This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json) Hash identifier: ZaMGy1M3JI81chl1/bwhH9mCyAIXsI9j/8ujONZRpq8= Subject key identifier: 5E:D9:01:6E:25:51:02:20:D5:82:A6:08:E2:58:58:11:F7:A4:24:45 Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08 Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08 Certificate serial: 019B337B2FC495641B6767189C434F4CC633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft Manifest number: 04D3 Signing time: Thu 18 Dec 2025 22:01:09 +0000 Manifest this update: Thu 18 Dec 2025 22:01:09 +0000 Manifest next update: Fri 19 Dec 2025 22:01:09 +0000 Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: AtCKIm/l/ePOV9FZ7OOpipGTrJDLuF7t+/pWv6ZqToo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:2f:c4:95:64:1b:67:67:18:9c:43:4f:4c:c6:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08 Validity Not Before: Dec 18 22:01:09 2025 GMT Not After : Dec 19 22:01:09 2025 GMT Subject: CN=5ed9016e25510220d582a608e2585811f7a42445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:25:d3:82:5c:27:26:45:81:d0:77:22:af:08: ef:a9:59:2d:02:e8:94:4f:15:c8:a9:62:8e:0c:f0: 12:9e:16:b3:94:45:13:13:29:0e:4f:3c:a4:f8:d6: 9b:f2:27:17:43:e4:09:b0:34:8f:b6:be:14:6f:bd: f7:67:8d:ff:d8:ec:07:67:f1:e5:06:c3:d5:4f:e1: 38:73:7e:88:fd:48:1d:64:d4:cc:b5:82:70:ea:02: d7:f8:8d:b9:05:bb:8a:53:f6:a5:f2:b9:d6:85:e9: b5:c7:f5:82:0e:c6:a2:37:6a:fb:61:ca:28:5a:bb: ab:80:c0:15:18:43:5c:d9:2c:93:9d:db:da:d2:3c: b6:e7:80:20:32:03:a1:49:09:c9:82:ae:d5:ce:33: de:13:22:79:51:56:ab:dd:3b:ef:d1:4f:5b:1c:30: 4a:5f:58:6c:0e:4b:6b:64:5c:61:22:56:55:20:b6: 12:3b:7f:48:83:f9:32:9e:d4:13:4f:d5:52:49:d1: ea:f0:81:9f:0e:95:e2:cf:c3:8d:b9:fa:9c:56:53: ba:de:72:93:f7:80:0e:5f:dc:66:69:c8:74:fc:d0: 7a:85:dc:86:3b:83:17:69:ed:ad:44:eb:0e:24:e3: 05:84:c7:db:a1:00:e3:9f:d7:c5:a8:9e:93:41:87: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D9:01:6E:25:51:02:20:D5:82:A6:08:E2:58:58:11:F7:A4:24:45 X509v3 Authority Key Identifier: keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:73:ad:08:f9:d7:b8:9e:05:1a:a8:a9:f4:2d:e5:1f:2b:a5: 27:e8:56:2a:f6:5d:cc:1c:19:ad:3e:7a:f6:39:46:17:02:53: 10:8c:63:33:ce:c8:f2:c9:f2:10:ea:8e:3d:00:0d:72:a0:55: 43:be:5f:00:dc:25:9e:f0:7c:83:a8:76:ec:ec:96:26:d3:13: d6:78:cb:e7:79:71:46:d6:9d:42:c7:a1:96:43:dd:e3:20:12: cb:ca:88:db:db:ef:d5:5b:ff:2a:37:a6:bd:46:6a:7c:04:89: 43:3c:e2:1e:dd:d3:e0:16:2c:01:63:10:46:75:a3:1a:cc:65: 3e:6b:13:8b:f6:0e:71:96:7c:42:19:d9:e4:87:78:c3:d9:d8: 2a:fe:fb:71:53:9b:1a:19:a7:b7:26:f3:88:d4:33:48:f6:85: bd:c3:a0:21:e9:bc:a4:28:40:89:8e:df:6e:1c:8a:9a:fa:52: e4:fe:38:d4:9f:4a:4f:8d:f9:d2:f9:e4:54:5c:17:0a:1d:43: ec:6e:f8:2e:b4:d8:f6:4e:e4:72:d0:73:99:a5:35:27:80:9e: 34:2b:05:cc:a6:d9:6b:48:9b:7f:6c:3d:c6:92:80:3d:3b:5c: 36:0c:8f:7b:14:5a:1e:8a:b8:a7:03:b3:62:5c:c2:85:0f:9d: dc:54:46:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszey/ElWQbZ2cYnENPTMYzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGZiNjZkN2U4NWJiNGFkMDhjNTA5MmYwYmI4MDYyOTJi YTBlMDgwHhcNMjUxMjE4MjIwMTA5WhcNMjUxMjE5MjIwMTA5WjAzMTEwLwYDVQQD Eyg1ZWQ5MDE2ZTI1NTEwMjIwZDU4MmE2MDhlMjU4NTgxMWY3YTQyNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SXTglwnJkWB0HcirwjvqVktAuiU TxXIqWKODPASnhazlEUTEykOTzyk+Nab8icXQ+QJsDSPtr4Ub733Z43/2OwHZ/Hl BsPVT+E4c36I/UgdZNTMtYJw6gLX+I25BbuKU/al8rnWhem1x/WCDsaiN2r7Ycoo WrurgMAVGENc2SyTndva0jy254AgMgOhSQnJgq7VzjPeEyJ5UVar3Tvv0U9bHDBK X1hsDktrZFxhIlZVILYSO39Ig/kyntQTT9VSSdHq8IGfDpXiz8ONufqcVlO63nKT 94AOX9xmach0/NB6hdyGO4MXae2tROsOJOMFhMfboQDjn9fFqJ6TQYf76QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7ZAW4lUQIg1YKmCOJYWBH3pCRFMB8GA1UdIwQY MBaAFEdPtm1+hbtK0IxQkvC7gGKSug4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWIt YWZlY2YyMmVlMTE1LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xMjhjYTctNmYwYS00OTA0LTk3ZWItYWZlY2YyMmVlMTE1 LzEvUjAtMmJYNkZ1MHJRakZDUzhMdUFZcEs2RGdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnOtCPnX uJ4FGqip9C3lHyulJ+hWKvZdzBwZrT569jlGFwJTEIxjM87I8snyEOqOPQANcqBV Q75fANwlnvB8g6h27OyWJtMT1njL53lxRtadQsehlkPd4yASy8qI29vv1Vv/Kjem vUZqfASJQzziHt3T4BYsAWMQRnWjGsxlPmsTi/YOcZZ8QhnZ5Id4w9nYKv77cVOb GhmntybziNQzSPaFvcOgIem8pChAiY7fbhyKmvpS5P441J9KT4350vnkVFwXCh1D 7G74LrTY9k7kctBzmaU1J4CeNCsFzKbZa0ibf2w9xpKAPTtcNgyPexRaHoq4pwOz YlzChQ+d3FRGVQ== -----END CERTIFICATE-----Generated at Fri Dec 19 05:45:49 2025 by rpki-client