This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft File: RU_RwEv37B2rvS0h_aAIXiUexzU.mft (raw, json) Hash identifier: 6EBz0XXaBCmnurQVtf4PyZvaGD1XzZd8X0jMiMXO3Cw= Subject key identifier: 90:87:3B:ED:0C:48:30:9F:A6:AF:35:2A:2F:61:15:1B:F0:C8:71:78 Authority key identifier: 45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35 Certificate issuer: /CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735 Certificate serial: 019B3C7EED8262258D0527EB3EBABB1C832F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft Manifest number: 12CB Signing time: Sat 20 Dec 2025 16:01:49 +0000 Manifest this update: Sat 20 Dec 2025 16:01:49 +0000 Manifest next update: Sun 21 Dec 2025 16:01:49 +0000 Files and hashes: 1: RU_RwEv37B2rvS0h_aAIXiUexzU.crl (hash: xB++OhDjmLfdk01xhcfA0rQ8jEfe1dxvQ2DOUqwri9o=) 2: qq_DqXj1jgW5t9Bpmv9tIAtLdgk.roa (hash: I+eBl9deFnjZtM9WsLliiLTIBeeiBcTTkkp86ghHw6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:ed:82:62:25:8d:05:27:eb:3e:ba:bb:1c:83:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735 Validity Not Before: Dec 20 16:01:49 2025 GMT Not After : Dec 21 16:01:49 2025 GMT Subject: CN=90873bed0c48309fa6af352a2f61151bf0c87178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:ac:64:27:a6:d8:c6:ef:f0:2c:88:2b:ec: 50:4b:ef:eb:c7:da:1d:eb:2f:35:2a:e7:c7:6f:e2: 09:93:9e:1b:4a:59:a9:5f:1f:9a:5e:c5:62:1e:ab: a1:b8:36:c1:82:5b:28:02:9c:fe:49:fa:16:75:9d: e9:71:33:80:14:3b:8f:a8:f0:a6:be:ad:f5:e0:e2: 02:e7:90:df:25:e9:93:ed:ad:80:af:7f:b3:b7:d0: 58:65:d2:71:f1:6e:df:17:3e:f1:06:88:1a:8e:a9: 73:13:90:52:f4:85:4a:e9:24:db:ac:de:00:12:37: b1:1f:c5:99:24:92:50:df:c9:c3:f5:df:b5:38:84: 9e:e4:b1:33:f2:05:9e:75:8f:aa:83:b7:21:64:2b: b3:dc:73:6e:ec:3e:ba:de:a5:73:77:d4:db:19:0d: c8:7d:70:1c:95:b7:c6:d5:4a:57:21:f7:95:44:c8: 29:d1:65:70:8b:f3:21:27:11:fc:a4:39:c2:3d:91: 2e:2f:56:a5:e3:7f:89:7d:2e:fd:d5:76:06:8a:1b: f1:7a:db:25:4f:29:02:0d:4b:de:c5:48:9b:15:3c: e9:5c:7f:8b:92:a9:b4:54:f4:d9:36:38:b7:d3:05: e5:cc:8b:d8:d0:bd:f6:8d:64:80:2b:b0:ad:46:92: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:87:3B:ED:0C:48:30:9F:A6:AF:35:2A:2F:61:15:1B:F0:C8:71:78 X509v3 Authority Key Identifier: keyid:45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:05:34:30:12:d6:35:27:25:d5:29:19:90:77:3e:29:09: 54:38:9c:e0:cb:0c:e6:8d:d5:65:0a:d2:19:a6:eb:a3:48:71: 32:fd:64:d8:93:26:07:36:96:71:df:b4:7d:84:e5:14:69:89: 5e:ae:c4:bb:91:12:ad:0d:f3:1d:23:f1:be:46:1c:42:d1:b0: 57:17:34:07:28:7c:8f:e9:e3:2b:9f:b8:63:41:9e:2d:d5:89: b5:d8:56:eb:e1:70:ea:dc:fc:46:80:9d:18:fb:a7:ed:47:89: 00:fe:25:1c:45:de:16:4b:be:cb:ae:cb:a1:2e:8b:23:c0:67: d2:b0:a5:b2:c0:5f:97:6c:9f:c9:45:0d:de:0d:00:e9:52:f4: f5:0e:b4:60:5f:0d:fc:81:87:8b:f6:c9:98:76:10:d4:f0:3e: 07:ca:fe:22:6f:7a:f9:ba:91:66:81:44:31:ed:90:2a:91:bd: d5:18:78:18:3e:dc:e8:a4:9e:11:cd:cd:8f:5b:63:bd:d1:78: 2a:8d:05:6d:6e:72:20:ed:c1:3b:3a:4c:05:e3:59:de:ff:a2: 95:1a:ce:cd:4f:02:f7:07:46:b3:c1:99:37:b1:c6:8e:30:a8: 48:56:36:30:bd:17:18:ce:a8:39:a6:e6:30:bd:27:bd:51:01: af:d9:a7:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fu2CYiWNBSfrPrq7HIMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NGZkMWMwNGJmN2VjMWRhYmJkMmQyMWZkYTAwODVlMjUx ZWM3MzUwHhcNMjUxMjIwMTYwMTQ5WhcNMjUxMjIxMTYwMTQ5WjAzMTEwLwYDVQQD Eyg5MDg3M2JlZDBjNDgzMDlmYTZhZjM1MmEyZjYxMTUxYmYwYzg3MTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz6sZCem2Mbv8CyIK+xQS+/rx9od 6y81KufHb+IJk54bSlmpXx+aXsViHquhuDbBglsoApz+SfoWdZ3pcTOAFDuPqPCm vq314OIC55DfJemT7a2Ar3+zt9BYZdJx8W7fFz7xBogajqlzE5BS9IVK6STbrN4A EjexH8WZJJJQ38nD9d+1OISe5LEz8gWedY+qg7chZCuz3HNu7D663qVzd9TbGQ3I fXAclbfG1UpXIfeVRMgp0WVwi/MhJxH8pDnCPZEuL1al43+JfS791XYGihvxetsl TykCDUvexUibFTzpXH+Lkqm0VPTZNji30wXlzIvY0L32jWSAK7CtRpJogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCHO+0MSDCfpq81Ki9hFRvwyHF4MB8GA1UdIwQY MBaAFEVP0cBL9+wdq70tIf2gCF4lHsc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlVfUndFdjM3QjJydlMwaF9hQUlYaVVleHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xOGVjNTktMGIwMC00ZGE2LTg4ZDgt ZDRmZDNlMzg5NTM2LzEvUlVfUndFdjM3QjJydlMwaF9hQUlYaVVleHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xOGVjNTktMGIwMC00ZGE2LTg4ZDgtZDRmZDNlMzg5NTM2 LzEvUlVfUndFdjM3QjJydlMwaF9hQUlYaVVleHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4cFNDAS 1jUnJdUpGZB3PikJVDic4MsM5o3VZQrSGabro0hxMv1k2JMmBzaWcd+0fYTlFGmJ Xq7Eu5ESrQ3zHSPxvkYcQtGwVxc0Byh8j+njK5+4Y0GeLdWJtdhW6+Fw6tz8RoCd GPun7UeJAP4lHEXeFku+y67LoS6LI8Bn0rClssBfl2yfyUUN3g0A6VL09Q60YF8N /IGHi/bJmHYQ1PA+B8r+Im96+bqRZoFEMe2QKpG91Rh4GD7c6KSeEc3Nj1tjvdF4 Ko0FbW5yIO3BOzpMBeNZ3v+ilRrOzU8C9wdGs8GZN7HGjjCoSFY2ML0XGM6oOabm ML0nvVEBr9mnNw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:47:53 2025 by rpki-client