This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft File: 57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json) Hash identifier: lPk3e/q/FPb3bfkgw7pqu/s1J3j96uaQtuCLADoGYWs= Subject key identifier: CC:48:7A:7C:9B:F8:49:AB:06:38:96:A5:8F:60:61:D4:01:43:70:1B Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b Certificate serial: 019B3C108F98C005A129B8880070F9A06F90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 14:01:16 +0000 Manifest this update: Sat 20 Dec 2025 14:01:16 +0000 Manifest next update: Sun 21 Dec 2025 14:01:16 +0000 Files and hashes: 1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: RmveTyAKQzhMJixOCiOpkNizEtwsJdFOBIIChZX8Ivk=) 2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=) 3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:8f:98:c0:05:a1:29:b8:88:00:70:f9:a0:6f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b Validity Not Before: Dec 20 14:01:16 2025 GMT Not After : Dec 21 14:01:16 2025 GMT Subject: CN=cc487a7c9bf849ab063896a58f6061d40143701b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dd:ec:b4:b1:d6:4c:40:04:15:50:22:35:b8: 65:63:42:4e:ed:04:c3:7a:68:9e:e4:68:3d:21:d2: df:8f:25:c6:7d:74:0d:20:9b:01:6a:35:7a:1f:dc: 97:0f:95:8f:f1:0f:5c:b2:03:50:0d:f4:6e:04:64: c7:cd:51:2e:4f:dc:43:3b:6b:cb:19:4d:0f:10:bd: cc:7d:27:65:d1:7a:90:0f:d2:b9:3d:ce:4b:e8:7b: 33:df:67:1a:dc:53:c2:20:f8:fd:eb:f1:cf:17:f0: f6:0f:be:3b:82:7b:c3:f3:92:86:96:0b:93:6b:93: c3:9d:0a:75:bc:6b:4a:e0:af:16:b3:8b:4c:21:ac: cc:4a:9c:c2:66:11:15:1d:5d:44:b4:31:44:5c:c9: c1:d7:98:42:30:9c:51:05:7e:75:cb:90:71:7d:fe: 82:ac:fc:44:c8:73:7f:57:26:46:46:6a:8f:27:77: 3c:1b:39:31:64:f4:ce:aa:63:a4:f0:c8:36:ab:96: 62:50:13:59:33:bb:aa:41:3b:e5:da:54:64:7d:40: 92:fd:0e:24:d0:74:e8:57:f6:f1:6d:14:b2:36:a0: e0:b7:f0:e2:40:dc:c4:b1:50:68:49:25:25:b7:b1: f3:34:77:c6:cd:ee:ea:ce:69:7a:cf:a5:cb:5a:5f: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:7A:7C:9B:F8:49:AB:06:38:96:A5:8F:60:61:D4:01:43:70:1B X509v3 Authority Key Identifier: keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a2:89:b0:c3:34:8b:ab:9d:e4:1f:7d:26:7c:a8:a6:8c:83: 33:fd:2b:bf:69:77:8a:d6:19:c5:dd:c6:f9:e5:a7:38:f7:97: 55:e6:5f:61:59:10:08:a7:9a:49:f9:53:fb:89:4b:07:e5:29: 6c:43:fa:b5:fe:49:2e:47:c9:3e:c5:f5:4f:89:74:9c:4f:5e: 2c:62:38:2d:76:e7:7a:b6:31:f8:35:dc:67:85:e2:4e:51:90: 59:07:22:f4:8a:0f:2b:a5:de:f9:fe:97:d2:b3:4e:33:c9:7b: 88:0d:c2:2c:08:4a:cb:80:e6:20:57:c1:ae:09:17:3c:1c:55: d6:68:b6:e2:4d:4e:39:be:31:e7:3c:65:f4:c9:63:6c:16:4e: 7c:e7:f5:8f:ca:19:af:25:44:32:27:68:a3:24:5a:47:31:a3: e2:be:1f:7a:de:5d:c9:5b:8a:ab:b8:09:12:40:84:1d:72:86: 84:c0:7e:36:84:ee:8d:62:4b:e3:13:9d:d4:2a:9a:07:99:ad: 5e:fa:7e:5a:c7:d7:f5:71:10:07:e1:97:ef:e0:a7:fd:a5:31: d0:16:af:57:a2:e0:5b:f4:98:f5:5c:20:e6:43:f7:1e:75:fd: cc:92:a6:68:2d:24:4b:86:7a:a6:25:f7:3f:07:8a:89:f4:59: e8:e9:97:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EI+YwAWhKbiIAHD5oG+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YjMzZTllM2M5MzJmN2E1NDJlYjAyMTA1NmNlOTRiMWU4 YjhmMGIwHhcNMjUxMjIwMTQwMTE2WhcNMjUxMjIxMTQwMTE2WjAzMTEwLwYDVQQD EyhjYzQ4N2E3YzliZjg0OWFiMDYzODk2YTU4ZjYwNjFkNDAxNDM3MDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt3stLHWTEAEFVAiNbhlY0JO7QTD emie5Gg9IdLfjyXGfXQNIJsBajV6H9yXD5WP8Q9csgNQDfRuBGTHzVEuT9xDO2vL GU0PEL3MfSdl0XqQD9K5Pc5L6Hsz32ca3FPCIPj96/HPF/D2D747gnvD85KGlguT a5PDnQp1vGtK4K8Ws4tMIazMSpzCZhEVHV1EtDFEXMnB15hCMJxRBX51y5Bxff6C rPxEyHN/VyZGRmqPJ3c8GzkxZPTOqmOk8Mg2q5ZiUBNZM7uqQTvl2lRkfUCS/Q4k 0HToV/bxbRSyNqDgt/DiQNzEsVBoSSUlt7HzNHfGze7qzml6z6XLWl/mjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxIenyb+EmrBjiWpY9gYdQBQ3AbMB8GA1UdIwQY MBaAFOezPp48ky96VC6wIQVs6Usei48LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTdNLW5qeVRMM3BVTHJBaEJXenBTeDZMandzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hNWExNzUtODA5Mi00YzYzLWIwMzgt MmM0NDA2YjQ4OTQxLzEvNTdNLW5qeVRMM3BVTHJBaEJXenBTeDZMandzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hNWExNzUtODA5Mi00YzYzLWIwMzgtMmM0NDA2YjQ4OTQx LzEvNTdNLW5qeVRMM3BVTHJBaEJXenBTeDZMandzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKKJsMM0 i6ud5B99JnyopoyDM/0rv2l3itYZxd3G+eWnOPeXVeZfYVkQCKeaSflT+4lLB+Up bEP6tf5JLkfJPsX1T4l0nE9eLGI4LXbnerYx+DXcZ4XiTlGQWQci9IoPK6Xe+f6X 0rNOM8l7iA3CLAhKy4DmIFfBrgkXPBxV1mi24k1OOb4x5zxl9MljbBZOfOf1j8oZ ryVEMidooyRaRzGj4r4fet5dyVuKq7gJEkCEHXKGhMB+NoTujWJL4xOd1CqaB5mt Xvp+WsfX9XEQB+GX7+Cn/aUx0BavV6LgW/SY9Vwg5kP3HnX9zJKmaC0kS4Z6piX3 PweKifRZ6OmXwQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:06:45 2025 by rpki-client