This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft File: RU_RwEv37B2rvS0h_aAIXiUexzU.mft (raw, json) Hash identifier: UAjLXpdKMOkzvZp7m/1b2xTsLzkoZf5iQQI+vpKbie0= Subject key identifier: A3:6C:C5:FB:BA:CE:E4:E7:2D:00:19:06:71:21:1D:D0:03:9D:E0:99 Authority key identifier: 45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35 Certificate issuer: /CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735 Certificate serial: 019AF31C3C4BF435FBA62A95D15335D9C938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft Manifest number: 12A5 Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: RU_RwEv37B2rvS0h_aAIXiUexzU.crl (hash: fN0qnPkJ6XgF3O8m2PU34ctuxnaQreQMt0rMcpw5QZE=) 2: qq_DqXj1jgW5t9Bpmv9tIAtLdgk.roa (hash: I+eBl9deFnjZtM9WsLliiLTIBeeiBcTTkkp86ghHw6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3c:4b:f4:35:fb:a6:2a:95:d1:53:35:d9:c9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735 Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=a36cc5fbbacee4e72d00190671211dd0039de099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:e9:ed:33:de:1b:50:19:be:d6:d9:38:7a: f6:e2:8c:ce:36:38:da:b7:25:f8:ad:54:6d:08:3a: 6a:d6:3d:19:e2:08:eb:55:94:1e:01:6d:2e:f6:f1: 56:42:01:da:d3:17:28:53:46:5b:c5:6a:91:79:2d: 8f:65:c9:86:e4:5e:20:e0:40:6c:2a:10:b2:22:81: 2e:e8:a7:40:0c:3c:51:4d:31:34:c1:49:96:ec:4d: 70:f2:55:cd:a1:1c:f5:c5:c7:01:b4:6c:94:e0:e6: e9:7e:1f:f5:29:7f:d5:a3:7b:4e:d3:44:ca:d9:2e: 3b:42:70:82:3f:8e:ea:f6:e3:ad:5d:19:e8:ad:1f: d5:2e:9b:04:f5:dc:35:18:23:02:b9:f5:46:23:30: ef:c2:ae:a7:77:f3:15:65:7a:93:4b:c0:20:89:02: 2d:ca:8b:b4:e6:29:8f:d5:3f:e0:d9:0c:5a:e8:08: 5d:c1:ea:37:49:c2:0a:d0:66:44:b5:c2:b8:32:8b: 39:9c:ba:66:ba:02:5e:db:50:09:be:99:f5:63:23: 25:a8:e0:eb:a6:1e:cd:c9:45:a5:f8:9e:65:93:9c: 7b:67:81:bc:82:76:dc:49:42:94:38:5f:9d:5f:32: 29:32:26:60:14:2f:fe:de:45:3e:c8:49:96:9f:c3: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6C:C5:FB:BA:CE:E4:E7:2D:00:19:06:71:21:1D:D0:03:9D:E0:99 X509v3 Authority Key Identifier: keyid:45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:29:c1:05:20:0d:b9:49:56:fd:d3:04:63:4f:af:84:05:d8: a8:f4:6f:46:22:66:82:15:e9:b7:ee:a0:42:b3:3b:c4:d8:63: 49:9f:a9:5c:fc:84:df:3b:2e:89:b4:6c:96:3a:c7:5d:cd:37: 35:f4:84:c5:7c:80:da:e6:3b:c7:db:1d:5d:6d:75:dc:73:da: 44:3d:59:89:4c:7b:da:30:0b:b8:40:ff:60:09:19:c1:e7:81: 35:e4:06:81:9c:45:4b:6a:1b:45:01:72:b5:d7:e2:5a:4a:60: f0:35:66:4b:67:2d:4f:31:5f:84:82:74:62:08:7e:0a:98:71: 65:6c:47:19:00:ea:dd:2d:5e:ef:4c:2a:e4:f5:df:bd:2a:74: 19:fc:b6:12:6d:29:0f:0b:3b:7e:c4:95:76:2e:6e:f6:f1:ab: d5:c4:ca:81:5c:76:33:66:03:ba:d9:15:ab:db:61:08:90:c8: aa:92:26:49:5d:a3:22:c7:ca:ee:72:45:af:18:6e:25:b0:a5: 4f:b4:df:73:b1:c7:b8:d7:3c:07:c8:36:f8:e7:60:f1:ef:92: a1:d6:e1:df:22:cb:1f:f1:17:bb:5a:f0:c1:80:b0:30:31:cf: 91:57:ed:7f:ad:ce:75:e7:bc:0e:32:f1:eb:1d:b6:01:ae:6a: e6:6b:6d:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDxL9DX7piqV0VM12ck4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NGZkMWMwNGJmN2VjMWRhYmJkMmQyMWZkYTAwODVlMjUx ZWM3MzUwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD EyhhMzZjYzVmYmJhY2VlNGU3MmQwMDE5MDY3MTIxMWRkMDAzOWRlMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Dp7TPeG1AZvtbZOHr24ozONjja tyX4rVRtCDpq1j0Z4gjrVZQeAW0u9vFWQgHa0xcoU0ZbxWqReS2PZcmG5F4g4EBs KhCyIoEu6KdADDxRTTE0wUmW7E1w8lXNoRz1xccBtGyU4Obpfh/1KX/Vo3tO00TK 2S47QnCCP47q9uOtXRnorR/VLpsE9dw1GCMCufVGIzDvwq6nd/MVZXqTS8AgiQIt you05imP1T/g2Qxa6Ahdweo3ScIK0GZEtcK4Mos5nLpmugJe21AJvpn1YyMlqODr ph7NyUWl+J5lk5x7Z4G8gnbcSUKUOF+dXzIpMiZgFC/+3kU+yEmWn8PtjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNsxfu6zuTnLQAZBnEhHdADneCZMB8GA1UdIwQY MBaAFEVP0cBL9+wdq70tIf2gCF4lHsc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlVfUndFdjM3QjJydlMwaF9hQUlYaVVleHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xOGVjNTktMGIwMC00ZGE2LTg4ZDgt ZDRmZDNlMzg5NTM2LzEvUlVfUndFdjM3QjJydlMwaF9hQUlYaVVleHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xOGVjNTktMGIwMC00ZGE2LTg4ZDgtZDRmZDNlMzg5NTM2 LzEvUlVfUndFdjM3QjJydlMwaF9hQUlYaVVleHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFynBBSAN uUlW/dMEY0+vhAXYqPRvRiJmghXpt+6gQrM7xNhjSZ+pXPyE3zsuibRsljrHXc03 NfSExXyA2uY7x9sdXW113HPaRD1ZiUx72jALuED/YAkZweeBNeQGgZxFS2obRQFy tdfiWkpg8DVmS2ctTzFfhIJ0Ygh+CphxZWxHGQDq3S1e70wq5PXfvSp0Gfy2Em0p Dws7fsSVdi5u9vGr1cTKgVx2M2YDutkVq9thCJDIqpImSV2jIsfK7nJFrxhuJbCl T7Tfc7HHuNc8B8g2+Odg8e+Sodbh3yLLH/EXu1rwwYCwMDHPkVftf63Odee8DjLx 6x22Aa5q5mttgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:02 2025 by rpki-client