This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json) Hash identifier: ko4fkvf7IlKH6ijn57AzTR5VXaSt+wSSDtsVMeNsT9E= Subject key identifier: 38:D0:F5:D4:62:79:F6:B5:61:3A:E7:1B:1E:34:13:9C:5B:09:34:76 Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18 Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418 Certificate serial: 019B2F67607EC76E7140DF1DB408977011E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 03:01:02 +0000 Manifest this update: Thu 18 Dec 2025 03:01:02 +0000 Manifest next update: Fri 19 Dec 2025 03:01:02 +0000 Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: NTxbEP6yMY724Y/W//wbXvpun3RodpXc9xu4KuzgaXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:60:7e:c7:6e:71:40:df:1d:b4:08:97:70:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418 Validity Not Before: Dec 18 03:01:02 2025 GMT Not After : Dec 19 03:01:02 2025 GMT Subject: CN=38d0f5d46279f6b5613ae71b1e34139c5b093476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:b0:0c:43:d9:a6:45:a9:11:c9:39:5e:f8: 15:80:ba:c0:26:4e:5a:d7:c3:08:3c:e4:ef:8b:85: e9:bc:ae:99:d8:7d:ad:9f:05:0a:ba:7a:d8:5f:21: 13:dc:7e:0f:02:2b:7e:8d:da:29:40:59:65:50:c4: 77:7c:cb:91:56:57:2b:5f:62:e5:0e:ea:d8:0c:dd: 47:58:33:84:6f:9e:32:22:6d:84:f9:f4:5f:03:f6: d6:17:10:e2:3e:4b:f0:7e:e3:b1:0c:63:51:a2:30: 15:d1:2b:da:50:a8:71:0a:fe:3f:67:05:5b:fc:7c: 56:d7:bd:a8:0a:9a:19:fa:a4:fe:23:2e:27:57:2c: ba:8c:6b:39:b1:35:00:d9:f5:ee:4f:ff:39:5b:bc: 8b:4f:25:eb:0c:c5:1d:20:18:6a:3a:1e:f2:2b:35: 8c:1c:c9:f4:a7:cb:23:f4:95:7f:f0:d0:1d:e4:5d: 55:39:d4:35:40:dd:9b:80:85:b4:13:25:57:e5:5b: 1c:07:99:d9:c0:f8:e4:bb:5a:8e:3d:79:08:c2:0d: 7e:cf:a8:62:b3:23:ba:59:00:c3:75:95:8d:27:5a: 9d:f6:da:d0:f5:cc:20:b4:2e:30:d2:5d:59:3f:79: 34:14:65:c1:02:20:a5:e5:54:2e:8d:a4:27:cf:93: 85:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:F5:D4:62:79:F6:B5:61:3A:E7:1B:1E:34:13:9C:5B:09:34:76 X509v3 Authority Key Identifier: keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:80:47:1d:14:98:2f:b2:3b:32:fa:55:aa:d4:97:8a:ab:2a: d1:fd:79:cc:d4:11:87:8d:4e:91:9b:a0:85:86:f9:79:4c:a8: 00:33:10:6e:e0:ff:c6:ee:51:71:fc:fe:3e:82:ed:01:b7:ff: 6e:b4:47:b7:db:39:64:f7:d8:2e:e1:ea:ed:59:1a:7a:12:df: 35:56:2b:48:73:8c:e1:83:bf:44:2c:fa:82:9e:39:19:df:30: 8d:ee:be:01:e3:71:1e:3b:25:2c:59:1b:96:3f:5d:1f:c4:5d: 82:db:af:e6:0b:17:10:58:99:8a:b8:90:4e:a5:b9:15:7b:3b: ec:8b:9d:bd:6c:32:79:1d:2c:26:8d:d4:9c:77:17:e9:8b:7d: fe:2b:4f:a6:aa:7f:cb:6d:b1:4f:e5:68:fc:e5:10:40:24:c1: f3:67:d3:67:4b:fc:b6:bf:47:a7:b3:cf:e4:b0:69:33:51:ae: c0:c8:3b:a3:a7:22:91:67:5d:08:ec:42:d5:df:c7:ca:3e:a6: af:ea:f6:a0:b2:49:82:57:a4:25:68:a3:0a:8b:a5:13:d8:36: 0e:b0:6b:29:40:e7:f3:76:6a:73:c6:b9:7c:2f:69:de:23:e3: 67:b1:dd:2f:7e:8e:b3:e6:1f:12:8e:4e:dd:c8:1f:10:43:10: aa:eb:c5:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ2B+x25xQN8dtAiXcBHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MWUzYjlhNTNiYmUwMmUyY2I0Mzk3YTZkMWEwMWQ4MGNh NmU0MTgwHhcNMjUxMjE4MDMwMTAyWhcNMjUxMjE5MDMwMTAyWjAzMTEwLwYDVQQD EygzOGQwZjVkNDYyNzlmNmI1NjEzYWU3MWIxZTM0MTM5YzViMDkzNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCawDEPZpkWpEck5XvgVgLrAJk5a 18MIPOTvi4XpvK6Z2H2tnwUKunrYXyET3H4PAit+jdopQFllUMR3fMuRVlcrX2Ll DurYDN1HWDOEb54yIm2E+fRfA/bWFxDiPkvwfuOxDGNRojAV0SvaUKhxCv4/ZwVb /HxW172oCpoZ+qT+Iy4nVyy6jGs5sTUA2fXuT/85W7yLTyXrDMUdIBhqOh7yKzWM HMn0p8sj9JV/8NAd5F1VOdQ1QN2bgIW0EyVX5VscB5nZwPjku1qOPXkIwg1+z6hi syO6WQDDdZWNJ1qd9trQ9cwgtC4w0l1ZP3k0FGXBAiCl5VQujaQnz5OF7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjQ9dRiefa1YTrnGx40E5xbCTR2MB8GA1UdIwQY MBaAFJQeO5pTu+AuLLQ5em0aAdgMpuQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQt ZGE5OWUzNGNjMzBiLzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQtZGE5OWUzNGNjMzBi LzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIBHHRSY L7I7MvpVqtSXiqsq0f15zNQRh41OkZughYb5eUyoADMQbuD/xu5Rcfz+PoLtAbf/ brRHt9s5ZPfYLuHq7VkaehLfNVYrSHOM4YO/RCz6gp45Gd8wje6+AeNxHjslLFkb lj9dH8Rdgtuv5gsXEFiZiriQTqW5FXs77IudvWwyeR0sJo3UnHcX6Yt9/itPpqp/ y22xT+Vo/OUQQCTB82fTZ0v8tr9Hp7PP5LBpM1GuwMg7o6cikWddCOxC1d/Hyj6m r+r2oLJJglekJWijCoulE9g2DrBrKUDn83Zqc8a5fC9p3iPjZ7HdL36Os+YfEo5O 3cgfEEMQquvFOA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:25:00 2025 by rpki-client