This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json) Hash identifier: zhU58Ge3fGyoU06XOPUO5VzehA0+OuD8wAwgdIn0Bdk= Subject key identifier: 52:F2:82:79:C0:FD:96:41:71:2C:51:91:A9:6A:37:89:34:62:77:3C Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2 Certificate serial: 019AF31B72DE4B7E41B3A5A4C6FC92EAC68F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft Manifest number: 12A6 Signing time: Sat 06 Dec 2025 10:00:53 +0000 Manifest this update: Sat 06 Dec 2025 10:00:53 +0000 Manifest next update: Sun 07 Dec 2025 10:00:53 +0000 Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=) 2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: MytVTGHPgskaDaRb5Esxbv08el6UJTMoulfDA5ZYvco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:72:de:4b:7e:41:b3:a5:a4:c6:fc:92:ea:c6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2 Validity Not Before: Dec 6 10:00:53 2025 GMT Not After : Dec 7 10:00:53 2025 GMT Subject: CN=52f28279c0fd9641712c5191a96a37893462773c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:06:25:8d:f1:94:85:ff:d9:af:f2:a7:a8:d5: 5a:ce:e1:68:c6:fe:8f:e9:fc:90:96:a2:a4:de:65: 04:f6:f4:4c:1f:ef:a2:09:4a:07:82:9d:8b:19:b7: e1:af:4d:03:14:76:58:a0:ed:5f:ed:45:6f:bb:27: 15:a9:c0:c9:4a:a4:c3:e1:81:de:68:cf:ef:17:40: f8:35:5a:33:20:7d:b8:7d:55:8b:42:0d:cf:8f:34: d5:d5:f6:51:fa:ba:ae:fc:68:eb:73:2a:80:29:b7: f5:c9:a4:49:fc:c2:39:d6:3f:4a:98:74:c9:a7:d6: 51:bc:e7:0d:f6:bb:53:5b:8d:a7:5d:1f:0e:70:e6: b2:d0:08:05:61:e0:76:f0:3b:49:26:98:2d:b1:e5: c5:9d:54:c2:d1:47:d6:50:24:0d:0d:91:93:0d:90: a4:b5:95:1d:81:76:06:ee:bd:a3:ae:1f:0c:a7:60: 0a:cb:f4:8e:23:83:4e:11:e5:52:1e:22:0f:05:66: 59:c8:a0:b8:4f:de:0d:70:0f:26:a3:2d:8d:8e:47: 1c:cd:1a:fd:1b:3f:01:43:e4:f4:aa:e7:62:58:de: 52:b3:5b:ed:42:1d:28:06:8b:96:dd:a3:df:d4:ba: 77:05:14:45:66:af:35:ee:86:38:ca:8b:be:7f:c7: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F2:82:79:C0:FD:96:41:71:2C:51:91:A9:6A:37:89:34:62:77:3C X509v3 Authority Key Identifier: keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ee:d9:48:9d:1f:39:90:8a:5f:cf:de:c0:71:97:9b:8d:ba: 0f:4b:6a:f0:f2:c1:fb:24:57:d9:80:00:94:db:54:6c:a3:c9: 25:c2:68:e6:a8:da:20:04:6d:f3:64:67:de:59:30:51:4e:10: b5:36:52:4d:9d:a1:e1:d9:c6:f8:1f:7c:21:60:be:72:7d:2f: b0:e8:8c:1e:06:ad:c6:23:21:4e:31:9f:2e:1c:f7:b8:34:b0: 1e:d3:3f:2c:76:a8:e6:ca:33:f8:60:9b:1c:01:f9:b6:2e:4f: 02:51:e3:03:09:d3:0c:70:ea:a9:5f:9b:b7:30:5a:61:70:b4: 84:37:90:1b:58:6b:6b:92:ca:ca:2f:e2:67:11:41:b3:98:86: 94:63:f9:f1:c3:51:b3:a2:78:d2:83:8b:78:eb:da:61:73:38: 98:7c:e5:d2:1b:aa:2c:16:42:f3:a0:24:ea:27:60:3c:a3:a6: 61:51:3c:da:c1:bf:04:3b:35:2d:46:6c:2b:65:4c:ba:6d:84: 60:a2:23:19:87:81:b7:ed:54:00:db:73:b1:d2:c4:71:54:a3: 58:b6:b2:1d:8d:3f:7e:b4:54:9c:65:65:dc:4d:d5:d6:a6:e0: b9:71:99:c9:d3:6c:07:43:63:2a:db:60:86:9d:7f:ba:06:83: 10:40:84:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3LeS35Bs6WkxvyS6saPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwM2M0OGVkNDZjYjc5NDkwZTE2NjJkYjAxYzMxZDAyZDAy ZWZmZTIwHhcNMjUxMjA2MTAwMDUzWhcNMjUxMjA3MTAwMDUzWjAzMTEwLwYDVQQD Eyg1MmYyODI3OWMwZmQ5NjQxNzEyYzUxOTFhOTZhMzc4OTM0NjI3NzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wYljfGUhf/Zr/KnqNVazuFoxv6P 6fyQlqKk3mUE9vRMH++iCUoHgp2LGbfhr00DFHZYoO1f7UVvuycVqcDJSqTD4YHe aM/vF0D4NVozIH24fVWLQg3PjzTV1fZR+rqu/GjrcyqAKbf1yaRJ/MI51j9KmHTJ p9ZRvOcN9rtTW42nXR8OcOay0AgFYeB28DtJJpgtseXFnVTC0UfWUCQNDZGTDZCk tZUdgXYG7r2jrh8Mp2AKy/SOI4NOEeVSHiIPBWZZyKC4T94NcA8moy2NjkcczRr9 Gz8BQ+T0qudiWN5Ss1vtQh0oBouW3aPf1Lp3BRRFZq817oY4you+f8fovQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLygnnA/ZZBcSxRkalqN4k0Ync8MB8GA1UdIwQY MBaAFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEt MzU4ODNhZjlhMzIzLzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEtMzU4ODNhZjlhMzIz LzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO7ZSJ0f OZCKX8/ewHGXm426D0tq8PLB+yRX2YAAlNtUbKPJJcJo5qjaIARt82Rn3lkwUU4Q tTZSTZ2h4dnG+B98IWC+cn0vsOiMHgatxiMhTjGfLhz3uDSwHtM/LHao5soz+GCb HAH5ti5PAlHjAwnTDHDqqV+btzBaYXC0hDeQG1hra5LKyi/iZxFBs5iGlGP58cNR s6J40oOLeOvaYXM4mHzl0huqLBZC86Ak6idgPKOmYVE82sG/BDs1LUZsK2VMum2E YKIjGYeBt+1UANtzsdLEcVSjWLayHY0/frRUnGVl3E3V1qbguXGZydNsB0NjKttg hp1/ugaDEECEhA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:53 2025 by rpki-client