This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json) Hash identifier: 2EOuXxirt/EqRGRnojDkVyyEknom94idHIZSHlwFEcE= Subject key identifier: 07:10:EC:88:BE:6E:6A:D9:D4:14:D5:4B:76:4E:22:20:A5:D9:C0:9F Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b Certificate serial: 019AF12DA393AD751872D8B2DD21570C7A2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft Manifest number: 1034 Signing time: Sat 06 Dec 2025 01:01:31 +0000 Manifest this update: Sat 06 Dec 2025 01:01:31 +0000 Manifest next update: Sun 07 Dec 2025 01:01:31 +0000 Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: 4a04vw/KPvHslLBVIRACGev/td8UZIopl0ez31Yi+0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a3:93:ad:75:18:72:d8:b2:dd:21:57:0c:7a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b Validity Not Before: Dec 6 01:01:31 2025 GMT Not After : Dec 7 01:01:31 2025 GMT Subject: CN=0710ec88be6e6ad9d414d54b764e2220a5d9c09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:9a:d1:1e:ec:ad:e7:43:5b:dc:ab:4b:7b: b1:42:33:ad:00:7e:c0:35:1d:a8:36:39:6a:ef:b9: 8c:d6:17:54:54:df:ea:17:98:e0:70:b5:c9:dc:0f: 86:6c:66:21:f3:02:2c:47:9d:b2:53:7b:88:af:37: 11:07:c1:e3:7a:0f:84:54:8b:4a:fe:48:ae:b5:ef: a5:0e:f6:59:82:f3:30:3b:f8:bb:bf:22:f5:d1:81: 9a:d8:1f:61:d6:25:77:3d:30:32:4c:10:69:8e:58: 72:a9:69:af:c3:e4:e3:f8:61:8f:c7:d9:20:15:e8: 8e:05:fe:3e:25:01:93:47:25:89:94:e1:c6:4e:52: 58:31:63:14:27:24:df:b6:f6:81:48:8d:16:6d:4e: 79:30:77:46:71:50:bb:2e:ae:f3:da:d8:71:d4:ad: 55:52:d7:a3:95:d1:a7:4a:ac:9f:85:c1:de:e1:b8: 67:bb:38:c9:40:75:f1:2c:7e:8d:8e:66:31:9e:0f: 33:6a:14:34:cb:ba:43:d2:6d:58:76:04:16:5d:c3: 20:34:5b:b8:dc:e3:08:bc:64:82:c5:d8:84:02:19: bc:b1:c7:00:0e:59:bb:5a:1e:c2:61:f9:03:9f:eb: 40:8c:7f:77:e5:9d:47:ad:22:2e:8f:48:3b:9e:15: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:10:EC:88:BE:6E:6A:D9:D4:14:D5:4B:76:4E:22:20:A5:D9:C0:9F X509v3 Authority Key Identifier: keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:67:d0:31:8e:2e:e9:fb:9f:51:96:17:fc:90:3d:c3:1f:a2: 4a:0f:eb:2e:72:1e:68:a3:9e:a5:2a:66:a2:02:ef:eb:d8:a3: 46:a7:0b:63:44:50:f6:91:d5:1f:f4:d1:5a:e2:56:f9:f1:c2: 85:82:1f:d1:5b:36:3c:31:30:1c:90:3c:87:4e:f9:70:80:21: c3:b4:26:33:4c:57:22:57:e5:2c:1c:88:3b:1a:d6:91:d2:24: 1e:7d:22:ce:cf:18:87:d2:5d:7e:0a:2c:e6:02:68:c8:aa:2e: 33:f3:58:37:fa:e5:b0:cc:02:3c:55:ee:94:34:0a:ea:46:06: 10:99:00:d1:ec:72:ac:30:7c:a6:e1:a1:ed:ff:6d:d5:57:39: 36:d2:e6:eb:fc:d7:e3:56:b1:5f:c3:be:db:49:77:7d:09:66: a0:2a:0f:e4:35:54:af:c9:9a:44:c5:df:89:0d:f9:f6:6b:b8: 07:35:1c:97:9e:46:14:d3:7c:75:cf:35:fd:02:8f:b0:65:96: 40:b2:92:ca:94:2b:45:50:78:7c:63:65:5b:7c:60:ee:60:35: 11:63:58:d1:e9:0a:83:73:e5:84:5c:be:0f:3d:a8:0b:32:4b: b2:d7:05:54:9e:ac:89:19:63:a4:e8:ad:69:dd:c0:4e:de:de: 9d:2a:80:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaOTrXUYctiy3SFXDHorMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZDJhMzg1YWQ5MzYwMzYxMzUwN2Q4OTU3Nzg4YmYxYmRj N2UyMWIwHhcNMjUxMjA2MDEwMTMxWhcNMjUxMjA3MDEwMTMxWjAzMTEwLwYDVQQD EygwNzEwZWM4OGJlNmU2YWQ5ZDQxNGQ1NGI3NjRlMjIyMGE1ZDljMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviCa0R7sredDW9yrS3uxQjOtAH7A NR2oNjlq77mM1hdUVN/qF5jgcLXJ3A+GbGYh8wIsR52yU3uIrzcRB8Hjeg+EVItK /kiute+lDvZZgvMwO/i7vyL10YGa2B9h1iV3PTAyTBBpjlhyqWmvw+Tj+GGPx9kg FeiOBf4+JQGTRyWJlOHGTlJYMWMUJyTftvaBSI0WbU55MHdGcVC7Lq7z2thx1K1V UtejldGnSqyfhcHe4bhnuzjJQHXxLH6NjmYxng8zahQ0y7pD0m1YdgQWXcMgNFu4 3OMIvGSCxdiEAhm8sccADlm7Wh7CYfkDn+tAjH935Z1HrSIuj0g7nhW68wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcQ7Ii+bmrZ1BTVS3ZOIiCl2cCfMB8GA1UdIwQY MBaAFOPSo4Wtk2A2E1B9iVd4i/G9x+IbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYt ZmVkMmRjM2VjZDcxLzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81YjkyMzctNjczNi00ZDkwLWJmZjYtZmVkMmRjM2VjZDcx LzEvNDlLamhhMlRZRFlUVUgySlYzaUw4YjNINGhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2fQMY4u 6fufUZYX/JA9wx+iSg/rLnIeaKOepSpmogLv69ijRqcLY0RQ9pHVH/TRWuJW+fHC hYIf0Vs2PDEwHJA8h075cIAhw7QmM0xXIlflLByIOxrWkdIkHn0izs8Yh9Jdfgos 5gJoyKouM/NYN/rlsMwCPFXulDQK6kYGEJkA0exyrDB8puGh7f9t1Vc5NtLm6/zX 41axX8O+20l3fQlmoCoP5DVUr8maRMXfiQ359mu4BzUcl55GFNN8dc81/QKPsGWW QLKSypQrRVB4fGNlW3xg7mA1EWNY0ekKg3PlhFy+Dz2oCzJLstcFVJ6siRljpOit ad3ATt7enSqAKg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:53:47 2025 by rpki-client