This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft File: RdGncWAlFxEzoyAslGKg6r1mBoI.mft (raw, json) Hash identifier: ZSqJMdS+nl3tdUoSMfTSeVp0mTLnXgAdRfNYgeSk5R8= Subject key identifier: EA:1F:D7:1C:5D:10:00:22:E3:97:BC:24:04:56:46:E7:44:21:07:3B Authority key identifier: 45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82 Certificate issuer: /CN=45d1a7716025171133a3202c9462a0eabd660682 Certificate serial: 019AF3F7B57C5868F18D920F030B646BED11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft Manifest number: 06F7 Signing time: Sat 06 Dec 2025 14:01:28 +0000 Manifest this update: Sat 06 Dec 2025 14:01:28 +0000 Manifest next update: Sun 07 Dec 2025 14:01:28 +0000 Files and hashes: 1: RdGncWAlFxEzoyAslGKg6r1mBoI.crl (hash: StnijFwgTEcxdYHV/WU+47rcN7B6ts/ii3RMdAUeuWM=) 2: p6pII2yeX9CFzHUBZ-7ECA5XoLc.roa (hash: a0i/QIPJclzVoZAHggGCZw2DH9on4V8xPPUo2d8z17I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b5:7c:58:68:f1:8d:92:0f:03:0b:64:6b:ed:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45d1a7716025171133a3202c9462a0eabd660682 Validity Not Before: Dec 6 14:01:28 2025 GMT Not After : Dec 7 14:01:28 2025 GMT Subject: CN=ea1fd71c5d100022e397bc24045646e74421073b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:6a:62:62:cc:76:98:f1:8a:a0:c3:e9:f8: 78:d4:6f:4f:82:16:5b:57:94:79:dc:9f:57:d0:71: a8:20:91:4f:dd:f3:66:55:58:e6:0a:cf:d4:3d:c7: e2:9a:4c:04:8c:c7:e5:3b:0a:65:41:2e:f3:5b:dd: 10:16:e3:c7:19:d4:e2:09:6b:c1:55:6e:5a:da:07: c9:47:6f:88:e1:53:2e:7f:ca:50:5b:64:76:37:f0: d7:59:39:3a:fb:86:df:5e:c7:c7:0e:aa:d4:0a:83: 60:f5:ff:fa:d6:31:65:24:84:72:f7:63:13:bf:3f: 0a:a1:7f:cf:d9:32:c6:af:e6:85:6a:05:e8:09:b9: ce:33:a6:ca:da:ba:13:92:21:b5:a6:15:f3:9c:01: 1d:37:f7:81:34:a6:47:f9:56:b7:e7:be:cf:18:60: cd:4d:90:71:9f:27:c4:07:24:2d:fa:bd:a6:26:ff: a0:21:17:ad:f9:27:ac:75:ab:df:af:96:67:79:05: bb:77:c8:93:56:38:13:bb:52:fc:03:c4:f1:a1:bc: b3:a0:cf:c1:60:5f:09:80:b1:3a:dc:c9:3d:c1:44: d1:1a:13:fa:8c:3b:52:54:c5:c8:85:7f:ac:a5:33: 4c:f4:56:c7:36:41:c7:66:55:53:f3:b0:57:6a:f9: 73:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1F:D7:1C:5D:10:00:22:E3:97:BC:24:04:56:46:E7:44:21:07:3B X509v3 Authority Key Identifier: keyid:45:D1:A7:71:60:25:17:11:33:A3:20:2C:94:62:A0:EA:BD:66:06:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdGncWAlFxEzoyAslGKg6r1mBoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/15c47c-2c7c-481c-bf89-807246ca7a24/1/RdGncWAlFxEzoyAslGKg6r1mBoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9a:e7:d1:a9:c9:d9:6f:66:f7:b0:e9:29:f7:9b:9b:c8:d2: 3d:0c:e2:a2:78:47:a9:f7:5f:3c:c6:7f:f2:1c:7f:fb:89:17: 4d:0b:11:9a:27:84:c5:4b:e5:38:1d:95:26:8e:50:38:33:6b: 20:5b:26:10:dd:62:7f:d1:d1:0c:0e:95:ca:0b:3e:18:c5:99: 5b:d4:6c:05:21:78:29:77:74:7b:2b:f5:14:90:1f:6d:73:05: fc:c4:2f:32:2e:2d:89:c2:91:a2:95:d5:49:12:d9:2c:79:93: 87:b9:a7:7e:12:b8:e5:7f:fa:51:98:5b:94:ba:6b:b9:f5:60: 30:86:6f:18:cc:da:f2:95:ee:03:5d:05:28:f9:72:eb:52:cc: d2:3d:4f:b3:7e:9e:37:81:3e:99:22:d4:7b:7e:d2:cb:24:28: 1e:a5:21:da:71:61:66:5a:8f:93:22:f9:e0:e4:8a:ad:5e:ce: 4c:5b:16:b8:f6:27:d4:77:4d:1d:02:7a:d5:3d:ee:40:80:31: 05:53:7d:d0:50:1c:2a:e7:f7:45:af:92:a4:7d:51:c9:21:a6: b2:4f:83:43:8b:ad:2f:44:4d:70:97:64:84:4b:ac:a2:12:29: 0d:94:95:27:05:e8:34:83:3e:00:33:fa:64:8b:51:7f:2f:6c: 16:ba:a6:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97V8WGjxjZIPAwtka+0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZDFhNzcxNjAyNTE3MTEzM2EzMjAyYzk0NjJhMGVhYmQ2 NjA2ODIwHhcNMjUxMjA2MTQwMTI4WhcNMjUxMjA3MTQwMTI4WjAzMTEwLwYDVQQD EyhlYTFmZDcxYzVkMTAwMDIyZTM5N2JjMjQwNDU2NDZlNzQ0MjEwNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1FqYmLMdpjxiqDD6fh41G9PghZb V5R53J9X0HGoIJFP3fNmVVjmCs/UPcfimkwEjMflOwplQS7zW90QFuPHGdTiCWvB VW5a2gfJR2+I4VMuf8pQW2R2N/DXWTk6+4bfXsfHDqrUCoNg9f/61jFlJIRy92MT vz8KoX/P2TLGr+aFagXoCbnOM6bK2roTkiG1phXznAEdN/eBNKZH+Va3577PGGDN TZBxnyfEByQt+r2mJv+gIRet+Sesdavfr5ZneQW7d8iTVjgTu1L8A8TxobyzoM/B YF8JgLE63Mk9wUTRGhP6jDtSVMXIhX+spTNM9FbHNkHHZlVT87BXavlzLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOof1xxdEAAi45e8JARWRudEIQc7MB8GA1UdIwQY MBaAFEXRp3FgJRcRM6MgLJRioOq9ZgaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmRHbmNXQWxGeEV6b3lBc2xHS2c2cjFtQm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xNWM0N2MtMmM3Yy00ODFjLWJmODkt ODA3MjQ2Y2E3YTI0LzEvUmRHbmNXQWxGeEV6b3lBc2xHS2c2cjFtQm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xNWM0N2MtMmM3Yy00ODFjLWJmODktODA3MjQ2Y2E3YTI0 LzEvUmRHbmNXQWxGeEV6b3lBc2xHS2c2cjFtQm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfprn0anJ 2W9m97DpKfebm8jSPQzionhHqfdfPMZ/8hx/+4kXTQsRmieExUvlOB2VJo5QODNr IFsmEN1if9HRDA6Vygs+GMWZW9RsBSF4KXd0eyv1FJAfbXMF/MQvMi4ticKRopXV SRLZLHmTh7mnfhK45X/6UZhblLprufVgMIZvGMza8pXuA10FKPly61LM0j1Ps36e N4E+mSLUe37SyyQoHqUh2nFhZlqPkyL54OSKrV7OTFsWuPYn1HdNHQJ61T3uQIAx BVN90FAcKuf3Ra+SpH1RySGmsk+DQ4utL0RNcJdkhEusohIpDZSVJwXoNIM+ADP6 ZItRfy9sFrqmAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:35:59 2025 by rpki-client