This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json) Hash identifier: tyZwjgFWj58ae3GjjEQJ1cPMGj6/ZCQ+RP40yKDA7MI= Subject key identifier: 71:49:CB:99:CA:94:CD:77:3A:41:5B:94:B2:BA:B0:6B:A5:14:48:03 Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8 Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8 Certificate serial: 019AF23F742E8E4DE16B7959610275E4BE4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft Manifest number: 1586 Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: PssnDs/UEpxBKNIA93e5ABQj2qBnzv9JJq8CIzJtBGE=) 2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:74:2e:8e:4d:e1:6b:79:59:61:02:75:e4:be:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8 Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=7149cb99ca94cd773a415b94b2bab06ba5144803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:85:90:4e:11:f0:e7:b5:97:71:51:78:ca: f9:20:c7:95:d6:6e:30:c5:e7:b9:f3:73:fd:19:de: 00:f5:61:1b:8c:c0:75:8d:06:11:cf:b5:b9:8d:23: 1f:de:e7:dc:fb:37:e9:8e:57:30:0f:51:10:67:6f: 91:e3:73:c4:68:b5:10:6b:dc:e8:3e:64:eb:6e:08: 29:cb:f3:2a:30:b3:27:f0:00:fa:a7:da:7b:6b:23: d1:19:09:7f:8e:97:5f:cc:c6:c3:46:bd:3e:f5:37: 8a:f1:bc:cb:4f:9e:98:72:cc:e4:77:21:bc:e5:61: 49:f3:a0:38:c2:bc:ff:7f:6b:3a:13:d7:22:4c:12: 5a:ca:4a:0a:f2:e2:d0:61:b8:61:55:5b:23:ae:51: 4f:2a:22:bf:1d:b3:4f:62:20:df:e6:77:83:12:ac: 86:5a:75:d5:79:92:cc:2e:c9:31:4f:aa:97:07:92: a5:e7:c7:18:60:ee:b6:53:6c:8c:2f:d0:e1:6b:47: 66:3f:e7:ea:e4:a2:af:89:74:f0:7e:7c:4c:e6:7f: 19:1c:77:5b:fb:bf:3d:2d:35:f2:37:78:8f:f9:ea: a1:05:72:7a:ab:b7:5b:12:7d:d0:ae:63:d2:56:c8: fa:45:d2:8d:7b:9a:18:34:8c:50:ad:38:52:18:39: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:49:CB:99:CA:94:CD:77:3A:41:5B:94:B2:BA:B0:6B:A5:14:48:03 X509v3 Authority Key Identifier: keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f5:b4:52:f9:b5:4c:04:f9:7b:a3:71:5b:93:0a:a9:08:ff: 00:d2:64:d2:bd:86:50:4f:6a:28:e7:11:f8:89:60:d3:90:17: ab:17:b1:04:72:c4:54:14:69:dc:48:cb:61:66:ac:99:b8:a9: 8d:b5:c5:77:b3:79:50:a0:ca:f9:22:f4:7c:04:4d:06:16:4e: b1:2d:87:31:89:8d:c9:d4:88:f6:da:8c:79:99:91:ef:bc:98: 1c:87:77:94:90:b6:f0:2a:94:9e:ab:e1:96:46:9c:f3:ad:14: 5b:2c:d0:e5:36:56:e6:c4:ef:38:91:a1:aa:48:8f:59:0c:ce: 6c:cc:91:95:d3:0d:fd:e0:a0:62:62:53:ec:00:f5:a3:de:c1: 47:c8:99:a7:3f:a1:67:5f:81:eb:b9:2e:98:d3:6b:29:ce:3a: e3:5a:91:45:ba:cc:7f:88:26:ec:31:c9:74:90:30:5e:d4:8a: 1f:d0:7c:9f:1d:6e:4c:f6:f4:de:50:6e:5b:68:a5:e5:50:e9: 3e:cb:f0:6e:1e:6a:80:d5:6f:37:4a:68:5c:30:89:78:81:9b: c0:5a:75:ea:a9:fe:99:28:1e:9a:fa:c9:92:f7:8d:f7:15:35: 80:3b:68:43:29:48:0a:3e:b6:d6:f1:25:27:f4:4d:11:71:f6: bb:8d:48:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3Qujk3ha3lZYQJ15L5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MThiODljN2RjZTJiNWVkYzA1NTgxNTE2Y2ZjMTlkN2Ez MTc0ZTgwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD Eyg3MTQ5Y2I5OWNhOTRjZDc3M2E0MTViOTRiMmJhYjA2YmE1MTQ0ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOaFkE4R8Oe1l3FReMr5IMeV1m4w xee583P9Gd4A9WEbjMB1jQYRz7W5jSMf3ufc+zfpjlcwD1EQZ2+R43PEaLUQa9zo PmTrbggpy/MqMLMn8AD6p9p7ayPRGQl/jpdfzMbDRr0+9TeK8bzLT56YcszkdyG8 5WFJ86A4wrz/f2s6E9ciTBJaykoK8uLQYbhhVVsjrlFPKiK/HbNPYiDf5neDEqyG WnXVeZLMLskxT6qXB5Kl58cYYO62U2yML9Dha0dmP+fq5KKviXTwfnxM5n8ZHHdb +789LTXyN3iP+eqhBXJ6q7dbEn3QrmPSVsj6RdKNe5oYNIxQrThSGDk7oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFJy5nKlM13OkFblLK6sGulFEgDMB8GA1UdIwQY MBaAFEUYuJx9zite3AVYFRbPwZ16MXToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEt MGY5MzdjY2YwMmUwLzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEtMGY5MzdjY2YwMmUw LzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvW0Uvm1 TAT5e6NxW5MKqQj/ANJk0r2GUE9qKOcR+Ilg05AXqxexBHLEVBRp3EjLYWasmbip jbXFd7N5UKDK+SL0fARNBhZOsS2HMYmNydSI9tqMeZmR77yYHId3lJC28CqUnqvh lkac860UWyzQ5TZW5sTvOJGhqkiPWQzObMyRldMN/eCgYmJT7AD1o97BR8iZpz+h Z1+B67kumNNrKc4641qRRbrMf4gm7DHJdJAwXtSKH9B8nx1uTPb03lBuW2il5VDp Psvwbh5qgNVvN0poXDCJeIGbwFp16qn+mSgemvrJkveN9xU1gDtoQylICj621vEl J/RNEXH2u41Igw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:28:00 2025 by rpki-client