This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json) Hash identifier: 6sH0wQW0eLYhhbdANJ52ctppjXTpP163zy48RSLBxcY= Subject key identifier: 3B:B9:C4:85:7C:B5:E6:2A:8A:6C:8F:61:18:7D:87:CF:EE:86:75:73 Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a Certificate serial: 019B42EE7518C0200CE7648A192AB5041A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft Manifest number: 077E Signing time: Sun 21 Dec 2025 22:01:22 +0000 Manifest this update: Sun 21 Dec 2025 22:01:22 +0000 Manifest next update: Mon 22 Dec 2025 22:01:22 +0000 Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: 844rTwksPseGdOYiEzIkBNbHKlrTg7QOpitXsutr7ek=) 2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:75:18:c0:20:0c:e7:64:8a:19:2a:b5:04:1a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a Validity Not Before: Dec 21 22:01:22 2025 GMT Not After : Dec 22 22:01:22 2025 GMT Subject: CN=3bb9c4857cb5e62a8a6c8f61187d87cfee867573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:bf:10:28:f9:ca:6f:8e:12:f1:95:53:72: f2:91:00:e1:8d:40:62:17:7c:e1:7b:a8:45:6e:0a: 81:e9:d9:51:44:68:d2:69:ce:d2:c8:c3:ef:d7:bc: 2a:b5:56:ab:f7:d2:51:33:44:fb:cc:f1:d9:1e:f8: e8:75:7b:67:4e:67:57:8a:fa:3e:62:74:52:1a:af: 1b:7f:b4:6f:66:a6:97:25:ae:70:dc:f8:52:64:95: 0f:64:b8:b4:d1:57:05:fd:76:f6:7d:e2:0e:39:66: 3a:a0:cf:91:2b:84:19:e6:fe:0d:7a:e0:5c:97:8f: 17:08:9c:69:6c:35:af:1e:d8:67:dd:4c:40:50:1f: ab:d4:71:a3:ff:98:ab:d2:44:ce:8d:63:6b:1b:cb: 11:83:e2:6e:8f:92:38:2f:4c:c9:fc:10:9a:ac:c5: 89:33:fb:f5:cc:05:13:3a:c4:d8:f8:99:ac:de:e1: a7:6a:dc:e4:23:8b:90:ff:fa:dd:43:15:5a:8c:b2: 0d:6a:29:39:2b:97:94:47:f2:5a:34:d9:db:d2:a1: c1:43:02:11:fa:2d:88:37:d1:2a:0b:65:48:ee:a3: 17:89:cd:55:8d:1e:51:7e:75:e2:cc:da:ea:43:d9: 80:44:07:07:bb:87:fe:d0:7f:f0:57:f2:08:d4:40: 45:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B9:C4:85:7C:B5:E6:2A:8A:6C:8F:61:18:7D:87:CF:EE:86:75:73 X509v3 Authority Key Identifier: keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:55:8b:83:db:0d:ae:0a:6f:46:ab:05:d3:42:f1:5c:51:48: 3f:cb:67:77:f5:f2:bd:4e:47:00:99:6f:cf:e9:dd:d9:a7:35: f3:44:1a:e9:cc:e6:3d:72:72:03:ae:3b:dd:e0:2f:00:77:bb: a5:97:27:24:24:6a:47:9a:bb:36:b8:09:9c:88:e6:e5:2f:d5: cd:d5:ab:c5:cf:71:2e:b3:ea:20:73:b7:1b:23:e0:ab:dc:53: b2:8e:ee:14:86:4d:83:45:e4:53:1b:86:a4:69:26:d9:c3:93: be:75:85:09:56:25:85:77:17:2c:33:c4:a1:c2:52:33:e6:0b: fd:5c:44:a5:1a:ea:61:38:fe:67:2e:b7:a3:48:10:84:b0:f2: 5b:78:2d:34:15:df:23:85:8e:13:5e:ed:12:ff:d3:f1:27:a5: 3e:26:24:49:87:d7:57:5b:64:69:f7:9b:83:07:b4:7d:ca:be: 27:07:c9:29:f7:e2:f1:0d:d5:42:76:8c:f8:c8:de:aa:65:ad: 9b:3f:36:d1:70:48:bd:92:df:a1:e9:2a:0c:74:8d:9c:f4:ef: 91:4c:22:a9:db:7a:c9:47:a5:db:2a:15:00:f5:32:5d:c0:a8: 63:be:b6:e4:71:e6:e9:c5:b1:44:58:2a:b3:1d:cb:04:64:23: 08:e2:e8:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7nUYwCAM52SKGSq1BBozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy NWEyNWEwHhcNMjUxMjIxMjIwMTIyWhcNMjUxMjIyMjIwMTIyWjAzMTEwLwYDVQQD EygzYmI5YzQ4NTdjYjVlNjJhOGE2YzhmNjExODdkODdjZmVlODY3NTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhO/ECj5ym+OEvGVU3LykQDhjUBi F3zhe6hFbgqB6dlRRGjSac7SyMPv17wqtVar99JRM0T7zPHZHvjodXtnTmdXivo+ YnRSGq8bf7RvZqaXJa5w3PhSZJUPZLi00VcF/Xb2feIOOWY6oM+RK4QZ5v4NeuBc l48XCJxpbDWvHthn3UxAUB+r1HGj/5ir0kTOjWNrG8sRg+Juj5I4L0zJ/BCarMWJ M/v1zAUTOsTY+Jms3uGnatzkI4uQ//rdQxVajLINaik5K5eUR/JaNNnb0qHBQwIR +i2IN9EqC2VI7qMXic1VjR5RfnXizNrqQ9mARAcHu4f+0H/wV/II1EBFYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu5xIV8teYqimyPYRh9h8/uhnVzMB8GA1UdIwQY MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt NjkyNDI1NzUzMGIwLzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1WLg9sN rgpvRqsF00LxXFFIP8tnd/XyvU5HAJlvz+nd2ac180Qa6czmPXJyA6473eAvAHe7 pZcnJCRqR5q7NrgJnIjm5S/VzdWrxc9xLrPqIHO3GyPgq9xTso7uFIZNg0XkUxuG pGkm2cOTvnWFCVYlhXcXLDPEocJSM+YL/VxEpRrqYTj+Zy63o0gQhLDyW3gtNBXf I4WOE17tEv/T8SelPiYkSYfXV1tkafebgwe0fcq+JwfJKffi8Q3VQnaM+MjeqmWt mz820XBIvZLfoekqDHSNnPTvkUwiqdt6yUel2yoVAPUyXcCoY7625HHm6cWxRFgq sx3LBGQjCOLoNQ== -----END CERTIFICATE-----Generated at Mon Dec 22 08:29:32 2025 by rpki-client