This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json) Hash identifier: iEYfNF0uAmYzJyBxUPy1brLneKXwOC5+fT0uDAGqAtc= Subject key identifier: BC:70:A3:47:B9:EE:73:66:F7:D2:5A:09:60:12:34:10:5B:20:62:1C Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Certificate serial: 019AF088411DDF514E78A90741E3490DAA56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:00:52 +0000 Manifest this update: Fri 05 Dec 2025 22:00:52 +0000 Manifest next update: Sat 06 Dec 2025 22:00:52 +0000 Files and hashes: 1: 7a4UPx06lYNEEu_8hOujHiCjI3I.roa (hash: KGEycmI2h25GEHvIQbSwQGJ1oU96GoNn5z0Fg/wO3lQ=) 2: fEfLOGBVJeUecVVlEjapZ06Oj8U.roa (hash: OleUOgz+9pFvUxQajAS7ULw6aOZyzyIU0DZD60L7Tws=) 3: kM5CulzBTgjqTdxC0kA20nIBInM.roa (hash: 4mPvZr8lZjvljhR4YU0MwI6WkG6rsEag6Ecnz4z85HY=) 4: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: fbdDOeaXTKJKkXnxG62RwDaG/7QR6x+zuF6CLhrWUoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:41:1d:df:51:4e:78:a9:07:41:e3:49:0d:aa:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Validity Not Before: Dec 5 22:00:52 2025 GMT Not After : Dec 6 22:00:52 2025 GMT Subject: CN=bc70a347b9ee7366f7d25a09601234105b20621c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:44:ec:69:d0:5a:02:b8:d7:c8:73:03:cd: 6f:75:f0:97:94:07:33:83:78:75:a1:5d:ba:75:1a: 98:72:bc:86:36:75:86:bd:27:09:30:23:5e:91:f2: 37:69:d7:3d:58:e8:21:38:36:d3:57:9d:b8:c8:8a: 96:f0:53:bc:79:dc:b5:b9:de:57:ea:a3:d8:b9:00: 5c:e2:79:b7:30:0f:30:69:49:d8:03:5f:71:76:d9: 6a:cf:c0:2c:0a:4b:08:d2:2c:6a:13:70:5e:ad:cf: 67:ac:aa:94:68:30:37:d0:8a:15:f0:95:5f:d5:53: 1f:50:dd:98:68:92:fb:d1:e0:3e:1a:e9:8c:e3:bd: 4f:ae:47:c0:72:36:ad:5d:b5:c6:cc:24:63:b3:53: 09:fe:22:56:aa:b0:bd:7f:ac:9b:58:68:68:1e:8f: df:d5:28:01:03:28:ba:d8:cf:9c:3c:24:15:b6:4d: 9a:59:9d:a6:bf:c7:13:81:70:45:f8:da:31:1d:37: bf:be:b8:e9:03:04:92:9b:2d:6f:fb:7c:22:e6:99: ba:1a:75:ae:02:0d:8d:59:0a:bd:01:41:56:c2:67: 0a:60:a6:39:88:a4:00:be:10:15:56:79:5b:3c:ca: 90:52:ad:48:94:89:4c:d7:df:d2:4d:5e:0a:ac:7e: 5a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:70:A3:47:B9:EE:73:66:F7:D2:5A:09:60:12:34:10:5B:20:62:1C X509v3 Authority Key Identifier: keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:30:e9:80:75:27:97:66:77:77:b4:29:49:1e:d4:25:1d:f9: 9c:6e:97:37:31:5f:28:60:95:ea:be:02:cc:af:84:c3:3f:8e: d4:c3:ae:91:20:f5:30:5f:6a:7d:23:e4:75:e0:fe:24:2a:07: 45:a2:11:7e:53:bc:53:12:8d:e7:1e:4b:8a:d6:5a:54:da:fa: 3d:57:e6:eb:d3:ee:30:37:d2:1b:7d:af:82:62:2b:2d:7a:e2: 9b:b6:6c:7c:e7:b4:6c:de:61:4f:0e:aa:19:90:40:1c:26:1e: 0b:72:fd:7c:81:44:ee:eb:30:81:ab:58:e7:0c:23:72:08:44: ac:cf:38:72:d2:e8:85:44:35:ca:25:ec:0d:32:e4:09:b1:6b: be:31:d5:37:18:6b:a0:91:30:e0:96:13:2b:29:35:75:52:52: fd:92:c2:4d:5f:f9:61:5d:75:9e:45:43:0e:3e:19:e4:2f:e5: 04:3e:23:a8:48:73:12:0f:db:1a:b6:26:34:6d:81:4f:e5:93: 93:c3:4f:6c:9d:eb:28:f6:b1:2b:9c:1a:be:1f:22:c9:0d:15: e3:a7:d7:69:bd:36:e5:7c:f7:92:24:47:e3:04:d9:8f:98:93: 8c:45:c4:0c:4f:88:80:0a:c3:dc:98:22:6c:3e:5d:96:33:e9: c2:88:fa:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiEEd31FOeKkHQeNJDapWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYmUyMTJhMmYxYTExOWVmNjRhYjYyZTFhOTZkNzExNTI0 YzhiYzcwHhcNMjUxMjA1MjIwMDUyWhcNMjUxMjA2MjIwMDUyWjAzMTEwLwYDVQQD EyhiYzcwYTM0N2I5ZWU3MzY2ZjdkMjVhMDk2MDEyMzQxMDViMjA2MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykhE7GnQWgK418hzA81vdfCXlAcz g3h1oV26dRqYcryGNnWGvScJMCNekfI3adc9WOghODbTV524yIqW8FO8edy1ud5X 6qPYuQBc4nm3MA8waUnYA19xdtlqz8AsCksI0ixqE3Berc9nrKqUaDA30IoV8JVf 1VMfUN2YaJL70eA+GumM471PrkfAcjatXbXGzCRjs1MJ/iJWqrC9f6ybWGhoHo/f 1SgBAyi62M+cPCQVtk2aWZ2mv8cTgXBF+NoxHTe/vrjpAwSSmy1v+3wi5pm6GnWu Ag2NWQq9AUFWwmcKYKY5iKQAvhAVVnlbPMqQUq1IlIlM19/STV4KrH5a4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxwo0e57nNm99JaCWASNBBbIGIcMB8GA1UdIwQY MBaAFKy+ISovGhGe9kq2LhqW1xFSTIvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt MjNjMzM4NjgwNzcxLzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx LzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTDpgHUn l2Z3d7QpSR7UJR35nG6XNzFfKGCV6r4CzK+Ewz+O1MOukSD1MF9qfSPkdeD+JCoH RaIRflO8UxKN5x5LitZaVNr6PVfm69PuMDfSG32vgmIrLXrim7ZsfOe0bN5hTw6q GZBAHCYeC3L9fIFE7uswgatY5wwjcghErM84ctLohUQ1yiXsDTLkCbFrvjHVNxhr oJEw4JYTKyk1dVJS/ZLCTV/5YV11nkVDDj4Z5C/lBD4jqEhzEg/bGrYmNG2BT+WT k8NPbJ3rKPaxK5wavh8iyQ0V46fXab025Xz3kiRH4wTZj5iTjEXEDE+IgArD3Jgi bD5dljPpwoj6gQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:08:49 2025 by rpki-client