This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft File: Rl73vS6z3NurBJCDgNSKjy_rxiw.mft (raw, json) Hash identifier: Bjwk/qS84Pb5b++Vfm9yu9HJswB3wWHgEQ/6arRTjMs= Subject key identifier: 5F:8B:C5:05:6B:8C:D4:26:8E:6D:BA:45:43:63:04:D8:91:6E:D9:92 Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c Certificate serial: 019AF352A7752F72D15874C2E848A938708D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft Manifest number: 115F Signing time: Sat 06 Dec 2025 11:01:11 +0000 Manifest this update: Sat 06 Dec 2025 11:01:11 +0000 Manifest next update: Sun 07 Dec 2025 11:01:11 +0000 Files and hashes: 1: 0-c9PgPd1_wXhamWThnKHlQbGGs.roa (hash: t9blZuOAI0IrEr32bYa6e5eRP1KzQCe8vHG6m5RDWu8=) 2: Rl73vS6z3NurBJCDgNSKjy_rxiw.crl (hash: vgpDfhWvMKVe4PH8n0kva7djigGX8ox/IhA9PNNNXOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a7:75:2f:72:d1:58:74:c2:e8:48:a9:38:70:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c Validity Not Before: Dec 6 11:01:11 2025 GMT Not After : Dec 7 11:01:11 2025 GMT Subject: CN=5f8bc5056b8cd4268e6dba45436304d8916ed992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f2:b3:46:1a:76:ca:e2:e9:02:bc:1c:31:d1: cd:af:7c:4a:fb:e4:ce:38:81:65:e5:4e:ac:a1:3e: 31:7a:29:fc:45:94:ec:26:e5:1e:93:75:32:c7:a7: 3f:04:3e:8f:0d:dc:7a:7b:0d:59:7c:e0:92:40:56: 0a:9e:b9:7d:23:b2:4c:8d:33:36:66:6f:ba:3c:b3: 2c:56:7f:c8:dd:ea:bc:af:dd:f7:c9:18:be:c5:cb: e8:40:46:af:91:83:38:20:26:2e:c5:82:3c:f3:37: 96:3c:9e:f0:c7:6f:32:dc:93:d9:6d:b2:4e:f4:8b: a5:bd:41:fb:90:a6:45:e6:f0:96:1a:44:65:11:15: d3:3b:94:d2:64:6a:61:1f:fe:28:1f:a9:a4:26:f4: 8c:73:2c:6c:bf:89:b5:56:33:3c:9e:e0:4c:3b:29: db:92:a2:41:3a:cd:ad:0b:28:6e:ac:87:92:3e:5e: 9e:a9:77:fb:b3:7f:bb:e5:03:a1:7c:fc:20:c6:b9: 8e:2a:46:4a:57:56:c9:9d:0c:cc:9e:d3:ce:6f:ef: 41:c5:ec:ee:a0:ad:43:c7:18:9e:ff:bb:19:f9:b2: 1a:e7:a3:9c:79:0f:2a:9b:79:15:cd:2d:5a:2d:69: 77:31:5d:1b:83:22:da:bf:0b:b0:76:e0:1e:f7:0d: 07:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8B:C5:05:6B:8C:D4:26:8E:6D:BA:45:43:63:04:D8:91:6E:D9:92 X509v3 Authority Key Identifier: keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ec:ab:03:a2:18:75:f1:37:3c:ca:3c:ab:f5:08:cb:53:4a: a3:74:8b:71:fc:c9:24:5a:c3:5a:6c:f0:59:db:53:02:ad:e2: d6:1b:53:ff:18:83:29:70:40:c4:cb:2e:60:59:6f:47:0c:aa: 2e:2d:b1:9a:31:07:84:57:2c:b4:c4:df:9b:00:e4:9c:a4:f6: 03:0d:c8:0a:7f:52:83:6a:41:64:ed:1a:06:05:04:e1:06:0e: b2:a1:81:18:d3:5e:58:30:ab:b9:9b:f2:8b:43:a7:e7:c3:44: 56:2e:cf:bc:12:c5:ba:b8:9d:16:05:cd:6a:70:52:1f:a0:f4: 8a:ae:a5:b3:68:e7:0f:d9:ae:09:d9:64:ce:c2:59:5b:92:27: de:55:78:a2:7a:ea:d6:47:db:83:92:83:88:77:31:d0:23:f0: 16:0f:7d:0f:71:d5:0a:0b:9f:fc:26:41:fb:77:1f:7a:f6:89: 18:5e:ae:63:1d:2d:f0:de:41:58:33:04:c6:59:aa:6b:80:87: 48:fa:a3:1e:66:97:d2:43:51:ab:41:53:c6:3c:14:fb:79:47: 1f:e5:af:5c:d8:2e:41:ad:f5:f6:5c:f5:31:d7:4e:40:f6:7f: 48:d2:4a:2b:06:80:0a:06:6b:c8:3d:fb:a2:c2:0c:63:00:51: 20:5c:d0:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqd1L3LRWHTC6EipOHCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NWVmN2JkMmViM2RjZGJhYjA0OTA4MzgwZDQ4YThmMmZl YmM2MmMwHhcNMjUxMjA2MTEwMTExWhcNMjUxMjA3MTEwMTExWjAzMTEwLwYDVQQD Eyg1ZjhiYzUwNTZiOGNkNDI2OGU2ZGJhNDU0MzYzMDRkODkxNmVkOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfKzRhp2yuLpArwcMdHNr3xK++TO OIFl5U6soT4xein8RZTsJuUek3Uyx6c/BD6PDdx6ew1ZfOCSQFYKnrl9I7JMjTM2 Zm+6PLMsVn/I3eq8r933yRi+xcvoQEavkYM4ICYuxYI88zeWPJ7wx28y3JPZbbJO 9IulvUH7kKZF5vCWGkRlERXTO5TSZGphH/4oH6mkJvSMcyxsv4m1VjM8nuBMOynb kqJBOs2tCyhurIeSPl6eqXf7s3+75QOhfPwgxrmOKkZKV1bJnQzMntPOb+9Bxezu oK1Dxxie/7sZ+bIa56OceQ8qm3kVzS1aLWl3MV0bgyLavwuwduAe9w0HwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+LxQVrjNQmjm26RUNjBNiRbtmSMB8GA1UdIwQY MBaAFEZe970us9zbqwSQg4DUio8v68YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUt MzRiNjdkZjdjYjAzLzEvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUtMzRiNjdkZjdjYjAz LzEvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuyrA6IY dfE3PMo8q/UIy1NKo3SLcfzJJFrDWmzwWdtTAq3i1htT/xiDKXBAxMsuYFlvRwyq Li2xmjEHhFcstMTfmwDknKT2Aw3ICn9Sg2pBZO0aBgUE4QYOsqGBGNNeWDCruZvy i0On58NEVi7PvBLFuridFgXNanBSH6D0iq6ls2jnD9muCdlkzsJZW5In3lV4onrq 1kfbg5KDiHcx0CPwFg99D3HVCguf/CZB+3cfevaJGF6uYx0t8N5BWDMExlmqa4CH SPqjHmaX0kNRq0FTxjwU+3lHH+WvXNguQa319lz1MddOQPZ/SNJKKwaACgZryD37 osIMYwBRIFzQrA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:56 2025 by rpki-client