This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json) Hash identifier: pTrgEGawiXrfNLQMjp1cyXv5BYy6sEhp7Ibf39Mms44= Subject key identifier: 18:63:66:37:D8:22:C2:06:A3:96:6D:12:72:9F:89:03:32:99:E9:53 Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6 Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6 Certificate serial: 019B330CF4379A22744C91B1DBBF4DCB676A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft Manifest number: 0389 Signing time: Thu 18 Dec 2025 20:00:45 +0000 Manifest this update: Thu 18 Dec 2025 20:00:45 +0000 Manifest next update: Fri 19 Dec 2025 20:00:45 +0000 Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: kZArRJcx1Gtqg6uQH0kVlVOMPYPPrm8Tm/glrr+G85s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:f4:37:9a:22:74:4c:91:b1:db:bf:4d:cb:67:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6 Validity Not Before: Dec 18 20:00:45 2025 GMT Not After : Dec 19 20:00:45 2025 GMT Subject: CN=18636637d822c206a3966d12729f89033299e953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:a8:de:56:e1:c4:3c:8b:92:b3:bc:c4:68: da:54:04:2f:52:7d:99:a9:45:86:8a:f0:48:f5:83: 10:13:04:3a:0c:28:a7:fa:58:c4:40:0d:89:bc:2a: 82:d6:d6:f0:27:85:39:c1:f8:a8:66:a5:05:66:67: 6d:0b:8b:21:23:29:84:46:40:b7:64:0b:9a:2e:96: b2:ae:6d:19:89:73:33:71:b3:d3:97:5a:1e:8d:9e: 4c:04:83:92:08:77:dd:a8:b3:cf:7d:40:55:f4:84: 66:fd:09:4f:fb:39:34:6a:c3:eb:53:4b:ee:be:5c: 94:cf:b3:36:7c:80:5d:82:af:dd:47:c4:02:33:65: f9:5c:26:b4:5c:10:5d:d3:b5:e1:74:53:5d:7c:0a: 53:cd:17:b0:3c:0c:70:f7:e5:c5:ff:6c:39:07:7e: 20:52:45:ee:3a:99:83:3a:f3:59:d1:95:45:9e:1f: d5:c4:b1:a7:0f:d3:5b:aa:00:99:94:45:4c:d0:7a: af:50:b3:6f:15:f6:21:49:c0:9e:ce:79:de:28:2b: 65:4b:e4:58:25:2a:5d:9b:71:0e:ca:18:18:26:fe: 52:db:6b:59:bc:a6:92:e4:6a:d0:7b:47:31:33:ff: 74:3c:86:a1:d9:5c:03:e6:b9:19:9f:f7:3c:73:7e: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:63:66:37:D8:22:C2:06:A3:96:6D:12:72:9F:89:03:32:99:E9:53 X509v3 Authority Key Identifier: keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c6:02:95:b7:47:67:31:9d:f3:2c:24:c4:08:dd:8b:24:11: 63:02:69:69:c3:19:88:d1:9a:96:4b:d4:b1:d1:eb:ba:10:c7: f6:cb:89:00:c5:20:88:fb:f9:90:95:1e:2f:87:55:94:ab:32: 90:fb:3c:97:c0:3b:cd:70:0e:7a:3d:38:f9:47:9f:66:80:00: 85:b1:7c:4d:1f:69:6b:9e:35:f5:5a:11:90:e5:ee:d2:54:82: bb:5e:2e:d5:40:03:ca:97:e9:e9:8b:d4:ef:75:1c:d6:9a:36: a5:6e:44:4c:33:bd:3d:36:82:ce:9b:52:24:dc:2c:ac:95:43: f2:51:d5:3e:d7:f2:d4:32:ae:91:cb:cd:90:84:aa:f0:46:50: 51:4b:dc:76:e3:8c:4e:0d:78:60:83:d2:60:5b:48:7c:8a:06: 8e:b2:89:a0:fc:35:78:1c:47:24:41:ca:1b:fc:47:b9:28:99: c5:21:09:29:f0:a0:5b:6b:2f:73:0a:80:5c:1c:5c:52:24:c3: 20:8b:48:3e:1d:9b:a5:1c:a3:4e:17:ba:15:50:b8:a0:ca:a0: 22:38:fc:12:b1:8b:20:dd:c7:e6:38:19:23:13:65:d8:5a:c9: 54:a5:69:ec:6b:72:3f:3d:87:47:e9:1f:66:6b:f3:a1:19:38: 38:1d:d3:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDPQ3miJ0TJGx279Ny2dqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOGYwNmMzNTQ5NDYwOGQ5YWNjZWIwNzBhNGNkMTZhYjk1 ZmY2YTYwHhcNMjUxMjE4MjAwMDQ1WhcNMjUxMjE5MjAwMDQ1WjAzMTEwLwYDVQQD EygxODYzNjYzN2Q4MjJjMjA2YTM5NjZkMTI3MjlmODkwMzMyOTllOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhqo3lbhxDyLkrO8xGjaVAQvUn2Z qUWGivBI9YMQEwQ6DCin+ljEQA2JvCqC1tbwJ4U5wfioZqUFZmdtC4shIymERkC3 ZAuaLpayrm0ZiXMzcbPTl1oejZ5MBIOSCHfdqLPPfUBV9IRm/QlP+zk0asPrU0vu vlyUz7M2fIBdgq/dR8QCM2X5XCa0XBBd07XhdFNdfApTzRewPAxw9+XF/2w5B34g UkXuOpmDOvNZ0ZVFnh/VxLGnD9NbqgCZlEVM0HqvULNvFfYhScCeznneKCtlS+RY JSpdm3EOyhgYJv5S22tZvKaS5GrQe0cxM/90PIah2VwD5rkZn/c8c36qYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhjZjfYIsIGo5ZtEnKfiQMymelTMB8GA1UdIwQY MBaAFA+PBsNUlGCNmszrBwpM0Wq5X/amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMt NjBlOWI3ZGM1NTBiLzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMtNjBlOWI3ZGM1NTBi LzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8YClbdH ZzGd8ywkxAjdiyQRYwJpacMZiNGalkvUsdHruhDH9suJAMUgiPv5kJUeL4dVlKsy kPs8l8A7zXAOej04+UefZoAAhbF8TR9pa5419VoRkOXu0lSCu14u1UADypfp6YvU 73Uc1po2pW5ETDO9PTaCzptSJNwsrJVD8lHVPtfy1DKukcvNkISq8EZQUUvcduOM Tg14YIPSYFtIfIoGjrKJoPw1eBxHJEHKG/xHuSiZxSEJKfCgW2svcwqAXBxcUiTD IItIPh2bpRyjThe6FVC4oMqgIjj8ErGLIN3H5jgZIxNl2FrJVKVp7GtyPz2HR+kf ZmvzoRk4OB3TeQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:20:09 2025 by rpki-client