This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft File: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json) Hash identifier: QnX0mtHu3eErvGfj5rA3g6Bd9pNO9HjzsEGLKQ2Kg/I= Subject key identifier: C5:C5:A3:D9:BF:77:9D:C9:DE:E5:EA:89:3A:08:DA:B2:58:97:99:12 Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3 Certificate issuer: /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3 Certificate serial: 019AF23F820B459E1513EA61406CAE1C8230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft Manifest number: 11E5 Signing time: Sat 06 Dec 2025 06:00:39 +0000 Manifest this update: Sat 06 Dec 2025 06:00:39 +0000 Manifest next update: Sun 07 Dec 2025 06:00:39 +0000 Files and hashes: 1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: /JAK/He+iFeAEcfWu3WfFwW6p53d4hWPazRt04+9lyQ=) 2: o6lJ-qfhS9C09IpxbbRvCOiFoHM.roa (hash: s9YF0YMackzUIop5+kUK7Z2zh1o4IPsYyQyvrXKhSCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:82:0b:45:9e:15:13:ea:61:40:6c:ae:1c:82:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3 Validity Not Before: Dec 6 06:00:39 2025 GMT Not After : Dec 7 06:00:39 2025 GMT Subject: CN=c5c5a3d9bf779dc9dee5ea893a08dab258979912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:89:19:52:26:18:0d:d3:87:a0:fb:c4:d5:e7: 81:0e:94:b9:25:d9:55:52:e2:b7:80:28:1f:9b:a9: 29:91:d7:3f:6d:1b:51:f1:31:1f:00:46:ee:44:9d: df:63:83:96:1b:40:d0:de:46:46:cb:b5:eb:2c:52: c3:39:a1:06:81:c0:15:a5:40:b4:b1:c4:23:64:c4: 8b:d9:28:d9:87:df:bc:5b:95:bd:a6:2c:63:a6:aa: f1:9f:a5:0f:d2:6a:e4:cf:b4:76:16:dd:38:e9:42: da:c8:35:50:74:74:b9:83:a0:e4:d3:87:b3:7b:4e: 5f:0f:fd:95:d8:01:e8:ce:c1:cd:61:61:a8:1d:63: 82:49:93:a1:d3:1c:3d:8c:ad:a5:05:ac:eb:f2:3d: c1:ca:83:ac:0c:a2:40:ff:8b:ed:92:01:df:a4:8e: 5b:ed:3a:eb:4b:6b:42:17:22:20:7c:26:90:e6:9d: c7:be:46:e4:e4:1e:db:45:f3:28:2e:bb:29:fc:51: 1c:02:01:b0:c7:f9:8e:eb:65:01:2e:25:0e:bb:9a: 07:0c:e6:1b:58:c8:79:b6:c7:35:71:83:f7:78:80: 76:e7:d4:52:ce:3e:9a:08:60:0a:77:e0:b3:8e:a0: 1c:27:31:bc:b3:20:b4:5c:dc:de:a5:35:0f:85:15: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C5:A3:D9:BF:77:9D:C9:DE:E5:EA:89:3A:08:DA:B2:58:97:99:12 X509v3 Authority Key Identifier: keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4c:7c:e1:a0:78:6c:a0:b9:9b:52:79:3e:22:1a:26:c4:c9: d3:48:4a:f3:2a:ec:d8:d9:40:5e:71:d8:88:90:42:ae:6b:88: 18:52:91:75:6f:d0:b5:e4:0c:e5:31:ce:ec:54:94:93:43:ba: af:b1:b4:bd:78:85:2c:8c:2c:ae:7f:6a:e7:37:ae:2b:f1:a2: cd:53:41:d3:5c:c9:9b:0e:fe:1e:c9:fa:2a:95:10:8d:27:28: 91:30:41:76:2c:fb:07:cd:03:3c:34:cf:d9:3b:f2:78:1b:77: cd:90:a7:19:32:b0:cc:c7:81:72:03:f0:15:b3:5c:70:19:10: fb:22:0b:28:00:60:5f:65:9e:fc:ea:98:8a:64:e7:97:2e:90: 3b:66:1c:18:73:3a:72:a0:5f:17:60:56:45:f4:2a:18:aa:18: 6a:dd:f8:37:49:f7:ce:c1:54:ad:c9:fb:85:0b:c6:ae:23:d6: a4:1b:b3:0c:73:d6:f2:a2:b3:38:0d:7c:25:f2:c0:b3:02:ba: b0:79:e1:45:6d:43:19:d7:e7:30:d5:cc:ab:1f:65:a6:d4:94: 33:4b:eb:b3:ad:75:b5:1f:62:fe:a3:0e:d2:bf:20:3c:1c:b3: d5:9f:02:12:d8:33:15:48:24:80:f8:ad:d9:e4:f4:97:a1:ca: 94:e1:23:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4ILRZ4VE+phQGyuHIIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1Y2Y5ZGMwYzdiN2ZjNGEzMzZlNGVlZTU3YjFlYzE5NDhj OGRkZjMwHhcNMjUxMjA2MDYwMDM5WhcNMjUxMjA3MDYwMDM5WjAzMTEwLwYDVQQD EyhjNWM1YTNkOWJmNzc5ZGM5ZGVlNWVhODkzYTA4ZGFiMjU4OTc5OTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94kZUiYYDdOHoPvE1eeBDpS5JdlV UuK3gCgfm6kpkdc/bRtR8TEfAEbuRJ3fY4OWG0DQ3kZGy7XrLFLDOaEGgcAVpUC0 scQjZMSL2SjZh9+8W5W9pixjpqrxn6UP0mrkz7R2Ft046ULayDVQdHS5g6Dk04ez e05fD/2V2AHozsHNYWGoHWOCSZOh0xw9jK2lBazr8j3ByoOsDKJA/4vtkgHfpI5b 7TrrS2tCFyIgfCaQ5p3Hvkbk5B7bRfMoLrsp/FEcAgGwx/mO62UBLiUOu5oHDOYb WMh5tsc1cYP3eIB259RSzj6aCGAKd+CzjqAcJzG8syC0XNzepTUPhRXEuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXFo9m/d53J3uXqiToI2rJYl5kSMB8GA1UdIwQY MBaAFEXPncDHt/xKM25O7lex7BlIyN3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84OTIwZmMtYmJhZS00MTMyLWI3NTIt ZWU3MmYyYjNhNDczLzEvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84OTIwZmMtYmJhZS00MTMyLWI3NTItZWU3MmYyYjNhNDcz LzEvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEx84aB4 bKC5m1J5PiIaJsTJ00hK8yrs2NlAXnHYiJBCrmuIGFKRdW/QteQM5THO7FSUk0O6 r7G0vXiFLIwsrn9q5zeuK/GizVNB01zJmw7+Hsn6KpUQjScokTBBdiz7B80DPDTP 2TvyeBt3zZCnGTKwzMeBcgPwFbNccBkQ+yILKABgX2We/OqYimTnly6QO2YcGHM6 cqBfF2BWRfQqGKoYat34N0n3zsFUrcn7hQvGriPWpBuzDHPW8qKzOA18JfLAswK6 sHnhRW1DGdfnMNXMqx9lptSUM0vrs611tR9i/qMO0r8gPByz1Z8CEtgzFUgkgPit 2eT0l6HKlOEjcg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:24 2025 by rpki-client