This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json) Hash identifier: +hQ/rUliRWkEwgMymbo6vztPTTOA0WM7ye+5QnE5y44= Subject key identifier: 03:34:01:1B:2A:74:6F:68:F3:F4:89:CB:4C:3C:D1:E8:EC:4B:25:47 Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18 Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418 Certificate serial: 019AF389F47A92AC82E1702BD4D611AF58FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:01:35 +0000 Manifest this update: Sat 06 Dec 2025 12:01:35 +0000 Manifest next update: Sun 07 Dec 2025 12:01:35 +0000 Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: dzUGp39hIsjhhYsK7+2mjnQNSRkCB1k78wwSwmpToqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f4:7a:92:ac:82:e1:70:2b:d4:d6:11:af:58:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418 Validity Not Before: Dec 6 12:01:35 2025 GMT Not After : Dec 7 12:01:35 2025 GMT Subject: CN=0334011b2a746f68f3f489cb4c3cd1e8ec4b2547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8c:24:a9:65:d4:01:59:47:76:b3:88:92:a2: 52:b1:82:99:b6:6c:92:3d:22:32:09:65:a3:95:46: 4a:5d:34:aa:26:ef:81:78:3f:d2:c1:04:31:9e:9e: 21:f6:4f:01:6d:40:d3:cc:77:47:63:34:69:ab:cb: 53:ef:73:f3:33:79:26:a3:d2:b4:95:5e:89:04:e5: 1b:17:31:60:3e:50:e9:2a:43:4c:a2:ac:34:b0:0c: dc:19:45:bd:cb:cd:25:b8:4c:7b:7b:0f:14:1f:a5: ea:61:54:3e:21:5c:8c:0e:ae:67:f0:bc:67:13:02: e1:94:90:26:c2:3f:ba:a5:a4:bd:6a:b5:d8:71:8e: 91:da:e7:9a:0f:24:d2:99:af:87:99:be:0b:52:ee: aa:96:85:91:dc:b9:c6:3f:89:9e:3a:51:8a:dd:28: 66:54:aa:4f:97:61:86:a7:f6:41:fd:31:15:48:2f: 3f:cd:6c:3f:b1:2c:1e:98:b7:3b:aa:c8:ef:f0:df: 6b:b0:1e:86:44:7a:47:9b:20:28:72:0a:d4:cf:2a: 4b:e2:df:3d:f5:8a:92:be:32:a1:22:4b:99:48:4e: d6:58:c2:d4:4d:8d:e1:4e:41:14:d3:bc:cf:7b:48: 0c:19:86:e1:ed:e2:7e:26:e2:0f:d6:d9:4a:3b:25: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:34:01:1B:2A:74:6F:68:F3:F4:89:CB:4C:3C:D1:E8:EC:4B:25:47 X509v3 Authority Key Identifier: keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b6:21:81:a4:f6:39:8a:ba:3a:a1:b9:db:a9:b4:da:fe:21: 2b:7d:ab:88:e2:29:0a:80:da:59:ab:c9:b3:98:bf:1c:89:94: af:07:d9:c0:46:ec:ba:c1:15:68:b9:70:a9:9d:47:05:48:ef: 13:b3:23:dd:ca:73:4a:a3:3d:80:f5:28:01:cb:2f:da:89:cd: f9:97:03:cf:08:0f:69:05:e7:f0:ad:26:31:f2:35:c9:d9:c4: 53:b8:49:2a:b8:8f:0b:2d:96:d4:f9:74:a5:95:fd:82:2d:5f: be:84:6b:48:67:f6:d8:21:1d:1d:7c:45:29:f4:16:37:f6:36: 45:bf:0b:7c:fc:98:40:18:50:cb:f2:60:03:09:8f:81:9e:30: aa:1e:d9:94:a5:58:cc:32:8e:27:18:83:12:e9:cb:bb:37:de: f4:55:f7:93:94:e2:ba:eb:20:9c:64:8b:0e:b2:cb:84:8a:47: a3:c2:72:d5:88:1a:b1:1c:a5:0e:4c:da:75:6b:c9:7c:39:72: 6d:8c:e5:e6:3b:59:84:a8:69:49:7c:98:d0:6f:04:88:5d:b8: d0:74:c6:72:3e:8d:f5:4a:cd:c7:b2:b1:2b:6f:7b:87:b3:97: 02:66:99:a0:31:5e:e5:51:80:82:8c:af:13:b7:16:99:f1:cc: 02:1d:39:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifR6kqyC4XAr1NYRr1j+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MWUzYjlhNTNiYmUwMmUyY2I0Mzk3YTZkMWEwMWQ4MGNh NmU0MTgwHhcNMjUxMjA2MTIwMTM1WhcNMjUxMjA3MTIwMTM1WjAzMTEwLwYDVQQD EygwMzM0MDExYjJhNzQ2ZjY4ZjNmNDg5Y2I0YzNjZDFlOGVjNGIyNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjowkqWXUAVlHdrOIkqJSsYKZtmyS PSIyCWWjlUZKXTSqJu+BeD/SwQQxnp4h9k8BbUDTzHdHYzRpq8tT73PzM3kmo9K0 lV6JBOUbFzFgPlDpKkNMoqw0sAzcGUW9y80luEx7ew8UH6XqYVQ+IVyMDq5n8Lxn EwLhlJAmwj+6paS9arXYcY6R2ueaDyTSma+Hmb4LUu6qloWR3LnGP4meOlGK3Shm VKpPl2GGp/ZB/TEVSC8/zWw/sSwemLc7qsjv8N9rsB6GRHpHmyAocgrUzypL4t89 9YqSvjKhIkuZSE7WWMLUTY3hTkEU07zPe0gMGYbh7eJ+JuIP1tlKOyUy7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM0ARsqdG9o8/SJy0w80ejsSyVHMB8GA1UdIwQY MBaAFJQeO5pTu+AuLLQ5em0aAdgMpuQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQt ZGE5OWUzNGNjMzBiLzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQtZGE5OWUzNGNjMzBi LzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrYhgaT2 OYq6OqG526m02v4hK32riOIpCoDaWavJs5i/HImUrwfZwEbsusEVaLlwqZ1HBUjv E7Mj3cpzSqM9gPUoAcsv2onN+ZcDzwgPaQXn8K0mMfI1ydnEU7hJKriPCy2W1Pl0 pZX9gi1fvoRrSGf22CEdHXxFKfQWN/Y2Rb8LfPyYQBhQy/JgAwmPgZ4wqh7ZlKVY zDKOJxiDEunLuzfe9FX3k5TiuusgnGSLDrLLhIpHo8Jy1YgasRylDkzadWvJfDly bYzl5jtZhKhpSXyY0G8EiF240HTGcj6N9UrNx7KxK297h7OXAmaZoDFe5VGAgoyv E7cWmfHMAh05jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:57 2025 by rpki-client