This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json) Hash identifier: bL7YuLWK6pOzEOSpLgOyoioKQ02Hq6GWn3gE9Jh8NvA= Subject key identifier: B9:A5:81:5C:0E:94:E6:9A:4D:F0:6B:CA:09:F4:E1:6A:98:FF:F0:8D Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9 Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9 Certificate serial: 019B53059A7185F6FBD798D4F5F18C0E3E91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft Manifest number: 0BA2 Signing time: Thu 25 Dec 2025 01:00:34 +0000 Manifest this update: Thu 25 Dec 2025 01:00:34 +0000 Manifest next update: Fri 26 Dec 2025 01:00:34 +0000 Files and hashes: 1: 1-57HmlNDMcNn-L6phbslRuvJCcw.roa (hash: gyWoPpIB9HWDXzh+b8BPPzXer8C1JA3lUjjaqPhqcUE=) 2: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: mnW17/spTa6KEmDcU2EfdFIHHmi7nZtQbVVldj1SEdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:9a:71:85:f6:fb:d7:98:d4:f5:f1:8c:0e:3e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9 Validity Not Before: Dec 25 01:00:34 2025 GMT Not After : Dec 26 01:00:34 2025 GMT Subject: CN=b9a5815c0e94e69a4df06bca09f4e16a98fff08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:96:17:2b:9e:5f:d1:dd:6f:f9:ad:0d:db: 3e:22:6c:6f:52:95:d5:6c:fd:e1:e7:0e:68:49:df: 87:34:b2:18:12:87:7c:ea:7d:e1:1c:71:66:18:65: c5:33:6c:53:91:c4:ff:f2:40:d2:58:1b:41:34:23: 6a:25:99:79:69:d1:1b:9f:6e:a2:9e:3d:cd:1e:5c: 3c:ef:9c:51:aa:1a:20:d6:f8:73:cb:cc:c1:b8:00: a4:b6:42:b5:02:44:9d:50:f1:bd:0d:1a:d7:ad:ed: c2:60:a0:6a:11:10:79:31:01:31:54:92:1f:cd:b5: 66:ac:71:ee:36:b4:e0:9c:51:8d:c5:b4:2a:ef:a6: cb:33:e5:58:76:b7:74:22:6b:19:d9:91:50:2c:d8: 10:70:bc:d7:8b:9c:ee:09:f4:86:a1:f9:f8:5e:05: 07:33:80:91:14:ad:ee:15:04:06:8c:bb:73:7a:b9: 85:24:bd:bc:b8:59:c3:cd:e5:00:d6:3a:9f:e7:e9: 4e:a7:c1:52:ad:bf:a2:4b:c7:16:09:72:b8:b0:f1: e3:1f:fa:31:b4:5f:69:48:e4:5d:6f:04:a0:dc:de: bb:9c:5f:6f:1e:96:64:68:11:e1:4d:70:ef:7f:d7: bb:5b:63:bd:ee:26:d8:d3:83:b1:a0:a9:b2:ff:72: c0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:81:5C:0E:94:E6:9A:4D:F0:6B:CA:09:F4:E1:6A:98:FF:F0:8D X509v3 Authority Key Identifier: keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:89:b6:9a:2e:5d:ac:91:49:b3:d1:06:87:6a:06:39:6a:18: 94:46:70:4d:c2:ec:16:34:31:42:57:66:d2:09:23:c3:58:80: c0:39:3d:b4:f2:a7:13:32:4e:79:7f:96:e7:c6:cc:80:2f:8b: 97:0a:d2:db:bf:02:32:1e:e3:97:cf:f4:50:b6:2d:83:aa:c7: f0:0f:eb:49:57:1b:6e:ec:e9:f5:47:12:39:08:31:d4:62:b0: 6b:c0:1c:28:d6:94:a5:11:99:49:14:26:e0:31:39:92:43:eb: cc:c7:3c:eb:5c:d5:cc:3e:28:c9:13:37:44:6d:eb:46:20:01: 5a:a8:52:dd:a6:40:e3:e0:b6:5f:a1:4c:2b:5b:dc:c2:58:3f: 5d:5b:c0:41:36:d5:d3:ae:05:ea:be:fe:d8:5b:86:db:3a:cf: 76:4f:a6:99:b9:47:37:3e:13:e9:c6:e4:51:99:23:8b:ce:b5: 88:cf:9f:fc:e2:5c:83:13:88:a4:31:04:e4:40:40:24:fd:ee: 07:95:d5:4f:52:af:39:2b:28:af:3e:16:32:1e:19:b3:16:28: 25:ee:3a:bc:cd:d7:af:6e:53:67:b9:8c:75:a6:dc:07:d8:d5: b7:1f:a9:31:a4:31:a8:45:e0:89:a3:c7:63:b7:90:1e:9a:bb: 19:bc:9e:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBZpxhfb715jU9fGMDj6RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNTZmNWMyM2NjZWM2NDY0MDY4NWU0NGQ1OWJjNGI2ZDQ0 ZGFhYjkwHhcNMjUxMjI1MDEwMDM0WhcNMjUxMjI2MDEwMDM0WjAzMTEwLwYDVQQD EyhiOWE1ODE1YzBlOTRlNjlhNGRmMDZiY2EwOWY0ZTE2YTk4ZmZmMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulKWFyueX9Hdb/mtDds+ImxvUpXV bP3h5w5oSd+HNLIYEod86n3hHHFmGGXFM2xTkcT/8kDSWBtBNCNqJZl5adEbn26i nj3NHlw875xRqhog1vhzy8zBuACktkK1AkSdUPG9DRrXre3CYKBqERB5MQExVJIf zbVmrHHuNrTgnFGNxbQq76bLM+VYdrd0ImsZ2ZFQLNgQcLzXi5zuCfSGofn4XgUH M4CRFK3uFQQGjLtzermFJL28uFnDzeUA1jqf5+lOp8FSrb+iS8cWCXK4sPHjH/ox tF9pSORdbwSg3N67nF9vHpZkaBHhTXDvf9e7W2O97ibY04OxoKmy/3LAbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmlgVwOlOaaTfBrygn04WqY//CNMB8GA1UdIwQY MBaAFONW9cI8zsZGQGheRNWbxLbUTaq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMt M2NhZGVjNDZlNWMzLzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jM2QxMGUtZjRhYi00ZjA4LTk1NmMtM2NhZGVjNDZlNWMz LzEvNDFiMXdqek94a1pBYUY1RTFadkV0dFJOcXJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYm2mi5d rJFJs9EGh2oGOWoYlEZwTcLsFjQxQldm0gkjw1iAwDk9tPKnEzJOeX+W58bMgC+L lwrS278CMh7jl8/0ULYtg6rH8A/rSVcbbuzp9UcSOQgx1GKwa8AcKNaUpRGZSRQm 4DE5kkPrzMc861zVzD4oyRM3RG3rRiABWqhS3aZA4+C2X6FMK1vcwlg/XVvAQTbV 064F6r7+2FuG2zrPdk+mmblHNz4T6cbkUZkji861iM+f/OJcgxOIpDEE5EBAJP3u B5XVT1KvOSsorz4WMh4ZsxYoJe46vM3Xr25TZ7mMdabcB9jVtx+pMaQxqEXgiaPH Y7eQHpq7GbyeoA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:55 2025 by rpki-client