This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft File: R-348b8MT7xGnnHJnYJInqHz2ko.mft (raw, json) Hash identifier: roVkfoNcw4x/GpT2LWEGQW1lr1GVE99cqKPdBag2df0= Subject key identifier: 80:C7:E4:C3:1E:EA:81:62:E8:9E:36:86:BB:05:10:55:19:C6:14:36 Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a Certificate serial: 019B2F3045BC5756EA84ADDA19D0DBBE4D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 02:00:50 +0000 Manifest this update: Thu 18 Dec 2025 02:00:50 +0000 Manifest next update: Fri 19 Dec 2025 02:00:50 +0000 Files and hashes: 1: R-348b8MT7xGnnHJnYJInqHz2ko.crl (hash: 73twD+Dx4enY9rb2saLqZaQvazqh6kEM7hst6tLHdnc=) 2: gCOs3KLA0tgwiwT7QoZeSEcVloU.roa (hash: hS15w3lAiyNuXEphV/hfqWJDGTaMGPBiRqmkz4Z4hHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:45:bc:57:56:ea:84:ad:da:19:d0:db:be:4d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a Validity Not Before: Dec 18 02:00:50 2025 GMT Not After : Dec 19 02:00:50 2025 GMT Subject: CN=80c7e4c31eea8162e89e3686bb05105519c61436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:29:c7:7b:2c:00:36:9e:9f:e0:56:d1:98:3c: 2d:21:19:b4:7b:a6:f2:2f:53:c2:d2:49:13:cf:53: 9f:ac:8c:50:c0:69:61:d3:85:e6:19:2e:e7:92:c4: 79:e6:fb:8d:2b:2f:04:39:1f:7d:de:1a:88:11:80: b5:33:f8:5f:0d:35:5e:3c:8b:0f:4d:5c:71:5b:8a: f8:36:ef:f5:72:c4:a6:b9:43:41:f8:bc:38:f9:dc: 69:82:d7:76:47:0b:51:0c:81:3e:64:c3:04:e8:44: f9:6b:02:b1:52:ea:cb:5a:c2:3c:f8:5b:a1:41:17: db:df:79:70:8e:85:07:68:fb:2a:30:5a:6c:b4:36: d3:9e:08:25:2a:93:a9:c1:ef:f1:a6:19:1e:85:af: 60:e3:e8:8a:f6:2a:74:bf:51:62:78:a8:23:46:1e: a3:45:c0:ad:bd:1f:ee:e7:8e:7c:60:19:ae:b1:73: 58:21:f0:ec:8c:b5:6f:fa:9f:99:73:24:2c:0f:8c: 79:89:21:a2:f8:ba:2e:cc:c6:53:e3:18:7e:ab:e2: c3:f6:51:40:40:c2:fe:2a:44:40:a9:0c:b5:b8:c9: 07:5a:9d:8e:25:4b:d7:2e:c6:70:2e:80:4a:3a:4f: e8:41:4d:55:a1:0f:c4:70:73:39:fe:30:93:f1:57: a9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C7:E4:C3:1E:EA:81:62:E8:9E:36:86:BB:05:10:55:19:C6:14:36 X509v3 Authority Key Identifier: keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:db:a6:3a:f8:c4:a7:3c:bc:4b:d0:cb:32:f0:4c:52:59:0e: 22:28:f6:0b:86:77:d5:f0:bb:cc:cb:de:53:6a:7a:14:20:86: e4:3c:82:74:9e:f7:ad:b5:5a:42:dc:ff:c0:04:66:ca:ae:5d: c0:18:27:d7:b3:11:81:59:4e:93:91:f8:50:6a:41:12:a2:d9: 6b:cf:26:60:59:eb:9e:32:dc:7b:a1:33:2a:d0:f7:9a:59:00: 60:85:9a:b4:06:45:67:bf:07:18:bb:78:ca:4c:bf:26:c8:07: 15:9f:50:f6:bf:a0:4b:d7:b1:f2:1a:b7:46:71:b1:0d:bf:48: c7:52:6f:38:7d:aa:ff:b2:0a:f7:e8:08:11:3b:f1:81:10:12: 4d:43:5e:50:dd:f1:9f:a1:a2:4f:72:2b:da:ed:d4:8b:23:1b: 71:83:8c:b1:3e:7f:42:eb:a0:2e:a2:7c:0c:ad:2a:ed:cb:b1: f7:0c:67:c9:c7:8b:c7:64:12:74:d3:bc:ae:9d:d0:0e:0d:e7: b2:dc:bc:cf:3b:a7:d9:4c:6b:00:3c:20:99:99:dd:c5:49:49: 59:1a:3f:29:be:28:48:f5:02:7c:a8:07:ea:e3:73:43:3c:88: f8:39:0f:ed:86:be:2c:af:8d:aa:01:57:4c:62:40:83:ef:d2: 74:f0:0f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMEW8V1bqhK3aGdDbvk0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZWRmOGYxYmYwYzRmYmM0NjllNzFjOTlkODI0ODllYTFm M2RhNGEwHhcNMjUxMjE4MDIwMDUwWhcNMjUxMjE5MDIwMDUwWjAzMTEwLwYDVQQD Eyg4MGM3ZTRjMzFlZWE4MTYyZTg5ZTM2ODZiYjA1MTA1NTE5YzYxNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ynHeywANp6f4FbRmDwtIRm0e6by L1PC0kkTz1OfrIxQwGlh04XmGS7nksR55vuNKy8EOR993hqIEYC1M/hfDTVePIsP TVxxW4r4Nu/1csSmuUNB+Lw4+dxpgtd2RwtRDIE+ZMME6ET5awKxUurLWsI8+Fuh QRfb33lwjoUHaPsqMFpstDbTngglKpOpwe/xphkeha9g4+iK9ip0v1FieKgjRh6j RcCtvR/u5458YBmusXNYIfDsjLVv+p+ZcyQsD4x5iSGi+LouzMZT4xh+q+LD9lFA QML+KkRAqQy1uMkHWp2OJUvXLsZwLoBKOk/oQU1VoQ/EcHM5/jCT8VepuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDH5MMe6oFi6J42hrsFEFUZxhQ2MB8GA1UdIwQY MBaAFEft+PG/DE+8Rp5xyZ2CSJ6h89pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2Yt OTIwNGMxOTdhYTY1LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2YtOTIwNGMxOTdhYTY1 LzEvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNumOvjE pzy8S9DLMvBMUlkOIij2C4Z31fC7zMveU2p6FCCG5DyCdJ73rbVaQtz/wARmyq5d wBgn17MRgVlOk5H4UGpBEqLZa88mYFnrnjLce6EzKtD3mlkAYIWatAZFZ78HGLt4 yky/JsgHFZ9Q9r+gS9ex8hq3RnGxDb9Ix1JvOH2q/7IK9+gIETvxgRASTUNeUN3x n6GiT3Ir2u3UiyMbcYOMsT5/QuugLqJ8DK0q7cux9wxnyceLx2QSdNO8rp3QDg3n sty8zzun2UxrADwgmZndxUlJWRo/Kb4oSPUCfKgH6uNzQzyI+DkP7Ya+LK+NqgFX TGJAg+/SdPAP5w== -----END CERTIFICATE-----Generated at Thu Dec 18 07:07:31 2025 by rpki-client