This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft File: RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json) Hash identifier: WAzSJh5XVeJFa7F7ThmACn4YARcCnmpQAL+O085S1bs= Subject key identifier: B2:D3:56:40:A0:3C:8A:C1:2F:F8:F0:AB:FE:B6:A9:85:13:31:AE:24 Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93 Certificate issuer: /CN=46224dc9396e580ff7120f257353a70c72379c93 Certificate serial: 019B2B1DD706A50C713BCDFF733C302B54D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft Manifest number: 1755 Signing time: Wed 17 Dec 2025 07:02:14 +0000 Manifest this update: Wed 17 Dec 2025 07:02:14 +0000 Manifest next update: Thu 18 Dec 2025 07:02:14 +0000 Files and hashes: 1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=) 2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: ShowFArfEAjiB3QwqzFObZqKEq+htzia9IMF0t9A5Sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:d7:06:a5:0c:71:3b:cd:ff:73:3c:30:2b:54:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93 Validity Not Before: Dec 17 07:02:14 2025 GMT Not After : Dec 18 07:02:14 2025 GMT Subject: CN=b2d35640a03c8ac12ff8f0abfeb6a9851331ae24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:86:46:f8:76:df:88:77:96:e6:f8:c3:52:03: 58:f8:8a:10:bc:ae:9e:2c:a0:e9:88:72:5a:6f:00: 40:18:20:b1:cc:47:8d:37:b6:0c:4b:63:b2:40:d4: c7:34:e8:d3:c3:ab:d4:ee:67:80:d7:69:38:61:94: 69:66:79:43:c6:51:fd:8d:36:e3:eb:4b:70:09:cd: 09:04:6d:9e:93:5b:3c:3d:ce:dc:fc:a9:93:d6:38: 38:57:92:08:ab:99:f0:b8:2d:0e:61:e0:5a:cd:e4: aa:3c:24:85:77:e6:4b:51:d4:20:a0:27:fc:fe:c0: 50:cc:f7:d7:6d:f2:69:e6:84:57:e1:58:ba:52:92: aa:cc:77:f4:55:98:67:df:f6:4f:9b:b1:27:7c:db: d9:d9:27:e4:e1:a0:5b:bd:63:09:fa:fd:1e:d9:40: bd:3b:4f:e2:c4:5d:55:13:b3:c4:f4:f1:ad:1b:47: 88:9b:1a:ac:12:37:39:34:19:58:28:b4:82:28:15: 3d:73:e3:33:b0:20:ca:f0:4d:84:bf:76:92:ff:bc: fd:7a:49:09:74:c1:ce:f3:60:9d:da:df:b3:b4:00: 0f:29:4e:b8:bf:d7:58:6e:15:0d:14:3a:0f:06:bf: b0:a4:59:f8:ae:72:fd:80:19:3a:be:59:ef:16:82: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D3:56:40:A0:3C:8A:C1:2F:F8:F0:AB:FE:B6:A9:85:13:31:AE:24 X509v3 Authority Key Identifier: keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:24:d3:28:fb:c1:2e:ac:25:b6:5b:c8:1c:38:ae:db:8a:17: c3:0e:cc:d4:a1:be:1f:b0:9d:7e:b9:da:67:72:c2:f1:48:0b: f4:83:36:ba:84:e2:f0:e1:18:cb:e0:0c:85:9a:3c:e1:7f:db: 2e:83:59:45:35:4e:57:7f:d3:5d:2b:35:9e:7d:6f:21:2b:64: 4e:90:5a:af:10:34:0b:06:80:d8:d4:f7:8f:5b:1e:af:6b:73: b9:88:21:b5:03:d8:be:21:6c:9c:4d:b0:48:74:ed:cf:53:a2: ed:0f:da:3a:f4:98:7b:c0:1c:a0:c4:b6:7b:7d:d8:07:2c:58: 75:6f:74:52:68:47:24:c9:da:b2:00:8b:3c:48:7d:a8:6f:de: 52:21:b0:8c:96:38:7f:3a:3e:1f:39:28:41:7d:ed:f8:d6:d2: 3f:ab:36:9a:ce:0c:ba:bf:aa:6c:77:90:8c:b0:31:9a:23:79: 89:a6:c2:81:1f:e4:00:93:fb:96:91:34:b5:2a:c7:e4:30:bf: 19:fa:4f:fb:7f:1c:97:b3:46:67:03:3c:c8:57:a7:f8:09:ef: c1:23:4a:05:0d:a7:f9:16:df:97:03:0b:8a:2b:3e:f0:36:62: 6f:43:2a:d8:f4:2c:ea:16:52:02:fc:a1:19:20:27:1c:86:7c: ef:7f:f1:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHdcGpQxxO83/czwwK1TUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MjI0ZGM5Mzk2ZTU4MGZmNzEyMGYyNTczNTNhNzBjNzIz NzljOTMwHhcNMjUxMjE3MDcwMjE0WhcNMjUxMjE4MDcwMjE0WjAzMTEwLwYDVQQD EyhiMmQzNTY0MGEwM2M4YWMxMmZmOGYwYWJmZWI2YTk4NTEzMzFhZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IZG+HbfiHeW5vjDUgNY+IoQvK6e LKDpiHJabwBAGCCxzEeNN7YMS2OyQNTHNOjTw6vU7meA12k4YZRpZnlDxlH9jTbj 60twCc0JBG2ek1s8Pc7c/KmT1jg4V5IIq5nwuC0OYeBazeSqPCSFd+ZLUdQgoCf8 /sBQzPfXbfJp5oRX4Vi6UpKqzHf0VZhn3/ZPm7EnfNvZ2Sfk4aBbvWMJ+v0e2UC9 O0/ixF1VE7PE9PGtG0eImxqsEjc5NBlYKLSCKBU9c+MzsCDK8E2Ev3aS/7z9ekkJ dMHO82Cd2t+ztAAPKU64v9dYbhUNFDoPBr+wpFn4rnL9gBk6vlnvFoLvZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLTVkCgPIrBL/jwq/62qYUTMa4kMB8GA1UdIwQY MBaAFEYiTck5blgP9xIPJXNTpwxyN5yTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmlKTnlUbHVXQV8zRWc4bGMxT25ESEkzbkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lMDVkZmYtYmUxMi00ZTgyLTg3M2Qt ZDMxYTMzZmM1ZTk5LzEvUmlKTnlUbHVXQV8zRWc4bGMxT25ESEkzbkpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lMDVkZmYtYmUxMi00ZTgyLTg3M2QtZDMxYTMzZmM1ZTk5 LzEvUmlKTnlUbHVXQV8zRWc4bGMxT25ESEkzbkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyTTKPvB LqwltlvIHDiu24oXww7M1KG+H7CdfrnaZ3LC8UgL9IM2uoTi8OEYy+AMhZo84X/b LoNZRTVOV3/TXSs1nn1vIStkTpBarxA0CwaA2NT3j1ser2tzuYghtQPYviFsnE2w SHTtz1Oi7Q/aOvSYe8AcoMS2e33YByxYdW90UmhHJMnasgCLPEh9qG/eUiGwjJY4 fzo+HzkoQX3t+NbSP6s2ms4Mur+qbHeQjLAxmiN5iabCgR/kAJP7lpE0tSrH5DC/ GfpP+38cl7NGZwM8yFen+AnvwSNKBQ2n+RbflwMLiis+8DZib0Mq2PQs6hZSAvyh GSAnHIZ873/xrw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:52:10 2025 by rpki-client