This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft File: 55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json) Hash identifier: whJje6vTb+YLqD5AQKAjjxCc2Cg4NnBZlOpHqXlQ2O0= Subject key identifier: 79:33:C2:10:E9:40:59:F8:D0:7A:31:BB:3B:19:69:C0:93:09:1E:87 Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6 Certificate issuer: /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6 Certificate serial: 019AF352C98B6B4B5689C419E7FD28E11FB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft Manifest number: 04B1 Signing time: Sat 06 Dec 2025 11:01:20 +0000 Manifest this update: Sat 06 Dec 2025 11:01:20 +0000 Manifest next update: Sun 07 Dec 2025 11:01:20 +0000 Files and hashes: 1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: 52TfBjeeAfvLQsEC9L7lNbX8RnW4og6Y9Q1m87+qCQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c9:8b:6b:4b:56:89:c4:19:e7:fd:28:e1:1f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6 Validity Not Before: Dec 6 11:01:20 2025 GMT Not After : Dec 7 11:01:20 2025 GMT Subject: CN=7933c210e94059f8d07a31bb3b1969c093091e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:23:7d:59:28:5e:9a:2d:22:d6:cc:dd:b1:fc: 83:65:a5:9e:0d:46:35:83:7f:9f:92:c7:b2:4e:66: 41:3e:9c:51:23:e0:20:bd:bf:78:88:57:49:da:4b: f4:40:32:99:04:66:6e:92:37:74:58:08:12:92:68: 95:e1:1d:4e:b7:2f:69:5b:69:ec:74:95:60:9b:08: 62:9d:ef:c1:69:bb:53:95:db:a8:3b:05:dc:e0:7f: e7:f5:b8:7c:62:5c:d4:5b:1d:28:14:b2:5c:61:b4: f7:d4:b7:61:f7:51:06:27:aa:6e:06:22:d1:f2:5e: 20:ee:db:61:d8:04:b8:4c:1c:cd:22:3c:24:b9:90: 4d:ee:43:b7:8a:45:82:f2:60:38:1b:e6:f7:70:96: f1:4c:fe:b5:7b:c3:52:f8:ea:7c:d0:75:5b:74:8a: 73:42:5e:c8:eb:93:0d:76:2e:05:27:90:a5:5a:1d: 13:7a:8c:c2:c9:82:a2:d8:8b:97:bf:91:7c:bb:e1: ba:13:75:01:b3:8f:fa:6e:8b:f2:a7:00:6e:ba:6e: e8:0a:a6:f0:13:d2:b5:a0:cd:3f:c8:89:5c:06:46: ab:74:63:59:1e:e1:39:0a:5b:39:cd:35:ce:b3:65: d2:be:c3:af:3f:ae:85:8f:cc:67:31:be:78:11:68: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:C2:10:E9:40:59:F8:D0:7A:31:BB:3B:19:69:C0:93:09:1E:87 X509v3 Authority Key Identifier: keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1a:fe:1e:bc:7e:a9:59:1c:8f:d5:11:64:75:4e:a5:54:b0: 33:1e:a9:08:93:50:eb:e3:0f:ab:73:6b:b7:e7:c0:65:64:3c: fb:72:41:95:ee:35:5c:09:0e:7a:54:e6:1c:3b:d1:21:3d:85: 9e:da:bb:8c:84:71:e4:3f:77:a9:53:c2:28:29:fe:6d:1d:e9: a4:13:48:2c:03:61:28:9e:98:fa:23:bd:ed:30:27:b0:21:1c: 9f:62:9f:b9:3d:ba:3c:c9:3e:ff:78:29:dc:7c:9a:bf:fa:2d: b0:d0:bf:14:9e:29:f1:cf:0e:61:a5:d1:c9:2e:d6:01:72:f4: 6c:b4:44:ac:17:93:08:21:56:72:87:a4:fa:a6:05:27:8f:c9: c0:c4:ae:35:59:53:4c:04:a2:25:24:7c:fa:01:43:5b:e8:e9: 37:87:d1:7e:92:f6:d6:f7:46:af:8b:16:66:b3:36:42:60:fc: f5:dd:10:12:6b:f2:96:bc:a6:3d:e9:e4:e1:67:09:b7:ec:7f: d3:2b:5e:25:fc:78:37:60:91:f5:b3:30:69:c2:a2:ba:98:49: c8:5c:07:07:b2:45:4f:e2:73:df:63:c1:2f:d9:18:64:d9:10: 45:c0:6c:e8:e8:5f:cf:42:9b:3e:9a:96:f7:aa:82:92:f1:aa: e3:46:ec:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsmLa0tWicQZ5/0o4R+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OWFkYzJhNjI3MDI3MDhiMWEwZWUwZGYzYjRjZjkyMjg5 NmRjZDYwHhcNMjUxMjA2MTEwMTIwWhcNMjUxMjA3MTEwMTIwWjAzMTEwLwYDVQQD Eyg3OTMzYzIxMGU5NDA1OWY4ZDA3YTMxYmIzYjE5NjljMDkzMDkxZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyN9WShemi0i1szdsfyDZaWeDUY1 g3+fkseyTmZBPpxRI+Agvb94iFdJ2kv0QDKZBGZukjd0WAgSkmiV4R1Oty9pW2ns dJVgmwhine/BabtTlduoOwXc4H/n9bh8YlzUWx0oFLJcYbT31Ldh91EGJ6puBiLR 8l4g7tth2AS4TBzNIjwkuZBN7kO3ikWC8mA4G+b3cJbxTP61e8NS+Op80HVbdIpz Ql7I65MNdi4FJ5ClWh0TeozCyYKi2IuXv5F8u+G6E3UBs4/6bovypwBuum7oCqbw E9K1oM0/yIlcBkardGNZHuE5Cls5zTXOs2XSvsOvP66Fj8xnMb54EWidnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkzwhDpQFn40HoxuzsZacCTCR6HMB8GA1UdIwQY MBaAFOea3CpicCcIsaDuDfO0z5IoltzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTVyY0ttSndKd2l4b080Tjg3VFBraWlXM05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81YjYxN2QtMDhlYS00Njc0LWIzYzQt MzYzYzFiNDMxOTYzLzEvNTVyY0ttSndKd2l4b080Tjg3VFBraWlXM05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi81YjYxN2QtMDhlYS00Njc0LWIzYzQtMzYzYzFiNDMxOTYz LzEvNTVyY0ttSndKd2l4b080Tjg3VFBraWlXM05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxr+Hrx+ qVkcj9URZHVOpVSwMx6pCJNQ6+MPq3Nrt+fAZWQ8+3JBle41XAkOelTmHDvRIT2F ntq7jIRx5D93qVPCKCn+bR3ppBNILANhKJ6Y+iO97TAnsCEcn2KfuT26PMk+/3gp 3Hyav/otsNC/FJ4p8c8OYaXRyS7WAXL0bLRErBeTCCFWcoek+qYFJ4/JwMSuNVlT TASiJSR8+gFDW+jpN4fRfpL21vdGr4sWZrM2QmD89d0QEmvylrymPenk4WcJt+x/ 0yteJfx4N2CR9bMwacKiuphJyFwHB7JFT+Jz32PBL9kYZNkQRcBs6Ohfz0KbPpqW 96qCkvGq40bsoA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:02 2025 by rpki-client