This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft File: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json) Hash identifier: KDWdNMvKcKgE9CgD4B6H/eq5Cnr7l9PH51ZwEmrkdzk= Subject key identifier: 9C:23:91:A7:95:41:24:8C:80:88:15:DB:C7:6C:3C:91:11:3F:83:94 Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86 Certificate issuer: /CN=e3de21b0636c614ebf43664798012afd56c5ee86 Certificate serial: 019B717E7FC60B83E5188B34915B55DD32B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 23:01:14 +0000 Manifest this update: Tue 30 Dec 2025 23:01:14 +0000 Manifest next update: Wed 31 Dec 2025 23:01:14 +0000 Files and hashes: 1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: k7opC0AlxZVrvMyGJ2AT1PMMUFZ67QG8Qxezq1kopo8=) 2: iWeqg2fM-bOr0nrPrGbQuhoU9AI.roa (hash: FKxgaCA0gKFSYvzHrPdwz/du8IpMEpojl7Ooe7Yry+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:7f:c6:0b:83:e5:18:8b:34:91:5b:55:dd:32:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86 Validity Not Before: Dec 30 23:01:14 2025 GMT Not After : Dec 31 23:01:14 2025 GMT Subject: CN=9c2391a79541248c808815dbc76c3c91113f8394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:86:36:dc:06:fd:88:5e:3e:72:c0:9c:18: cc:15:75:f7:b1:58:ae:26:5a:a2:17:4d:20:64:3f: ae:c4:38:f6:56:45:d5:05:b6:29:31:41:0c:a0:8d: 3f:5f:96:a1:ea:94:27:6a:cd:cf:b6:21:9a:a1:25: 3b:9b:7f:2f:cc:f7:d1:7b:0c:35:5f:f0:21:35:55: 5c:46:52:8d:ba:c6:b9:52:55:00:0c:43:0e:21:7a: 93:8c:d4:47:32:c5:55:2b:cd:8c:50:dc:13:17:94: a1:68:11:1c:01:c8:7b:77:4f:04:a3:47:aa:b5:9f: fd:f8:a2:f3:05:41:97:9f:23:2b:b3:51:0d:78:4b: bc:3a:77:f4:b6:c1:e4:01:b7:d7:d1:0f:8e:05:2a: f7:57:7d:d8:d1:c7:a8:6f:e3:d3:5c:04:bb:da:af: a9:6d:42:c1:cf:0d:9f:4d:f2:e7:ec:cb:bb:3f:74: 33:3e:e9:4d:4c:55:19:4f:6b:f3:d7:ee:fd:4b:2c: ac:81:b3:0f:30:c0:27:46:31:58:6e:df:eb:bb:5f: 24:71:a6:73:5c:b6:ef:67:dd:e2:9d:58:5e:1e:b3: 1f:46:2c:b4:09:78:3d:fd:a9:cf:03:1d:ab:68:4d: 41:49:8d:ee:43:32:f1:25:4f:d8:67:b9:14:5f:4a: bd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:23:91:A7:95:41:24:8C:80:88:15:DB:C7:6C:3C:91:11:3F:83:94 X509v3 Authority Key Identifier: keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:44:2e:d8:fa:68:0f:6a:4a:b4:09:08:09:39:ca:c9:c2:b4: 6e:f7:0c:78:53:f0:a2:4b:b5:45:2a:e1:af:97:f8:72:68:c1: 8b:48:9f:3a:cb:29:7c:91:3e:5a:61:59:48:3e:6c:93:fb:c1: ad:f6:77:c6:46:d6:95:5b:0f:75:be:8f:04:06:e6:05:1e:de: 58:35:b3:ff:04:0b:63:9c:a5:29:73:07:c5:5e:0c:29:9f:b9: 8f:13:11:9d:3d:6c:55:7f:13:bd:f4:ef:52:96:b6:73:b2:9f: c5:41:f1:c9:ef:2a:75:13:c8:59:63:43:32:79:cd:78:b0:17: c8:ba:b4:75:24:a1:09:98:ce:1d:5a:b5:7a:3a:8d:78:5f:79: 38:b0:1e:7f:9a:1b:24:3f:41:41:02:ea:f1:a4:c0:21:bd:cf: ab:1b:84:3d:5d:8d:17:8f:f8:70:0b:79:9a:b4:10:03:37:89: 30:54:e7:77:f5:10:39:3b:bf:d5:df:d3:8d:ba:44:63:5c:b0: 2b:1c:ac:84:8a:52:10:c9:19:7e:e0:d3:48:fe:7c:a6:6b:f0: b0:74:53:ec:85:f1:17:51:37:fd:cd:3b:26:06:42:cd:37:0c: 94:3f:1b:dc:98:3c:11:1d:1d:cb:f2:49:9f:24:59:d9:85:6a: 32:2a:8f:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfn/GC4PlGIs0kVtV3TKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZGUyMWIwNjM2YzYxNGViZjQzNjY0Nzk4MDEyYWZkNTZj NWVlODYwHhcNMjUxMjMwMjMwMTE0WhcNMjUxMjMxMjMwMTE0WjAzMTEwLwYDVQQD Eyg5YzIzOTFhNzk1NDEyNDhjODA4ODE1ZGJjNzZjM2M5MTExM2Y4Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HuGNtwG/YhePnLAnBjMFXX3sViu JlqiF00gZD+uxDj2VkXVBbYpMUEMoI0/X5ah6pQnas3PtiGaoSU7m38vzPfReww1 X/AhNVVcRlKNusa5UlUADEMOIXqTjNRHMsVVK82MUNwTF5ShaBEcAch7d08Eo0eq tZ/9+KLzBUGXnyMrs1ENeEu8Onf0tsHkAbfX0Q+OBSr3V33Y0ceob+PTXAS72q+p bULBzw2fTfLn7Mu7P3QzPulNTFUZT2vz1+79SyysgbMPMMAnRjFYbt/ru18kcaZz XLbvZ93inVheHrMfRiy0CXg9/anPAx2raE1BSY3uQzLxJU/YZ7kUX0q96QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwjkaeVQSSMgIgV28dsPJERP4OUMB8GA1UdIwQY MBaAFOPeIbBjbGFOv0NmR5gBKv1Wxe6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYt YjgyNTk2N2E3NTdhLzEvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYtYjgyNTk2N2E3NTdh LzEvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUQu2Ppo D2pKtAkICTnKycK0bvcMeFPwoku1RSrhr5f4cmjBi0ifOsspfJE+WmFZSD5sk/vB rfZ3xkbWlVsPdb6PBAbmBR7eWDWz/wQLY5ylKXMHxV4MKZ+5jxMRnT1sVX8TvfTv Upa2c7KfxUHxye8qdRPIWWNDMnnNeLAXyLq0dSShCZjOHVq1ejqNeF95OLAef5ob JD9BQQLq8aTAIb3PqxuEPV2NF4/4cAt5mrQQAzeJMFTnd/UQOTu/1d/TjbpEY1yw KxyshIpSEMkZfuDTSP58pmvwsHRT7IXxF1E3/c07JgZCzTcMlD8b3Jg8ER0dy/JJ nyRZ2YVqMiqPxQ== -----END CERTIFICATE-----Generated at Wed Dec 31 05:56:44 2025 by rpki-client