This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft File: 44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json) Hash identifier: ZaeqzIsfDpV/yE7WplD+ubVeK/fVOOu3jkQKonmFMKI= Subject key identifier: 7F:3C:13:A4:A7:6B:B0:AF:4A:3E:F5:8D:49:01:E9:FC:3E:62:EE:FC Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE Certificate issuer: /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede Certificate serial: 019B39EACD3EB7E20EDC7ABE8131864F681E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft Manifest number: 1433 Signing time: Sat 20 Dec 2025 04:00:47 +0000 Manifest this update: Sat 20 Dec 2025 04:00:47 +0000 Manifest next update: Sun 21 Dec 2025 04:00:47 +0000 Files and hashes: 1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: 5/MzP1Ftyb7Y1hXVnn7xyAu8G7BW3I7E/uc8ioiLfYs=) 2: lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa (hash: gojO/FGnNBUfGiI8/IbdnMShaLKaR6WR/+GNSoRF7Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:cd:3e:b7:e2:0e:dc:7a:be:81:31:86:4f:68:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede Validity Not Before: Dec 20 04:00:47 2025 GMT Not After : Dec 21 04:00:47 2025 GMT Subject: CN=7f3c13a4a76bb0af4a3ef58d4901e9fc3e62eefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:f0:75:b9:61:1c:13:2e:6e:0c:3f:72:3e: 8a:0e:22:55:a2:12:c5:1d:b8:7f:38:69:e4:3d:0f: ff:91:9f:ac:1d:23:62:d3:b4:f7:7d:b2:01:04:2a: 3c:a9:56:c0:63:d4:0c:ea:63:11:1a:ab:7e:6b:9b: 39:89:89:99:c7:bf:0f:6b:16:f4:69:c1:a1:67:a9: cf:3c:70:8a:4c:c6:1b:d0:ed:3a:dc:31:ee:0a:ad: 66:44:87:a6:3f:82:3a:e6:e7:b5:dd:ea:63:80:9f: f6:1e:44:1f:6e:54:e8:c1:1d:69:3e:89:44:ef:d8: 00:2a:74:63:70:34:50:5e:36:5e:df:34:a5:b4:28: c9:e0:7c:b2:03:0f:b7:63:18:6d:d1:73:6a:2b:f5: 6e:17:b1:2b:0a:47:7e:24:e1:30:a3:1c:b0:71:32: cc:cc:a3:b4:b9:8a:a9:98:79:18:a3:06:4b:7c:a6: 9b:9d:1b:62:bb:02:02:de:05:b4:d7:f5:43:45:72: 3d:57:72:49:ea:b8:cc:60:79:6d:80:15:a6:12:10: c1:d7:38:c8:c6:3e:cf:1f:bb:67:87:71:76:b8:66: 80:8a:e5:0c:df:16:5a:4b:6a:6a:df:d0:4f:a3:c4: 47:3b:da:4a:bf:8f:c8:ab:9f:81:51:25:e2:76:15: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:13:A4:A7:6B:B0:AF:4A:3E:F5:8D:49:01:E9:FC:3E:62:EE:FC X509v3 Authority Key Identifier: keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:7b:e3:cb:35:65:05:2d:79:ef:42:9c:fa:19:57:60:d0:34: 19:e4:7a:c7:5f:0d:29:de:33:f4:28:7d:b0:ec:fd:17:7d:7f: bc:71:5d:c8:2e:d9:9d:3c:e5:9c:0e:d9:e8:ea:3a:cc:e5:00: 21:67:04:a2:df:b2:43:f6:df:92:c9:86:90:e4:83:61:f4:99: 42:b9:16:c5:dc:aa:75:eb:07:8c:ca:07:3b:c7:06:ec:5f:82: f2:01:ad:72:ea:70:64:fc:84:ee:54:10:80:95:1a:f4:96:7a: 23:94:f4:e1:1d:ad:94:6a:c1:d8:00:09:bd:67:09:6b:0e:24: 84:c2:c2:5f:35:d5:8d:e6:1b:bc:34:91:46:f7:b2:61:81:af: fe:cb:e6:94:8e:f9:96:01:f6:cf:28:36:4d:61:83:92:8c:a3: 8d:09:ef:9a:e1:1d:fc:03:61:63:a2:00:81:c0:45:86:d0:71: f3:05:a7:71:80:0a:01:a4:b2:ed:97:4a:e9:0e:f4:ec:5e:2e: bf:7c:bb:3f:b5:51:76:fb:c1:c9:9d:4b:6f:c7:15:3d:82:9c: d5:0b:9c:38:f2:b7:df:26:b0:ef:3d:97:47:8f:40:93:f1:8d: 4c:5b:9d:e7:30:91:f8:b7:78:0f:e1:cf:49:aa:2f:c9:10:04: b8:f4:04:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56s0+t+IO3Hq+gTGGT2geMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOGFhYmVhOGVlMjliZjdjOTE1YmMzZWYwYmJhY2MyN2Qw ZWNlZGUwHhcNMjUxMjIwMDQwMDQ3WhcNMjUxMjIxMDQwMDQ3WjAzMTEwLwYDVQQD Eyg3ZjNjMTNhNGE3NmJiMGFmNGEzZWY1OGQ0OTAxZTlmYzNlNjJlZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFfwdblhHBMubgw/cj6KDiJVohLF Hbh/OGnkPQ//kZ+sHSNi07T3fbIBBCo8qVbAY9QM6mMRGqt+a5s5iYmZx78Paxb0 acGhZ6nPPHCKTMYb0O063DHuCq1mRIemP4I65ue13epjgJ/2HkQfblTowR1pPolE 79gAKnRjcDRQXjZe3zSltCjJ4HyyAw+3Yxht0XNqK/VuF7ErCkd+JOEwoxywcTLM zKO0uYqpmHkYowZLfKabnRtiuwIC3gW01/VDRXI9V3JJ6rjMYHltgBWmEhDB1zjI xj7PH7tnh3F2uGaAiuUM3xZaS2pq39BPo8RHO9pKv4/Iq5+BUSXidhVTrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH88E6Sna7CvSj71jUkB6fw+Yu78MB8GA1UdIwQY MBaAFOOKq+qO4pv3yRW8PvC7rMJ9Ds7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEt NmFlYWU2M2VkOGZlLzEvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81NjNhZmMtYjE5NC00MWZiLWE3YTEtNmFlYWU2M2VkOGZl LzEvNDRxcjZvN2ltX2ZKRmJ3LThMdXN3bjBPenQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXvjyzVl BS1570Kc+hlXYNA0GeR6x18NKd4z9Ch9sOz9F31/vHFdyC7ZnTzlnA7Z6Oo6zOUA IWcEot+yQ/bfksmGkOSDYfSZQrkWxdyqdesHjMoHO8cG7F+C8gGtcupwZPyE7lQQ gJUa9JZ6I5T04R2tlGrB2AAJvWcJaw4khMLCXzXVjeYbvDSRRveyYYGv/svmlI75 lgH2zyg2TWGDkoyjjQnvmuEd/ANhY6IAgcBFhtBx8wWncYAKAaSy7ZdK6Q707F4u v3y7P7VRdvvByZ1Lb8cVPYKc1QucOPK33yaw7z2XR49Ak/GNTFud5zCR+Ld4D+HP SaovyRAEuPQElw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:35:19 2025 by rpki-client