This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json) Hash identifier: kRSTbP1XGwOibPd1HzFC6uibLdBOQRCt2VcEhY0Wdhk= Subject key identifier: 5B:88:1A:8C:ED:99:96:B3:58:22:AF:F8:B0:36:17:D8:16:EE:EB:78 Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a Certificate serial: 019B2D4194D862532B29ADC5DE05E8E6A85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft Manifest number: 1046 Signing time: Wed 17 Dec 2025 17:00:31 +0000 Manifest this update: Wed 17 Dec 2025 17:00:31 +0000 Manifest next update: Thu 18 Dec 2025 17:00:31 +0000 Files and hashes: 1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=) 2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: xOc+F6cm836+KDnO5+lTphrva6Mz6ryYXroMKn6YQ7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:94:d8:62:53:2b:29:ad:c5:de:05:e8:e6:a8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a Validity Not Before: Dec 17 17:00:31 2025 GMT Not After : Dec 18 17:00:31 2025 GMT Subject: CN=5b881a8ced9996b35822aff8b03617d816eeeb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:5a:7d:10:b7:6c:5b:da:cc:bc:8f:48:79: 44:bf:1f:b6:79:68:dc:11:a6:7c:ab:33:21:a4:fb: 22:23:dc:5d:c7:00:7b:21:f5:45:3e:81:78:f4:68: 84:10:3d:9a:9f:65:7a:95:08:f2:7a:7f:c5:26:5f: 7d:6b:f7:9c:36:a8:77:76:ba:bf:43:b7:a8:e5:1a: a3:6d:35:a0:1d:5f:73:28:40:84:0b:cf:d0:11:0d: 81:9b:98:27:5b:c4:15:a6:09:93:0d:ed:67:49:f0: 1c:f1:2f:62:e3:b5:f4:34:92:7b:67:78:13:c2:78: 69:7e:d9:95:2f:05:5f:4a:65:be:37:a9:f3:c7:bf: 44:2f:47:1c:33:a3:0f:74:55:64:74:7a:a8:ff:2b: 18:a4:bd:0b:f5:ac:8d:e9:72:e8:fa:d2:9c:3c:64: 6f:90:dc:a3:bb:0d:ff:35:36:04:79:a1:6d:a7:a8: 28:8e:f6:ad:9b:b6:93:21:28:2b:3e:1d:c5:41:3d: c9:84:4a:93:81:d9:31:7b:5b:14:b6:de:46:83:bf: 55:87:f1:34:d5:91:32:d1:01:b3:eb:85:94:ca:41: 79:6d:5e:4f:01:73:a5:0b:53:34:ee:36:1c:22:d9: 60:b6:08:d2:95:db:24:38:f8:5a:7a:5b:e6:df:78: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:88:1A:8C:ED:99:96:B3:58:22:AF:F8:B0:36:17:D8:16:EE:EB:78 X509v3 Authority Key Identifier: keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3c:0d:9f:f7:d6:e8:eb:a7:b4:3c:01:76:73:43:16:c5:a9: 22:a6:da:86:4f:1a:9b:8e:63:43:38:07:12:eb:e6:ed:c3:ba: 15:d4:f7:56:e0:35:de:75:58:fc:b3:c1:13:00:96:36:a1:5b: c7:c2:b8:17:17:36:c0:92:19:c0:b0:87:99:df:c1:6a:10:32: 94:3d:b9:d0:c1:75:6f:d0:d3:e2:87:f3:ec:a4:f8:db:11:52: f9:d9:77:d4:15:bd:d7:08:e6:6d:0d:e8:1d:11:5f:3e:86:96: 12:8b:26:e2:f8:04:3c:f0:27:a1:46:12:fb:87:f8:3e:8b:63: 8d:e7:db:ba:73:a5:b1:d7:60:5e:be:1e:d9:97:81:40:0d:2c: 8d:76:69:48:5a:83:6b:e6:c0:9e:5e:99:ae:bd:4e:b3:a9:cd: 5b:a1:58:ec:21:ee:ed:a3:26:74:31:f3:11:1f:f2:41:31:84: 68:0f:ec:ab:cc:0f:ef:40:f8:00:25:bc:2f:0b:a9:3d:64:17: 63:d6:5e:fd:7d:fb:8b:a6:c8:32:93:ce:d3:ca:c1:71:02:de: da:cd:7a:24:f3:2d:41:d8:72:ac:d5:26:20:4f:c8:2f:33:2a: a7:2f:36:73:34:57:7e:37:57:55:8d:49:67:c1:4f:6f:ea:0b: f5:8f:9e:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQZTYYlMrKa3F3gXo5qhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTI1MTMxNDRmOGVhZmE4MzZjNGNkY2Y0Zjc1OGQxY2Ni NjcyMGEwHhcNMjUxMjE3MTcwMDMxWhcNMjUxMjE4MTcwMDMxWjAzMTEwLwYDVQQD Eyg1Yjg4MWE4Y2VkOTk5NmIzNTgyMmFmZjhiMDM2MTdkODE2ZWVlYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuJafRC3bFvazLyPSHlEvx+2eWjc EaZ8qzMhpPsiI9xdxwB7IfVFPoF49GiEED2an2V6lQjyen/FJl99a/ecNqh3drq/ Q7eo5RqjbTWgHV9zKECEC8/QEQ2Bm5gnW8QVpgmTDe1nSfAc8S9i47X0NJJ7Z3gT wnhpftmVLwVfSmW+N6nzx79EL0ccM6MPdFVkdHqo/ysYpL0L9ayN6XLo+tKcPGRv kNyjuw3/NTYEeaFtp6gojvatm7aTISgrPh3FQT3JhEqTgdkxe1sUtt5Gg79Vh/E0 1ZEy0QGz64WUykF5bV5PAXOlC1M07jYcItlgtgjSldskOPhaelvm33jDtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuIGoztmZazWCKv+LA2F9gW7ut4MB8GA1UdIwQY MBaAFHESUTFE+Or6g2xM3PT3WNHMtnIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wMzk3YzItNTlhYi00ZmQ0LWJkODYt YTIyZjQ1ZGViZDRlLzEvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8wMzk3YzItNTlhYi00ZmQ0LWJkODYtYTIyZjQ1ZGViZDRl LzEvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjwNn/fW 6OuntDwBdnNDFsWpIqbahk8am45jQzgHEuvm7cO6FdT3VuA13nVY/LPBEwCWNqFb x8K4Fxc2wJIZwLCHmd/BahAylD250MF1b9DT4ofz7KT42xFS+dl31BW91wjmbQ3o HRFfPoaWEosm4vgEPPAnoUYS+4f4PotjjefbunOlsddgXr4e2ZeBQA0sjXZpSFqD a+bAnl6Zrr1Os6nNW6FY7CHu7aMmdDHzER/yQTGEaA/sq8wP70D4ACW8LwupPWQX Y9Ze/X37i6bIMpPO08rBcQLe2s16JPMtQdhyrNUmIE/ILzMqpy82czRXfjdXVY1J Z8FPb+oL9Y+ecA== -----END CERTIFICATE-----Generated at Wed Dec 17 22:02:39 2025 by rpki-client