This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json) Hash identifier: +I0WMN8s6AMiol5wJVhz/EGJsgj3rXStWJggqQQHYs8= Subject key identifier: BE:3A:E0:05:CC:F4:40:BF:F8:EE:0B:74:8C:13:62:59:99:EB:0C:B1 Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db Certificate serial: 019AF31BB969CE30B362139AA911A99A0353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft Manifest number: 07A2 Signing time: Sat 06 Dec 2025 10:01:11 +0000 Manifest this update: Sat 06 Dec 2025 10:01:11 +0000 Manifest next update: Sun 07 Dec 2025 10:01:11 +0000 Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: iKKwF4cC+WxVa4EWCJX5JaNRFrOzXGlucqcF7rs1930=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b9:69:ce:30:b3:62:13:9a:a9:11:a9:9a:03:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db Validity Not Before: Dec 6 10:01:11 2025 GMT Not After : Dec 7 10:01:11 2025 GMT Subject: CN=be3ae005ccf440bff8ee0b748c13625999eb0cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:7f:c6:86:5f:82:93:59:a9:d1:e3:e1:e2: ad:b7:6e:c4:a7:79:55:fd:a7:26:ee:a7:60:23:47: 8b:d7:12:31:df:ec:b0:1e:38:c1:bf:5d:24:1c:a6: 2e:1f:e3:b7:e2:60:46:dd:a7:36:d6:1b:dc:b6:4c: 3a:c1:20:38:91:57:94:a5:23:d8:d5:54:f5:0a:64: 86:94:a2:41:78:c5:67:24:4d:47:08:d2:1c:9e:38: 50:99:cb:69:e0:9b:21:04:54:9f:55:94:5e:80:a5: c3:87:43:5e:39:10:b7:6f:77:73:b0:a5:c5:e7:17: c9:7b:85:4b:d6:14:ef:c5:8a:19:88:e2:9b:dd:15: db:ea:0d:5c:0a:50:f8:9f:98:3d:28:c9:76:30:8c: 45:29:27:23:00:58:24:38:e7:98:15:d5:11:f4:87: 60:c7:bf:08:c9:a8:e2:43:54:d1:21:49:93:b0:12: 71:e1:1a:ad:dd:92:de:b4:b9:04:c4:9b:8e:ed:c6: a1:0f:9b:9d:57:33:58:e9:f4:0f:86:54:bf:0c:3c: 6a:66:be:e9:a8:3d:e4:84:f3:25:95:a7:b5:06:ce: 2e:d2:a0:9f:e9:9c:86:55:f7:36:c6:92:1a:fd:12: 2b:99:07:6c:cb:e2:36:db:87:e1:e5:93:99:a5:45: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3A:E0:05:CC:F4:40:BF:F8:EE:0B:74:8C:13:62:59:99:EB:0C:B1 X509v3 Authority Key Identifier: keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:39:fe:94:a6:17:b6:26:ab:a1:2b:3c:34:da:aa:d1:90:80: 68:48:68:ae:e2:aa:5c:7c:8c:12:d8:2b:83:50:df:69:e8:36: 23:d3:3f:49:57:93:23:3a:c3:9e:0d:72:85:f4:94:e3:43:7b: 23:38:89:dd:02:f9:d8:15:1b:b6:29:c7:83:c2:ad:89:71:1c: 8c:68:33:02:78:db:61:53:6a:c0:e8:62:5b:c7:55:3a:9a:6b: bf:a4:c1:5e:d7:c1:b1:d3:74:7c:8c:f9:5a:e0:9f:d0:f8:f7: 1d:be:1d:9c:85:6c:1b:42:8e:54:93:72:03:ee:fb:e5:cc:9f: 92:90:b7:68:40:4c:07:9e:d7:0b:2d:74:30:30:e7:90:5f:5e: 61:9f:eb:04:a5:75:19:90:2f:2b:3e:92:11:02:59:ba:c4:eb: fc:04:2e:39:5b:5d:49:c8:22:3f:65:99:16:f5:82:5c:3d:af: a1:24:4b:b9:a8:f0:03:3a:7a:59:16:88:bb:89:ec:31:5d:31: ae:30:99:cf:7c:b8:f7:22:2c:42:a6:ea:ef:1c:cd:3a:d4:79: 96:2f:9e:94:37:ba:a3:19:e5:8a:4b:25:52:75:84:f7:0c:d5: d4:c3:09:08:5f:9c:f6:4b:d7:15:1a:1e:9d:17:ac:ec:b9:6e: 66:ed:85:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7lpzjCzYhOaqRGpmgNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NDFmNTVjMTY1OTA0MjRmYjM0YzY1ZTBlMmVhYzIyODgy NDcwZGIwHhcNMjUxMjA2MTAwMTExWhcNMjUxMjA3MTAwMTExWjAzMTEwLwYDVQQD EyhiZTNhZTAwNWNjZjQ0MGJmZjhlZTBiNzQ4YzEzNjI1OTk5ZWIwY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVF/xoZfgpNZqdHj4eKtt27Ep3lV /acm7qdgI0eL1xIx3+ywHjjBv10kHKYuH+O34mBG3ac21hvctkw6wSA4kVeUpSPY 1VT1CmSGlKJBeMVnJE1HCNIcnjhQmctp4JshBFSfVZRegKXDh0NeORC3b3dzsKXF 5xfJe4VL1hTvxYoZiOKb3RXb6g1cClD4n5g9KMl2MIxFKScjAFgkOOeYFdUR9Idg x78IyajiQ1TRIUmTsBJx4Rqt3ZLetLkExJuO7cahD5udVzNY6fQPhlS/DDxqZr7p qD3khPMllae1Bs4u0qCf6ZyGVfc2xpIa/RIrmQdsy+I224fh5ZOZpUU+xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL464AXM9EC/+O4LdIwTYlmZ6wyxMB8GA1UdIwQY MBaAFEVB9VwWWQQk+zTGXg4urCKIJHDbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMzg4NWMtNmI3NC00M2M0LThmZGQt Nzg5ZDA3YzE5ODA4LzEvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kMzg4NWMtNmI3NC00M2M0LThmZGQtNzg5ZDA3YzE5ODA4 LzEvUlVIMVhCWlpCQ1Q3Tk1aZURpNnNJb2drY05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDn+lKYX tiaroSs8NNqq0ZCAaEhoruKqXHyMEtgrg1Dfaeg2I9M/SVeTIzrDng1yhfSU40N7 IziJ3QL52BUbtinHg8KtiXEcjGgzAnjbYVNqwOhiW8dVOpprv6TBXtfBsdN0fIz5 WuCf0Pj3Hb4dnIVsG0KOVJNyA+775cyfkpC3aEBMB57XCy10MDDnkF9eYZ/rBKV1 GZAvKz6SEQJZusTr/AQuOVtdScgiP2WZFvWCXD2voSRLuajwAzp6WRaIu4nsMV0x rjCZz3y49yIsQqbq7xzNOtR5li+elDe6oxnlikslUnWE9wzV1MMJCF+c9kvXFRoe nRes7LluZu2FRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:26:30 2025 by rpki-client