This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json) Hash identifier: m6aKMp5Uwx4aFf61OBXBNznH+zMXdLkPKLRz8Utz0do= Subject key identifier: 3D:C5:86:4F:2C:D7:C4:A5:B2:2A:92:22:C3:A4:CD:F1:CF:CB:7C:F7 Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03 Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03 Certificate serial: 019B4926F87568775267B999F36DD04D27EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft Manifest number: 0B7D Signing time: Tue 23 Dec 2025 03:00:49 +0000 Manifest this update: Tue 23 Dec 2025 03:00:49 +0000 Manifest next update: Wed 24 Dec 2025 03:00:49 +0000 Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: MYHRC/6JS5qsFBxlr+9MM5a2KGtXZ18wwftRYrZ7CVo=) 2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:f8:75:68:77:52:67:b9:99:f3:6d:d0:4d:27:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03 Validity Not Before: Dec 23 03:00:49 2025 GMT Not After : Dec 24 03:00:49 2025 GMT Subject: CN=3dc5864f2cd7c4a5b22a9222c3a4cdf1cfcb7cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:75:18:fd:07:a1:43:76:69:ab:f8:c1:34: 03:14:83:bf:bc:ea:41:a9:c5:cc:0a:d2:d6:a6:d7: e7:6d:5d:f5:4a:ec:92:f6:43:4f:45:9d:ac:74:b4: 48:51:33:2d:9f:57:0f:5f:90:49:b3:82:db:d2:d6: 5c:7c:cf:e9:fd:37:45:cd:46:49:47:4d:70:51:f8: 99:fd:6b:0b:b9:e9:43:5c:a9:89:fb:b0:63:e7:42: e6:92:a9:f1:5a:34:1d:19:dc:92:17:e3:2f:0b:9a: 37:d0:2d:bb:e3:e4:b4:b4:06:ab:03:78:b4:3a:09: 34:21:ec:5e:fc:31:f1:2c:65:91:ae:72:d0:ed:0f: 36:b7:a9:b3:d2:b7:09:3d:f5:ea:ba:03:e7:d1:61: 2f:1f:68:84:7c:11:7e:b5:9f:bc:e1:73:92:e1:16: ef:94:f8:94:2b:b4:28:30:e4:b7:ac:c9:e2:ff:e7: e0:fa:93:60:fd:a6:98:1f:e7:8a:ea:a3:83:a6:78: 25:8d:d8:22:21:3a:59:73:45:32:7d:ba:3e:b9:c2: f0:16:2e:87:44:d3:20:13:c8:0f:42:62:ba:b5:3f: 4b:f6:f2:fc:c3:85:dc:ad:e0:ee:80:da:ba:d5:98: 06:cf:0c:c6:5f:f5:6b:b4:a3:a3:e8:c3:72:db:4b: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C5:86:4F:2C:D7:C4:A5:B2:2A:92:22:C3:A4:CD:F1:CF:CB:7C:F7 X509v3 Authority Key Identifier: keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:f1:5d:17:5c:47:c8:eb:e8:84:61:d3:24:ad:dd:fa:d4:e9: fe:09:fe:39:bb:56:df:53:85:a8:1c:e5:43:49:c1:e8:b5:f7: 55:0a:75:e9:bc:a2:7e:ce:3e:ae:3e:f1:11:d6:78:ed:da:50: 5c:c6:5c:19:2f:24:86:f3:d7:47:b4:db:23:04:31:23:62:60: 91:7f:aa:7c:8e:73:17:2c:1a:63:8b:a9:49:66:66:db:1b:29: 4d:0a:06:d2:3d:c2:35:5c:cc:71:44:2b:46:b0:91:e0:24:21: a6:a3:25:a6:ea:05:1a:96:0e:4a:df:7f:f0:c7:29:fc:3a:84: 38:b1:1b:bd:af:bf:31:1f:1a:b9:47:fd:54:96:bb:ec:42:b5: d5:01:78:a5:33:9c:76:1a:d8:7a:2b:82:50:c2:e8:e3:f9:2c: 76:49:77:41:dc:14:cb:a7:0c:fb:01:77:7e:2d:3b:e6:19:3d: ef:b6:2b:98:36:96:54:95:db:cc:d3:ee:99:6a:53:b2:e7:51: 05:66:99:a1:96:f8:06:60:78:39:4a:fb:cc:70:cc:5c:33:4e: a6:60:93:d9:63:82:d2:95:11:39:cd:b2:cd:59:b3:29:cd:8e: 3a:44:8d:58:fa:d2:5d:69:3b:49:fe:ca:fe:d0:a0:1f:e3:f4: be:05:9f:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJvh1aHdSZ7mZ823QTSfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2N2IzOTRjZjhhNDA1MWMxNjdkNDY4YmM3Yjg5MmE3MWRl ZTRkMDMwHhcNMjUxMjIzMDMwMDQ5WhcNMjUxMjI0MDMwMDQ5WjAzMTEwLwYDVQQD EygzZGM1ODY0ZjJjZDdjNGE1YjIyYTkyMjJjM2E0Y2RmMWNmY2I3Y2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSt1GP0HoUN2aav4wTQDFIO/vOpB qcXMCtLWptfnbV31SuyS9kNPRZ2sdLRIUTMtn1cPX5BJs4Lb0tZcfM/p/TdFzUZJ R01wUfiZ/WsLuelDXKmJ+7Bj50LmkqnxWjQdGdySF+MvC5o30C274+S0tAarA3i0 Ogk0Iexe/DHxLGWRrnLQ7Q82t6mz0rcJPfXqugPn0WEvH2iEfBF+tZ+84XOS4Rbv lPiUK7QoMOS3rMni/+fg+pNg/aaYH+eK6qODpngljdgiITpZc0Uyfbo+ucLwFi6H RNMgE8gPQmK6tT9L9vL8w4XcreDugNq61ZgGzwzGX/VrtKOj6MNy20uw6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3Fhk8s18SlsiqSIsOkzfHPy3z3MB8GA1UdIwQY MBaAFEZ7OUz4pAUcFn1Gi8e4kqcd7k0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQt MGYwMWI1NjA2NTdjLzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQtMGYwMWI1NjA2NTdj LzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxvFdF1xH yOvohGHTJK3d+tTp/gn+ObtW31OFqBzlQ0nB6LX3VQp16byifs4+rj7xEdZ47dpQ XMZcGS8khvPXR7TbIwQxI2JgkX+qfI5zFywaY4upSWZm2xspTQoG0j3CNVzMcUQr RrCR4CQhpqMlpuoFGpYOSt9/8Mcp/DqEOLEbva+/MR8auUf9VJa77EK11QF4pTOc dhrYeiuCUMLo4/ksdkl3QdwUy6cM+wF3fi075hk977YrmDaWVJXbzNPumWpTsudR BWaZoZb4BmB4OUr7zHDMXDNOpmCT2WOC0pUROc2yzVmzKc2OOkSNWPrSXWk7Sf7K /tCgH+P0vgWfYQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:17:14 2025 by rpki-client