This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json) Hash identifier: KHlF34eMbcLGl581yxr+JSjINab5mdMriNJY4PEFpKI= Subject key identifier: DC:02:13:3E:F4:9B:20:03:C5:1C:D1:BB:1C:5F:F0:D1:E3:9F:20:4B Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b Certificate serial: 019AF0BF0E7C327301E0BD40730C497CCB9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft Manifest number: 1413 Signing time: Fri 05 Dec 2025 23:00:44 +0000 Manifest this update: Fri 05 Dec 2025 23:00:44 +0000 Manifest next update: Sat 06 Dec 2025 23:00:44 +0000 Files and hashes: 1: DujgrKmrgV8xwj_6lcbB9bHCo5o.roa (hash: a4pJAHSdUiicdCyM8IfHoN84JiEF8R3+OD1p+YBz9fA=) 2: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: CJopKB/2tFX/AQVSLwQLZgN46thKFR+50Ooq+0Jk7a4=) 3: xppN97XlpzM-dgpRtsN2V_p7lZQ.roa (hash: L5C0DF41lLv5y5vXorCy3jzo9T18wVqDFOb9OQ+U5+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:0e:7c:32:73:01:e0:bd:40:73:0c:49:7c:cb:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b Validity Not Before: Dec 5 23:00:44 2025 GMT Not After : Dec 6 23:00:44 2025 GMT Subject: CN=dc02133ef49b2003c51cd1bb1c5ff0d1e39f204b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:c6:01:7b:7b:e1:88:b8:b1:92:ac:11:3f: 57:c9:dc:3b:11:cf:10:ab:32:ce:dc:a7:79:d4:d9: 3c:2c:f8:3c:d1:f4:33:1b:0a:4e:3c:1f:93:02:a8: 65:e2:35:d8:d2:80:05:59:75:a4:f5:9c:b8:25:9e: 51:0a:29:c0:c0:0f:d6:f0:7a:d5:73:71:31:ef:0b: 30:e9:00:02:75:9b:36:f4:75:b2:b0:55:fb:4d:6f: 5a:28:81:1c:18:f3:b7:2b:9c:41:cb:ec:f3:6a:04: 53:4a:63:25:55:66:14:b8:5c:3e:34:33:74:74:5e: 89:36:4c:1c:01:f0:94:57:33:b1:cf:ae:9c:d2:d4: 73:cd:61:89:f1:cd:b6:91:38:d9:54:9c:9d:1d:bb: 36:ce:7b:cd:f3:02:1b:a6:c0:72:99:67:3d:71:51: aa:02:f2:80:48:a2:38:b5:76:8e:ef:d5:5a:1e:be: c5:c6:20:45:1f:ed:0c:b9:b6:fc:05:04:2f:e6:5c: ac:9f:3d:49:fd:b4:e4:19:99:79:1f:ff:62:1e:91: c0:67:25:54:37:91:04:60:8b:63:52:e8:a9:c0:07: 5d:81:f1:d5:2f:8a:71:02:f0:0a:3e:40:1c:0c:05: a4:17:b7:32:c8:cb:9f:74:1f:50:21:be:70:d6:34: 25:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:02:13:3E:F4:9B:20:03:C5:1C:D1:BB:1C:5F:F0:D1:E3:9F:20:4B X509v3 Authority Key Identifier: keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c1:5e:07:1d:75:35:c7:fb:bc:a8:21:32:8f:97:98:38:64: a4:36:e3:a3:5e:4f:ed:ae:d6:72:d5:e4:a9:05:ec:61:ec:d8: db:e3:48:c8:6e:0c:bb:6f:4b:b9:e3:a5:5a:23:5f:da:9e:15: d3:ec:12:77:f5:d8:71:f5:77:ac:6b:86:16:2e:2b:e4:6e:8b: 27:30:67:4b:0d:6d:8c:c0:0d:8c:1b:2c:e2:0f:3d:8d:f6:ae: 25:e3:62:28:a3:67:71:5a:96:b5:4e:db:09:09:32:6b:c5:b0: 9f:8a:f0:b4:9d:d2:b6:2c:36:cf:42:0b:25:75:c5:14:e7:21: e9:50:e7:36:8c:c2:ec:15:00:db:08:1a:99:29:6a:3d:0f:5d: ec:db:06:5b:fd:38:93:ed:a3:f8:1f:a6:b9:19:25:eb:75:9f: 63:bc:b9:40:1c:9d:3d:6e:58:ce:b2:c8:4f:19:32:8b:79:e8: 39:31:1a:72:c9:31:bb:cf:db:a6:8e:2c:1c:fe:5a:fb:17:c6: ad:ed:48:48:c4:a5:0e:41:c9:a6:a6:da:3a:63:d0:62:7f:c0: d0:fd:7b:06:0b:fc:45:4f:9d:03:1d:67:be:fd:d3:3a:32:6a: b1:1c:f4:66:80:81:eb:a6:9e:95:3c:15:09:e1:fe:e2:e5:18: c6:c7:d0:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvw58MnMB4L1AcwxJfMucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWE4OGRjNjc1Y2U1ZGMzNTU3NGJmZjYyOTBlMmFlODhj ZTA4MmIwHhcNMjUxMjA1MjMwMDQ0WhcNMjUxMjA2MjMwMDQ0WjAzMTEwLwYDVQQD EyhkYzAyMTMzZWY0OWIyMDAzYzUxY2QxYmIxYzVmZjBkMWUzOWYyMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoHGAXt74Yi4sZKsET9Xydw7Ec8Q qzLO3Kd51Nk8LPg80fQzGwpOPB+TAqhl4jXY0oAFWXWk9Zy4JZ5RCinAwA/W8HrV c3Ex7wsw6QACdZs29HWysFX7TW9aKIEcGPO3K5xBy+zzagRTSmMlVWYUuFw+NDN0 dF6JNkwcAfCUVzOxz66c0tRzzWGJ8c22kTjZVJydHbs2znvN8wIbpsBymWc9cVGq AvKASKI4tXaO79VaHr7FxiBFH+0Mubb8BQQv5lysnz1J/bTkGZl5H/9iHpHAZyVU N5EEYItjUuipwAddgfHVL4pxAvAKPkAcDAWkF7cyyMufdB9QIb5w1jQlzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwCEz70myADxRzRuxxf8NHjnyBLMB8GA1UdIwQY MBaAFEWqiNxnXOXcNVdL/2KQ4q6IzggrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMt MWQ3YjIyOWQ0ZTNiLzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMtMWQ3YjIyOWQ0ZTNi LzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8FeBx11 Ncf7vKghMo+XmDhkpDbjo15P7a7WctXkqQXsYezY2+NIyG4Mu29LueOlWiNf2p4V 0+wSd/XYcfV3rGuGFi4r5G6LJzBnSw1tjMANjBss4g89jfauJeNiKKNncVqWtU7b CQkya8Wwn4rwtJ3Stiw2z0ILJXXFFOch6VDnNozC7BUA2wgamSlqPQ9d7NsGW/04 k+2j+B+muRkl63WfY7y5QBydPW5YzrLITxkyi3noOTEacskxu8/bpo4sHP5a+xfG re1ISMSlDkHJpqbaOmPQYn/A0P17Bgv8RU+dAx1nvv3TOjJqsRz0ZoCB66aelTwV CeH+4uUYxsfQSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:57 2025 by rpki-client