This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json) Hash identifier: dMHdnZwRBee/nxYLU8AAcpvMUzZ2jYvWHtwI+GXBON8= Subject key identifier: 03:CA:8B:57:C0:B5:05:45:02:DB:7A:AD:5C:86:8C:8A:A2:6E:DD:B7 Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18 Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418 Certificate serial: 019B42B72EAFF91FFB4D8E7C641CB06CC5EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 21:00:59 +0000 Manifest this update: Sun 21 Dec 2025 21:00:59 +0000 Manifest next update: Mon 22 Dec 2025 21:00:59 +0000 Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: 3BsyXLnAuCT+iDIJ+oGAdeUQl9/MDgGVRBJhaaZDL6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:2e:af:f9:1f:fb:4d:8e:7c:64:1c:b0:6c:c5:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418 Validity Not Before: Dec 21 21:00:59 2025 GMT Not After : Dec 22 21:00:59 2025 GMT Subject: CN=03ca8b57c0b5054502db7aad5c868c8aa26eddb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:93:92:c9:8d:8b:29:07:b7:a9:ca:36:ea: aa:54:e6:c1:39:a6:07:7f:52:e1:d1:cf:32:13:e0: d8:77:f9:59:99:4e:e0:88:21:fa:f4:d1:26:c6:0c: 83:ce:f5:1d:cc:c9:6e:bb:07:6f:3d:8e:16:11:1a: 76:6d:74:0f:ac:e0:dc:77:bb:9d:58:0a:fd:47:82: 9e:9e:84:20:96:6a:61:90:58:67:cf:9e:32:56:a8: df:03:ac:82:24:b3:00:64:ba:39:71:c8:01:66:ac: 8e:9e:3f:5b:d4:19:e1:1e:94:6e:1b:6d:2b:c3:b2: 5f:c6:3b:d6:da:c8:11:38:0c:8a:46:60:f4:68:a2: c9:72:39:1a:06:d3:13:5f:9e:40:4a:24:cb:87:8e: d4:c4:87:57:d3:39:c3:bc:4c:50:3d:c0:88:e1:c3: 65:dc:c9:3f:53:ba:c8:d0:5f:a8:88:d0:49:c7:7c: 51:44:c7:f1:82:f2:80:3a:b1:42:5c:4c:cf:06:4f: 6a:3b:35:0f:74:a5:38:6b:61:c3:d2:03:a9:c3:9a: d4:1a:78:e3:09:c5:61:e7:7a:2f:ab:07:b3:f0:db: 81:0c:fe:0d:3b:7c:b8:c6:6e:5f:f1:10:64:b8:91: ac:60:5f:fe:8f:16:cf:5c:b2:32:4b:60:41:f6:34: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CA:8B:57:C0:B5:05:45:02:DB:7A:AD:5C:86:8C:8A:A2:6E:DD:B7 X509v3 Authority Key Identifier: keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8f:08:06:25:69:5b:ec:3e:d7:cb:46:78:82:cd:0e:1c:d1: 0a:09:05:5e:ff:51:9b:f6:2d:4d:b0:bd:52:33:e5:7d:5c:23: 88:07:99:4f:30:d4:4f:3c:e7:13:e4:d5:bf:8e:f6:68:26:c0: 10:4c:ab:db:11:58:c0:07:78:bf:78:59:7d:f6:e4:61:93:85: f1:11:71:67:36:55:7f:23:4f:3d:34:7e:93:02:42:56:a1:60: b8:a6:1f:0a:e7:50:df:e0:06:57:b6:c0:6e:3f:f4:19:9e:9e: 1c:14:fb:f7:8f:a3:e7:c0:f1:bf:82:a3:4c:78:f7:12:1b:b8: aa:67:91:34:18:28:35:f5:81:06:45:07:91:27:fe:13:0e:b0: 3d:71:1a:fc:72:b7:24:b3:33:da:34:70:e5:f6:5c:3a:9b:28: d0:e4:84:68:c9:80:14:15:1d:4e:11:b6:16:cf:2d:4f:2c:ad: 1b:67:28:5e:e0:83:e0:fd:4a:78:5b:2b:22:82:c2:34:78:d3: 93:3b:f0:2c:df:5f:24:d8:c7:0a:0b:87:63:a4:83:ec:75:21: 75:e7:d1:da:4a:c1:a4:0a:b2:44:a3:01:3c:0d:a2:7e:b1:c1: e8:f1:26:ee:60:35:84:da:45:05:84:3b:9d:b9:14:63:f8:72: 0b:2c:56:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCty6v+R/7TY58ZBywbMXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MWUzYjlhNTNiYmUwMmUyY2I0Mzk3YTZkMWEwMWQ4MGNh NmU0MTgwHhcNMjUxMjIxMjEwMDU5WhcNMjUxMjIyMjEwMDU5WjAzMTEwLwYDVQQD EygwM2NhOGI1N2MwYjUwNTQ1MDJkYjdhYWQ1Yzg2OGM4YWEyNmVkZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk86TksmNiykHt6nKNuqqVObBOaYH f1Lh0c8yE+DYd/lZmU7giCH69NEmxgyDzvUdzMluuwdvPY4WERp2bXQPrODcd7ud WAr9R4KenoQglmphkFhnz54yVqjfA6yCJLMAZLo5ccgBZqyOnj9b1BnhHpRuG20r w7JfxjvW2sgROAyKRmD0aKLJcjkaBtMTX55ASiTLh47UxIdX0znDvExQPcCI4cNl 3Mk/U7rI0F+oiNBJx3xRRMfxgvKAOrFCXEzPBk9qOzUPdKU4a2HD0gOpw5rUGnjj CcVh53ovqwez8NuBDP4NO3y4xm5f8RBkuJGsYF/+jxbPXLIyS2BB9jTmeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPKi1fAtQVFAtt6rVyGjIqibt23MB8GA1UdIwQY MBaAFJQeO5pTu+AuLLQ5em0aAdgMpuQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQt ZGE5OWUzNGNjMzBiLzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQtZGE5OWUzNGNjMzBi LzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGo8IBiVp W+w+18tGeILNDhzRCgkFXv9Rm/YtTbC9UjPlfVwjiAeZTzDUTzznE+TVv472aCbA EEyr2xFYwAd4v3hZffbkYZOF8RFxZzZVfyNPPTR+kwJCVqFguKYfCudQ3+AGV7bA bj/0GZ6eHBT794+j58Dxv4KjTHj3Ehu4qmeRNBgoNfWBBkUHkSf+Ew6wPXEa/HK3 JLMz2jRw5fZcOpso0OSEaMmAFBUdThG2Fs8tTyytG2coXuCD4P1KeFsrIoLCNHjT kzvwLN9fJNjHCguHY6SD7HUhdefR2krBpAqyRKMBPA2ifrHB6PEm7mA1hNpFBYQ7 nbkUY/hyCyxW8A== -----END CERTIFICATE-----Generated at Mon Dec 22 06:24:07 2025 by rpki-client