This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json) Hash identifier: ZATQTIZ6Q2Q1QMiHOH8SsWmnblY0SSevndofyslT07g= Subject key identifier: AF:C8:FF:2A:7D:5D:00:B0:24:42:78:B4:94:F9:A0:5F:32:E1:BE:65 Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd Certificate serial: 019B3F4818B5037182F4E2514B6F8E157D56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 05:00:47 +0000 Manifest this update: Sun 21 Dec 2025 05:00:47 +0000 Manifest next update: Mon 22 Dec 2025 05:00:47 +0000 Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: U/JgeO0KbbQ0SFDmsLqRZBjmuq2yfG9BE1J84N7tAO0=) 2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:18:b5:03:71:82:f4:e2:51:4b:6f:8e:15:7d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd Validity Not Before: Dec 21 05:00:47 2025 GMT Not After : Dec 22 05:00:47 2025 GMT Subject: CN=afc8ff2a7d5d00b0244278b494f9a05f32e1be65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:e1:19:b6:34:52:bf:8d:32:f0:6b:89:5a: c2:71:54:0d:14:a2:9e:f8:be:69:eb:a6:5f:ab:d2: f8:eb:e3:be:db:a2:87:7d:a7:ab:b3:c1:e4:0d:da: fb:b4:7a:97:80:d3:f9:6b:94:9a:93:cc:27:ff:8c: 89:d1:fa:8e:78:0a:09:99:af:d9:2e:22:c8:36:22: d3:0d:1b:50:84:3a:69:24:93:0d:39:43:d5:cb:ef: 82:76:19:c3:1c:a7:0d:7c:13:45:9c:88:b3:7d:7f: 32:7c:16:90:04:41:1b:e7:29:38:22:45:2b:d1:e5: f0:61:14:83:00:c3:21:a0:a8:f1:90:31:25:0b:5e: 8a:27:b5:c2:d2:0f:82:85:df:f2:37:17:eb:d9:59: e7:39:88:6d:73:a4:45:c6:f4:d7:cc:b4:9a:0f:d8: ea:0a:e7:dc:d1:d7:81:5b:a2:39:08:4e:6e:8c:2a: c1:a5:13:f2:48:6f:86:15:61:91:49:c5:6c:23:36: 5b:5a:b9:d4:ac:6f:c8:fa:21:25:8b:21:66:e0:90: f7:25:0b:1b:ae:01:56:b7:36:9b:94:68:0f:a5:ea: 82:1d:f3:88:ac:b7:07:b5:80:e0:19:ed:32:e7:33: c1:02:90:e2:46:42:38:da:a4:e1:f6:d6:9a:49:a5: 7e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C8:FF:2A:7D:5D:00:B0:24:42:78:B4:94:F9:A0:5F:32:E1:BE:65 X509v3 Authority Key Identifier: keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f8:c0:9e:16:d9:a7:ce:8c:4a:6e:11:58:c4:00:03:3a:d5: ab:cd:a2:97:c3:5a:ff:88:48:85:1c:a2:26:dd:63:57:50:fb: 9a:44:17:15:d8:ce:64:a3:b3:dd:87:5b:87:22:5c:b1:ca:c4: ca:4c:2d:9b:de:8c:30:ef:bc:8b:a3:a9:14:47:69:9c:dc:66: 5a:8b:ab:f2:bf:b2:b0:18:30:4a:fc:eb:53:4d:dc:14:12:6b: 44:30:b4:ea:fa:41:85:07:b7:2b:d1:44:2a:94:2e:f0:ee:b1: d9:78:e8:30:e7:b3:63:1a:aa:69:9b:cb:3e:a3:dc:8a:6e:cd: 41:eb:5a:ca:57:2e:71:19:41:1e:1c:24:51:26:64:0b:1a:da: 20:e7:b3:57:72:cf:2d:10:e4:f8:16:85:48:46:c8:20:8a:fe: 22:df:b3:e9:a0:7f:7c:9e:f0:be:b8:c2:c3:ad:79:f4:45:5d: 5b:6c:4b:12:b1:d5:7d:b5:27:64:45:b2:82:77:76:b6:2f:24: 05:1f:4d:71:7c:59:5c:51:6b:50:77:a3:0c:30:51:ff:bd:48: d7:b8:05:f4:c4:c5:3a:0b:de:5b:ab:40:fa:de:c0:ea:1a:1a: 5d:69:7d:f7:52:d5:81:16:6c:29:6b:47:38:f9:00:86:08:4c: 5d:58:94:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SBi1A3GC9OJRS2+OFX1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYzg1YzM3YWQyNTI3NGM3MTJjMjQ0NzNlMDc4YWRjZTcz MmMxZGQwHhcNMjUxMjIxMDUwMDQ3WhcNMjUxMjIyMDUwMDQ3WjAzMTEwLwYDVQQD EyhhZmM4ZmYyYTdkNWQwMGIwMjQ0Mjc4YjQ5NGY5YTA1ZjMyZTFiZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/3hGbY0Ur+NMvBriVrCcVQNFKKe +L5p66Zfq9L46+O+26KHfaers8HkDdr7tHqXgNP5a5Sak8wn/4yJ0fqOeAoJma/Z LiLINiLTDRtQhDppJJMNOUPVy++CdhnDHKcNfBNFnIizfX8yfBaQBEEb5yk4IkUr 0eXwYRSDAMMhoKjxkDElC16KJ7XC0g+Chd/yNxfr2VnnOYhtc6RFxvTXzLSaD9jq Cufc0deBW6I5CE5ujCrBpRPySG+GFWGRScVsIzZbWrnUrG/I+iEliyFm4JD3JQsb rgFWtzablGgPpeqCHfOIrLcHtYDgGe0y5zPBApDiRkI42qTh9taaSaV+FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/I/yp9XQCwJEJ4tJT5oF8y4b5lMB8GA1UdIwQY MBaAFOPIXDetJSdMcSwkRz4HitznMsHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUt ZGNlM2ZhM2ZiYWU5LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUtZGNlM2ZhM2ZiYWU5 LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPjAnhbZ p86MSm4RWMQAAzrVq82il8Na/4hIhRyiJt1jV1D7mkQXFdjOZKOz3YdbhyJcscrE ykwtm96MMO+8i6OpFEdpnNxmWour8r+ysBgwSvzrU03cFBJrRDC06vpBhQe3K9FE KpQu8O6x2XjoMOezYxqqaZvLPqPcim7NQetaylcucRlBHhwkUSZkCxraIOezV3LP LRDk+BaFSEbIIIr+It+z6aB/fJ7wvrjCw6159EVdW2xLErHVfbUnZEWygnd2ti8k BR9NcXxZXFFrUHejDDBR/71I17gF9MTFOgveW6tA+t7A6hoaXWl991LVgRZsKWtH OPkAhghMXViUEA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:46:14 2025 by rpki-client