This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json) Hash identifier: UmPc7f1k4/0JFadhk7GgDmCmSSsLAvDtQC+ADd7k6qo= Subject key identifier: 3C:C2:58:18:F5:44:73:9D:D3:5A:03:40:5C:31:C5:45:E3:6D:07:BB Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19 Certificate issuer: /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19 Certificate serial: 019B3F11BB591FD070E13EC6638A37D772E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft Manifest number: 0C19 Signing time: Sun 21 Dec 2025 04:01:25 +0000 Manifest this update: Sun 21 Dec 2025 04:01:25 +0000 Manifest next update: Mon 22 Dec 2025 04:01:25 +0000 Files and hashes: 1: 3N9UYLo0xUDRDj5u2ZGsggXWyM8.roa (hash: GzegVU/Yobk+zlKS0VWYX3GqVecmGnXDmHTuncP48uU=) 2: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: rlZ0wN9eIjJwQhcM2p/GvFOM+P7zG3wjR2KEqh8c4mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:bb:59:1f:d0:70:e1:3e:c6:63:8a:37:d7:72:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19 Validity Not Before: Dec 21 04:01:25 2025 GMT Not After : Dec 22 04:01:25 2025 GMT Subject: CN=3cc25818f544739dd35a03405c31c545e36d07bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:66:04:76:37:df:05:0f:56:93:0a:6f:eb: f2:2e:93:68:05:53:e8:a3:33:81:e0:8e:bb:bc:71: ee:8e:12:93:ca:d2:1b:3a:d6:52:c3:7d:e4:93:45: b0:b3:24:05:7f:95:cd:14:c3:39:82:95:04:02:e5: 77:9a:a0:83:6c:9c:e8:f3:e1:4e:ca:5e:73:05:76: bd:71:4e:ef:3e:65:df:2a:f8:cc:81:9b:e2:b1:7f: 23:7d:df:08:e0:de:4a:63:e1:96:01:00:ef:76:50: 23:ac:48:fa:b6:88:ad:c6:d3:c3:2c:75:03:b4:5a: 54:9e:58:52:ee:a8:de:c5:43:cf:a2:cd:57:ad:4d: ea:1b:7e:12:b1:e6:20:00:7b:46:af:c3:23:f0:b7: 09:18:d8:43:f2:4d:65:e7:60:86:e8:d9:96:ea:17: ce:62:e7:18:74:86:c3:e0:ab:a3:0a:fb:8a:50:1c: bd:e8:1c:de:d8:d7:73:a7:c6:1f:2c:98:52:79:b6: c7:76:0a:e5:e9:29:4d:ed:28:39:98:d6:16:4b:77: 13:94:f4:85:e8:47:e2:3b:48:4b:c2:ea:a5:d7:15: c0:78:48:dd:e4:ae:90:30:0d:52:20:a0:7f:02:43: 29:f0:3b:7f:64:5c:15:65:72:12:24:81:72:4c:b0: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C2:58:18:F5:44:73:9D:D3:5A:03:40:5C:31:C5:45:E3:6D:07:BB X509v3 Authority Key Identifier: keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ab:07:a3:9d:16:ee:e5:8f:f6:91:71:68:e5:04:50:40:88: c1:86:b5:5a:57:13:80:b0:4a:49:73:ea:09:15:96:17:ed:2b: cb:e6:ad:70:18:fb:99:29:99:a5:e7:93:af:54:6f:6f:4d:1c: a9:18:13:2c:29:3d:06:40:ce:38:51:73:7a:1a:dc:21:f8:1a: 2c:3b:4b:87:99:d4:59:3d:62:31:97:3c:da:87:1b:52:7d:d8: 71:68:c0:0c:51:fe:ff:3a:13:5c:8a:04:89:49:47:5e:4b:32: 47:91:43:8b:95:fb:30:b4:b8:b9:64:d8:68:47:f9:4f:8e:a8: 2d:bf:da:4c:fe:9a:62:c8:6f:04:44:ba:f0:22:97:73:ae:cd: d5:c4:64:b0:6a:75:1c:d6:ab:b0:3f:ff:52:c2:1d:c9:6b:74: e2:e8:4d:7a:91:a1:1a:09:a3:70:d8:07:58:b7:29:24:51:3a: b1:0e:13:84:04:de:82:36:96:cb:75:cc:a4:c3:56:41:e8:76: f4:5f:56:60:19:f4:3b:d2:6b:31:e9:6a:49:ee:c7:ab:7a:2e: b3:e1:4f:13:ab:75:e8:2d:00:ad:ac:32:a6:9b:43:94:45:72: d8:31:67:02:75:4e:95:8a:cf:ed:2d:08:f8:bf:df:75:2b:72: 67:8f:9e:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EbtZH9Bw4T7GY4o313LjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZjAxNzcxZDFjYzhmZDExNGM0NmE2MTYyMDZhYTRjNTlk YmRjMTkwHhcNMjUxMjIxMDQwMTI1WhcNMjUxMjIyMDQwMTI1WjAzMTEwLwYDVQQD EygzY2MyNTgxOGY1NDQ3MzlkZDM1YTAzNDA1YzMxYzU0NWUzNmQwN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6lmBHY33wUPVpMKb+vyLpNoBVPo ozOB4I67vHHujhKTytIbOtZSw33kk0WwsyQFf5XNFMM5gpUEAuV3mqCDbJzo8+FO yl5zBXa9cU7vPmXfKvjMgZvisX8jfd8I4N5KY+GWAQDvdlAjrEj6toitxtPDLHUD tFpUnlhS7qjexUPPos1XrU3qG34SseYgAHtGr8Mj8LcJGNhD8k1l52CG6NmW6hfO YucYdIbD4KujCvuKUBy96Bze2Ndzp8YfLJhSebbHdgrl6SlN7Sg5mNYWS3cTlPSF 6EfiO0hLwuql1xXAeEjd5K6QMA1SIKB/AkMp8Dt/ZFwVZXISJIFyTLDwzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzCWBj1RHOd01oDQFwxxUXjbQe7MB8GA1UdIwQY MBaAFEbwF3HRzI/RFMRqYWIGqkxZ29wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnZBWGNkSE1qOUVVeEdwaFlnYXFURm5iM0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZTU3YTMtYTE4MS00NWRmLWI0YWUt MzE2ZjZkYWJmZmJmLzEvUnZBWGNkSE1qOUVVeEdwaFlnYXFURm5iM0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC83ZTU3YTMtYTE4MS00NWRmLWI0YWUtMzE2ZjZkYWJmZmJm LzEvUnZBWGNkSE1qOUVVeEdwaFlnYXFURm5iM0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6sHo50W 7uWP9pFxaOUEUECIwYa1WlcTgLBKSXPqCRWWF+0ry+atcBj7mSmZpeeTr1Rvb00c qRgTLCk9BkDOOFFzehrcIfgaLDtLh5nUWT1iMZc82ocbUn3YcWjADFH+/zoTXIoE iUlHXksyR5FDi5X7MLS4uWTYaEf5T46oLb/aTP6aYshvBES68CKXc67N1cRksGp1 HNarsD//UsIdyWt04uhNepGhGgmjcNgHWLcpJFE6sQ4ThATegjaWy3XMpMNWQeh2 9F9WYBn0O9JrMelqSe7Hq3ous+FPE6t16C0ArawypptDlEVy2DFnAnVOlYrP7S0I +L/fdStyZ4+ePA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:26 2025 by rpki-client