This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft File: RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json) Hash identifier: mVWM7y3WRvwppOnP6lYn/Qf2cpVIa+f8aio9HqSsX8A= Subject key identifier: A9:DF:36:13:6B:29:09:42:3F:00:F2:0B:24:9C:54:88:9D:AC:39:8C Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 Certificate issuer: /CN=462bcb1b528da9944bd9544bc7b388cee1a01390 Certificate serial: 019B34FB59498ABC43D8A74A16C216734A8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft Manifest number: 44 Signing time: Fri 19 Dec 2025 05:00:46 +0000 Manifest this update: Fri 19 Dec 2025 05:00:46 +0000 Manifest next update: Sat 20 Dec 2025 05:00:46 +0000 Files and hashes: 1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: 2U21EdOuRdQSFEbPV5NQHyMRKyQ25pxvmZjwJXQtudk=) 2: sb-HAVMafNmHL9QenVGesGVke-Q.roa (hash: nHrOUnqGNx4wf54/RmOPoYz+21S/NMpXYL06TIB1PUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:59:49:8a:bc:43:d8:a7:4a:16:c2:16:73:4a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390 Validity Not Before: Dec 19 05:00:46 2025 GMT Not After : Dec 20 05:00:46 2025 GMT Subject: CN=a9df36136b2909423f00f20b249c54889dac398c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:7d:14:3d:84:2a:8c:d8:89:1e:ce:92:d0: 6e:78:54:9a:b0:44:6f:9e:5a:27:8f:ef:94:61:ea: f5:5c:52:97:f2:b5:34:04:b2:52:8e:bc:53:aa:78: 97:71:0e:c4:73:38:b1:2e:16:77:24:c5:9f:85:c1: 17:52:b2:10:b4:7b:f6:84:32:3b:6d:04:58:96:53: 6f:4c:7e:1b:b9:45:9c:1b:98:3a:25:4a:e6:e6:41: 21:4e:d4:12:92:7f:c2:b6:91:19:4c:25:31:15:30: 16:56:d8:77:5a:30:c3:aa:64:77:2e:1b:02:8f:7a: db:52:52:f1:88:be:6a:b7:d3:b8:2b:cf:d2:9a:6f: f0:e5:aa:83:3b:97:c1:00:8c:05:1d:50:93:1c:54: 1e:ce:46:6e:dd:2e:f0:22:7c:df:95:0b:00:68:d3: 4a:f8:52:11:98:69:82:38:57:f3:03:83:4f:bd:7a: b9:5a:90:11:d3:15:e5:5b:9c:ed:5a:5f:67:59:a8: ad:e3:7b:a1:49:43:28:c3:8d:da:0b:c3:90:5e:52: 5d:02:ed:96:ca:ec:b3:44:6b:bb:be:51:2e:e0:99: fc:f4:72:c4:47:cd:d9:cb:d3:e2:7b:87:94:e2:ca: b4:5a:2c:65:30:09:4c:a8:36:d5:01:86:77:69:a1: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DF:36:13:6B:29:09:42:3F:00:F2:0B:24:9C:54:88:9D:AC:39:8C X509v3 Authority Key Identifier: keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c3:06:70:9b:da:5a:e6:8a:61:64:d4:78:d5:4d:a5:aa:87: 1b:70:bd:a9:61:5f:57:20:4a:e3:3c:d1:b5:92:d4:59:72:db: ca:1e:1a:c6:f9:16:28:63:b8:5b:cc:71:16:12:c3:95:5c:7c: d1:fd:29:e8:fa:85:84:02:d0:3c:95:80:1c:7e:13:cd:0a:fa: 88:62:41:62:b4:15:df:ad:d1:8e:80:c3:7b:42:7b:9c:ae:09: 79:a6:fb:48:6c:f2:0e:6f:bd:0b:99:62:dc:d9:ac:ec:dc:ca: b7:80:b2:c4:f8:5e:f0:25:9c:c1:25:dd:36:91:80:79:29:55: bf:d1:a2:86:44:60:71:4c:d8:3a:ed:99:3c:19:06:bb:c0:bc: 7a:af:c4:b4:38:20:0e:84:fb:08:2f:a9:54:d4:c8:6b:85:87: 56:17:63:32:a9:00:d8:66:0e:59:be:14:32:a6:27:3b:d4:b9: c4:12:5d:ff:b8:e7:7f:d8:86:7a:18:8b:fe:1e:2f:4d:63:14: 0f:a5:25:70:f7:5a:cc:4f:2d:dc:c0:62:d6:fc:3e:c1:9b:26: 93:2d:a7:dd:4a:c4:a0:a2:ab:97:5b:0e:8a:15:46:09:43:b8: 74:03:82:67:af:d8:40:6b:da:a0:9c:e2:69:f8:a8:67:33:29: cf:18:f1:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+1lJirxD2KdKFsIWc0qNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MmJjYjFiNTI4ZGE5OTQ0YmQ5NTQ0YmM3YjM4OGNlZTFh MDEzOTAwHhcNMjUxMjE5MDUwMDQ2WhcNMjUxMjIwMDUwMDQ2WjAzMTEwLwYDVQQD EyhhOWRmMzYxMzZiMjkwOTQyM2YwMGYyMGIyNDljNTQ4ODlkYWMzOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+x9FD2EKozYiR7OktBueFSasERv nlonj++UYer1XFKX8rU0BLJSjrxTqniXcQ7EczixLhZ3JMWfhcEXUrIQtHv2hDI7 bQRYllNvTH4buUWcG5g6JUrm5kEhTtQSkn/CtpEZTCUxFTAWVth3WjDDqmR3LhsC j3rbUlLxiL5qt9O4K8/Smm/w5aqDO5fBAIwFHVCTHFQezkZu3S7wInzflQsAaNNK +FIRmGmCOFfzA4NPvXq5WpAR0xXlW5ztWl9nWait43uhSUMow43aC8OQXlJdAu2W yuyzRGu7vlEu4Jn89HLER83Zy9Pie4eU4sq0WixlMAlMqDbVAYZ3aaG0IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnfNhNrKQlCPwDyCyScVIidrDmMMB8GA1UdIwQY MBaAFEYryxtSjamUS9lUS8eziM7hoBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUt YWFmZThhOGMxNjVlLzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC83ZWMxZDgtYmU3Ni00MWVkLTk3YzUtYWFmZThhOGMxNjVl LzEvUml2TEcxS05xWlJMMlZSTHg3T0l6dUdnRTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMMGcJva WuaKYWTUeNVNpaqHG3C9qWFfVyBK4zzRtZLUWXLbyh4axvkWKGO4W8xxFhLDlVx8 0f0p6PqFhALQPJWAHH4TzQr6iGJBYrQV363RjoDDe0J7nK4Jeab7SGzyDm+9C5li 3Nms7NzKt4CyxPhe8CWcwSXdNpGAeSlVv9GihkRgcUzYOu2ZPBkGu8C8eq/EtDgg DoT7CC+pVNTIa4WHVhdjMqkA2GYOWb4UMqYnO9S5xBJd/7jnf9iGehiL/h4vTWMU D6UlcPdazE8t3MBi1vw+wZsmky2n3UrEoKKrl1sOihVGCUO4dAOCZ6/YQGvaoJzi afioZzMpzxjxSw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:30:55 2025 by rpki-client