This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json) Hash identifier: 5AAgAFS82WQjEung+gKxoPtKycGfJ2BGHShQa9+pWJI= Subject key identifier: 74:52:CB:4F:1A:E1:B9:AB:63:E4:A8:78:89:12:2F:9B:A3:4F:96:B7 Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11 Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311 Certificate serial: 019B7591BAE71B8E3D7A89DC447AFBEDA014 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft Manifest number: 0461 Signing time: Wed 31 Dec 2025 18:00:43 +0000 Manifest this update: Wed 31 Dec 2025 18:00:43 +0000 Manifest next update: Thu 01 Jan 2026 18:00:43 +0000 Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: eNoGwAktUWCJpKI2ug53rwbqjaMp8WXg1cdo55ucgCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:91:ba:e7:1b:8e:3d:7a:89:dc:44:7a:fb:ed:a0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311 Validity Not Before: Dec 31 18:00:43 2025 GMT Not After : Jan 1 18:00:43 2026 GMT Subject: CN=7452cb4f1ae1b9ab63e4a87889122f9ba34f96b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:af:6a:7d:7a:5d:ac:71:7b:f2:f5:f0:a7:43: 5f:3c:8a:9b:0e:80:68:ab:8d:85:8c:f4:3f:f4:1f: 29:a1:e1:9b:94:b0:48:4e:87:a2:95:97:01:5c:32: 2e:47:14:2a:97:45:c3:4a:fd:b3:33:04:9d:57:ad: dc:94:6e:20:2c:9b:1d:b0:b1:b6:1f:64:35:e0:d0: 65:e2:f3:c6:e5:c1:46:bc:c2:27:96:19:6d:bc:2f: 36:35:2c:23:8b:f5:e3:96:2e:88:58:4a:d2:7b:91: 55:e7:cc:f1:50:2e:6d:27:0c:34:73:ed:c8:da:4b: 67:e8:9e:47:b4:2c:92:83:23:0a:16:16:b2:1d:16: bd:06:c6:87:3f:6b:79:d6:be:0f:df:35:55:f4:b5: b6:96:46:d6:5d:01:3d:c0:ec:a9:f0:a8:43:64:88: a4:01:c7:98:dd:b8:36:08:5a:2a:c7:e2:4f:6c:6e: c5:8f:86:8e:0d:15:68:39:0f:98:1f:00:7c:9a:6c: 45:ce:b4:db:0c:9b:e7:fe:34:a1:f4:b1:cd:77:12: 16:40:79:6d:23:cc:c7:d1:89:94:81:15:56:b9:0b: 26:e1:61:7d:73:c7:1c:a7:04:69:be:b8:70:39:da: 4f:85:ab:6b:de:df:1e:e1:ca:d1:47:64:e3:e6:ea: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:52:CB:4F:1A:E1:B9:AB:63:E4:A8:78:89:12:2F:9B:A3:4F:96:B7 X509v3 Authority Key Identifier: keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:29:6a:26:1d:4c:39:d6:ce:cc:15:e6:8b:3e:fd:16:60:9a: 0c:7a:dc:ab:f4:ee:ff:ec:e3:cc:a5:12:28:2e:3d:fd:b4:34: 71:cf:a2:11:33:1d:a2:5b:8d:25:4a:de:27:94:b6:2d:a8:9e: 4e:5f:1d:39:71:3a:8b:c0:13:34:94:78:29:7f:19:05:a2:d8: 8b:78:e8:81:7f:94:7c:02:b5:a2:a9:0b:d7:83:67:02:35:f3: e4:ac:9c:73:91:84:2c:ad:f4:b0:2e:fd:19:23:09:49:34:aa: b6:ff:76:57:fe:0f:55:d8:db:1e:29:12:e5:d4:b0:7c:ff:fc: 40:07:57:cb:d2:ce:b4:7f:b0:6c:7a:fb:85:ea:02:c9:7e:45: 4e:ba:10:93:41:8e:58:81:66:41:1f:cf:e3:1b:db:f5:a1:8e: a7:79:e5:92:d3:12:a5:6e:9d:bd:a8:62:64:2a:88:f5:1a:42: ee:56:0a:9d:6a:c2:ec:24:d2:c7:64:a4:10:55:43:62:d0:d5: 6f:59:eb:f1:01:09:03:6d:3a:72:ad:eb:41:4a:ef:3a:44:a4: 8d:0f:f2:62:cb:04:bf:ac:24:fa:68:5a:a8:16:5f:cd:1a:fa: a4:ce:81:70:bb:77:aa:29:23:42:46:83:27:97:d9:33:52:52: 0b:57:72:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1kbrnG449eoncRHr77aAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGE2M2Q0ZmUxMGEzNDZiODEyZmJmMzU5YzliMzM3Nzhj ZDQzMTEwHhcNMjUxMjMxMTgwMDQzWhcNMjYwMTAxMTgwMDQzWjAzMTEwLwYDVQQD Eyg3NDUyY2I0ZjFhZTFiOWFiNjNlNGE4Nzg4OTEyMmY5YmEzNGY5NmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA369qfXpdrHF78vXwp0NfPIqbDoBo q42FjPQ/9B8poeGblLBIToeilZcBXDIuRxQql0XDSv2zMwSdV63clG4gLJsdsLG2 H2Q14NBl4vPG5cFGvMInlhltvC82NSwji/Xjli6IWErSe5FV58zxUC5tJww0c+3I 2ktn6J5HtCySgyMKFhayHRa9BsaHP2t51r4P3zVV9LW2lkbWXQE9wOyp8KhDZIik AceY3bg2CFoqx+JPbG7Fj4aODRVoOQ+YHwB8mmxFzrTbDJvn/jSh9LHNdxIWQHlt I8zH0YmUgRVWuQsm4WF9c8ccpwRpvrhwOdpPhatr3t8e4crRR2Tj5urbbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRSy08a4bmrY+SoeIkSL5ujT5a3MB8GA1UdIwQY MBaAFEdKY9T+EKNGuBL781nJszd4zUMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEt N2I3ZmM3YWFiMTQ0LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84ZjNjMmYtYzE4NS00YWQ4LTkxODEtN2I3ZmM3YWFiMTQ0 LzEvUjBwajFQNFFvMGE0RXZ2eldjbXpOM2pOUXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjilqJh1M OdbOzBXmiz79FmCaDHrcq/Tu/+zjzKUSKC49/bQ0cc+iETMdoluNJUreJ5S2Laie Tl8dOXE6i8ATNJR4KX8ZBaLYi3jogX+UfAK1oqkL14NnAjXz5Kycc5GELK30sC79 GSMJSTSqtv92V/4PVdjbHikS5dSwfP/8QAdXy9LOtH+wbHr7heoCyX5FTroQk0GO WIFmQR/P4xvb9aGOp3nlktMSpW6dvahiZCqI9RpC7lYKnWrC7CTSx2SkEFVDYtDV b1nr8QEJA206cq3rQUrvOkSkjQ/yYssEv6wk+mhaqBZfzRr6pM6BcLt3qikjQkaD J5fZM1JSC1dycQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:49:18 2025 by rpki-client