This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json) Hash identifier: 4DE8A45RDccE43A3LKUlwPHkZhQjiMA/IQYh2WByJMI= Subject key identifier: C2:18:8A:5F:8F:1F:5D:9E:9E:5B:2C:E9:11:A4:76:3B:4A:68:86:04 Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78 Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78 Certificate serial: 019AF19AC82B27BFDBEF42E63A48E3FF21A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft Manifest number: 10D6 Signing time: Sat 06 Dec 2025 03:00:44 +0000 Manifest this update: Sat 06 Dec 2025 03:00:44 +0000 Manifest next update: Sun 07 Dec 2025 03:00:44 +0000 Files and hashes: 1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=) 2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: uxApOUQf5farCRmftyC3Q+x5TI6NgqOFCXa1vlPGuW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c8:2b:27:bf:db:ef:42:e6:3a:48:e3:ff:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78 Validity Not Before: Dec 6 03:00:44 2025 GMT Not After : Dec 7 03:00:44 2025 GMT Subject: CN=c2188a5f8f1f5d9e9e5b2ce911a4763b4a688604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8b:f4:7e:7f:b9:86:55:e2:93:2d:f6:df:d9: 1f:ef:3d:00:b9:54:c7:dd:08:0b:a6:f4:e7:5f:62: c8:9c:f1:4c:0d:0b:84:3a:21:b9:5a:fb:06:40:f4: 5e:e9:64:4c:ce:ec:65:3a:ac:fa:38:85:76:5f:c5: 15:a7:ac:35:08:87:6a:c2:e3:f1:b1:77:60:cd:bf: d5:ba:19:cf:d1:1b:4f:f2:35:47:e1:f8:4a:0e:14: 79:10:b3:d3:25:a4:7a:c5:7c:df:b2:93:60:e6:ba: 72:b1:ac:a6:e5:a7:9d:c6:85:f5:d5:ad:dd:51:34: ca:f8:a6:d2:49:50:e5:32:84:0e:3e:77:0c:bf:b1: 1d:bd:ab:92:fa:2a:ba:15:36:09:d1:42:f9:df:6c: a7:f1:2d:91:93:ee:6d:73:3b:9e:8b:e8:71:0d:b6: 64:41:30:ab:d4:05:88:55:cb:6b:bc:49:f4:a5:57: 19:5a:57:73:39:54:d3:41:c0:bd:4d:28:e1:7f:2e: 2b:0a:a0:c0:24:4a:1c:41:51:ca:b9:af:e5:62:7a: f9:37:a2:c9:35:24:bf:ba:f8:fb:49:94:ed:48:2d: 11:1b:2c:d6:76:73:07:13:49:61:e4:5a:ab:4b:b2: e7:33:c8:15:3a:f8:80:aa:8f:cc:ee:35:61:06:3d: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:8A:5F:8F:1F:5D:9E:9E:5B:2C:E9:11:A4:76:3B:4A:68:86:04 X509v3 Authority Key Identifier: keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2f:30:7d:f0:54:3d:c1:a9:4a:37:4a:85:c2:f0:55:0b:12: 5d:d4:3e:07:76:62:71:6e:8d:58:c3:58:fa:fb:c1:0f:ca:b7: 6a:35:ea:d7:ad:48:12:65:55:6a:40:b8:1a:5f:db:0a:ac:6c: fe:76:98:f8:f6:90:8a:63:89:0a:35:2b:95:9b:f4:02:73:6e: 69:e8:8d:fa:16:8c:c1:04:27:48:1a:80:f9:0a:e8:2c:02:55: 43:d0:85:5a:c2:6c:cb:82:2c:69:60:7d:80:06:93:b9:df:79: 17:0b:e9:64:74:30:3c:9f:a4:bc:57:ea:e0:24:34:62:3a:99: 8b:20:f5:aa:74:ef:24:f1:95:8a:f5:40:27:21:3b:7a:79:d5: 50:7e:de:ef:54:b5:f7:fc:b1:ac:08:df:be:ab:85:1c:e2:eb: f6:64:5a:d1:df:f4:b5:3d:40:07:e1:6e:f7:ec:90:10:ee:2b: 39:f1:75:70:65:74:a1:5d:47:19:5e:c8:b3:d6:22:76:ae:ea: e2:c7:f0:1c:ac:f1:61:a9:b1:9a:42:8a:e1:c1:19:a7:52:10: 18:e0:44:10:ca:1d:43:3f:1a:d4:2b:50:2b:3f:49:f8:89:40: e2:00:c3:9d:cf:ef:58:ae:93:1c:c4:ef:1a:fd:ce:17:0f:c1: 7e:55:2b:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsgrJ7/b70LmOkjj/yGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0M2VkNGFlNDNmYTE5MGMxMGZkMmM1M2ExMGUzZGUwYWJk OThiNzgwHhcNMjUxMjA2MDMwMDQ0WhcNMjUxMjA3MDMwMDQ0WjAzMTEwLwYDVQQD EyhjMjE4OGE1ZjhmMWY1ZDllOWU1YjJjZTkxMWE0NzYzYjRhNjg4NjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ov0fn+5hlXiky3239kf7z0AuVTH 3QgLpvTnX2LInPFMDQuEOiG5WvsGQPRe6WRMzuxlOqz6OIV2X8UVp6w1CIdqwuPx sXdgzb/VuhnP0RtP8jVH4fhKDhR5ELPTJaR6xXzfspNg5rpysaym5aedxoX11a3d UTTK+KbSSVDlMoQOPncMv7EdvauS+iq6FTYJ0UL532yn8S2Rk+5tczuei+hxDbZk QTCr1AWIVctrvEn0pVcZWldzOVTTQcC9TSjhfy4rCqDAJEocQVHKua/lYnr5N6LJ NSS/uvj7SZTtSC0RGyzWdnMHE0lh5FqrS7LnM8gVOviAqo/M7jVhBj07xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIYil+PH12enlss6RGkdjtKaIYEMB8GA1UdIwQY MBaAFEQ+1K5D+hkMEP0sU6EOPeCr2Yt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYt MjFmZTVhZTllZjNiLzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYtMjFmZTVhZTllZjNi LzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQy8wffBU PcGpSjdKhcLwVQsSXdQ+B3ZicW6NWMNY+vvBD8q3ajXq161IEmVVakC4Gl/bCqxs /naY+PaQimOJCjUrlZv0AnNuaeiN+haMwQQnSBqA+QroLAJVQ9CFWsJsy4IsaWB9 gAaTud95FwvpZHQwPJ+kvFfq4CQ0YjqZiyD1qnTvJPGVivVAJyE7ennVUH7e71S1 9/yxrAjfvquFHOLr9mRa0d/0tT1AB+Fu9+yQEO4rOfF1cGV0oV1HGV7Is9Yidq7q 4sfwHKzxYamxmkKK4cEZp1IQGOBEEModQz8a1CtQKz9J+IlA4gDDnc/vWK6THMTv Gv3OFw/BflUrzA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:26 2025 by rpki-client