This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json) Hash identifier: 2Shw3eFlpPgVgtupJECpMXghvCaG5lWmtx+tw/Hj4QY= Subject key identifier: 4F:AB:9B:9C:70:DF:E0:D1:10:88:B6:C2:94:0D:75:64:05:C4:F9:84 Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f Certificate serial: 019AF276E9A20A6334E15AC48987DA065AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft Manifest number: 0656 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: lW3v4CHf8/KqkqdIAiKCJm3U2MNWhEvQShvP2tZ1UxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e9:a2:0a:63:34:e1:5a:c4:89:87:da:06:5a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=4fab9b9c70dfe0d11088b6c2940d756405c4f984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:24:fd:dd:ff:2a:63:0b:9a:bc:7e:0d:a1: fa:8f:17:4c:1e:94:36:bc:59:b6:9a:4d:94:54:10: a6:0c:87:c5:97:8e:58:61:6f:08:ae:38:66:f2:85: 23:bc:66:b1:87:92:42:4c:f7:d8:1d:8d:4e:56:06: 3a:a7:fe:1c:0c:ec:73:7c:df:89:72:cb:bc:4e:12: ac:ab:57:a8:15:71:da:81:d7:77:60:2e:44:c9:de: 5e:5b:4f:cf:e5:5b:70:41:12:01:37:46:e6:d0:7d: b8:ea:66:dd:30:42:bc:53:32:99:37:5a:c7:b1:ae: ce:0e:ca:c7:a6:26:7e:11:41:88:9a:60:9a:d5:ff: 1b:ee:3c:38:16:d0:99:ba:1a:38:d2:f1:e9:e5:f2: af:a0:ba:40:b9:a9:b2:3b:49:64:40:61:03:36:68: 81:de:a9:ff:b6:ab:c6:c1:7f:a7:74:7c:08:d9:de: 73:1a:39:8d:89:78:b7:ff:b0:af:d1:e5:7d:a5:92: 6f:b5:4f:64:ce:2e:fb:cd:66:c7:46:11:d0:46:0d: 96:61:24:e7:71:24:fb:e7:79:f4:c9:c3:f7:67:ab: 92:67:fa:a0:6c:97:42:12:9c:8d:b6:99:5c:a8:76: ef:cb:fb:ec:4e:39:79:48:2f:41:58:1e:64:08:cf: 1b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AB:9B:9C:70:DF:E0:D1:10:88:B6:C2:94:0D:75:64:05:C4:F9:84 X509v3 Authority Key Identifier: keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:49:30:1b:cf:59:dc:78:6f:0d:7f:d8:20:fb:85:e4:51:3f: 12:33:69:b8:23:42:0a:d1:88:36:31:d7:b1:98:41:f8:95:6e: d9:8f:1f:db:a7:32:8d:40:7f:90:fd:31:92:f3:25:e6:7d:42: eb:71:6b:67:22:74:45:b7:1f:68:be:db:c6:1d:9d:67:4d:c1: 09:70:3b:ee:59:5c:51:74:7d:74:eb:b6:68:ce:c6:ba:16:ef: c4:d9:85:30:ee:7b:af:cb:e3:a0:b7:dc:e5:e7:51:4e:11:3c: 6a:ce:63:c5:d1:8f:c1:9a:42:c3:59:77:d7:9b:61:20:f1:94: a3:96:e9:b2:7b:ea:17:9b:1e:b0:f7:b6:fc:1a:0a:84:5d:33: 40:0c:27:d2:64:53:73:29:78:e6:b4:46:f4:ee:e5:c2:81:0c: 55:b7:16:65:50:a2:bb:de:02:d4:0b:06:91:23:5e:83:08:a4: 4c:73:d3:5f:1c:11:f3:d6:ac:d6:88:04:95:63:ec:de:f1:43: c0:48:43:49:dd:c9:3d:44:ed:c0:bc:a6:5d:dd:0b:d9:bb:cb: c8:74:f0:ac:5f:63:18:4f:c9:15:37:81:76:52:ae:e4:4a:11: 43:33:c0:72:37:8b:7a:30:e5:a5:a6:ca:ec:00:6d:96:d4:51: d4:8b:f1:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydumiCmM04VrEiYfaBlrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2Q2NTdhMTIwNTMyZGYzM2RlNTBmZTFhYzJiMzYyMGFj NGFlNGYwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD Eyg0ZmFiOWI5YzcwZGZlMGQxMTA4OGI2YzI5NDBkNzU2NDA1YzRmOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxygk/d3/KmMLmrx+DaH6jxdMHpQ2 vFm2mk2UVBCmDIfFl45YYW8Irjhm8oUjvGaxh5JCTPfYHY1OVgY6p/4cDOxzfN+J csu8ThKsq1eoFXHagdd3YC5Eyd5eW0/P5VtwQRIBN0bm0H246mbdMEK8UzKZN1rH sa7ODsrHpiZ+EUGImmCa1f8b7jw4FtCZuho40vHp5fKvoLpAuamyO0lkQGEDNmiB 3qn/tqvGwX+ndHwI2d5zGjmNiXi3/7Cv0eV9pZJvtU9kzi77zWbHRhHQRg2WYSTn cST753n0ycP3Z6uSZ/qgbJdCEpyNtplcqHbvy/vsTjl5SC9BWB5kCM8btQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+rm5xw3+DREIi2wpQNdWQFxPmEMB8GA1UdIwQY MBaAFOPNZXoSBTLfM95Q/hrCs2IKxK5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQt MGY5NTZjYWY4MDNjLzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQtMGY5NTZjYWY4MDNj LzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEkwG89Z 3HhvDX/YIPuF5FE/EjNpuCNCCtGINjHXsZhB+JVu2Y8f26cyjUB/kP0xkvMl5n1C 63FrZyJ0RbcfaL7bxh2dZ03BCXA77llcUXR9dOu2aM7GuhbvxNmFMO57r8vjoLfc 5edRThE8as5jxdGPwZpCw1l315thIPGUo5bpsnvqF5sesPe2/BoKhF0zQAwn0mRT cyl45rRG9O7lwoEMVbcWZVCiu94C1AsGkSNegwikTHPTXxwR89as1ogElWPs3vFD wEhDSd3JPUTtwLymXd0L2bvLyHTwrF9jGE/JFTeBdlKu5EoRQzPAcjeLejDlpabK 7ABtltRR1IvxHg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:00 2025 by rpki-client