This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft File: Rcy76zs3q8oa-qTnkXdme1zY56Y.mft (raw, json) Hash identifier: 6ofHRnTQEyOwaQecpgNS3tIdr4iOY7gHIcd0IscH/oI= Subject key identifier: D9:DA:93:2A:4E:A1:E5:5F:2D:25:9D:98:55:2B:0C:C4:59:C1:51:75 Authority key identifier: 45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6 Certificate issuer: /CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6 Certificate serial: 019AF2AD4DB2D33432672F6966D1D8D867D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft Manifest number: 01BC Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: Rcy76zs3q8oa-qTnkXdme1zY56Y.crl (hash: 2CiqJdHobplJyxbD6pToPamd8UXYBZPIAke+ssNls6U=) 2: S8TepbiQXeRCqnwRb_Kf4gbokA4.roa (hash: Z/Vh03WpNWn3U5M6zjyjL69BpjSHNYWSMdO+UDP54Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4d:b2:d3:34:32:67:2f:69:66:d1:d8:d8:67:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6 Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=d9da932a4ea1e55f2d259d98552b0cc459c15175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fd:d2:be:79:94:c6:f5:84:cd:bc:56:db:bf: cc:70:6c:58:08:58:fb:5a:49:02:e2:e0:8b:05:96: 30:89:07:f9:0c:50:47:a6:90:b2:0c:4e:1b:44:ac: 1d:54:15:1d:3b:c2:13:32:99:6c:f4:68:6a:58:e3: dc:6c:49:ee:50:1d:56:45:7d:69:52:72:54:8b:c3: 29:82:49:c8:77:24:91:f4:5b:cb:cd:d7:9b:d6:dd: bf:b1:fb:0f:9c:3c:85:ba:9e:6f:04:71:d9:f5:04: 17:16:a6:33:46:30:68:bb:d9:91:cc:5a:12:a0:b6: 17:ad:ca:7c:4c:20:a3:f3:d7:fe:6b:3c:3a:37:85: f2:aa:4a:87:2a:b3:3f:ae:81:59:ce:bb:da:d6:c9: 7a:de:10:14:e6:c6:8c:c6:a6:d8:6f:6d:30:69:fc: 3a:da:2f:2a:58:ff:b3:57:00:39:19:83:00:82:07: 0c:2e:c4:71:17:46:72:fd:99:64:a0:dd:e7:73:48: 77:69:31:6e:b5:ba:6c:0c:10:d6:60:2f:34:b9:43: f8:2d:35:69:11:cf:fb:8c:9a:db:00:10:95:df:be: a8:5c:89:60:45:7d:5e:8a:69:d3:43:26:ea:2c:50: 05:e8:17:f9:b7:f5:f0:6e:3e:bb:8f:a2:23:0a:da: b2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DA:93:2A:4E:A1:E5:5F:2D:25:9D:98:55:2B:0C:C4:59:C1:51:75 X509v3 Authority Key Identifier: keyid:45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:94:a4:f8:45:3b:b8:e8:41:6d:51:e9:8f:a3:df:62:d0:ae: 35:9a:9f:c4:06:6a:36:32:fc:b6:16:ab:d8:fb:c6:c6:6c:07: 5c:45:e8:52:6a:e3:ad:5a:65:8c:e8:c8:c2:0d:2b:a2:86:f2: e8:ad:c0:4d:6e:75:57:cf:47:72:87:e8:e2:74:26:af:5f:fb: 3a:35:83:95:2b:40:40:bd:05:1c:4c:76:3d:98:60:ad:bb:7f: ca:f0:32:48:51:7a:03:8e:a4:1b:18:ce:59:49:99:c0:86:3a: 49:cf:5c:8e:87:ff:3b:7d:ac:e4:fc:e1:e5:9a:ef:2a:11:09: fe:3f:71:d9:1a:b0:d4:39:7a:61:fc:a0:63:bd:2f:09:c8:6d: 7e:49:91:12:1b:38:e6:f6:e7:3a:5c:c6:c4:ed:b6:06:1e:34: 25:17:76:91:03:83:15:cc:96:f3:de:b2:e6:f3:cd:18:13:38: cc:3c:aa:93:72:6e:92:92:f1:9c:ec:99:04:e9:97:02:c5:5c: 67:c6:92:fd:91:7b:86:8e:d7:a4:ae:84:c2:10:50:1f:da:9b: 3e:86:ba:db:8b:9c:fa:6f:7e:e1:98:eb:98:a7:d7:b4:07:87: 5c:7c:54:b5:64:05:b2:4d:50:11:ee:3b:77:4d:0f:ff:b1:df: 5a:ac:0c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU2y0zQyZy9pZtHY2GfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1Y2NiYmViM2IzN2FiY2ExYWZhYTRlNzkxNzc2NjdiNWNk OGU3YTYwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD EyhkOWRhOTMyYTRlYTFlNTVmMmQyNTlkOTg1NTJiMGNjNDU5YzE1MTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8f3SvnmUxvWEzbxW27/McGxYCFj7 WkkC4uCLBZYwiQf5DFBHppCyDE4bRKwdVBUdO8ITMpls9GhqWOPcbEnuUB1WRX1p UnJUi8MpgknIdySR9FvLzdeb1t2/sfsPnDyFup5vBHHZ9QQXFqYzRjBou9mRzFoS oLYXrcp8TCCj89f+azw6N4XyqkqHKrM/roFZzrva1sl63hAU5saMxqbYb20wafw6 2i8qWP+zVwA5GYMAggcMLsRxF0Zy/ZlkoN3nc0h3aTFutbpsDBDWYC80uUP4LTVp Ec/7jJrbABCV376oXIlgRX1eimnTQybqLFAF6Bf5t/Xwbj67j6IjCtqyBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnakypOoeVfLSWdmFUrDMRZwVF1MB8GA1UdIwQY MBaAFEXMu+s7N6vKGvqk55F3Zntc2OemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmN5NzZ6czNxOG9hLXFUbmtYZG1lMXpZNTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iN2Y1Y2MtNTNhYi00NWE4LWFhZDYt ZjUxMTZiYzExMDY3LzEvUmN5NzZ6czNxOG9hLXFUbmtYZG1lMXpZNTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iN2Y1Y2MtNTNhYi00NWE4LWFhZDYtZjUxMTZiYzExMDY3 LzEvUmN5NzZ6czNxOG9hLXFUbmtYZG1lMXpZNTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZSk+EU7 uOhBbVHpj6PfYtCuNZqfxAZqNjL8thar2PvGxmwHXEXoUmrjrVpljOjIwg0rooby 6K3ATW51V89Hcofo4nQmr1/7OjWDlStAQL0FHEx2PZhgrbt/yvAySFF6A46kGxjO WUmZwIY6Sc9cjof/O32s5Pzh5ZrvKhEJ/j9x2Rqw1Dl6YfygY70vCchtfkmREhs4 5vbnOlzGxO22Bh40JRd2kQODFcyW896y5vPNGBM4zDyqk3JukpLxnOyZBOmXAsVc Z8aS/ZF7ho7XpK6EwhBQH9qbPoa624uc+m9+4ZjrmKfXtAeHXHxUtWQFsk1QEe47 d00P/7HfWqwM4g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:42 2025 by rpki-client