This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json) Hash identifier: Gr9bw+GD/Q6XgIpB3C6ARGlFoCKHWgFWfM2tvfgu3Ms= Subject key identifier: 57:57:95:75:5D:A9:D3:BF:B6:67:46:96:39:80:D5:67:7C:E6:14:C6 Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47 Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847 Certificate serial: 019B435C402AF9F5EE9AC9BAA4CAFF7AF5F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft Manifest number: 0C80 Signing time: Mon 22 Dec 2025 00:01:17 +0000 Manifest this update: Mon 22 Dec 2025 00:01:17 +0000 Manifest next update: Tue 23 Dec 2025 00:01:17 +0000 Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: sis+UroqJJlCZhqTp14VTQ/C3aAXfFGkalAeJhhpwpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:40:2a:f9:f5:ee:9a:c9:ba:a4:ca:ff:7a:f5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847 Validity Not Before: Dec 22 00:01:17 2025 GMT Not After : Dec 23 00:01:17 2025 GMT Subject: CN=575795755da9d3bfb66746963980d5677ce614c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:ec:56:b4:63:b5:f8:1c:55:46:27:6d:d1: 20:fc:4d:18:a7:42:bc:69:c6:0f:73:c2:cb:b0:59: 40:d5:a8:53:1d:90:e5:21:19:7c:cc:d5:8f:2a:82: d1:89:4e:b1:64:06:8a:dd:5a:80:a5:d0:21:52:54: 76:47:94:bf:c3:4b:94:6a:32:33:aa:1a:aa:45:58: 33:69:93:a6:92:64:96:fe:2e:c4:03:18:37:20:49: 70:72:c7:21:2e:2a:19:9a:51:6f:6b:2e:f4:4b:d2: fe:b1:df:cb:e4:78:1b:7c:be:8c:60:25:f0:ee:4f: 7f:a3:fd:37:dc:d9:1e:96:ad:0a:28:2d:81:94:f8: 79:e2:f4:3b:ba:eb:8f:3a:35:8b:f0:1b:16:e7:c4: ce:76:72:7c:ea:21:b0:cc:06:af:25:3a:76:e0:6b: 9e:c8:c7:3e:b0:5e:34:a5:9c:a2:26:22:a5:a4:17: bc:cb:af:1b:87:cf:9a:89:11:d0:d1:84:da:19:91: 3e:02:d2:33:2b:af:3e:10:f0:be:d8:57:84:f5:cd: 69:d8:fa:b4:12:02:18:a4:61:f2:bd:20:24:8d:53: 25:45:04:f7:fc:62:82:8d:c3:83:e9:92:00:39:53: c8:20:19:2c:ef:b0:74:2a:75:37:9b:62:8a:02:f4: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:57:95:75:5D:A9:D3:BF:B6:67:46:96:39:80:D5:67:7C:E6:14:C6 X509v3 Authority Key Identifier: keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:72:a8:d7:11:c0:97:83:63:f2:68:6b:91:a7:e5:f7:cd:5b: 52:bf:5e:b5:32:d9:da:df:ff:ee:84:4d:0e:4f:f5:78:76:74: 7d:57:77:38:89:ef:14:ce:cc:bc:7b:af:aa:4d:8c:72:34:40: d1:eb:7e:c4:6d:46:8c:eb:85:9d:2b:00:fa:e9:72:c9:e9:a0: 7c:6c:e8:64:34:15:fa:ca:c3:35:cf:b4:f8:5d:1d:9a:a6:aa: 3f:05:0d:1c:ae:31:02:41:0b:5a:12:cf:7a:72:84:95:6c:46: 8d:a9:12:4a:2b:0e:c2:f4:e8:9b:f5:5c:c1:45:70:d9:6f:47: 38:ff:e7:12:4f:ed:3c:9d:26:70:40:05:a5:69:a2:6c:34:6b: 8c:74:0f:10:6d:f4:ed:90:24:56:d5:06:f5:51:e4:6b:77:ab: 00:8b:4a:e9:58:f2:29:f6:ec:6d:e1:fc:94:be:e0:f7:60:56: af:ea:7a:01:7a:56:0b:13:5c:ea:31:a7:00:f7:87:6e:99:83: 82:66:7f:19:69:b0:93:dd:36:b9:ef:5e:cd:52:36:40:7c:f0: 2a:18:17:28:2d:d0:af:68:93:bc:53:0b:a9:49:9b:93:85:aa: 7b:d3:65:df:7f:3f:e4:49:62:c8:b9:e6:fa:e4:1e:49:f3:90: ad:15:68:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXEAq+fXumsm6pMr/evXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZGVlYTU2MjZkOWU4MzI2NDBmMWVjZGY3ZjhiYjcyNTcy NDA4NDcwHhcNMjUxMjIyMDAwMTE3WhcNMjUxMjIzMDAwMTE3WjAzMTEwLwYDVQQD Eyg1NzU3OTU3NTVkYTlkM2JmYjY2NzQ2OTYzOTgwZDU2NzdjZTYxNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFPsVrRjtfgcVUYnbdEg/E0Yp0K8 acYPc8LLsFlA1ahTHZDlIRl8zNWPKoLRiU6xZAaK3VqApdAhUlR2R5S/w0uUajIz qhqqRVgzaZOmkmSW/i7EAxg3IElwcschLioZmlFvay70S9L+sd/L5HgbfL6MYCXw 7k9/o/033Nkelq0KKC2BlPh54vQ7uuuPOjWL8BsW58TOdnJ86iGwzAavJTp24Gue yMc+sF40pZyiJiKlpBe8y68bh8+aiRHQ0YTaGZE+AtIzK68+EPC+2FeE9c1p2Pq0 EgIYpGHyvSAkjVMlRQT3/GKCjcOD6ZIAOVPIIBks77B0KnU3m2KKAvQVZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdXlXVdqdO/tmdGljmA1Wd85hTGMB8GA1UdIwQY MBaAFJTe6lYm2egyZA8ezff4u3JXJAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNDQ3ZGQtOGRjNC00MDVkLTljMGIt NmZmYzVkOWUwZmVkLzEvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zNDQ3ZGQtOGRjNC00MDVkLTljMGItNmZmYzVkOWUwZmVk LzEvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHKo1xHA l4Nj8mhrkafl981bUr9etTLZ2t//7oRNDk/1eHZ0fVd3OInvFM7MvHuvqk2McjRA 0et+xG1GjOuFnSsA+ulyyemgfGzoZDQV+srDNc+0+F0dmqaqPwUNHK4xAkELWhLP enKElWxGjakSSisOwvTom/VcwUVw2W9HOP/nEk/tPJ0mcEAFpWmibDRrjHQPEG30 7ZAkVtUG9VHka3erAItK6VjyKfbsbeH8lL7g92BWr+p6AXpWCxNc6jGnAPeHbpmD gmZ/GWmwk902ue9ezVI2QHzwKhgXKC3Qr2iTvFMLqUmbk4Wqe9Nl338/5EliyLnm +uQeSfOQrRVoaA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:32:59 2025 by rpki-client