This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json) Hash identifier: UB6cZ99xLBTLJTRFhB1b7c8SHRwzK4rfsUBBtxChQAQ= Subject key identifier: CE:52:B2:68:88:1C:B6:3B:92:03:ED:62:C2:B1:45:3B:31:81:2F:1B Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e Certificate serial: 019AF0BF771D2E74541C68B6B0B1CBF91BFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft Manifest number: 1062 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: ZYI6Ob1rnEEqnmnSS4hUB45EYJiMVhSZghihgd9lK3o=) 2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=) 3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:77:1d:2e:74:54:1c:68:b6:b0:b1:cb:f9:1b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=ce52b268881cb63b9203ed62c2b1453b31812f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:79:e5:ee:94:08:94:72:34:e6:b6:fd:c6: db:e9:e0:ea:48:d3:01:b9:99:be:44:e9:56:ae:e7: c8:88:9c:d9:e1:3b:da:1d:35:6d:e3:5e:59:3d:32: 16:17:71:1a:7a:9c:31:9c:36:79:51:1a:bd:ee:c8: bc:ad:38:93:e3:4b:b0:c3:c3:e9:09:28:60:a4:c4: f2:6e:9f:32:16:3f:e6:dc:94:6e:19:9b:43:fe:c6: 59:b5:b0:da:97:e6:1c:b3:96:c3:3b:fd:b0:83:2c: 74:05:23:b7:4e:25:49:4a:aa:91:6f:63:bf:fc:05: 2e:f6:b4:7e:83:1a:f7:6d:57:83:da:75:86:2c:92: a0:f6:d0:da:5b:b8:7a:5f:5d:d2:24:63:2e:87:27: 2b:06:68:ac:81:0b:25:f1:1a:75:44:78:25:f5:d6: fc:22:05:72:7b:7e:b3:a5:7e:8c:3d:0a:dd:ce:b1: c0:3b:ca:3d:6b:20:87:b2:75:02:79:97:e8:97:30: 2f:56:91:b1:f4:69:5a:1e:34:0c:91:74:d2:ff:27: 4c:8f:b0:ed:78:ea:91:d3:2e:23:0f:50:b5:84:07: 04:8e:8c:69:0d:67:3d:44:07:b4:31:a6:21:ac:84: c5:c8:4f:a4:79:6f:ad:ea:da:4b:30:28:c2:41:c0: 63:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:52:B2:68:88:1C:B6:3B:92:03:ED:62:C2:B1:45:3B:31:81:2F:1B X509v3 Authority Key Identifier: keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8f:ed:c3:c5:25:a1:c8:13:13:f7:e0:53:67:da:4e:1a:b3: 48:4f:00:a1:a2:3c:ae:19:38:39:e6:1f:e3:b1:0f:5b:cd:88: 3c:2d:d9:b5:c5:b1:00:86:3d:59:dc:78:54:8a:38:58:96:21: dd:ed:e4:e4:2d:76:c7:26:e1:11:0c:f4:ca:28:8e:02:cd:71: a1:76:49:58:84:ff:ef:a0:e7:9a:02:3d:61:cf:31:c7:e8:cd: 45:ea:db:9b:2e:6b:8d:3c:a7:a8:e5:6f:ff:55:63:0c:3d:21: 23:b9:61:23:12:fc:6f:1e:0b:ef:d7:8e:b4:7d:e3:b1:6d:c5: 3c:9e:f8:1b:05:06:f8:39:cd:3a:9b:40:07:e2:ce:32:a3:01: f7:e8:2d:85:96:ee:16:7d:b7:ad:90:cf:52:e9:90:7e:7d:d8: b4:bf:f7:a0:83:b9:25:dc:d0:3c:d8:d4:b5:81:21:cc:71:4b: 7f:f5:84:f5:2b:38:4c:04:82:3e:9a:7a:50:50:92:b7:e1:51: 62:2e:d1:3b:bd:ed:45:95:f1:9a:ff:cc:d0:13:7b:bf:55:0f: 44:89:24:ec:15:00:3b:30:08:65:07:04:2b:8b:e4:5c:c8:31: 02:d2:88:a4:36:7f:72:82:27:fc:60:d6:df:fe:4c:ca:27:c1: c3:b6:0f:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3cdLnRUHGi2sLHL+Rv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj NTY5NGUwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EyhjZTUyYjI2ODg4MWNiNjNiOTIwM2VkNjJjMmIxNDUzYjMxODEyZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm555e6UCJRyNOa2/cbb6eDqSNMB uZm+ROlWrufIiJzZ4TvaHTVt415ZPTIWF3EaepwxnDZ5URq97si8rTiT40uww8Pp CShgpMTybp8yFj/m3JRuGZtD/sZZtbDal+Ycs5bDO/2wgyx0BSO3TiVJSqqRb2O/ /AUu9rR+gxr3bVeD2nWGLJKg9tDaW7h6X13SJGMuhycrBmisgQsl8Rp1RHgl9db8 IgVye36zpX6MPQrdzrHAO8o9ayCHsnUCeZfolzAvVpGx9GlaHjQMkXTS/ydMj7Dt eOqR0y4jD1C1hAcEjoxpDWc9RAe0MaYhrITFyE+keW+t6tpLMCjCQcBj8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5SsmiIHLY7kgPtYsKxRTsxgS8bMB8GA1UdIwQY MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt MGRlNzk2YTRhMzMyLzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALY/tw8Ul ocgTE/fgU2faThqzSE8AoaI8rhk4OeYf47EPW82IPC3ZtcWxAIY9Wdx4VIo4WJYh 3e3k5C12xybhEQz0yiiOAs1xoXZJWIT/76DnmgI9Yc8xx+jNRerbmy5rjTynqOVv /1VjDD0hI7lhIxL8bx4L79eOtH3jsW3FPJ74GwUG+DnNOptAB+LOMqMB9+gthZbu Fn23rZDPUumQfn3YtL/3oIO5JdzQPNjUtYEhzHFLf/WE9Ss4TASCPpp6UFCSt+FR Yi7RO73tRZXxmv/M0BN7v1UPRIkk7BUAOzAIZQcEK4vkXMgxAtKIpDZ/coIn/GDW 3/5MyifBw7YPiw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:06 2025 by rpki-client