This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft File: 45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json) Hash identifier: 4aTTe6pzmx8RzbAI//RdF4+wnW/ToZx7nBwRCJ6KNe0= Subject key identifier: D2:66:AA:1D:0B:C5:FD:7C:2D:E0:19:F7:17:FE:D7:7C:9F:2C:05:42 Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43 Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943 Certificate serial: 019B3EDAA19A2597195610CBFABFE20C04B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:01:14 +0000 Manifest this update: Sun 21 Dec 2025 03:01:14 +0000 Manifest next update: Mon 22 Dec 2025 03:01:14 +0000 Files and hashes: 1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: W1fD/U6qsL40JlJGk+qcbW8wIGnkQpshWmaGakXz+ek=) 2: R7JL9FH-2QrwFM5epJeXae1YV-E.roa (hash: Z+kLiV+Tl4XxDqngd/q42hXqK5SlkiW5r2j2WXBsESY=) 3: iDFuGk6oYIqLw3GPihSSyyo3kF8.roa (hash: cwnT8XNunIwbvLFN3GthMjNOhsdwtyQiIir5eoCVPD0=) 4: o9F14TmJz-3o4btxFTmUNxIaMVQ.roa (hash: htBHVS9bsjwqqv6NPJnNf70ZDfm1OC4b9PUSs5jzuTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a1:9a:25:97:19:56:10:cb:fa:bf:e2:0c:04:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943 Validity Not Before: Dec 21 03:01:14 2025 GMT Not After : Dec 22 03:01:14 2025 GMT Subject: CN=d266aa1d0bc5fd7c2de019f717fed77c9f2c0542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:17:89:72:1b:bc:c3:68:58:1e:bc:22:b2: 76:4e:ec:e3:de:8c:41:3a:df:1f:79:47:55:bc:52: f7:0e:cb:1f:40:d3:1e:e9:3d:33:6f:e9:24:4b:10: 2b:51:35:22:11:1e:e3:75:5e:84:5a:fd:57:36:e2: 93:96:4e:6c:01:e2:96:60:0a:1a:e7:18:85:d3:40: 75:e5:50:c4:62:54:81:f7:45:99:fc:dc:57:91:13: 51:52:dd:96:97:0b:75:0e:8c:13:da:19:8a:23:e6: 28:d2:2b:e9:54:ff:bd:6b:cc:39:69:77:a6:3e:7c: bb:2c:55:0e:4d:ec:22:6f:e3:a0:be:8e:e4:68:98: b5:79:ef:e7:a7:c5:7d:72:d0:63:f4:a1:6f:c3:a5: 0e:28:3e:1b:eb:8d:8d:2d:88:2c:84:28:cd:28:56: fa:f1:ea:c6:14:7f:41:e7:cb:b8:36:63:7e:59:a6: c0:6c:db:91:92:7a:15:4b:c3:06:85:34:07:6f:59: 7c:71:7c:2e:15:28:41:b4:f4:81:1a:c7:9b:35:d2: 72:d0:97:1b:6f:f0:3d:65:36:0d:4a:9a:fb:08:0e: 48:92:52:6f:bc:eb:23:b4:73:57:20:4e:91:a5:17: 14:52:69:cb:88:09:f2:a7:ea:b0:9c:89:d5:b0:2e: 12:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:66:AA:1D:0B:C5:FD:7C:2D:E0:19:F7:17:FE:D7:7C:9F:2C:05:42 X509v3 Authority Key Identifier: keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1a:d8:1a:88:ce:93:42:87:aa:8f:83:b1:d9:4d:31:5f:b3: 25:75:c8:fb:fc:14:c1:5a:2a:fe:49:71:d6:ee:65:74:13:fc: c3:4c:22:cb:84:94:6d:ed:86:36:74:cb:9b:08:cb:4f:ca:91: e6:4e:5d:64:23:c4:13:ee:60:10:ef:7f:60:6d:3b:54:04:18: 87:66:aa:f5:0d:ee:66:e1:e0:4c:28:a9:93:f9:49:e1:61:23: 3d:a1:34:ee:69:93:31:8f:be:ba:82:09:49:56:52:0a:73:0e: 4c:ff:a8:75:9c:7f:15:7e:8a:2f:80:39:82:8f:b6:69:84:b3: 0e:a2:84:79:ee:c7:41:49:e4:b1:1a:a7:fc:7d:36:25:a5:00: 9d:e1:98:7d:cc:6b:e8:75:18:18:fc:b9:93:43:80:41:a1:01: 79:d5:4b:0b:f0:a7:b1:76:ea:13:6a:07:f1:b6:94:87:d1:a0: 9d:43:29:a9:3b:2e:5c:27:41:ad:60:5e:de:50:58:16:64:72: 1f:c6:f2:be:5f:6d:8f:43:be:8b:dc:56:be:9b:4d:7e:36:76: 9e:d2:62:0d:d5:80:79:07:79:6a:9e:c0:ee:fc:7b:a6:cb:5c: f3:bc:4e:e6:a5:b1:31:1f:d0:bb:cc:73:22:67:c4:74:3f:fd: b6:51:ad:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qGaJZcZVhDL+r/iDAS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOTBmMmVlMGE3MGJjYWVmZTAxOTVhM2Q4YjM3N2QzNDI5 N2E5NDMwHhcNMjUxMjIxMDMwMTE0WhcNMjUxMjIyMDMwMTE0WjAzMTEwLwYDVQQD EyhkMjY2YWExZDBiYzVmZDdjMmRlMDE5ZjcxN2ZlZDc3YzlmMmMwNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFIXiXIbvMNoWB68IrJ2Tuzj3oxB Ot8feUdVvFL3DssfQNMe6T0zb+kkSxArUTUiER7jdV6EWv1XNuKTlk5sAeKWYAoa 5xiF00B15VDEYlSB90WZ/NxXkRNRUt2Wlwt1DowT2hmKI+Yo0ivpVP+9a8w5aXem Pny7LFUOTewib+Ogvo7kaJi1ee/np8V9ctBj9KFvw6UOKD4b642NLYgshCjNKFb6 8erGFH9B58u4NmN+WabAbNuRknoVS8MGhTQHb1l8cXwuFShBtPSBGsebNdJy0Jcb b/A9ZTYNSpr7CA5IklJvvOsjtHNXIE6RpRcUUmnLiAnyp+qwnInVsC4StQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJmqh0Lxf18LeAZ9xf+13yfLAVCMB8GA1UdIwQY MBaAFOOQ8u4KcLyu/gGVo9izd9NCl6lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmIt M2ViOTEzNGVjNzlkLzEvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmItM2ViOTEzNGVjNzlk LzEvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhrYGojO k0KHqo+DsdlNMV+zJXXI+/wUwVoq/klx1u5ldBP8w0wiy4SUbe2GNnTLmwjLT8qR 5k5dZCPEE+5gEO9/YG07VAQYh2aq9Q3uZuHgTCipk/lJ4WEjPaE07mmTMY++uoIJ SVZSCnMOTP+odZx/FX6KL4A5go+2aYSzDqKEee7HQUnksRqn/H02JaUAneGYfcxr 6HUYGPy5k0OAQaEBedVLC/CnsXbqE2oH8baUh9GgnUMpqTsuXCdBrWBe3lBYFmRy H8byvl9tj0O+i9xWvptNfjZ2ntJiDdWAeQd5ap7A7vx7pstc87xO5qWxMR/Qu8xz ImfEdD/9tlGtFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:49 2025 by rpki-client