This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft File: Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft (raw, json) Hash identifier: ZCfHR6u9PZr/DES9V9zRlaxNcfIz2shU7O0cBzXXxnc= Subject key identifier: E4:13:0F:5E:71:6E:53:0E:12:FC:5A:EB:89:06:0D:D4:C1:4C:7B:0A Authority key identifier: 46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88 Certificate issuer: /CN=46eea05ddbd389decaf18db80e3e11bf9c285a88 Certificate serial: 019B342014B3D376D905E35D6F97865E705C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft Manifest number: 142B Signing time: Fri 19 Dec 2025 01:01:16 +0000 Manifest this update: Fri 19 Dec 2025 01:01:16 +0000 Manifest next update: Sat 20 Dec 2025 01:01:16 +0000 Files and hashes: 1: Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl (hash: sQLdRtE3lwi2UhOqC4qqIO3TcUi5ALG62XvIYWXTBBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:14:b3:d3:76:d9:05:e3:5d:6f:97:86:5e:70:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46eea05ddbd389decaf18db80e3e11bf9c285a88 Validity Not Before: Dec 19 01:01:16 2025 GMT Not After : Dec 20 01:01:16 2025 GMT Subject: CN=e4130f5e716e530e12fc5aeb89060dd4c14c7b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:23:a9:55:86:e1:a8:41:f2:3e:c4:8d:39:36: 30:da:c4:0a:70:d3:26:f1:95:c9:88:be:0a:b7:eb: eb:a6:81:79:cb:a8:bd:58:4d:35:d6:af:ce:7b:8c: 18:49:fe:4d:9e:9e:df:96:a1:87:e5:a3:db:73:b9: 89:8b:f8:2f:d1:fd:60:eb:d8:10:7c:d7:a1:bd:12: 57:84:d2:fd:41:8c:0d:bd:af:cf:52:8c:a6:d7:bc: 04:1d:1f:98:26:04:01:ef:3c:19:5e:0e:df:49:71: 69:85:06:3e:ae:25:a9:e6:a7:44:c4:c6:55:53:be: aa:08:84:5b:95:ec:ce:65:e3:7d:c2:80:5e:df:17: 98:1e:1b:fa:31:9b:74:9b:75:7c:ab:b6:73:81:03: 51:cc:d0:70:1b:fc:fc:41:23:b3:61:ea:ea:53:28: bc:23:e1:90:b0:85:95:09:72:ed:2a:ec:f0:03:50: 0f:74:d7:17:f8:a1:86:0e:e7:c3:ee:af:45:16:a5: b1:84:f2:06:8f:9b:f9:0d:f9:8a:b9:92:c4:66:c6: 95:a7:2d:0a:40:6e:1c:9e:5d:a2:3d:f4:a0:18:99: 61:45:6f:98:ee:11:0c:e9:a4:11:e8:de:cf:de:20: 73:51:81:84:60:44:dd:09:68:d1:d0:af:53:87:9c: ca:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:13:0F:5E:71:6E:53:0E:12:FC:5A:EB:89:06:0D:D4:C1:4C:7B:0A X509v3 Authority Key Identifier: keyid:46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:40:ac:28:3c:a8:6c:15:f8:cb:e6:99:dd:2b:6e:79:20:d4: 0d:8f:0d:39:8f:07:2b:f2:f8:01:e4:31:8f:c0:0e:79:87:d7: 51:f4:f7:a4:4c:b5:87:d8:b5:7d:d9:07:1f:56:3d:ac:79:b8: 2a:66:62:e0:d4:8f:09:a2:4f:6d:1f:35:e5:f5:1e:03:68:2d: 3f:f0:ba:3d:5d:7b:fe:8a:da:2d:bc:2c:bd:b8:49:25:ce:a0: bc:3d:29:ff:10:c1:1b:f9:10:e2:01:40:41:0c:a6:8e:ae:fb: 52:90:29:c5:c9:2b:f1:fd:9d:a2:d3:10:a2:8e:53:09:41:05: 54:de:69:e8:b0:8a:a7:5c:e9:7c:dc:d8:01:02:d6:77:be:a6: f8:00:df:2b:53:54:34:e6:a6:08:8d:b1:ea:cd:4b:53:fb:d1: 4b:db:1c:64:bb:b3:5c:73:65:3e:07:03:1d:36:b5:d1:75:ce: 93:64:40:2e:62:fd:15:c1:8b:e3:ff:32:e5:a8:c1:66:a5:2d: 8c:a6:2d:1c:51:a4:71:ad:fb:7d:24:c0:10:6a:e6:61:ed:fa: f9:9d:63:ea:0d:9a:7d:f5:ca:0c:e9:d0:ba:4f:71:e6:fa:f7: 29:42:24:fa:9a:fd:3f:23:5b:05:f6:69:54:13:18:7c:09:df: e1:83:7a:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IBSz03bZBeNdb5eGXnBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWVhMDVkZGJkMzg5ZGVjYWYxOGRiODBlM2UxMWJmOWMy ODVhODgwHhcNMjUxMjE5MDEwMTE2WhcNMjUxMjIwMDEwMTE2WjAzMTEwLwYDVQQD EyhlNDEzMGY1ZTcxNmU1MzBlMTJmYzVhZWI4OTA2MGRkNGMxNGM3YjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yOpVYbhqEHyPsSNOTYw2sQKcNMm 8ZXJiL4Kt+vrpoF5y6i9WE011q/Oe4wYSf5Nnp7flqGH5aPbc7mJi/gv0f1g69gQ fNehvRJXhNL9QYwNva/PUoym17wEHR+YJgQB7zwZXg7fSXFphQY+riWp5qdExMZV U76qCIRblezOZeN9woBe3xeYHhv6MZt0m3V8q7ZzgQNRzNBwG/z8QSOzYerqUyi8 I+GQsIWVCXLtKuzwA1APdNcX+KGGDufD7q9FFqWxhPIGj5v5DfmKuZLEZsaVpy0K QG4cnl2iPfSgGJlhRW+Y7hEM6aQR6N7P3iBzUYGEYETdCWjR0K9Th5zKnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQTD15xblMOEvxa64kGDdTBTHsKMB8GA1UdIwQY MBaAFEbuoF3b04neyvGNuA4+Eb+cKFqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnU2Z1hkdlRpZDdLOFkyNERqNFJ2NXdvV29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOTExNTAtZWY2Ni00NTBmLTg1NDQt OTJlMWU5ZGFjYTJmLzEvUnU2Z1hkdlRpZDdLOFkyNERqNFJ2NXdvV29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iOTExNTAtZWY2Ni00NTBmLTg1NDQtOTJlMWU5ZGFjYTJm LzEvUnU2Z1hkdlRpZDdLOFkyNERqNFJ2NXdvV29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0CsKDyo bBX4y+aZ3StueSDUDY8NOY8HK/L4AeQxj8AOeYfXUfT3pEy1h9i1fdkHH1Y9rHm4 KmZi4NSPCaJPbR815fUeA2gtP/C6PV17/oraLbwsvbhJJc6gvD0p/xDBG/kQ4gFA QQymjq77UpApxckr8f2dotMQoo5TCUEFVN5p6LCKp1zpfNzYAQLWd76m+ADfK1NU NOamCI2x6s1LU/vRS9scZLuzXHNlPgcDHTa10XXOk2RALmL9FcGL4/8y5ajBZqUt jKYtHFGkca37fSTAEGrmYe36+Z1j6g2affXKDOnQuk9x5vr3KUIk+pr9PyNbBfZp VBMYfAnf4YN6ZQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:02:34 2025 by rpki-client