This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json) Hash identifier: LMYTBY4EvBuRShP/ZdiuPI5fjTxUN9+Gd6r7nF8L4is= Subject key identifier: 9D:DC:37:D3:AC:F5:D6:E3:17:6B:41:93:08:75:AE:9A:CA:18:66:52 Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b Certificate serial: 019B2BC1D28BCFB9659E94F3695149D4CEF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft Manifest number: 0BCC Signing time: Wed 17 Dec 2025 10:01:21 +0000 Manifest this update: Wed 17 Dec 2025 10:01:21 +0000 Manifest next update: Thu 18 Dec 2025 10:01:21 +0000 Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: mdijI3Ion2vKMeJ54SQ9EJw+RRkwj3IcAnWNm91nm4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:d2:8b:cf:b9:65:9e:94:f3:69:51:49:d4:ce:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b Validity Not Before: Dec 17 10:01:21 2025 GMT Not After : Dec 18 10:01:21 2025 GMT Subject: CN=9ddc37d3acf5d6e3176b41930875ae9aca186652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:31:e0:96:91:49:86:1d:e2:1b:40:4f:6e:06: 7f:b4:fc:a7:6b:a4:5f:15:e4:a8:6e:7c:8f:9e:6b: 30:c0:69:61:4e:af:2d:6e:22:c6:33:37:16:df:23: 5d:d9:57:38:dd:cb:6d:94:42:b7:49:5c:43:ef:f6: d9:6f:6f:c5:dc:fe:de:23:c7:43:83:38:b6:49:8f: 4b:be:20:79:67:58:1e:a0:03:a0:b1:42:eb:22:ee: 7e:da:ee:66:dc:4e:25:25:ab:77:2b:f0:01:ce:cc: 18:7f:36:e3:84:cc:e9:15:f2:ff:07:27:15:4a:0c: b4:95:0d:f1:01:72:f8:da:37:c3:67:f0:1f:a3:13: f3:62:2f:00:4f:e2:00:7e:70:95:76:03:d1:31:79: 3c:e9:a6:5b:19:b2:89:f9:59:68:5e:be:f1:89:d6: 84:8b:c1:2b:18:d5:1b:e9:29:ce:ec:ed:e4:54:77: 07:29:cb:eb:b4:6c:3e:58:8e:8c:2b:ea:d8:ff:1e: 2a:02:22:88:8c:73:3d:15:9a:d3:16:fb:e3:e8:3b: c9:27:03:a1:47:fd:5e:25:c9:c7:c7:ee:6f:ad:14: 1d:a1:80:8f:72:5b:22:90:f7:51:f0:73:16:1e:1a: e5:f2:5b:b9:76:47:1f:0e:7b:b1:fe:7b:ca:57:9d: 42:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DC:37:D3:AC:F5:D6:E3:17:6B:41:93:08:75:AE:9A:CA:18:66:52 X509v3 Authority Key Identifier: keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:00:b6:62:bb:a5:b2:a9:30:fd:56:f1:cb:e8:f0:09:f3:95: 65:97:f1:8e:16:b0:51:19:9f:8b:5a:83:06:bc:8f:6b:b5:31: ae:60:5e:4e:54:f1:be:78:76:6c:a1:24:5d:0c:30:40:73:dd: ee:0f:ba:f2:3d:66:f8:a8:29:b3:2d:04:e8:4c:13:4d:d4:59: 4d:be:bf:9f:f9:3d:33:80:69:69:8e:c4:4c:cd:28:e8:94:74: 1d:e8:2c:27:50:18:4f:aa:26:ce:eb:b0:82:99:4e:a0:20:c3: 6a:ac:26:c1:93:26:54:c6:93:3c:87:09:83:98:3c:4f:3c:4f: 14:a9:2c:f6:97:d2:f9:4f:fe:69:a1:fb:d7:de:aa:26:3b:c5: e8:c4:a0:0e:55:08:28:fb:ed:ff:6d:e4:d5:34:f7:92:35:dc: 92:f2:c1:d5:3a:08:af:93:c1:93:a1:9a:4c:7d:eb:28:71:c0: b9:e5:5f:db:5e:6d:51:d5:a8:e3:5b:71:22:a1:05:67:d6:bb: ba:74:8d:46:21:d3:e6:43:39:43:b0:34:a3:7b:53:aa:49:1c: 7c:21:0d:05:f1:4b:af:e6:d3:0a:dd:5a:98:ad:71:99:c4:9e: 9b:eb:54:8d:4f:95:cc:2b:ab:79:92:ea:28:b7:ba:bc:1f:f9: 23:68:a0:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwdKLz7llnpTzaVFJ1M7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGYzMzUwOGQ5MjUzMTM0OWRmM2QwYmU5YjU0NWZjOGUx ZjVlNmIwHhcNMjUxMjE3MTAwMTIxWhcNMjUxMjE4MTAwMTIxWjAzMTEwLwYDVQQD Eyg5ZGRjMzdkM2FjZjVkNmUzMTc2YjQxOTMwODc1YWU5YWNhMTg2NjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDHglpFJhh3iG0BPbgZ/tPyna6Rf FeSobnyPnmswwGlhTq8tbiLGMzcW3yNd2Vc43cttlEK3SVxD7/bZb2/F3P7eI8dD gzi2SY9LviB5Z1geoAOgsULrIu5+2u5m3E4lJat3K/ABzswYfzbjhMzpFfL/BycV Sgy0lQ3xAXL42jfDZ/AfoxPzYi8AT+IAfnCVdgPRMXk86aZbGbKJ+VloXr7xidaE i8ErGNUb6SnO7O3kVHcHKcvrtGw+WI6MK+rY/x4qAiKIjHM9FZrTFvvj6DvJJwOh R/1eJcnHx+5vrRQdoYCPclsikPdR8HMWHhrl8lu5dkcfDnux/nvKV51CHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3cN9Os9dbjF2tBkwh1rprKGGZSMB8GA1UdIwQY MBaAFLOPM1CNklMTSd89C+m1RfyOH15rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczQ4elVJMlNVeE5KM3owTDZiVkZfSTRmWG1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMjYyYjAtNDI2YS00MGQxLTlmYzYt OWRkYmI5N2RlNjFiLzEvczQ4elVJMlNVeE5KM3owTDZiVkZfSTRmWG1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kMjYyYjAtNDI2YS00MGQxLTlmYzYtOWRkYmI5N2RlNjFi LzEvczQ4elVJMlNVeE5KM3owTDZiVkZfSTRmWG1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAC2Yrul sqkw/Vbxy+jwCfOVZZfxjhawURmfi1qDBryPa7UxrmBeTlTxvnh2bKEkXQwwQHPd 7g+68j1m+Kgpsy0E6EwTTdRZTb6/n/k9M4BpaY7ETM0o6JR0HegsJ1AYT6omzuuw gplOoCDDaqwmwZMmVMaTPIcJg5g8TzxPFKks9pfS+U/+aaH7196qJjvF6MSgDlUI KPvt/23k1TT3kjXckvLB1ToIr5PBk6GaTH3rKHHAueVf215tUdWo41txIqEFZ9a7 unSNRiHT5kM5Q7A0o3tTqkkcfCENBfFLr+bTCt1amK1xmcSem+tUjU+VzCureZLq KLe6vB/5I2igHA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:29:44 2025 by rpki-client