This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json) Hash identifier: Dh+VA+yDvIHZLXyQPGrKzSvK6XQ0SYRceeO/t/u8eT0= Subject key identifier: 52:98:DA:36:BB:D9:BC:62:84:69:B2:19:77:FA:07:FD:7B:90:DF:E6 Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90 Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290 Certificate serial: 019B3CEBDAA23313DF581251FE54FF74BB31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft Manifest number: 1698 Signing time: Sat 20 Dec 2025 18:00:48 +0000 Manifest this update: Sat 20 Dec 2025 18:00:48 +0000 Manifest next update: Sun 21 Dec 2025 18:00:48 +0000 Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: b2PSCX0+7su/W5ayrhYUGX1CT5//Wqlof2vBvQFM8cM=) 2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:da:a2:33:13:df:58:12:51:fe:54:ff:74:bb:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290 Validity Not Before: Dec 20 18:00:48 2025 GMT Not After : Dec 21 18:00:48 2025 GMT Subject: CN=5298da36bbd9bc628469b21977fa07fd7b90dfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:43:17:4c:4f:95:00:19:11:29:b5:28:94: e6:0f:e2:c0:04:ea:a3:c9:4e:a1:0b:e1:69:9b:d6: 6b:1b:b0:b4:f3:12:87:08:8e:6d:54:ce:94:1e:2c: 60:cc:63:b7:0e:bf:c7:cb:11:22:11:1f:24:1d:35: aa:f9:c8:a6:0c:df:a5:04:bc:59:77:40:53:16:5b: 1a:d4:e7:1d:43:7f:d2:f5:7b:ed:73:96:03:03:08: d1:b5:38:de:b4:c4:70:7c:05:b0:bc:55:c5:f2:70: 4e:9e:8b:1f:52:d7:21:c0:3a:bd:b0:5c:84:38:22: e3:ba:20:4e:20:49:48:a2:e9:4b:99:8f:81:4f:32: 22:7e:93:87:7d:4f:ce:57:52:3b:37:9f:01:3d:da: 16:dc:10:74:fd:31:48:5a:53:ed:a2:e8:12:14:78: 38:dc:d9:ea:65:f3:50:07:fe:55:43:5e:c8:ab:1f: f2:68:f5:e6:2c:00:e6:52:3a:39:f9:70:e7:2c:45: 4d:6d:0d:60:76:71:a1:27:6b:5a:43:a4:aa:41:f4: 64:6b:28:c4:e6:32:23:15:47:bd:05:b0:51:e1:23: 0a:96:a6:3f:97:00:23:85:4e:88:84:55:c7:04:c9: 12:e1:9b:97:28:57:70:8e:5e:2d:75:c8:62:66:1a: 17:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:98:DA:36:BB:D9:BC:62:84:69:B2:19:77:FA:07:FD:7B:90:DF:E6 X509v3 Authority Key Identifier: keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7b:72:49:57:23:0c:44:7e:5e:96:ac:a1:e4:50:cd:1e:1b: 95:81:7a:3d:0f:e2:30:41:46:47:41:fe:62:c2:b6:a7:52:9a: 96:03:e7:88:67:5e:d7:af:e2:12:5f:47:63:fd:fb:ee:a7:60: 75:02:6a:a6:8d:36:98:5e:8c:50:97:77:a9:4c:30:e3:8c:9a: ea:8d:1f:51:3c:e4:4a:7f:86:a4:6b:8a:21:4a:3c:85:fb:3e: e6:e1:79:c1:d0:86:95:d6:1f:1a:78:d9:62:a8:11:14:00:cb: f6:c9:3e:be:26:5d:61:91:9d:2f:65:14:f7:e2:17:6e:a7:26: 9c:21:b2:fb:fb:23:2e:a8:aa:43:a6:f5:5a:6f:6b:e0:78:19: 9f:09:e5:53:82:37:e9:4d:bc:1c:cb:2a:e1:e1:a7:4a:b3:ee: 2a:71:3d:8d:ae:ba:d8:b2:df:b2:5c:be:0d:ad:7d:93:72:2f: ca:95:f6:36:70:2b:99:58:dc:a6:9d:cf:42:34:4d:a4:9e:6b: 1f:08:0c:ec:ff:fb:22:5d:27:c7:5e:7a:b4:a4:af:f7:90:99: e8:0a:85:d5:ec:9a:be:d5:9f:18:c7:94:3c:bc:16:f6:4c:04: 76:0a:82:97:16:7c:b1:0b:05:8e:ae:5a:d4:ca:81:bd:fc:e4: ff:de:47:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs869qiMxPfWBJR/lT/dLsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3 M2MyOTAwHhcNMjUxMjIwMTgwMDQ4WhcNMjUxMjIxMTgwMDQ4WjAzMTEwLwYDVQQD Eyg1Mjk4ZGEzNmJiZDliYzYyODQ2OWIyMTk3N2ZhMDdmZDdiOTBkZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwNDF0xPlQAZESm1KJTmD+LABOqj yU6hC+Fpm9ZrG7C08xKHCI5tVM6UHixgzGO3Dr/HyxEiER8kHTWq+cimDN+lBLxZ d0BTFlsa1OcdQ3/S9Xvtc5YDAwjRtTjetMRwfAWwvFXF8nBOnosfUtchwDq9sFyE OCLjuiBOIElIoulLmY+BTzIifpOHfU/OV1I7N58BPdoW3BB0/TFIWlPtougSFHg4 3NnqZfNQB/5VQ17Iqx/yaPXmLADmUjo5+XDnLEVNbQ1gdnGhJ2taQ6SqQfRkayjE 5jIjFUe9BbBR4SMKlqY/lwAjhU6IhFXHBMkS4ZuXKFdwjl4tdchiZhoXUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKY2ja72bxihGmyGXf6B/17kN/mMB8GA1UdIwQY MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct YWQ0YmQ3ZjIzY2U0LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0 LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYntySVcj DER+XpasoeRQzR4blYF6PQ/iMEFGR0H+YsK2p1KalgPniGde16/iEl9HY/377qdg dQJqpo02mF6MUJd3qUww44ya6o0fUTzkSn+GpGuKIUo8hfs+5uF5wdCGldYfGnjZ YqgRFADL9sk+viZdYZGdL2UU9+IXbqcmnCGy+/sjLqiqQ6b1Wm9r4HgZnwnlU4I3 6U28HMsq4eGnSrPuKnE9ja662LLfsly+Da19k3IvypX2NnArmVjcpp3PQjRNpJ5r HwgM7P/7Il0nx156tKSv95CZ6AqF1eyavtWfGMeUPLwW9kwEdgqClxZ8sQsFjq5a 1MqBvfzk/95HIw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:32 2025 by rpki-client