This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json) Hash identifier: 1OpqmQPDb5+1CwVNxpRKleIdubd/G7C/u7639KgOZqM= Subject key identifier: 4B:07:23:1E:00:A7:EC:C6:B8:49:30:38:0E:42:BB:82:E5:60:E5:D0 Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62 Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762 Certificate serial: 019AF19B38184E2BF8FAE6BD751C1B7EB8F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft Manifest number: 101E Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: I1hQSc_aI8nnk6g1vpjyTdXYNJI.roa (hash: h2IeKZyMJz7T7nR3ubhVngPyKXqYp/CJM8eA4imhJCk=) 2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: IVX4nteCHolM0DFoCPN97AIQIcX8/0c2pvHBkOsSebQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:38:18:4e:2b:f8:fa:e6:bd:75:1c:1b:7e:b8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762 Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=4b07231e00a7ecc6b84930380e42bb82e560e5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:f0:c3:c1:b4:25:fb:7c:11:38:ff:bd:6d: 3b:d5:3b:eb:43:b1:63:c0:1f:60:8c:40:c2:0b:34: 55:aa:50:67:b2:a1:b2:72:7f:39:0b:1d:11:3d:f0: 1e:2f:17:ca:de:a4:21:50:a5:c9:3c:72:b5:bb:da: 72:87:7e:f0:1a:3a:29:84:80:26:81:1a:5a:53:20: 49:6c:26:6f:a5:5d:54:ae:46:be:45:cb:95:9d:97: c1:04:6b:4c:3b:a9:41:2c:15:0d:c0:32:9c:6e:4e: 6c:41:9d:79:80:a8:69:c8:82:31:cc:e4:2e:2b:7b: 8a:fb:0c:a5:b9:a8:0b:38:f8:f3:12:83:d8:94:ce: ac:93:40:5a:a3:87:09:04:cf:10:94:72:3d:96:75: fd:64:d4:99:97:ad:60:0c:df:e9:1c:23:bf:24:ed: 17:05:23:21:df:17:77:dd:b9:a0:ef:0f:44:6a:a2: c1:f6:9b:f3:78:1d:f7:ad:97:64:d4:27:2c:03:3f: 1b:a0:71:e1:df:19:7c:96:ab:d0:e3:15:20:d9:33: 80:ff:1e:48:8d:81:58:70:ec:00:ca:c1:f3:ca:c9: 95:76:3e:9f:cf:59:4a:b3:92:08:29:be:9f:59:4a: a2:94:64:7d:a8:37:01:a1:4d:19:04:3b:31:14:4e: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:07:23:1E:00:A7:EC:C6:B8:49:30:38:0E:42:BB:82:E5:60:E5:D0 X509v3 Authority Key Identifier: keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4e:08:98:ae:ce:fe:41:16:63:60:13:9e:a9:cd:5e:4f:8b: 7d:6c:c9:e4:a2:a4:98:f5:95:34:ac:57:eb:34:1e:a3:1b:44: 5e:89:0a:a1:1c:7c:b0:d1:09:95:4b:15:75:f0:b6:1e:b8:d8: e9:0a:8e:5e:95:5a:a8:0d:57:4b:74:bb:b7:85:eb:37:ee:9c: 42:67:e4:f2:ab:99:e1:09:3c:02:ff:ef:0d:17:e8:da:e9:e7: 99:4f:93:bc:70:5d:f3:7e:77:1f:72:c2:ed:9a:05:f6:44:c4: b6:0b:5f:f4:d8:23:e5:41:a3:f8:12:9f:1d:ec:d7:cb:51:2a: 7c:08:3e:c2:d3:5c:a9:c0:59:a2:ce:2e:1a:ca:ac:fe:80:c9: d3:dd:88:df:25:7c:46:8f:b6:48:b1:ab:1f:81:b7:4e:62:1b: 91:4a:b3:8b:9a:b1:cd:6a:a8:da:dd:ca:11:84:6c:91:bf:1f: 86:f1:45:5b:d1:16:9d:bc:98:07:89:7d:73:42:ab:4d:9d:4b: de:8f:18:42:4a:52:28:f4:30:da:7b:82:5e:98:77:5a:b0:f6: ab:a9:e8:36:8c:8d:82:50:4f:80:fa:68:15:0c:d2:57:33:f6: 14:79:3c:1a:01:1c:f4:7c:bc:86:59:1d:d4:28:2a:23:4c:6b: b3:d4:1d:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzgYTiv4+ua9dRwbfrjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZThlNWRmZWM2ODNhZTVmMWEwZWJlMGZiOTZmYTI1NmIz MDQ3NjIwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD Eyg0YjA3MjMxZTAwYTdlY2M2Yjg0OTMwMzgwZTQyYmI4MmU1NjBlNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvvww8G0Jft8ETj/vW071TvrQ7Fj wB9gjEDCCzRVqlBnsqGycn85Cx0RPfAeLxfK3qQhUKXJPHK1u9pyh37wGjophIAm gRpaUyBJbCZvpV1Urka+RcuVnZfBBGtMO6lBLBUNwDKcbk5sQZ15gKhpyIIxzOQu K3uK+wyluagLOPjzEoPYlM6sk0Bao4cJBM8QlHI9lnX9ZNSZl61gDN/pHCO/JO0X BSMh3xd33bmg7w9EaqLB9pvzeB33rZdk1CcsAz8boHHh3xl8lqvQ4xUg2TOA/x5I jYFYcOwAysHzysmVdj6fz1lKs5IIKb6fWUqilGR9qDcBoU0ZBDsxFE5yJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsHIx4Ap+zGuEkwOA5Cu4LlYOXQMB8GA1UdIwQY MBaAFK7o5d/saDrl8aDr4PuW+iVrMEdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgt NjNhMGJlNmE4ZTVmLzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgtNjNhMGJlNmE4ZTVm LzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE4ImK7O /kEWY2ATnqnNXk+LfWzJ5KKkmPWVNKxX6zQeoxtEXokKoRx8sNEJlUsVdfC2HrjY 6QqOXpVaqA1XS3S7t4XrN+6cQmfk8quZ4Qk8Av/vDRfo2unnmU+TvHBd8353H3LC 7ZoF9kTEtgtf9Ngj5UGj+BKfHezXy1EqfAg+wtNcqcBZos4uGsqs/oDJ092I3yV8 Ro+2SLGrH4G3TmIbkUqzi5qxzWqo2t3KEYRskb8fhvFFW9EWnbyYB4l9c0KrTZ1L 3o8YQkpSKPQw2nuCXph3WrD2q6noNoyNglBPgPpoFQzSVzP2FHk8GgEc9Hy8hlkd 1CgqI0xrs9QdOg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:25 2025 by rpki-client