This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json) Hash identifier: s9BjtkL9qs7fKKC0+ivMjrKCr8rBegt1br6pplmhcl8= Subject key identifier: 46:0C:28:AB:A8:B4:5E:FA:88:42:C4:47:CF:E6:B5:F6:8C:BF:04:75 Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c Certificate serial: 019AF1D21A120906453DACF2C0D59AC43077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft Manifest number: 0C90 Signing time: Sat 06 Dec 2025 04:01:09 +0000 Manifest this update: Sat 06 Dec 2025 04:01:09 +0000 Manifest next update: Sun 07 Dec 2025 04:01:09 +0000 Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=) 2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: dLgYECX154WMvOHDXbJzNo+yYSPEXeTUIUJ86pzTlBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1a:12:09:06:45:3d:ac:f2:c0:d5:9a:c4:30:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c Validity Not Before: Dec 6 04:01:09 2025 GMT Not After : Dec 7 04:01:09 2025 GMT Subject: CN=460c28aba8b45efa8842c447cfe6b5f68cbf0475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:5a:d9:23:02:53:c2:7f:0d:46:c7:b9:b5: e1:de:af:58:d6:1b:05:7b:7f:89:40:64:25:87:cd: a2:f1:f0:2a:39:c2:16:f7:b6:e3:38:9c:a6:67:95: 24:f4:b8:02:5c:e1:5f:ad:5e:1d:50:7c:6e:d7:ea: 05:a9:8a:af:cc:c4:53:bd:4c:28:da:0e:1d:de:e3: 61:4b:4e:82:ae:41:03:54:24:f4:89:2b:fe:3e:ad: e0:0d:f7:ab:ef:e8:39:b2:3d:67:00:b7:ba:44:9d: cd:77:a6:fc:18:3c:4b:77:64:fa:40:aa:f2:2a:ee: 9c:91:9b:92:72:1c:f9:c4:af:b5:0d:57:e0:46:1f: 3e:6a:ef:d4:22:4f:48:a1:61:8e:b9:2b:56:88:9f: 06:63:d0:d8:1f:fb:f6:a1:97:3d:fa:af:26:04:dc: 54:28:37:d2:fa:f3:50:9f:fe:dc:8e:f7:f2:b6:31: 02:db:53:e0:05:b0:6d:c4:b6:87:1b:e7:86:79:b6: cb:b8:ee:6e:32:1d:d3:f0:51:84:c4:8e:b2:76:12: 7e:48:ec:55:6e:1e:db:98:11:fe:1b:7c:82:74:39: 30:d9:9c:73:9b:bb:2c:08:f7:94:f7:63:5e:49:0c: f6:52:ea:b8:6a:fd:70:42:f7:e4:c5:63:b1:a5:e6: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0C:28:AB:A8:B4:5E:FA:88:42:C4:47:CF:E6:B5:F6:8C:BF:04:75 X509v3 Authority Key Identifier: keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:77:73:96:0d:71:03:bf:ae:fe:7c:c7:ff:de:bd:48:37:9c: b8:5f:c2:53:80:f9:25:c7:c9:0f:7d:0b:3d:d8:ca:4b:c6:c1: c5:8d:4e:c5:a7:7d:75:ec:97:15:d3:0f:e8:f4:2d:51:1e:89: 38:16:4f:ec:b2:d3:4a:fd:7c:de:8e:bb:c5:6d:d0:b1:19:47: e9:ca:3b:e7:3e:0e:8f:2e:c1:26:9c:20:53:94:86:8f:90:17: 07:4d:1a:91:11:56:b6:72:7e:7d:1d:18:43:4a:e0:dd:cd:86: d6:55:a4:58:39:f8:a6:50:52:7a:27:74:76:30:0e:9d:9d:dc: d2:50:77:cd:77:ca:ec:ff:aa:9b:58:c9:05:dd:91:0a:70:83: 85:2d:9c:98:68:93:fc:59:0d:e5:2e:f2:e9:c4:75:fc:cc:2b: b5:27:76:ad:64:df:d8:09:30:39:56:d3:ea:92:93:8e:0a:9c: 8b:ec:3b:cd:b2:e6:41:f5:07:4b:78:23:e1:57:ea:4c:98:f8: ff:e0:cb:f6:b9:b3:8b:0c:a8:c1:30:6f:cb:d6:55:90:5e:83: 9e:4b:83:11:3b:49:ee:52:f0:92:38:e0:96:20:d3:9d:fe:8c: 3c:13:b1:71:e0:33:d6:4e:05:5c:ca:31:d2:12:2c:26:92:11: 22:9a:b6:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hoSCQZFPazywNWaxDB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZWM0MzRmODIxYzg2YjdlZTYzMTY2OTFkNzFjYzYxYzQw YzM0NmMwHhcNMjUxMjA2MDQwMTA5WhcNMjUxMjA3MDQwMTA5WjAzMTEwLwYDVQQD Eyg0NjBjMjhhYmE4YjQ1ZWZhODg0MmM0NDdjZmU2YjVmNjhjYmYwNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPha2SMCU8J/DUbHubXh3q9Y1hsF e3+JQGQlh82i8fAqOcIW97bjOJymZ5Uk9LgCXOFfrV4dUHxu1+oFqYqvzMRTvUwo 2g4d3uNhS06CrkEDVCT0iSv+Pq3gDfer7+g5sj1nALe6RJ3Nd6b8GDxLd2T6QKry Ku6ckZuSchz5xK+1DVfgRh8+au/UIk9IoWGOuStWiJ8GY9DYH/v2oZc9+q8mBNxU KDfS+vNQn/7cjvfytjEC21PgBbBtxLaHG+eGebbLuO5uMh3T8FGExI6ydhJ+SOxV bh7bmBH+G3yCdDkw2Zxzm7ssCPeU92NeSQz2Uuq4av1wQvfkxWOxpebcxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYMKKuotF76iELER8/mtfaMvwR1MB8GA1UdIwQY MBaAFK7sQ0+CHIa37mMWaR1xzGHEDDRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUt OTEwZTA4MTBjYTk0LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUtOTEwZTA4MTBjYTk0 LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXndzlg1x A7+u/nzH/969SDecuF/CU4D5JcfJD30LPdjKS8bBxY1Oxad9deyXFdMP6PQtUR6J OBZP7LLTSv183o67xW3QsRlH6co75z4Ojy7BJpwgU5SGj5AXB00akRFWtnJ+fR0Y Q0rg3c2G1lWkWDn4plBSeid0djAOnZ3c0lB3zXfK7P+qm1jJBd2RCnCDhS2cmGiT /FkN5S7y6cR1/MwrtSd2rWTf2AkwOVbT6pKTjgqci+w7zbLmQfUHS3gj4VfqTJj4 /+DL9rmziwyowTBvy9ZVkF6DnkuDETtJ7lLwkjjgliDTnf6MPBOxceAz1k4FXMox 0hIsJpIRIpq2Ew== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:52 2025 by rpki-client