This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json) Hash identifier: vEYxL9fg/JR5ac6ksuOhG0CrVALvnwDEwk8NqYDebAk= Subject key identifier: 36:DB:B2:57:92:80:E6:B8:50:AA:DB:5A:63:AD:4C:FD:8A:7C:62:74 Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1 Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1 Certificate serial: 019AF209961EAEB0F9B94C23FD262EA00788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:45 +0000 Manifest this update: Sat 06 Dec 2025 05:01:45 +0000 Manifest next update: Sun 07 Dec 2025 05:01:45 +0000 Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: WDCm4RRRn+BcSiEjLXClsvnpl+FnEYbz0ZnbSJM/cyw=) 2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:96:1e:ae:b0:f9:b9:4c:23:fd:26:2e:a0:07:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1 Validity Not Before: Dec 6 05:01:45 2025 GMT Not After : Dec 7 05:01:45 2025 GMT Subject: CN=36dbb2579280e6b850aadb5a63ad4cfd8a7c6274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:31:e0:ec:64:be:22:18:5f:bd:2c:d4:fd: 81:9a:f5:d9:a4:59:70:d6:2d:12:82:5b:ac:2a:5a: eb:e2:c4:ab:71:d4:37:fe:41:77:80:e7:50:76:38: c5:2f:e5:2e:7c:e5:dc:fc:11:45:35:92:cc:63:78: e6:28:23:75:11:c3:0e:08:ac:c8:14:45:25:fb:8b: 76:dc:31:b1:5a:7b:ad:fa:7a:af:86:9a:bb:52:d9: 00:20:67:30:00:d9:d2:e4:d0:3f:d1:df:bb:b7:50: de:30:a8:c6:10:54:91:c5:71:f1:e1:fd:cb:3f:59: 40:d0:2f:26:4e:e6:6c:2b:90:88:6d:88:1d:29:29: 7f:c9:5d:2a:d1:1c:dd:af:63:89:96:d5:44:79:a7: 84:55:f2:65:e4:94:fd:cc:6b:df:b3:d2:a7:9c:f7: c6:7f:02:5d:37:d0:c6:64:66:4f:8a:b7:b3:d6:15: 4d:cd:04:b2:3c:dd:a7:3a:c9:62:cd:7d:1e:96:25: 5f:86:28:94:d7:44:1f:75:bc:cd:ec:a7:75:71:99: 8d:44:c9:2f:80:e3:b0:72:85:2f:5d:b0:51:ec:3a: ef:6b:e6:dc:aa:9b:4d:8c:0c:d7:f8:d7:e9:d7:f6: 95:00:f0:1f:e3:e0:41:da:8b:15:cf:6a:31:86:5e: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DB:B2:57:92:80:E6:B8:50:AA:DB:5A:63:AD:4C:FD:8A:7C:62:74 X509v3 Authority Key Identifier: keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c8:d2:b1:3b:03:e7:68:a8:ee:5d:c3:96:48:ec:7d:2f:41: a3:6b:35:36:33:52:8f:de:32:10:7b:de:35:1d:e1:f4:97:7e: db:c1:d2:f0:b3:b9:a0:d4:56:e2:9e:bc:fc:5d:86:c4:97:c0: 63:2d:d9:e1:fd:db:f0:9d:7b:13:89:18:2e:71:7a:bb:b8:4d: d8:31:9f:50:84:b8:d1:b3:a8:b5:e3:81:e5:e5:30:78:29:c3: ad:b5:ee:55:64:e6:bc:0f:d4:32:8d:31:d2:a2:aa:f5:9a:d4: a7:fe:08:bc:73:1d:c9:5e:9b:c1:5b:d0:ad:a1:19:7d:a4:67: 2b:74:ea:c2:77:67:1a:df:24:34:2d:86:e1:30:95:cc:96:13: 98:25:b5:66:91:8e:cf:12:68:f5:2b:70:71:a5:e0:56:7e:38: bd:6d:8e:c2:5e:cd:4e:06:12:db:8c:b9:b3:4d:62:30:52:01: 13:21:b6:19:06:6b:aa:7f:77:81:31:2a:21:d8:ad:54:bc:be: 82:9b:08:87:f3:08:03:61:24:6e:16:2f:0b:1e:c9:6c:c2:27: 7a:8e:e6:8c:1d:b1:a5:32:d3:32:c1:31:91:9a:84:32:d8:ad: e8:d9:3f:fb:aa:d3:8c:39:76:40:d6:1c:c1:24:b0:e2:28:f3: 45:77:97:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZYerrD5uUwj/SYuoAeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZGVmNWE3N2RjYzlhYWM5OWMzNGUyZDcxOWI4YmEwZDA0 ZTAzZDEwHhcNMjUxMjA2MDUwMTQ1WhcNMjUxMjA3MDUwMTQ1WjAzMTEwLwYDVQQD EygzNmRiYjI1NzkyODBlNmI4NTBhYWRiNWE2M2FkNGNmZDhhN2M2Mjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hQx4OxkviIYX70s1P2BmvXZpFlw 1i0SglusKlrr4sSrcdQ3/kF3gOdQdjjFL+UufOXc/BFFNZLMY3jmKCN1EcMOCKzI FEUl+4t23DGxWnut+nqvhpq7UtkAIGcwANnS5NA/0d+7t1DeMKjGEFSRxXHx4f3L P1lA0C8mTuZsK5CIbYgdKSl/yV0q0Rzdr2OJltVEeaeEVfJl5JT9zGvfs9KnnPfG fwJdN9DGZGZPirez1hVNzQSyPN2nOslizX0eliVfhiiU10QfdbzN7Kd1cZmNRMkv gOOwcoUvXbBR7Drva+bcqptNjAzX+Nfp1/aVAPAf4+BB2osVz2oxhl6TpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbbsleSgOa4UKrbWmOtTP2KfGJ0MB8GA1UdIwQY MBaAFETe9ad9zJqsmcNOLXGbi6DQTgPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk43MXAzM01tcXladzA0dGNadUxvTkJPQTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xYTAzMWItYTcxZi00YmVlLTkxZTIt ZDRiZDUzYzk0YjY2LzEvUk43MXAzM01tcXladzA0dGNadUxvTkJPQTlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8xYTAzMWItYTcxZi00YmVlLTkxZTItZDRiZDUzYzk0YjY2 LzEvUk43MXAzM01tcXladzA0dGNadUxvTkJPQTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisjSsTsD 52io7l3DlkjsfS9Bo2s1NjNSj94yEHveNR3h9Jd+28HS8LO5oNRW4p68/F2GxJfA Yy3Z4f3b8J17E4kYLnF6u7hN2DGfUIS40bOoteOB5eUweCnDrbXuVWTmvA/UMo0x 0qKq9ZrUp/4IvHMdyV6bwVvQraEZfaRnK3TqwndnGt8kNC2G4TCVzJYTmCW1ZpGO zxJo9StwcaXgVn44vW2Owl7NTgYS24y5s01iMFIBEyG2GQZrqn93gTEqIditVLy+ gpsIh/MIA2EkbhYvCx7JbMIneo7mjB2xpTLTMsExkZqEMtit6Nk/+6rTjDl2QNYc wSSw4ijzRXeXsA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:28 2025 by rpki-client