This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json) Hash identifier: f6AI+x5HJmdvN/kCWTQ9aYUAI/Px9iQolKKZw13kwuc= Subject key identifier: 90:B2:C6:7D:AA:B8:7F:73:14:8D:A1:CB:F8:CA:D9:CF:5D:AD:13:20 Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76 Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076 Certificate serial: 019AF2AD81E8548F0C855CBB60BBBCEF9986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft Manifest number: 052A Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: qPg7bOsXxR6S55isdi0mslAD67MJ3rnGwSAt+zYidGM=) 2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:81:e8:54:8f:0c:85:5c:bb:60:bb:bc:ef:99:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076 Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=90b2c67daab87f73148da1cbf8cad9cf5dad1320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:07:5f:e8:1a:0a:24:87:24:ff:de:87:50: c3:24:f0:b9:9e:3f:34:96:4e:38:f1:2b:09:e1:66: c9:fd:2f:ee:4a:2f:67:aa:ef:b5:be:e7:65:58:d5: 65:fc:49:40:f7:84:32:e8:e6:97:54:7b:1a:a0:96: 2f:4d:36:37:32:53:75:63:3e:a5:16:19:f7:f1:9a: a1:44:f4:b5:0d:80:67:62:76:51:0a:49:f9:68:88: fa:29:2a:35:f6:f4:83:0f:3d:e5:c0:07:66:ed:9d: 01:c1:c3:4d:9b:9c:fc:11:01:3c:af:7b:e4:66:62: 58:43:17:e0:31:81:a3:93:1e:5d:7b:49:92:f6:47: 6b:eb:8d:7c:09:95:86:c8:19:6a:55:9a:8c:30:e7: a4:df:97:68:6a:1e:e5:84:bb:af:24:ca:68:69:60: 79:59:bd:15:8b:15:fa:28:45:41:cc:b4:47:6f:51: 91:f7:46:da:e3:7e:de:c1:4f:f3:f0:f6:ee:93:da: f7:2b:84:8b:4f:7a:8e:33:21:13:1f:92:dd:83:94: f2:7f:ac:56:41:df:a8:0e:b7:74:18:9a:a0:62:1a: f1:b4:80:34:a8:47:e2:30:bc:a0:80:13:32:43:a3: 95:d6:37:78:78:03:4f:75:c4:e8:2f:be:1a:38:9b: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B2:C6:7D:AA:B8:7F:73:14:8D:A1:CB:F8:CA:D9:CF:5D:AD:13:20 X509v3 Authority Key Identifier: keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2a:c9:ac:4a:61:59:a9:38:56:34:42:1a:93:c0:9f:6a:bb: fa:36:dc:b2:76:d2:6f:c2:ca:cd:38:71:2e:6e:77:d2:2d:74: 0c:bb:a1:34:a2:46:d3:1b:af:50:ad:0f:de:87:22:ec:ff:c6: ae:66:0a:87:f2:3f:a6:0b:5b:2d:91:8e:da:58:9b:91:68:8b: 39:fc:76:1c:dd:9d:a4:bc:da:59:45:a6:8e:88:8b:0e:13:4a: 39:d1:d7:24:9a:b6:d8:dd:88:5d:c3:d4:a1:df:2b:31:bc:d5: ef:da:e9:3d:6e:a5:d7:86:f8:f0:c8:92:23:f9:f0:70:61:23: 88:2e:18:78:da:95:4c:8f:f6:0a:61:8a:ee:b9:c3:f7:d4:c1: a3:e9:76:05:37:3c:01:1f:ba:7d:ed:3a:36:d0:70:02:28:24: ab:df:cf:0d:99:15:4e:67:bb:7e:51:d7:c3:38:4d:34:76:0b: ad:07:c7:28:0a:bd:4a:54:68:5b:50:6b:b3:5b:8c:b9:7a:40: 23:3c:fb:d9:1d:be:7a:0c:c0:04:85:e6:9f:61:fc:54:70:36: 64:4e:93:8a:d9:0a:35:65:82:46:69:81:77:99:20:95:6c:d0: ff:af:f8:4a:09:4b:b0:2d:d2:72:d8:5d:f8:c1:db:49:ed:97: 33:8b:4c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYHoVI8MhVy7YLu875mGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh YzgwNzYwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD Eyg5MGIyYzY3ZGFhYjg3ZjczMTQ4ZGExY2JmOGNhZDljZjVkYWQxMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcEHX+gaCiSHJP/eh1DDJPC5nj80 lk448SsJ4WbJ/S/uSi9nqu+1vudlWNVl/ElA94Qy6OaXVHsaoJYvTTY3MlN1Yz6l Fhn38ZqhRPS1DYBnYnZRCkn5aIj6KSo19vSDDz3lwAdm7Z0BwcNNm5z8EQE8r3vk ZmJYQxfgMYGjkx5de0mS9kdr6418CZWGyBlqVZqMMOek35doah7lhLuvJMpoaWB5 Wb0VixX6KEVBzLRHb1GR90ba437ewU/z8Pbuk9r3K4SLT3qOMyETH5Ldg5Tyf6xW Qd+oDrd0GJqgYhrxtIA0qEfiMLyggBMyQ6OV1jd4eANPdcToL74aOJsYPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCyxn2quH9zFI2hy/jK2c9drRMgMB8GA1UdIwQY MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMirJrEph Wak4VjRCGpPAn2q7+jbcsnbSb8LKzThxLm530i10DLuhNKJG0xuvUK0P3oci7P/G rmYKh/I/pgtbLZGO2libkWiLOfx2HN2dpLzaWUWmjoiLDhNKOdHXJJq22N2IXcPU od8rMbzV79rpPW6l14b48MiSI/nwcGEjiC4YeNqVTI/2CmGK7rnD99TBo+l2BTc8 AR+6fe06NtBwAigkq9/PDZkVTme7flHXwzhNNHYLrQfHKAq9SlRoW1Brs1uMuXpA Izz72R2+egzABIXmn2H8VHA2ZE6TitkKNWWCRmmBd5kglWzQ/6/4SglLsC3Scthd +MHbSe2XM4tM+A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:51 2025 by rpki-client