This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json) Hash identifier: m/WUGvM1uCOFRQpLf4iVZOCKs8tPnsRIivrx37MPTcQ= Subject key identifier: B1:1F:F8:EC:13:41:E5:06:61:72:01:90:5B:3C:9B:C0:15:0B:4C:59 Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03 Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03 Certificate serial: 019AF23FBEB8D229798952233BB9E327D773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft Manifest number: 0B50 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: 0GgUXUky9ZMD6LxWMddeumyRqu9wdTQFDcOBI29MOW0=) 2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:be:b8:d2:29:79:89:52:23:3b:b9:e3:27:d7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=b11ff8ec1341e506617201905b3c9bc0150b4c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:07:52:c3:f0:d7:b8:b5:13:69:1c:4f:ad: 79:42:ce:c8:61:2c:8d:19:b6:e6:96:e8:98:60:28: d5:73:20:df:aa:2c:d9:80:01:e7:e4:2a:6e:b0:90: 59:29:f7:a3:5c:54:ed:e2:46:2a:6c:b8:42:95:32: 84:84:81:f5:dd:c4:e5:de:b1:fc:ab:81:72:59:5e: e9:48:6e:59:18:78:0e:9a:28:2b:db:a6:ee:e8:5d: 5f:7e:bc:90:34:68:cf:89:03:15:85:85:c9:b2:72: 3e:79:e5:62:ef:1c:46:f7:0d:d6:a7:d3:1c:f0:4d: 89:38:80:13:2d:d1:86:40:cb:03:27:38:0d:8e:0e: f5:5d:84:3a:26:9e:39:1e:d9:a3:8f:4d:8d:ee:9a: da:da:86:6b:2c:2b:d7:8a:48:35:3d:45:94:41:95: 84:89:59:09:80:84:ad:ab:6b:76:82:91:45:9d:9b: 12:ce:8d:67:d5:91:a8:b9:ee:ff:5a:81:04:01:2e: 95:79:8f:7b:a2:b1:11:1e:9c:63:8e:5c:16:1f:4e: 23:c4:7e:b1:65:eb:2e:20:5a:f5:a2:32:5d:e8:e2: d6:5a:a9:dc:6c:f1:cd:f2:37:5a:7e:d7:fa:62:f8: e4:28:8a:e2:27:26:53:41:71:7e:9e:4b:90:47:9a: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1F:F8:EC:13:41:E5:06:61:72:01:90:5B:3C:9B:C0:15:0B:4C:59 X509v3 Authority Key Identifier: keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:54:c5:36:81:5f:86:d2:b5:d8:31:bc:3e:e0:f3:72:26:8f: 57:20:cc:85:fb:60:a8:95:42:93:f3:78:68:e6:cd:83:02:48: b3:d6:9b:15:b6:c0:31:3d:a5:d2:e8:75:df:a4:ad:20:ce:5f: 60:15:d2:ca:72:cf:dc:c8:f0:a5:99:e9:38:d8:02:77:52:0a: 29:95:39:39:ee:33:58:23:28:05:0b:ad:3a:9f:b6:e5:0c:fc: da:11:6b:1d:79:ac:4f:bc:c2:72:a4:df:59:c5:03:b1:0d:4a: dc:23:2a:0b:69:cf:d9:f8:0f:60:d4:5c:73:46:63:04:f7:fc: 61:04:8b:11:af:fa:e9:89:ef:3e:26:6f:39:5e:fa:55:a1:2e: 2d:33:39:6d:ff:64:a7:c4:21:55:c6:38:2c:1e:71:c8:ea:c9: 4e:f5:38:00:ab:07:d2:25:c8:32:d9:07:5c:ac:4a:f0:be:06: fe:61:2e:11:6b:96:d2:07:67:0e:4a:a9:ff:3e:c9:d6:f1:d7: 56:f7:20:f3:1f:3e:de:36:33:cf:9c:05:e7:2b:dc:8d:6d:62: d5:35:1c:3b:a8:12:12:a9:e8:8e:82:fa:4c:9e:4a:2c:a7:64: f2:e2:55:13:aa:33:9f:38:10:af:12:0e:15:5f:17:8f:7a:49: 6f:7d:84:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7640il5iVIjO7njJ9dzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2N2IzOTRjZjhhNDA1MWMxNjdkNDY4YmM3Yjg5MmE3MWRl ZTRkMDMwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD EyhiMTFmZjhlYzEzNDFlNTA2NjE3MjAxOTA1YjNjOWJjMDE1MGI0YzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7AHUsPw17i1E2kcT615Qs7IYSyN GbbmluiYYCjVcyDfqizZgAHn5CpusJBZKfejXFTt4kYqbLhClTKEhIH13cTl3rH8 q4FyWV7pSG5ZGHgOmigr26bu6F1ffryQNGjPiQMVhYXJsnI+eeVi7xxG9w3Wp9Mc 8E2JOIATLdGGQMsDJzgNjg71XYQ6Jp45Htmjj02N7pra2oZrLCvXikg1PUWUQZWE iVkJgIStq2t2gpFFnZsSzo1n1ZGoue7/WoEEAS6VeY97orERHpxjjlwWH04jxH6x ZesuIFr1ojJd6OLWWqncbPHN8jdaftf6YvjkKIriJyZTQXF+nkuQR5qb5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEf+OwTQeUGYXIBkFs8m8AVC0xZMB8GA1UdIwQY MBaAFEZ7OUz4pAUcFn1Gi8e4kqcd7k0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQt MGYwMWI1NjA2NTdjLzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQtMGYwMWI1NjA2NTdj LzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA11TFNoFf htK12DG8PuDzciaPVyDMhftgqJVCk/N4aObNgwJIs9abFbbAMT2l0uh136StIM5f YBXSynLP3MjwpZnpONgCd1IKKZU5Oe4zWCMoBQutOp+25Qz82hFrHXmsT7zCcqTf WcUDsQ1K3CMqC2nP2fgPYNRcc0ZjBPf8YQSLEa/66YnvPiZvOV76VaEuLTM5bf9k p8QhVcY4LB5xyOrJTvU4AKsH0iXIMtkHXKxK8L4G/mEuEWuW0gdnDkqp/z7J1vHX Vvcg8x8+3jYzz5wF5yvcjW1i1TUcO6gSEqnojoL6TJ5KLKdk8uJVE6oznzgQrxIO FV8Xj3pJb32E2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:01 2025 by rpki-client