This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json) Hash identifier: gSMUmejAhQxp2TSoNAvXQE6hAKhUaVz7ecqukA1zDC8= Subject key identifier: 24:E2:83:EB:74:7F:6B:68:09:EE:EE:C0:5B:BE:97:3F:28:6C:64:93 Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc Certificate serial: 019AF3C0A3A9D3D9B6FB8967FD85728592C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft Manifest number: 0BFA Signing time: Sat 06 Dec 2025 13:01:19 +0000 Manifest this update: Sat 06 Dec 2025 13:01:19 +0000 Manifest next update: Sun 07 Dec 2025 13:01:19 +0000 Files and hashes: 1: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: WK99T/e3hDXDutlHrXg7wQSyvGRNlc5xXtUq4SuRbCc=) 2: skCVKxk18u8iDsYso8A72bgiHug.roa (hash: nn/x2nXxtAw5Z/QReAqKvy2u4x4tQ9QyKaEVK0rkZpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:a3:a9:d3:d9:b6:fb:89:67:fd:85:72:85:92:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc Validity Not Before: Dec 6 13:01:19 2025 GMT Not After : Dec 7 13:01:19 2025 GMT Subject: CN=24e283eb747f6b6809eeeec05bbe973f286c6493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:4c:01:24:8e:40:3b:d6:f1:09:19:21:79: f7:18:9f:be:d5:6a:24:9f:39:f0:47:80:e1:e6:1f: 85:e5:8b:06:f9:98:31:72:cf:c3:d4:5f:eb:a9:a3: 3f:fe:5b:8b:3d:01:0b:f7:b6:05:6d:37:c0:19:6e: d7:90:1d:9f:70:eb:f2:19:36:7f:9a:6d:c8:07:fb: 51:7b:2e:db:d9:a1:12:34:b7:33:65:df:1c:82:67: fc:65:30:4f:cb:c3:88:35:91:95:d4:bd:93:e7:e6: 3e:6c:3d:eb:4d:40:b8:00:e5:39:06:cc:ac:97:0c: db:b9:5d:7d:30:52:92:be:7c:27:32:31:50:74:12: 30:d7:12:33:a4:79:f3:28:6d:fc:6e:63:78:79:48: 28:cd:61:c2:0c:6c:83:81:11:16:8a:71:c7:57:9c: 46:9a:cf:43:2d:ef:0b:ef:5d:f2:93:96:5e:2a:ec: 7c:18:d8:5a:21:de:4a:10:f3:61:db:ba:ce:09:ff: 10:bf:b4:84:12:26:65:7f:7c:24:86:a9:1b:95:fe: e7:24:ca:86:65:7d:6b:2c:9c:a8:05:7d:ea:cf:80: d7:ca:98:19:28:0a:27:6e:9b:f8:bf:83:40:0e:ef: 4b:06:9a:1a:2c:32:e9:08:12:1a:76:21:38:d2:c0: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E2:83:EB:74:7F:6B:68:09:EE:EE:C0:5B:BE:97:3F:28:6C:64:93 X509v3 Authority Key Identifier: keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7a:9f:9c:25:c2:91:20:4d:6d:79:a2:ea:67:77:e3:05:3e: 76:38:f7:df:77:86:c2:c3:67:ac:44:41:cc:15:92:37:a9:e5: 80:19:16:44:a9:bb:69:e7:9e:74:94:4f:5c:af:f0:aa:f7:9d: 32:25:be:14:76:89:1d:fc:a4:c5:19:18:2e:b6:fa:50:5f:a4: d4:12:39:33:4d:e9:16:d8:c6:3e:76:11:79:2a:b9:e1:98:e6: 11:8d:f9:e2:e1:ca:12:74:0e:af:f2:99:cc:c6:6c:23:59:6a: 12:d4:32:5a:31:af:6e:90:0a:29:08:55:7b:47:8f:2e:b3:d1: ef:94:2c:51:06:16:4d:cb:07:d7:d4:35:f6:51:42:c4:48:ee: c9:e4:6d:55:51:37:a7:62:52:c4:49:97:bc:a1:51:49:e0:c1: 9e:e1:7d:e8:4e:86:2a:a7:3a:ab:80:a2:10:ce:fb:6d:c5:3c: 17:a6:9f:36:2b:2b:17:aa:ac:ce:1e:07:98:a4:d0:1a:f6:b8: 46:fb:8f:17:86:52:2d:6e:65:00:69:57:56:1a:14:1e:ab:48: c5:b0:39:a9:06:a9:7d:f2:58:ee:5d:4c:98:10:5f:dc:e1:fd: 0c:0e:ec:d5:24:1e:67:24:bf:1f:42:b0:2f:ce:78:24:33:09: 4c:7e:20:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKOp09m2+4ln/YVyhZLJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZWFhMDk2ZWJiMzc2NTdlNGQzYWQyMTc2NjQxMTcyZDZl MjAyYmMwHhcNMjUxMjA2MTMwMTE5WhcNMjUxMjA3MTMwMTE5WjAzMTEwLwYDVQQD EygyNGUyODNlYjc0N2Y2YjY4MDllZWVlYzA1YmJlOTczZjI4NmM2NDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJhMASSOQDvW8QkZIXn3GJ++1Wok nznwR4Dh5h+F5YsG+Zgxcs/D1F/rqaM//luLPQEL97YFbTfAGW7XkB2fcOvyGTZ/ mm3IB/tRey7b2aESNLczZd8cgmf8ZTBPy8OINZGV1L2T5+Y+bD3rTUC4AOU5Bsys lwzbuV19MFKSvnwnMjFQdBIw1xIzpHnzKG38bmN4eUgozWHCDGyDgREWinHHV5xG ms9DLe8L713yk5ZeKux8GNhaId5KEPNh27rOCf8Qv7SEEiZlf3wkhqkblf7nJMqG ZX1rLJyoBX3qz4DXypgZKAonbpv4v4NADu9LBpoaLDLpCBIadiE40sCUdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTig+t0f2toCe7uwFu+lz8obGSTMB8GA1UdIwQY MBaAFK7qoJbrs3ZX5NOtIXZkEXLW4gK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMt ZmZkNWJmNTk2OWRmLzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMtZmZkNWJmNTk2OWRm LzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXqfnCXC kSBNbXmi6md34wU+djj333eGwsNnrERBzBWSN6nlgBkWRKm7aeeedJRPXK/wqved MiW+FHaJHfykxRkYLrb6UF+k1BI5M03pFtjGPnYReSq54ZjmEY354uHKEnQOr/KZ zMZsI1lqEtQyWjGvbpAKKQhVe0ePLrPR75QsUQYWTcsH19Q19lFCxEjuyeRtVVE3 p2JSxEmXvKFRSeDBnuF96E6GKqc6q4CiEM77bcU8F6afNisrF6qszh4HmKTQGva4 RvuPF4ZSLW5lAGlXVhoUHqtIxbA5qQapffJY7l1MmBBf3OH9DA7s1SQeZyS/H0Kw L854JDMJTH4gqg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:06:50 2025 by rpki-client