This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json) Hash identifier: TNTr2DTi/g8vojs3h5+duj5eBszcBmgE0yaiDQ2A6i4= Subject key identifier: 40:5E:36:CE:C0:78:4E:72:C1:30:B2:E4:61:FF:33:DF:F3:FE:28:F7 Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8 Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8 Certificate serial: 019B416D5F15267B3265045F5556B06A9CE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft Manifest number: 15AF Signing time: Sun 21 Dec 2025 15:00:45 +0000 Manifest this update: Sun 21 Dec 2025 15:00:45 +0000 Manifest next update: Mon 22 Dec 2025 15:00:45 +0000 Files and hashes: 1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: FZV1depOfd3c9vo7CVhrexfNZGc243v/6JV4LjoJp2k=) 2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:5f:15:26:7b:32:65:04:5f:55:56:b0:6a:9c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8 Validity Not Before: Dec 21 15:00:45 2025 GMT Not After : Dec 22 15:00:45 2025 GMT Subject: CN=405e36cec0784e72c130b2e461ff33dff3fe28f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:c1:1d:89:54:64:75:33:d9:ff:31:da:ad: 79:1c:02:e4:3f:56:20:e8:64:4c:6d:a0:49:cc:ba: 24:55:94:fd:0a:c9:4a:65:6c:c4:9f:d6:1e:6c:07: 80:d0:cf:0a:94:99:bd:d6:92:49:59:a9:e9:10:da: 8e:d6:02:69:82:f0:8e:63:5d:5d:58:0f:78:74:3b: f4:68:e8:29:32:8c:c2:2b:e6:86:8a:df:be:76:73: d1:81:03:f3:b7:37:1e:97:20:ae:30:d8:cf:d7:71: 73:d1:c2:59:67:16:59:de:2e:a0:1b:81:48:52:7d: 81:9d:65:03:99:38:6c:b8:e0:3d:48:5d:49:a3:73: 25:ef:fd:dd:bf:fa:2e:39:2b:18:ed:91:6a:36:28: a3:66:f3:99:1a:ab:10:7b:69:45:fb:73:57:c2:ad: 1b:04:d5:ed:1b:d2:66:ef:e7:be:9c:f9:ab:36:b7: 09:0c:e9:9b:57:d5:b5:5b:07:8d:59:e9:0f:9b:61: ba:5f:29:ff:ab:aa:86:5a:0c:48:b2:aa:e7:83:6d: 21:c9:f3:20:c5:4b:ec:0a:01:be:24:ef:6a:c6:71: d4:69:71:30:7b:96:1f:1a:a2:d4:89:82:fe:3d:44: 3a:46:d0:4c:a4:11:6d:c6:52:7e:f8:4a:95:0f:69: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5E:36:CE:C0:78:4E:72:C1:30:B2:E4:61:FF:33:DF:F3:FE:28:F7 X509v3 Authority Key Identifier: keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2f:21:03:4a:0d:cd:8d:4d:29:16:42:c3:b5:f5:48:62:a6: 99:a6:77:24:fe:59:61:d4:7f:38:24:12:ee:1f:f1:92:b6:fd: a6:e3:ef:15:ef:a4:dd:fd:63:2d:32:0e:4f:dd:c9:fb:9e:12: 27:e2:6e:fc:1b:e3:21:55:de:85:23:ff:2a:75:6a:fb:3a:44: 06:41:22:22:72:a8:fa:88:6d:3f:90:d6:da:9a:42:00:5e:70: 07:15:ae:d7:92:c9:8a:af:02:2c:fc:5c:5b:a7:1a:d6:95:e0: 21:2c:a9:91:fb:5c:46:13:d6:2f:82:b1:f9:33:3a:9f:8e:f1: 96:5c:5a:b6:f1:27:67:5b:eb:e9:97:20:ca:76:67:a4:17:c0: ea:f7:bf:56:04:b4:7d:60:de:95:fa:f8:f3:6d:a0:9b:fd:ca: 93:eb:46:de:b2:b7:bb:35:0a:9d:a5:ea:36:45:e8:d9:ab:ff: 10:a7:08:f7:73:02:6b:a8:bb:ad:7d:3d:9a:f7:f2:3d:f8:13: fc:be:39:bf:14:af:03:78:36:fd:96:6d:22:ab:33:83:e4:d3: e2:1b:49:6f:68:a0:c2:ac:e8:39:e2:62:18:7f:90:da:4c:0a: 42:f2:35:47:33:06:85:b6:54:ca:2e:f7:83:0c:ad:5b:a1:06: 2e:57:90:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbV8VJnsyZQRfVVawapzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MThiODljN2RjZTJiNWVkYzA1NTgxNTE2Y2ZjMTlkN2Ez MTc0ZTgwHhcNMjUxMjIxMTUwMDQ1WhcNMjUxMjIyMTUwMDQ1WjAzMTEwLwYDVQQD Eyg0MDVlMzZjZWMwNzg0ZTcyYzEzMGIyZTQ2MWZmMzNkZmYzZmUyOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz3BHYlUZHUz2f8x2q15HALkP1Yg 6GRMbaBJzLokVZT9CslKZWzEn9YebAeA0M8KlJm91pJJWanpENqO1gJpgvCOY11d WA94dDv0aOgpMozCK+aGit++dnPRgQPztzcelyCuMNjP13Fz0cJZZxZZ3i6gG4FI Un2BnWUDmThsuOA9SF1Jo3Ml7/3dv/ouOSsY7ZFqNiijZvOZGqsQe2lF+3NXwq0b BNXtG9Jm7+e+nPmrNrcJDOmbV9W1WweNWekPm2G6Xyn/q6qGWgxIsqrng20hyfMg xUvsCgG+JO9qxnHUaXEwe5YfGqLUiYL+PUQ6RtBMpBFtxlJ++EqVD2kaTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBeNs7AeE5ywTCy5GH/M9/z/ij3MB8GA1UdIwQY MBaAFEUYuJx9zite3AVYFRbPwZ16MXToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEt MGY5MzdjY2YwMmUwLzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEtMGY5MzdjY2YwMmUw LzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYy8hA0oN zY1NKRZCw7X1SGKmmaZ3JP5ZYdR/OCQS7h/xkrb9puPvFe+k3f1jLTIOT93J+54S J+Ju/BvjIVXehSP/KnVq+zpEBkEiInKo+ohtP5DW2ppCAF5wBxWu15LJiq8CLPxc W6ca1pXgISypkftcRhPWL4Kx+TM6n47xllxatvEnZ1vr6ZcgynZnpBfA6ve/VgS0 fWDelfr4822gm/3Kk+tG3rK3uzUKnaXqNkXo2av/EKcI93MCa6i7rX09mvfyPfgT /L45vxSvA3g2/ZZtIqszg+TT4htJb2igwqzoOeJiGH+Q2kwKQvI1RzMGhbZUyi73 gwytW6EGLleQbg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:17:18 2025 by rpki-client