: 45:a1:69:42:65:6e:e9:55:c0:69:d2:76:1f:eb:cf: 75:5e:3b:97:ca:7d:07:c8:44:ce:7f:04:21:f1:c2: ac:5c:a5:07:31:09:19:33:cf:e8:09:cd:b4:b8:22: 59:c6:5b:4d:1b:56:63:9c:f8:76:24:5e:ca:22:ae: 7a:1d:c6:a8:73:5e:22:03:57:82:6b:53:02:48:57: 33:f8:d4:eb:32:0a:27:9d:53:0e:fb:87:77:d3:87: fa:78:0f:bd:c1:ec:cb:26:fb:db:6a:56:e7:ad:81: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:07:71:70:5A:59:B9:1E:1B:C2:3F:72:3A:0F:1D:09:6A:15:A0:6C X509v3 Authority Key Identifier: keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f0:9c:3b:b8:a3:fc:ff:94:ba:c7:b8:3d:96:78:19:79:a4: 1d:16:65:79:55:57:28:a8:40:97:71:c4:6e:82:be:6d:7a:02: ea:50:36:12:37:ef:8f:52:60:30:25:d9:52:60:d7:0b:66:d9: e5:f4:66:2b:c5:ed:24:23:79:85:cb:b6:ab:58:b1:f7:33:af: 83:eb:86:4c:86:e7:ce:1f:49:ee:1f:d7:7e:e2:89:90:3f:87: cb:df:58:d4:22:24:0e:9b:f7:1f:c7:cc:81:75:5b:d5:72:a3: a4:2d:fe:99:6b:2a:fd:8d:73:b8:aa:82:5e:3e:0f:72:8a:6c: 91:25:93:2a:49:2d:86:12:6f:f8:0c:4c:6c:9f:35:9b:57:6e: c4:2a:94:e4:ac:61:17:cc:be:70:56:be:69:bb:73:f6:52:7e: e0:ec:c4:5d:c0:b2:49:66:f5:44:03:e0:f5:26:5a:15:59:d6: a2:10:8c:ad:b3:eb:da:1a:46:92:34:90:a8:28:2f:24:22:3c: 48:76:45:43:5a:5b:d1:ea:de:68:4e:df:5c:77:b4:43:7c:16: b3:43:0b:79:e0:13:1c:3d:04:20:97:83:a9:14:2c:5e:a4:ae: f0:49:09:1a:f1:5b:8a:5b:18:79:27:e0:80:7e:35:38:b7:7f: f4:30:1b:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ae1t0QbQG3hvr1VaYsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGZiNjZkN2U4NWJiNGFkMDhjNTA5MmYwYmI4MDYyOTJi YTBlMDgwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD EygyMTA3NzE3MDVhNTliOTFlMWJjMjNmNzIzYTBmMWQwOTZhMTVhMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlD/HCECyRlwmFW45UPtrau/TJh1 c2OLEyyyuYg/amxZQySKyjg6d+pChvojLsWLbvqqThUhdfTCTzFkqcNPY+uW/Yl8 p2aGHBaJvfSyl2WZhyq8ZIwg9nWZkWRaKrRy/guaOGUN5XSqxguEPKQs4OYoMHuo 6OWEUutaBmN3rDTbybo5+EDpUcqGhQBZqTUZTfyjTaxFoWlCZW7pVcBp0nYf6891 XjuXyn0HyETOfwQh8cKsXKUHMQkZM8/oCc20uCJZxltNG1ZjnPh2JF7KIq56Hcao c14iA1eCa1MCSFcz+NTrMgonnVMO+4d304f6eA+9wezLJvvbalbnrYEynQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEHcXBaWbkeG8I/cjoPHQlqFaBsMB8GA1UdIwQY MBaAFEdPtm1+hbtK0IxQkvC7gGKSug4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWIt YWZlY2YyMmVlMTE1LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWItYWZlY2YyMmVlMTE1 LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfCcO7ij /P+Uuse4PZZ4GXmkHRZleVVXKKhAl3HEboK+bXoC6lA2Ejfvj1JgMCXZUmDXC2bZ 5fRmK8XtJCN5hcu2q1ix9zOvg+uGTIbnzh9J7h/XfuKJkD+Hy99Y1CIkDpv3H8fM gXVb1XKjpC3+mWsq/Y1zuKqCXj4PcopskSWTKkkthhJv+AxMbJ81m1duxCqU5Kxh F8y+cFa+abtz9lJ+4OzEXcCySWb1RAPg9SZaFVnWohCMrbPr2hpGkjSQqCgvJCI8 SHZFQ1pb0ereaE7fXHe0Q3wWs0MLeeATHD0EIJeDqRQsXqSu8EkJGvFbilsYeSfg gH41OLd/9DAbnw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:54 2025 by rpki-client