This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json) Hash identifier: diCPdCZy1YBacl8vFEPJyrP5XMcvCpGBiiePGaLMxEQ= Subject key identifier: B8:DC:91:4C:FF:CB:72:81:78:98:9C:8A:79:16:D3:66:03:A6:7B:11 Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46 Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46 Certificate serial: 019AF19B361725BBE9270E71A021B0955F4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft Manifest number: 8F Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: fr3DsJ6Vr70wMuuPimDezSBrInkGBVp6koAgkrrjECQ=) 2: g1q1X1vaFeQn5xUDKlEZZNnkMq4.roa (hash: BhX3ai6MXXM39hpgWifIF0fPiVBPvolxXocXWL46aJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:36:17:25:bb:e9:27:0e:71:a0:21:b0:95:5f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46 Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=b8dc914cffcb728178989c8a7916d36603a67b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:82:d8:71:15:69:97:4a:c2:c3:f8:4e:9d:88: 96:0a:00:07:e4:d9:b5:4d:d1:35:f9:b6:36:4e:f8: 6f:2c:7a:84:68:25:0e:bf:f7:b1:d8:49:76:86:74: 2a:24:42:37:c0:78:7e:22:70:e8:8e:43:aa:ea:79: 2d:16:bf:a6:89:9a:9e:9f:72:05:20:f7:95:bb:fd: 1b:86:75:f3:8a:d4:d6:45:6f:1b:6e:1b:fd:cf:81: 40:87:49:4e:48:d1:bc:27:55:a0:d4:f6:db:27:64: 12:3a:16:c0:46:ab:0f:68:91:e5:5b:e3:93:6e:2b: d7:4c:66:d0:70:c2:1a:2e:7c:9d:c9:13:33:e5:15: 5c:6e:51:33:bc:07:7f:ff:d3:41:77:23:3a:1a:f7: 0a:f4:4e:30:5f:c5:a3:b4:39:aa:9a:f0:e2:08:3c: eb:8e:b6:71:69:94:7d:3d:36:ec:4d:98:3b:76:03: 24:55:57:fc:23:68:71:cc:65:eb:c6:d6:72:47:3d: 01:ee:58:0d:f4:09:a4:01:e6:09:f9:75:01:7e:e3: 92:cb:f1:15:fd:cf:36:52:46:b7:71:c5:fc:63:87: 8b:6d:e5:ce:85:cc:28:c9:3b:2c:6e:00:ce:ea:7d: 44:81:af:76:1f:0e:16:c8:02:27:48:73:4f:93:42: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DC:91:4C:FF:CB:72:81:78:98:9C:8A:79:16:D3:66:03:A6:7B:11 X509v3 Authority Key Identifier: keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8d:83:ce:b8:4c:a9:c2:2d:24:01:6d:93:26:e5:e5:ea:76: 5c:81:c0:5c:d6:c0:37:99:d5:cb:6c:e8:5a:43:ce:05:62:5c: 07:98:f8:5c:61:34:e4:38:f1:b6:01:9a:23:96:25:82:16:a0: 54:60:94:5f:22:5e:28:65:e3:6e:72:8b:e4:06:26:80:4f:10: 76:4c:7e:f3:ea:49:66:15:78:44:2e:68:71:72:9f:e7:5c:48: e8:ed:33:d2:29:43:b0:2e:ca:80:db:20:0e:d2:96:fd:7d:45: 86:fe:b6:b3:ef:a7:c4:3b:01:67:38:91:30:59:ab:d0:1e:ed: 86:d8:52:fb:6a:db:df:cc:ea:7f:3a:06:12:b0:1e:d5:dc:91: b6:d6:25:cd:38:39:dc:88:be:e2:86:a4:73:8a:b7:d5:55:c0: 23:7b:38:b4:82:33:c2:63:03:5b:61:b4:a7:e3:8a:6a:19:02: 91:db:a3:bd:14:d1:70:76:a2:d8:d9:99:a3:49:bd:80:ac:e7: ef:3f:f9:c5:18:00:bd:7e:0c:b6:95:55:e4:5a:48:27:ad:fe: 3e:ef:f1:7e:ce:99:07:dd:fa:91:d1:61:36:a0:fe:a6:16:1b: 6a:e9:00:21:88:58:8a:59:ae:be:90:80:0d:e7:70:c4:51:27: 6d:a4:40:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzYXJbvpJw5xoCGwlV9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNTYwN2E0OTQyMDBmZjFmM2Q1OTllMjVmYzAxM2YzODY0 MGNkNDYwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD EyhiOGRjOTE0Y2ZmY2I3MjgxNzg5ODljOGE3OTE2ZDM2NjAzYTY3YjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YLYcRVpl0rCw/hOnYiWCgAH5Nm1 TdE1+bY2TvhvLHqEaCUOv/ex2El2hnQqJEI3wHh+InDojkOq6nktFr+miZqen3IF IPeVu/0bhnXzitTWRW8bbhv9z4FAh0lOSNG8J1Wg1PbbJ2QSOhbARqsPaJHlW+OT bivXTGbQcMIaLnydyRMz5RVcblEzvAd//9NBdyM6GvcK9E4wX8WjtDmqmvDiCDzr jrZxaZR9PTbsTZg7dgMkVVf8I2hxzGXrxtZyRz0B7lgN9AmkAeYJ+XUBfuOSy/EV /c82Uka3ccX8Y4eLbeXOhcwoyTssbgDO6n1Ega92Hw4WyAInSHNPk0JkVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjckUz/y3KBeJicinkW02YDpnsRMB8GA1UdIwQY MBaAFONWB6SUIA/x89WZ4l/AE/OGQM1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYt NTA0N2NiMzI3ZDllLzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYtNTA0N2NiMzI3ZDll LzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAI2DzrhM qcItJAFtkybl5ep2XIHAXNbAN5nVy2zoWkPOBWJcB5j4XGE05DjxtgGaI5Ylghag VGCUXyJeKGXjbnKL5AYmgE8Qdkx+8+pJZhV4RC5ocXKf51xI6O0z0ilDsC7KgNsg DtKW/X1Fhv62s++nxDsBZziRMFmr0B7ththS+2rb38zqfzoGErAe1dyRttYlzTg5 3Ii+4oakc4q31VXAI3s4tIIzwmMDW2G0p+OKahkCkdujvRTRcHai2NmZo0m9gKzn 7z/5xRgAvX4MtpVV5FpIJ63+Pu/xfs6ZB936kdFhNqD+phYbaukAIYhYilmuvpCA DedwxFEnbaRAKA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:51 2025 by rpki-client