This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft File: 484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json) Hash identifier: 6E65nMr3GKXIBhKYs6difwqvFnpNHaoz3yYxpyEvsF0= Subject key identifier: F3:98:B1:D2:63:4A:79:2B:EB:B5:BD:3D:33:CC:71:51:19:63:AE:DB Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2 Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2 Certificate serial: 019AF42DE3AF395E23CA6E9735C226625078 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft Manifest number: 0DF5 Signing time: Sat 06 Dec 2025 15:00:39 +0000 Manifest this update: Sat 06 Dec 2025 15:00:39 +0000 Manifest next update: Sun 07 Dec 2025 15:00:39 +0000 Files and hashes: 1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: Hj4ba196oRi4TUyS1PVfbCbV15cK401f4SiBnPTOZQs=) 2: qcoI9QRYFLMa_u8cjDZFd9W6S20.roa (hash: G2neLmn+8/k9VBrxT3PrvfgosA6NhKRornhd6evsbec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:e3:af:39:5e:23:ca:6e:97:35:c2:26:62:50:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2 Validity Not Before: Dec 6 15:00:39 2025 GMT Not After : Dec 7 15:00:39 2025 GMT Subject: CN=f398b1d2634a792bebb5bd3d33cc71511963aedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:59:c9:47:a8:60:a0:36:d8:ea:aa:26:cc: f9:10:eb:99:bf:97:05:c6:23:a7:e7:4d:97:45:cf: 20:a6:60:fc:5d:6a:60:97:6c:a1:88:e7:14:8d:f8: bb:77:bb:56:65:19:7c:a0:1b:ac:59:28:ca:e5:e9: 4d:bc:1b:a5:23:44:e0:97:5d:e0:a6:65:19:d8:06: 06:ee:e0:5e:25:39:a5:b2:b1:3b:9a:d2:9e:df:01: 3b:de:f3:38:ec:52:89:98:cb:26:e1:f0:bd:6a:24: 02:cd:7c:96:9f:2b:d0:2c:9f:6a:81:54:7c:8b:7a: 3c:d8:73:c7:02:a3:c9:9f:b0:f4:64:42:9d:51:34: ff:65:33:a2:69:b4:db:58:11:cf:45:31:84:1b:0b: 29:89:dd:01:7c:86:9c:6f:79:82:91:5b:cc:83:ed: 61:40:40:19:39:f3:e4:90:10:01:0b:86:90:23:d9: 68:53:16:4d:6f:dd:8e:5d:1e:20:a4:9a:18:1b:f7: c5:0f:da:ba:cd:7c:dc:98:ed:3c:4d:2c:bc:b1:57: de:21:f2:82:59:5b:d8:df:10:8e:0b:87:0b:b1:f8: 67:ba:a9:45:95:e7:ee:98:17:9f:fc:c5:8e:7c:9d: 97:db:c2:1b:9f:2d:0f:7e:63:2e:87:23:72:1a:b0: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:98:B1:D2:63:4A:79:2B:EB:B5:BD:3D:33:CC:71:51:19:63:AE:DB X509v3 Authority Key Identifier: keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4b:5f:37:de:cb:bf:0f:93:42:d7:c3:71:ad:6e:45:41:fb: 93:5e:47:96:8b:5f:eb:8d:fb:e8:37:07:26:2a:a5:e7:3d:e0: c4:d4:8c:e0:4d:bd:08:09:b9:f9:29:07:14:b2:85:d2:21:61: 03:10:72:2a:b2:d2:d5:7f:8a:e9:01:a2:8a:95:5f:b3:60:30: f8:93:f9:b4:14:14:86:4b:0e:ae:08:e9:62:e6:ab:6a:f5:8e: e7:2b:2c:d6:52:25:82:b9:98:82:d9:4d:2d:02:6d:f5:c7:c0: e9:1a:27:3c:21:d3:ae:f1:7f:39:9f:61:71:7a:04:bc:18:b2: c3:a4:59:f4:00:74:d5:c7:81:74:1b:f3:2f:33:f3:55:15:ae: d0:e0:28:45:c7:9d:82:8b:3a:86:2c:e8:a8:ea:f9:60:27:59: c1:34:01:59:f7:43:22:7c:74:e6:92:22:72:e0:1b:a7:b4:40: 28:a8:33:c8:8c:61:95:92:4e:9e:84:a0:59:ce:de:46:f1:5c: 6c:dc:b3:d4:f3:68:43:87:bd:55:6c:77:bd:d2:45:90:da:2f: 6e:55:fa:60:ce:a0:5a:8d:44:7f:64:c8:aa:50:4f:fb:b1:51: 0d:b3:3f:81:66:3e:c4:e9:8d:48:bc:a6:d1:ec:32:4a:08:a6: d2:14:48:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LeOvOV4jym6XNcImYlB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2UwNjlkZmM1YjYwODg3NmQ2NDI0YTMyZTc4M2E5OGE5 MmVmZjIwHhcNMjUxMjA2MTUwMDM5WhcNMjUxMjA3MTUwMDM5WjAzMTEwLwYDVQQD EyhmMzk4YjFkMjYzNGE3OTJiZWJiNWJkM2QzM2NjNzE1MTE5NjNhZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAVZyUeoYKA22OqqJsz5EOuZv5cF xiOn502XRc8gpmD8XWpgl2yhiOcUjfi7d7tWZRl8oBusWSjK5elNvBulI0Tgl13g pmUZ2AYG7uBeJTmlsrE7mtKe3wE73vM47FKJmMsm4fC9aiQCzXyWnyvQLJ9qgVR8 i3o82HPHAqPJn7D0ZEKdUTT/ZTOiabTbWBHPRTGEGwspid0BfIacb3mCkVvMg+1h QEAZOfPkkBABC4aQI9loUxZNb92OXR4gpJoYG/fFD9q6zXzcmO08TSy8sVfeIfKC WVvY3xCOC4cLsfhnuqlFlefumBef/MWOfJ2X28Ibny0PfmMuhyNyGrDgQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOYsdJjSnkr67W9PTPMcVEZY67bMB8GA1UdIwQY MBaAFOPOBp38W2CIdtZCSjLng6mKku/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYt OTA4MTU0NWY1NjkxLzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYtOTA4MTU0NWY1Njkx LzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEtfN97L vw+TQtfDca1uRUH7k15Hlotf64376DcHJiql5z3gxNSM4E29CAm5+SkHFLKF0iFh AxByKrLS1X+K6QGiipVfs2Aw+JP5tBQUhksOrgjpYuaravWO5yss1lIlgrmYgtlN LQJt9cfA6RonPCHTrvF/OZ9hcXoEvBiyw6RZ9AB01ceBdBvzLzPzVRWu0OAoRced gos6hizoqOr5YCdZwTQBWfdDInx05pIicuAbp7RAKKgzyIxhlZJOnoSgWc7eRvFc bNyz1PNoQ4e9VWx3vdJFkNovblX6YM6gWo1Ef2TIqlBP+7FRDbM/gWY+xOmNSLym 0ewySgim0hRIvw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:19 2025 by rpki-client