This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json) Hash identifier: 5Fz4t6xk0m2dESQb7B/nMkdd27b+4L1/igTKBw4aYv4= Subject key identifier: F0:6B:84:EB:24:22:21:50:7C:EB:A0:BE:99:7E:4A:78:18:06:C1:9D Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91 Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591 Certificate serial: 019AF19A99AF61D4F2B835B66615A8E37F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft Manifest number: 0732 Signing time: Sat 06 Dec 2025 03:00:32 +0000 Manifest this update: Sat 06 Dec 2025 03:00:32 +0000 Manifest next update: Sun 07 Dec 2025 03:00:32 +0000 Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=) 2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: 7f1wtKutTXpS2yyhHStlN8eaZpSjRZ+NxjKJfRF/mX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:99:af:61:d4:f2:b8:35:b6:66:15:a8:e3:7f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591 Validity Not Before: Dec 6 03:00:32 2025 GMT Not After : Dec 7 03:00:32 2025 GMT Subject: CN=f06b84eb242221507ceba0be997e4a781806c19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:27:3c:da:d6:6b:8b:1b:5c:ac:27:a9:90: c9:3f:44:76:32:84:fe:4b:3c:bd:ec:8c:93:6e:54: 36:c6:76:27:ce:01:eb:81:05:4f:7b:2b:db:1c:e7: ed:04:4a:0a:be:b0:02:de:fd:3e:b6:8b:bd:fc:2d: f0:ad:22:f6:7b:f9:bd:e1:77:40:c8:68:02:a6:1d: 09:4d:2b:bc:c5:3c:5f:1b:80:21:34:1f:8b:95:b8: 19:7b:ff:a7:a1:a3:9a:a7:78:cf:4f:42:69:75:7e: 75:13:3e:13:e7:92:d1:f1:25:3a:50:a1:2b:ae:63: 1d:07:2b:2c:41:db:4d:b4:37:bc:ce:53:a7:ec:77: 4e:ad:20:a2:e3:d6:d9:ff:8c:4b:40:c4:85:e3:32: f6:0d:99:3d:91:b2:32:73:36:27:d5:18:f8:a5:4f: a7:8b:4c:fc:40:dd:f7:b8:2e:a9:d4:cc:ac:6a:0d: 7e:3c:ae:43:21:95:d4:77:05:63:b9:3a:3e:07:3c: dc:cb:84:87:bf:38:8e:ee:8c:48:c6:c0:b4:43:f5: 10:1e:f8:94:3f:e5:e5:49:56:37:ef:16:ac:34:9d: 24:bd:b4:98:f8:4f:82:34:73:b3:0f:03:32:90:0c: aa:9a:73:b2:fc:f9:2a:b3:59:9d:2c:99:ee:87:ff: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6B:84:EB:24:22:21:50:7C:EB:A0:BE:99:7E:4A:78:18:06:C1:9D X509v3 Authority Key Identifier: keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5e:74:8b:d4:cb:83:72:9b:e4:1f:31:68:bc:f2:6f:cb:b9: 2f:cd:fb:59:28:ce:c3:7f:81:77:5c:65:4f:b9:6c:1c:e4:cf: ae:c4:58:2e:b6:10:ef:df:f7:42:a4:b5:a8:dd:44:9b:d2:54: 8f:aa:57:e5:9b:42:a8:cd:5f:01:ed:d8:98:1b:dd:f4:5c:96: 76:06:4b:6e:96:a4:38:ff:c5:9c:2f:14:57:05:69:1b:88:1c: 5a:ca:51:ae:f3:70:23:9c:8b:3d:b1:ca:fd:d7:87:49:c1:83: 98:00:32:c2:ac:42:60:69:7d:86:5a:8f:0f:5e:13:12:11:37: 62:ff:86:c5:1f:ee:84:c1:eb:13:a2:e8:d1:79:a9:e7:9f:cf: ac:fb:e0:d2:e8:e8:5b:b9:9d:1e:a2:6c:27:05:74:29:aa:40: 6b:c0:65:0e:dd:b5:d0:fd:95:25:40:70:03:b8:ff:e8:bb:d2: c2:50:24:e1:cf:28:4d:18:78:73:59:21:a9:3f:d6:9f:91:ca: 19:4a:61:36:b8:ce:a3:3c:f4:6d:6e:94:b5:f3:1b:4a:b9:3a: b1:4b:47:5f:c8:16:95:4a:7e:32:d4:b7:65:02:39:0b:41:e6: fa:40:18:db:79:e7:dd:7f:46:f4:8e:ab:47:70:de:c5:7c:ce: 77:7d:c1:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpmvYdTyuDW2ZhWo43+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YzVjMTI2MmU4M2Q3YmZhOTAyYzJjODYyYTE1ZjFlNDJk MjU1OTEwHhcNMjUxMjA2MDMwMDMyWhcNMjUxMjA3MDMwMDMyWjAzMTEwLwYDVQQD EyhmMDZiODRlYjI0MjIyMTUwN2NlYmEwYmU5OTdlNGE3ODE4MDZjMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4onPNrWa4sbXKwnqZDJP0R2MoT+ Szy97IyTblQ2xnYnzgHrgQVPeyvbHOftBEoKvrAC3v0+tou9/C3wrSL2e/m94XdA yGgCph0JTSu8xTxfG4AhNB+LlbgZe/+noaOap3jPT0JpdX51Ez4T55LR8SU6UKEr rmMdByssQdtNtDe8zlOn7HdOrSCi49bZ/4xLQMSF4zL2DZk9kbIyczYn1Rj4pU+n i0z8QN33uC6p1Mysag1+PK5DIZXUdwVjuTo+Bzzcy4SHvziO7oxIxsC0Q/UQHviU P+XlSVY37xasNJ0kvbSY+E+CNHOzDwMykAyqmnOy/Pkqs1mdLJnuh//RxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBrhOskIiFQfOugvpl+SngYBsGdMB8GA1UdIwQY MBaAFEXFwSYug9e/qQLCyGKhXx5C0lWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMt ZjEwNjAzYjM3NjhkLzEvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMtZjEwNjAzYjM3Njhk LzEvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc150i9TL g3Kb5B8xaLzyb8u5L837WSjOw3+Bd1xlT7lsHOTPrsRYLrYQ79/3QqS1qN1Em9JU j6pX5ZtCqM1fAe3YmBvd9FyWdgZLbpakOP/FnC8UVwVpG4gcWspRrvNwI5yLPbHK /deHScGDmAAywqxCYGl9hlqPD14TEhE3Yv+GxR/uhMHrE6Lo0Xmp55/PrPvg0ujo W7mdHqJsJwV0KapAa8BlDt210P2VJUBwA7j/6LvSwlAk4c8oTRh4c1khqT/Wn5HK GUphNrjOozz0bW6UtfMbSrk6sUtHX8gWlUp+MtS3ZQI5C0Hm+kAY23nn3X9G9I6r R3DexXzOd33BpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:09 2025 by rpki-client