This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft File: RU-dLb7ZdFOEBaefbsfobErt09E.mft (raw, json) Hash identifier: NAkgOhaX3Vai6Q1OLhMhH12tum5g1L4sqJEsVCsEMcY= Subject key identifier: AE:DB:F4:02:5E:6F:2C:30:5E:D0:B6:1F:6E:8E:A7:A9:E9:E8:23:0F Authority key identifier: 45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1 Certificate issuer: /CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1 Certificate serial: 019AF276C181641810A6C1FEFCDCA4C195E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft Manifest number: 1279 Signing time: Sat 06 Dec 2025 07:01:00 +0000 Manifest this update: Sat 06 Dec 2025 07:01:00 +0000 Manifest next update: Sun 07 Dec 2025 07:01:00 +0000 Files and hashes: 1: A8fXWSeNOGLpZBq5n912XqwunjQ.roa (hash: AcIcq2rjaaC1zEYSslp0dwr1gScXP+xKrcPZfoqgVE0=) 2: RU-dLb7ZdFOEBaefbsfobErt09E.crl (hash: Y583nvS3MRHXJddofkAn5fxT3Voactn8T6x8tIkUiBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c1:81:64:18:10:a6:c1:fe:fc:dc:a4:c1:95:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454f9d2dbed974538405a79f6ec7e86c4aedd3d1 Validity Not Before: Dec 6 07:01:00 2025 GMT Not After : Dec 7 07:01:00 2025 GMT Subject: CN=aedbf4025e6f2c305ed0b61f6e8ea7a9e9e8230f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4e:44:35:a0:34:a6:03:bb:62:0d:8b:7c:d3: f7:07:22:22:95:de:bc:c6:07:74:bd:92:a4:bc:df: 0f:ea:98:b6:5e:84:06:f1:a9:73:89:17:c0:33:3c: b7:9c:62:8b:f1:5e:a7:0e:eb:53:94:68:b3:47:f7: 56:55:d4:55:9d:54:90:42:f4:38:75:e9:ef:a5:a2: 70:15:20:dc:e5:43:21:34:ea:12:4e:ed:7a:cf:3a: 28:30:27:f1:ce:99:18:82:4a:41:21:0e:87:bf:a4: 56:dd:75:d7:86:ad:63:d4:5f:a6:22:23:43:03:89: 83:ba:34:03:ee:1a:d3:a0:30:6a:c4:d2:b6:af:ce: 33:3a:56:7e:7c:81:f7:13:ba:fb:fc:2b:50:f9:32: db:7f:3a:41:a8:49:38:41:cc:fc:72:39:2d:e7:4a: fb:86:4a:ba:57:e7:da:02:5a:ec:c9:27:f0:1d:11: 34:d2:0f:5c:c1:5a:31:76:c3:92:2d:8f:f2:ea:76: 9b:bf:8d:a9:13:c3:75:c8:97:a0:93:4a:b8:01:4e: 66:cf:d7:dd:4a:fc:55:30:2c:ac:e1:cf:cf:40:13: b9:f2:39:08:bb:e1:92:a3:9e:2a:f4:b3:d8:be:a5: 42:e7:3e:53:50:e8:9c:ab:cb:9f:2e:df:4e:54:a1: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DB:F4:02:5E:6F:2C:30:5E:D0:B6:1F:6E:8E:A7:A9:E9:E8:23:0F X509v3 Authority Key Identifier: keyid:45:4F:9D:2D:BE:D9:74:53:84:05:A7:9F:6E:C7:E8:6C:4A:ED:D3:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU-dLb7ZdFOEBaefbsfobErt09E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3bb1a5-941e-4a61-943e-faae4baebeff/1/RU-dLb7ZdFOEBaefbsfobErt09E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:95:21:0b:ea:51:f0:0b:fa:84:07:4d:6c:41:2a:bd:ff:5b: 7e:b0:67:04:b5:e7:63:e8:fc:31:0c:2c:d6:9f:2f:f2:5b:eb: 9b:5f:73:62:14:49:82:c9:36:06:16:22:1f:3b:c0:b9:90:eb: d6:6b:c9:f4:6c:f5:3a:d1:55:97:53:14:25:c3:76:89:a2:ed: 6d:db:a1:72:34:22:f7:ac:82:b7:02:2f:e0:31:3f:b0:0b:35: d9:40:cb:b4:02:c9:6f:9f:23:e3:46:04:d4:01:81:1f:9b:41: 18:ce:5c:7a:49:1c:76:26:db:17:c0:ad:f8:83:64:b7:e8:b2: ba:63:51:30:1c:ef:e7:af:b7:12:11:f0:44:ec:b1:f0:d2:fd: be:c6:6d:dd:4c:fc:2d:58:6e:ec:28:58:e3:84:78:d7:61:66: 42:e9:88:40:89:01:3a:47:5f:ea:47:0c:4a:2d:3d:26:ac:8f: 50:5d:18:5c:ff:97:3a:58:68:39:89:c5:d9:3f:7d:fc:e1:37: 36:42:e8:26:3e:27:dd:d3:87:b4:a9:1f:9d:3e:67:a5:ce:70: 82:20:5b:60:e9:8d:28:25:53:22:a9:fa:b0:98:3d:97:a3:4b: ea:78:5e:46:2e:13:67:2b:b2:50:43:7f:f4:3a:aa:b1:40:40: 5f:16:64:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsGBZBgQpsH+/NykwZXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NGY5ZDJkYmVkOTc0NTM4NDA1YTc5ZjZlYzdlODZjNGFl ZGQzZDEwHhcNMjUxMjA2MDcwMTAwWhcNMjUxMjA3MDcwMTAwWjAzMTEwLwYDVQQD EyhhZWRiZjQwMjVlNmYyYzMwNWVkMGI2MWY2ZThlYTdhOWU5ZTgyMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA605ENaA0pgO7Yg2LfNP3ByIild68 xgd0vZKkvN8P6pi2XoQG8alziRfAMzy3nGKL8V6nDutTlGizR/dWVdRVnVSQQvQ4 denvpaJwFSDc5UMhNOoSTu16zzooMCfxzpkYgkpBIQ6Hv6RW3XXXhq1j1F+mIiND A4mDujQD7hrToDBqxNK2r84zOlZ+fIH3E7r7/CtQ+TLbfzpBqEk4Qcz8cjkt50r7 hkq6V+faAlrsySfwHRE00g9cwVoxdsOSLY/y6nabv42pE8N1yJegk0q4AU5mz9fd SvxVMCys4c/PQBO58jkIu+GSo54q9LPYvqVC5z5TUOicq8ufLt9OVKGx7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7b9AJebywwXtC2H26Op6np6CMPMB8GA1UdIwQY MBaAFEVPnS2+2XRThAWnn27H6GxK7dPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2Ut ZmFhZTRiYWViZWZmLzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8zYmIxYTUtOTQxZS00YTYxLTk0M2UtZmFhZTRiYWViZWZm LzEvUlUtZExiN1pkRk9FQmFlZmJzZm9iRXJ0MDlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJUhC+pR 8Av6hAdNbEEqvf9bfrBnBLXnY+j8MQws1p8v8lvrm19zYhRJgsk2BhYiHzvAuZDr 1mvJ9Gz1OtFVl1MUJcN2iaLtbduhcjQi96yCtwIv4DE/sAs12UDLtALJb58j40YE 1AGBH5tBGM5cekkcdibbF8Ct+INkt+iyumNRMBzv56+3EhHwROyx8NL9vsZt3Uz8 LVhu7ChY44R412FmQumIQIkBOkdf6kcMSi09JqyPUF0YXP+XOlhoOYnF2T99/OE3 NkLoJj4n3dOHtKkfnT5npc5wgiBbYOmNKCVTIqn6sJg9l6NL6nheRi4TZyuyUEN/ 9DqqsUBAXxZkuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:22 2025 by rpki-client