This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json) Hash identifier: /74BBodeu+YYhg1zQqr+5M6dcp5kbXswXHS5viWMDFc= Subject key identifier: C4:D9:5C:17:30:33:36:86:D4:35:8B:9C:EA:0C:19:03:62:93:30:EE Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84 Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884 Certificate serial: 019B51BCBDB9382F4BE5FBE176CB34758541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 19:01:22 +0000 Manifest this update: Wed 24 Dec 2025 19:01:22 +0000 Manifest next update: Thu 25 Dec 2025 19:01:22 +0000 Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: uVPTB8o9vIzxsEeSRZv5CaaCi7aByH5Fq7ukmvplFSw=) 2: oFJDhlIxFUNhw_-HBfRNlNTaZxk.roa (hash: X5zMaPXKmmEjg88Z3XtKkZigQqgVKFsASLy1XTJf6Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:bd:b9:38:2f:4b:e5:fb:e1:76:cb:34:75:85:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884 Validity Not Before: Dec 24 19:01:22 2025 GMT Not After : Dec 25 19:01:22 2025 GMT Subject: CN=c4d95c1730333686d4358b9cea0c1903629330ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:7b:8c:c4:b7:a4:c6:fe:b8:92:be:39:74: d1:72:d1:7e:40:39:29:30:ff:75:cb:5f:5b:07:83: 05:32:69:e0:6d:0c:eb:bf:82:2f:fb:a0:ff:0d:6f: 66:55:a4:90:b4:20:4f:fb:2a:45:92:1c:a2:fd:0d: 37:33:66:53:b9:b1:b2:8e:f9:78:eb:d5:50:83:5f: 37:62:53:37:c9:7d:88:ed:a7:27:d3:67:ed:ba:a9: 64:bc:07:01:19:49:ed:8a:c3:ca:ba:76:17:8b:60: 7e:24:24:ec:d8:13:1d:47:92:68:81:cd:96:59:a6: 4c:5f:f2:4e:5a:26:1a:3a:9b:41:98:2a:be:97:62: 01:6f:ba:06:f9:2f:f6:40:4d:eb:d9:22:b0:cc:d9: 02:dd:d1:fe:11:47:d1:5c:3c:74:7f:76:bc:a3:ca: 3d:36:f1:e8:54:f2:af:f9:9b:2b:01:82:a8:48:0d: dc:3b:e0:4b:d8:58:e6:00:2d:35:96:94:5d:ea:f4: af:08:03:3a:a4:6b:a8:7a:97:ca:ed:1b:b1:54:4b: 17:2a:1d:82:f7:dc:8e:7d:1f:b2:50:9c:d9:62:3f: 20:86:be:45:82:eb:af:c5:1e:b5:3a:d9:d3:47:48: aa:34:cf:3b:61:b2:2c:b6:f9:30:a7:4c:a2:0e:ca: a3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D9:5C:17:30:33:36:86:D4:35:8B:9C:EA:0C:19:03:62:93:30:EE X509v3 Authority Key Identifier: keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:3b:3f:9f:32:c7:96:c1:db:c2:17:1c:92:22:b3:b9:05:4c: a2:42:17:7d:c9:7e:d0:c0:19:7d:0a:bb:dd:ae:06:e7:89:82: f7:50:82:7c:01:75:18:88:15:cc:27:cc:f8:89:37:b0:fc:6e: a7:e4:8f:b1:fa:82:e4:b4:c6:0a:cc:b6:08:40:59:2a:d8:2a: 1e:97:cd:d2:61:0b:87:40:c4:9c:5d:c8:4d:bf:1b:9c:5b:97: b7:23:e1:1d:50:78:d1:2b:5a:3e:af:bc:72:ca:b9:cb:bc:7c: 17:1f:57:03:7f:7e:8b:bd:3f:ae:3a:69:97:b7:60:a8:cd:a0: 12:47:1d:80:d9:ad:ea:20:aa:06:8d:a7:66:9f:b1:31:b6:4e: d9:1a:dc:eb:a8:33:80:ae:a7:d2:e6:9c:b5:e8:33:05:d3:4a: 60:c2:8c:e7:ad:90:d0:f5:7a:60:27:00:78:39:a6:42:4a:5f: 04:76:26:89:38:47:e7:5a:b9:8a:1c:a3:32:dd:f0:4f:73:aa: 7d:d2:ad:87:5b:6e:1f:0f:29:ee:a2:42:38:eb:62:f1:df:fa: 1b:c0:bc:e1:07:91:1c:8b:00:59:09:4f:73:06:c7:fc:70:0f: 85:d7:a7:b3:81:fd:29:d5:01:04:45:1e:5f:c4:fd:57:bd:63: 5a:b4:45:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvL25OC9L5fvhdss0dYVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNWEwNTZjODI0Mjk3MWQxYTkwYjBiZmE5OGIxYjdhOTMw NTI4ODQwHhcNMjUxMjI0MTkwMTIyWhcNMjUxMjI1MTkwMTIyWjAzMTEwLwYDVQQD EyhjNGQ5NWMxNzMwMzMzNjg2ZDQzNThiOWNlYTBjMTkwMzYyOTMzMGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJN7jMS3pMb+uJK+OXTRctF+QDkp MP91y19bB4MFMmngbQzrv4Iv+6D/DW9mVaSQtCBP+ypFkhyi/Q03M2ZTubGyjvl4 69VQg183YlM3yX2I7acn02ftuqlkvAcBGUntisPKunYXi2B+JCTs2BMdR5Jogc2W WaZMX/JOWiYaOptBmCq+l2IBb7oG+S/2QE3r2SKwzNkC3dH+EUfRXDx0f3a8o8o9 NvHoVPKv+ZsrAYKoSA3cO+BL2FjmAC01lpRd6vSvCAM6pGuoepfK7RuxVEsXKh2C 99yOfR+yUJzZYj8ghr5FguuvxR61OtnTR0iqNM87YbIstvkwp0yiDsqjgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTZXBcwMzaG1DWLnOoMGQNikzDuMB8GA1UdIwQY MBaAFONaBWyCQpcdGpCwv6mLG3qTBSiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODIt YWFiNGJkOGZjZTlkLzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODItYWFiNGJkOGZjZTlk LzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzs/nzLH lsHbwhcckiKzuQVMokIXfcl+0MAZfQq73a4G54mC91CCfAF1GIgVzCfM+Ik3sPxu p+SPsfqC5LTGCsy2CEBZKtgqHpfN0mELh0DEnF3ITb8bnFuXtyPhHVB40StaPq+8 csq5y7x8Fx9XA39+i70/rjppl7dgqM2gEkcdgNmt6iCqBo2nZp+xMbZO2Rrc66gz gK6n0uactegzBdNKYMKM562Q0PV6YCcAeDmmQkpfBHYmiThH51q5ihyjMt3wT3Oq fdKth1tuHw8p7qJCOOti8d/6G8C84QeRHIsAWQlPcwbH/HAPhdens4H9KdUBBEUe X8T9V71jWrRFcQ== -----END CERTIFICATE-----Generated at Thu Dec 25 04:52:05 2025 by rpki-client