This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft File: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft (raw, json) Hash identifier: tnWC7KwIDRydrH4+6pwPCaFSqCBvFS8SqwSsAJS2J1k= Subject key identifier: 54:41:A9:2C:30:7C:4D:78:39:14:E6:B3:38:CB:DF:D0:2A:6C:08:69 Authority key identifier: 45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4 Certificate issuer: /CN=453b84e8e0e5617c34260d768f440a5131f2dcf4 Certificate serial: 019AF19BA5939DB1DDF95A21F390E6DBC35C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft Manifest number: 0ED2 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl (hash: nX+L2Ak/p1Q8xr7KvR/BL3ZGP7lIwR7puUS1Pf1sA/4=) 2: su-hbEzusTLSOxmaXJEWMOWCTZI.roa (hash: wY777l5pDJFcS+82iBVpdLmEK77pZHYgVlbVwhboSl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a5:93:9d:b1:dd:f9:5a:21:f3:90:e6:db:c3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453b84e8e0e5617c34260d768f440a5131f2dcf4 Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=5441a92c307c4d783914e6b338cbdfd02a6c0869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:62:db:f7:10:a0:b7:65:25:d8:0f:57:ff: f6:71:a8:67:24:13:35:96:5d:52:15:b0:97:ef:5b: 87:4c:fe:99:03:62:88:be:69:86:0a:10:da:1c:1b: da:da:b3:94:77:02:51:21:4e:d9:63:26:fd:39:51: 54:df:5f:9b:d7:7b:a2:38:7c:96:5d:6e:9f:c7:1e: a3:a9:86:c0:f6:b0:fd:1c:36:4c:cd:12:15:b5:66: 1f:b8:b7:31:79:d6:05:34:58:74:0f:87:f8:77:77: 09:8b:48:b5:95:67:a5:35:ea:9d:3d:59:71:3b:e1: 46:4e:ba:ab:b2:f2:0f:9a:4e:b6:38:1d:45:fe:59: 60:36:bc:fc:43:03:7a:3a:de:69:9f:7b:ae:11:ce: ce:20:cf:be:3f:fe:53:07:d5:12:25:de:c1:ed:ab: 55:0f:7d:2f:ee:6d:58:eb:dd:c7:7f:a5:0f:a9:49: e4:9a:f4:fe:33:5f:e0:9a:80:c9:7f:29:e0:6d:93: 73:35:c7:38:71:f3:01:8c:96:64:38:49:fd:f2:b5: 95:16:26:52:8c:1e:b1:41:82:58:95:8e:4c:a6:e7: 7c:59:6e:c4:50:6c:63:1c:45:be:16:56:75:a2:2b: c3:08:da:79:d8:95:48:c2:c6:c2:ec:02:34:ea:8d: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:41:A9:2C:30:7C:4D:78:39:14:E6:B3:38:CB:DF:D0:2A:6C:08:69 X509v3 Authority Key Identifier: keyid:45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:71:41:0d:ff:e5:bd:df:4d:06:12:70:31:2b:f8:a5:2e:39: 84:4b:c7:02:dd:f4:3f:60:2d:65:c6:24:45:ca:de:39:21:f2: 32:97:22:4e:91:2c:1a:8d:f8:c0:8d:68:f1:32:c3:7f:db:93: 8d:f3:e1:3e:0a:3f:2c:c7:ca:c0:4b:c9:4b:af:e8:30:82:d9: 3f:ea:84:02:b8:66:0f:c7:c8:ed:2b:98:a4:fb:50:42:9d:94: 68:10:ad:24:c4:54:79:26:62:4d:5d:16:e8:db:78:a2:ae:41: 70:88:77:a1:ce:c4:c6:4b:51:97:95:4e:97:62:e8:ba:df:98: dd:dd:3e:48:3d:3f:a6:1e:5d:50:c3:26:3a:a3:1c:1f:a5:41: b9:0e:6a:d1:e1:f9:d6:fd:8c:9b:f4:f0:51:23:92:3e:93:f7: b0:89:72:a2:ef:0a:00:c4:cb:bc:f3:40:2d:2c:dd:20:82:1b: c8:e5:14:a4:20:76:a5:5a:4d:32:78:99:5d:d7:7f:df:54:61: 8a:e3:1a:64:ff:c4:ed:89:87:ff:02:8a:8f:88:66:58:dd:9d: db:91:23:47:48:a3:9b:21:20:19:f5:50:58:79:ca:4d:5d:5b: b2:d8:41:78:eb:e3:10:af:f7:03:42:01:44:ef:4f:f9:5e:55: 5c:4c:e9:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6WTnbHd+Voh85Dm28NcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1M2I4NGU4ZTBlNTYxN2MzNDI2MGQ3NjhmNDQwYTUxMzFm MmRjZjQwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD Eyg1NDQxYTkyYzMwN2M0ZDc4MzkxNGU2YjMzOGNiZGZkMDJhNmMwODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXZi2/cQoLdlJdgPV//2cahnJBM1 ll1SFbCX71uHTP6ZA2KIvmmGChDaHBva2rOUdwJRIU7ZYyb9OVFU31+b13uiOHyW XW6fxx6jqYbA9rD9HDZMzRIVtWYfuLcxedYFNFh0D4f4d3cJi0i1lWelNeqdPVlx O+FGTrqrsvIPmk62OB1F/llgNrz8QwN6Ot5pn3uuEc7OIM++P/5TB9USJd7B7atV D30v7m1Y693Hf6UPqUnkmvT+M1/gmoDJfyngbZNzNcc4cfMBjJZkOEn98rWVFiZS jB6xQYJYlY5Mpud8WW7EUGxjHEW+FlZ1oivDCNp52JVIwsbC7AI06o2HEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRBqSwwfE14ORTmszjL39AqbAhpMB8GA1UdIwQY MBaAFEU7hOjg5WF8NCYNdo9EClEx8tz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQt OTk4NzgzYzY4NDFkLzEvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQtOTk4NzgzYzY4NDFk LzEvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHFBDf/l vd9NBhJwMSv4pS45hEvHAt30P2AtZcYkRcreOSHyMpciTpEsGo34wI1o8TLDf9uT jfPhPgo/LMfKwEvJS6/oMILZP+qEArhmD8fI7SuYpPtQQp2UaBCtJMRUeSZiTV0W 6Nt4oq5BcIh3oc7ExktRl5VOl2Lout+Y3d0+SD0/ph5dUMMmOqMcH6VBuQ5q0eH5 1v2Mm/TwUSOSPpP3sIlyou8KAMTLvPNALSzdIIIbyOUUpCB2pVpNMniZXdd/31Rh iuMaZP/E7YmH/wKKj4hmWN2d25EjR0ijmyEgGfVQWHnKTV1bsthBeOvjEK/3A0IB RO9P+V5VXEzpcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:39 2025 by rpki-client