This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json) Hash identifier: ljtQv/stKR8+U+ADFDlzTKtMGo1EHHMA4LgUbdaN29Y= Subject key identifier: F0:F8:90:61:04:75:D4:8C:EE:9A:67:C2:38:C5:D9:10:87:EE:EE:33 Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd Certificate serial: 019AF19B47C3E799313A39EE2E48CCD74400 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: 58OSRnYkzL17AEpKprde+W6kLucoiYeYJ/c74mRKGTo=) 2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:47:c3:e7:99:31:3a:39:ee:2e:48:cc:d7:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=f0f890610475d48cee9a67c238c5d91087eeee33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:2c:c4:08:8b:39:e1:83:fc:5c:0e:21:03: 98:b9:50:fb:55:9c:d5:c7:35:4c:10:a9:99:c0:fc: 3d:cd:97:00:d7:65:d5:d0:84:5e:7d:5a:84:8c:01: 68:b4:14:36:b4:a1:79:fd:71:27:08:c0:a1:b1:68: 86:d0:53:36:9f:6c:64:62:04:17:3e:d0:ab:e8:a7: 77:2a:ac:3c:e0:5a:c7:5b:2b:63:c5:6e:15:95:f9: 91:1a:e9:30:9b:a8:aa:71:31:6a:39:6b:4a:8d:a9: 85:b2:ac:41:a2:0d:0c:5c:68:71:e8:7e:f9:17:7a: 1b:d1:68:07:b8:40:bb:f5:55:f9:ef:09:2d:2a:18: e8:a2:78:89:08:05:8d:37:4d:16:2c:16:97:4e:de: 59:9f:a5:e4:dd:1a:80:44:eb:92:8e:8c:10:85:86: b8:08:58:9b:4a:cb:f3:57:e8:d7:93:76:80:e7:49: 77:21:97:2f:43:f5:62:f9:0e:1e:de:8c:71:c2:8e: 26:de:e7:b2:19:74:0e:32:c8:6b:2d:3c:0a:e4:3f: d1:94:3f:b8:79:63:a6:8c:fe:16:f9:c5:eb:d4:90: b0:c9:c6:73:f6:99:f1:90:d0:41:88:bd:ed:c6:d1: 06:bf:d2:f2:29:25:63:fc:a5:11:1e:d3:6f:8c:7b: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F8:90:61:04:75:D4:8C:EE:9A:67:C2:38:C5:D9:10:87:EE:EE:33 X509v3 Authority Key Identifier: keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:44:be:e9:98:9c:ce:14:5d:0c:f6:35:5b:cf:cd:62:cc:47: d3:80:64:85:c4:84:30:ce:b9:30:40:ae:39:c4:1c:d9:36:0c: 38:51:84:92:aa:04:97:87:30:4f:6d:31:1d:90:33:85:b8:ae: 0d:71:dc:42:28:e1:6a:9f:c5:90:3f:d7:5b:5c:86:26:cf:8c: cc:10:32:f4:32:20:74:e2:2b:f2:5c:c6:bb:fe:c4:07:ae:70: b9:46:b3:18:07:29:28:64:91:ed:2c:6c:04:e9:48:d5:fb:00: 84:8e:59:62:3d:b5:e6:6c:71:33:f8:1a:11:3f:60:7d:b1:a1: 9f:69:34:ba:68:b8:ad:76:e6:6b:e0:7b:7f:d1:52:2b:43:c7: 94:5f:8b:75:a4:8c:aa:1f:98:44:70:f7:a5:dd:67:32:8a:19: a2:16:12:c5:51:e3:33:9b:fa:66:0f:ad:75:25:30:5f:04:d4: e0:c0:87:aa:01:5c:5c:b4:3b:1a:f7:9d:6c:d9:0a:f4:9c:b6: e5:8e:a8:c7:4c:9c:b9:bc:1a:c7:2b:53:7d:c0:18:f6:af:4a: 03:18:43:cd:64:4f:8a:0c:74:cb:6d:1b:a6:6d:88:ea:e7:63: c9:e5:1c:53:00:49:a7:65:a7:92:8c:a3:c4:e3:82:79:8d:e1: a4:a4:c0:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0fD55kxOjnuLkjM10QAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOGYxMGEyYzc5MmQwZDM2NTY3OGEzNmNhN2Y3ZjE0MDlj YTNhZmQwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD EyhmMGY4OTA2MTA0NzVkNDhjZWU5YTY3YzIzOGM1ZDkxMDg3ZWVlZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuscsxAiLOeGD/FwOIQOYuVD7VZzV xzVMEKmZwPw9zZcA12XV0IRefVqEjAFotBQ2tKF5/XEnCMChsWiG0FM2n2xkYgQX PtCr6Kd3Kqw84FrHWytjxW4VlfmRGukwm6iqcTFqOWtKjamFsqxBog0MXGhx6H75 F3ob0WgHuEC79VX57wktKhjooniJCAWNN00WLBaXTt5Zn6Xk3RqAROuSjowQhYa4 CFibSsvzV+jXk3aA50l3IZcvQ/Vi+Q4e3oxxwo4m3ueyGXQOMshrLTwK5D/RlD+4 eWOmjP4W+cXr1JCwycZz9pnxkNBBiL3txtEGv9LyKSVj/KURHtNvjHsgUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPD4kGEEddSM7ppnwjjF2RCH7u4zMB8GA1UdIwQY MBaAFOOPEKLHktDTZWeKNsp/fxQJyjr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjct ODM1M2FhNDBiYWViLzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjctODM1M2FhNDBiYWVi LzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkES+6Zic zhRdDPY1W8/NYsxH04BkhcSEMM65MECuOcQc2TYMOFGEkqoEl4cwT20xHZAzhbiu DXHcQijhap/FkD/XW1yGJs+MzBAy9DIgdOIr8lzGu/7EB65wuUazGAcpKGSR7Sxs BOlI1fsAhI5ZYj215mxxM/gaET9gfbGhn2k0umi4rXbma+B7f9FSK0PHlF+LdaSM qh+YRHD3pd1nMooZohYSxVHjM5v6Zg+tdSUwXwTU4MCHqgFcXLQ7GvedbNkK9Jy2 5Y6ox0ycubwaxytTfcAY9q9KAxhDzWRPigx0y20bpm2I6udjyeUcUwBJp2Wnkoyj xOOCeY3hpKTA7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:42 2025 by rpki-client