This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json) Hash identifier: uHZe+pBioQos2309VPxZ1BxTZW4jLHX95ntWQRSxaxc= Subject key identifier: C8:F2:4B:92:9F:B3:3B:2E:09:FD:CE:CB:89:53:61:FB:25:80:BA:25 Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29 Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29 Certificate serial: 019B4A02C1257DCD9A5528C00CA57F8E531D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft Manifest number: 09F1 Signing time: Tue 23 Dec 2025 07:00:53 +0000 Manifest this update: Tue 23 Dec 2025 07:00:53 +0000 Manifest next update: Wed 24 Dec 2025 07:00:53 +0000 Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: UZ5YGviHYZqtllYIhkPqpwL01EczWfMZAQ0JiW6ZRqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:c1:25:7d:cd:9a:55:28:c0:0c:a5:7f:8e:53:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29 Validity Not Before: Dec 23 07:00:53 2025 GMT Not After : Dec 24 07:00:53 2025 GMT Subject: CN=c8f24b929fb33b2e09fdcecb895361fb2580ba25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:55:ae:75:02:22:03:cc:4b:c8:b9:1b:c4: 39:70:74:62:b4:29:16:eb:59:81:ad:36:9c:11:7b: e6:a8:b2:0f:f6:33:ff:89:31:f3:24:8a:f3:d0:e4: 8d:b0:5e:57:80:4c:a0:8f:46:54:70:1d:5d:e8:aa: f9:cb:5b:09:3a:91:e7:30:12:f2:f2:be:b9:5e:c9: 64:62:9b:9b:c7:ca:f9:b5:c1:c0:0e:0b:8d:29:4b: 4c:14:f2:6d:ae:06:2e:42:10:47:d5:bf:3a:5e:27: fc:85:17:74:38:e6:83:95:d9:13:da:7f:a2:27:b0: c0:15:c2:c8:73:9d:b1:8e:7d:00:b5:d5:2b:33:a7: 24:c3:bc:33:e9:cd:b3:12:df:04:e5:cb:ab:0a:14: eb:36:f6:68:2a:c7:c4:fa:db:52:4b:2d:19:c2:d1: fd:40:5f:31:99:01:d7:ff:1c:df:77:7b:81:32:63: fb:45:ef:69:ce:bf:26:0d:79:7d:e1:4d:e5:69:db: 64:72:9c:6e:60:13:f8:43:9c:14:8f:a4:54:9a:32: 4a:32:4d:39:21:44:36:de:7a:8a:7e:ef:5a:5f:a2: a1:a8:1a:e8:bc:de:8f:27:5b:f6:c1:25:64:bc:e0: c1:9f:52:1e:d5:9f:cc:89:85:f1:2d:8d:4e:6a:0a: b9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F2:4B:92:9F:B3:3B:2E:09:FD:CE:CB:89:53:61:FB:25:80:BA:25 X509v3 Authority Key Identifier: keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:28:9d:ac:8f:35:25:5c:80:2d:26:69:7c:c1:0a:08:a5:63: 3f:78:9b:51:6b:75:c0:36:ea:80:5a:dc:e7:10:c8:40:86:36: 51:eb:66:3d:dc:fa:62:24:d4:f0:08:6f:6b:74:b4:a7:af:67: 32:22:2f:fe:22:d3:cd:ff:3a:d4:39:b0:64:7b:10:98:50:74: 07:f9:91:0b:ee:e7:7f:ed:83:e1:ad:5a:09:61:6b:de:a3:46: 5f:0c:17:66:35:77:5b:88:c5:22:48:ac:e0:6b:bb:31:9c:ba: 80:bd:88:47:30:75:95:dd:78:1f:bd:b8:5b:70:72:a2:26:29: 0d:e4:f7:25:4a:cf:bf:c5:bc:47:81:4e:d2:89:9d:34:4e:01: 97:53:1b:d2:2b:7c:cc:39:31:8f:c8:fa:d9:35:9e:05:5b:72: dd:9e:c2:c9:d3:36:f8:6d:da:32:c4:80:7b:6a:5f:fd:39:9d: df:fd:ff:21:a1:b3:9a:18:fd:85:9a:cd:36:a2:bb:bf:4e:6a: d5:c7:98:62:40:a4:93:33:01:a6:5c:e7:3b:d4:f0:66:b9:27: 07:65:34:8d:6c:cc:8e:5f:16:dc:80:3f:51:ba:ae:02:ca:c3: c2:8c:f5:30:d4:ae:90:54:44:b4:93:91:7b:64:52:6e:ed:58: 28:39:20:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAsElfc2aVSjADKV/jlMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OTQ3YzVjM2Q0YzJmYzRjNGE0YTc0MjhiNjIyYTdmZWYz OTJlMjkwHhcNMjUxMjIzMDcwMDUzWhcNMjUxMjI0MDcwMDUzWjAzMTEwLwYDVQQD EyhjOGYyNGI5MjlmYjMzYjJlMDlmZGNlY2I4OTUzNjFmYjI1ODBiYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6BVrnUCIgPMS8i5G8Q5cHRitCkW 61mBrTacEXvmqLIP9jP/iTHzJIrz0OSNsF5XgEygj0ZUcB1d6Kr5y1sJOpHnMBLy 8r65XslkYpubx8r5tcHADguNKUtMFPJtrgYuQhBH1b86Xif8hRd0OOaDldkT2n+i J7DAFcLIc52xjn0AtdUrM6ckw7wz6c2zEt8E5curChTrNvZoKsfE+ttSSy0ZwtH9 QF8xmQHX/xzfd3uBMmP7Re9pzr8mDXl94U3ladtkcpxuYBP4Q5wUj6RUmjJKMk05 IUQ23nqKfu9aX6KhqBrovN6PJ1v2wSVkvODBn1Ie1Z/MiYXxLY1Oagq5EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjyS5KfszsuCf3Oy4lTYfslgLolMB8GA1UdIwQY MBaAFEaUfFw9TC/ExKSnQotiKn/vOS4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUt OGY5MzRlNzE3NjdjLzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUtOGY5MzRlNzE3Njdj LzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyidrI81 JVyALSZpfMEKCKVjP3ibUWt1wDbqgFrc5xDIQIY2UetmPdz6YiTU8Ahva3S0p69n MiIv/iLTzf861DmwZHsQmFB0B/mRC+7nf+2D4a1aCWFr3qNGXwwXZjV3W4jFIkis 4Gu7MZy6gL2IRzB1ld14H724W3ByoiYpDeT3JUrPv8W8R4FO0omdNE4Bl1Mb0it8 zDkxj8j62TWeBVty3Z7CydM2+G3aMsSAe2pf/Tmd3/3/IaGzmhj9hZrNNqK7v05q 1ceYYkCkkzMBplznO9TwZrknB2U0jWzMjl8W3IA/UbquAsrDwoz1MNSukFREtJOR e2RSbu1YKDkg+Q== -----END CERTIFICATE-----Generated at Tue Dec 23 09:03:59 2025 by rpki-client