This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft File: 48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json) Hash identifier: eMYexoKnKmhF7p+XhAceb6l+x5UYQRNbqH/tW9qniT4= Subject key identifier: 1B:46:F8:50:1C:EB:96:E8:B2:C5:8D:D0:13:32:AC:F6:7A:FD:21:4D Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae Certificate serial: 019AFCC43C8FDDC585D77B3985BB506BD295 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft Manifest number: 1768 Signing time: Mon 08 Dec 2025 07:01:49 +0000 Manifest this update: Mon 08 Dec 2025 07:01:49 +0000 Manifest next update: Tue 09 Dec 2025 07:01:49 +0000 Files and hashes: 1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: TpNnidt4ElR289vk7oug+2pVblDGZH/7hRHN65NgWpA=) 2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:3c:8f:dd:c5:85:d7:7b:39:85:bb:50:6b:d2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae Validity Not Before: Dec 8 07:01:49 2025 GMT Not After : Dec 9 07:01:49 2025 GMT Subject: CN=1b46f8501ceb96e8b2c58dd01332acf67afd214d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:0e:d8:d2:e7:a6:32:5d:90:95:2d:99:48: 3e:39:35:95:0a:5d:c3:af:97:66:0d:1d:e2:1b:e3: 3d:07:74:f2:91:cc:70:c5:61:cf:a5:32:20:4a:7f: 91:c7:a7:a9:6e:33:a7:a0:c9:3e:d0:94:be:bb:37: c9:3f:67:3c:ee:fc:d3:75:26:b0:d0:af:b9:06:90: f1:9a:61:93:ca:b0:7d:4f:9b:1a:66:38:9b:01:49: c3:61:1a:3e:29:3f:22:45:4f:9b:f0:a6:fd:3c:31: 65:36:86:9b:07:85:4f:00:cd:0e:bd:81:93:1f:b3: ce:52:02:12:bf:eb:25:0d:d6:c1:ab:1c:0a:40:ae: 5e:f0:1e:df:5c:5b:5b:ca:12:a8:3e:53:13:93:c6: 28:59:6a:95:b4:45:26:e1:f8:95:f0:7e:24:6e:ba: ad:f3:9f:10:3f:a8:f6:4d:2d:bb:ea:ca:ec:84:b8: cb:e0:41:77:9b:1f:9e:ed:33:ea:d1:13:34:68:55: 0c:c6:db:fc:96:c6:67:31:ca:e3:4a:b6:3f:0c:2b: 2d:85:8d:cd:65:3c:97:4d:3c:d1:28:d9:58:02:97: 07:cd:a0:0e:72:26:0f:55:04:92:9d:05:aa:a2:c0: 7c:00:a3:dd:62:d3:da:1d:22:2b:ee:6e:62:19:6f: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:46:F8:50:1C:EB:96:E8:B2:C5:8D:D0:13:32:AC:F6:7A:FD:21:4D X509v3 Authority Key Identifier: keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8f:8b:43:a2:a8:73:2c:8b:f2:b6:59:52:bb:7f:e0:e3:ec: 80:27:94:5d:66:27:f4:23:a9:c6:00:8c:99:73:38:4d:53:37: 0d:9b:19:1e:48:bb:a8:59:22:10:32:0f:81:5b:af:4a:82:b6: 7b:de:20:9f:13:4c:a0:50:4e:4b:df:5e:71:fc:dc:44:28:b1: 36:3b:6e:ce:1e:a5:95:26:e7:3e:09:33:24:4e:a2:62:74:62: ea:9d:6d:71:a6:ff:88:b3:a8:6f:aa:9a:ff:75:ce:07:f9:ef: df:6e:dc:ed:84:84:6a:f9:53:5e:2f:54:55:44:a9:c6:53:74: 9e:c5:66:ed:82:a0:0b:96:85:4c:d5:61:43:65:5a:a9:5c:dc: 91:df:7f:5e:c5:8b:bd:c8:2c:34:99:a2:55:2e:92:5a:47:14: fa:fd:4b:1d:3a:ce:a5:e6:6d:7d:03:ff:6d:6d:28:13:10:b5: e4:08:38:10:e7:ed:6a:66:f3:dc:3f:0f:bc:41:ff:e8:c3:c3: c9:0d:36:77:19:ce:5b:cc:7d:8c:18:82:be:60:71:8c:9c:fa: 4f:b5:41:76:e0:8e:87:42:9f:4f:a1:91:fe:ee:39:87:df:77: 96:68:89:b9:bb:3d:39:d4:f2:22:2d:fe:82:ee:7d:18:99:48: 4f:74:0a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xDyP3cWF13s5hbtQa9KVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2M1ODliOTliYTQ5NDJjYWRlZGMxNzg5Mzg5NjQyOTYz YzQ4YWUwHhcNMjUxMjA4MDcwMTQ5WhcNMjUxMjA5MDcwMTQ5WjAzMTEwLwYDVQQD EygxYjQ2Zjg1MDFjZWI5NmU4YjJjNThkZDAxMzMyYWNmNjdhZmQyMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt8O2NLnpjJdkJUtmUg+OTWVCl3D r5dmDR3iG+M9B3TykcxwxWHPpTIgSn+Rx6epbjOnoMk+0JS+uzfJP2c87vzTdSaw 0K+5BpDxmmGTyrB9T5saZjibAUnDYRo+KT8iRU+b8Kb9PDFlNoabB4VPAM0OvYGT H7POUgISv+slDdbBqxwKQK5e8B7fXFtbyhKoPlMTk8YoWWqVtEUm4fiV8H4kbrqt 858QP6j2TS276srshLjL4EF3mx+e7TPq0RM0aFUMxtv8lsZnMcrjSrY/DCsthY3N ZTyXTTzRKNlYApcHzaAOciYPVQSSnQWqosB8AKPdYtPaHSIr7m5iGW9KIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtG+FAc65bossWN0BMyrPZ6/SFNMB8GA1UdIwQY MBaAFOPMWJuZuklCyt7cF4k4lkKWPEiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzIt MWMyMjY3ZWJmNWQ1LzEvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xYmVhYTQtYWM5Yy00YTg5LTkyNzItMWMyMjY3ZWJmNWQ1 LzEvNDh4WW01bTZTVUxLM3R3WGlUaVdRcFk4U0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKY+LQ6Ko cyyL8rZZUrt/4OPsgCeUXWYn9COpxgCMmXM4TVM3DZsZHki7qFkiEDIPgVuvSoK2 e94gnxNMoFBOS99ecfzcRCixNjtuzh6llSbnPgkzJE6iYnRi6p1tcab/iLOob6qa /3XOB/nv327c7YSEavlTXi9UVUSpxlN0nsVm7YKgC5aFTNVhQ2VaqVzckd9/XsWL vcgsNJmiVS6SWkcU+v1LHTrOpeZtfQP/bW0oExC15Ag4EOftambz3D8PvEH/6MPD yQ02dxnOW8x9jBiCvmBxjJz6T7VBduCOh0KfT6GR/u45h993lmiJubs9OdTyIi3+ gu59GJlIT3QKZw== -----END CERTIFICATE-----Generated at Mon Dec 8 08:26:30 2025 by rpki-client