This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft File: RrLFRAI1IgBtccF5VhxL0wW6030.mft (raw, json) Hash identifier: A+8zOC2HOLZ52X4BJxjHSH9n/M52Mru6aat78t9BHko= Subject key identifier: 7E:F9:BE:9B:EB:02:21:5F:0C:3B:F7:FF:2D:B6:75:00:32:9D:3F:4A Authority key identifier: 46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D Certificate issuer: /CN=46b2c544023522006d71c179561c4bd305bad37d Certificate serial: 019AF65341E85F485080552D326914757AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft Manifest number: 08E6 Signing time: Sun 07 Dec 2025 01:00:42 +0000 Manifest this update: Sun 07 Dec 2025 01:00:42 +0000 Manifest next update: Mon 08 Dec 2025 01:00:42 +0000 Files and hashes: 1: RrLFRAI1IgBtccF5VhxL0wW6030.crl (hash: Y8zeQC8/WoqJ4RPtpZjRJBpQ3kvOKAuE+84Y/uTm/6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:41:e8:5f:48:50:80:55:2d:32:69:14:75:7a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b2c544023522006d71c179561c4bd305bad37d Validity Not Before: Dec 7 01:00:42 2025 GMT Not After : Dec 8 01:00:42 2025 GMT Subject: CN=7ef9be9beb02215f0c3bf7ff2db67500329d3f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:5d:79:f6:2c:fe:3b:7c:8f:ed:a3:54:69: 78:8d:6f:c0:fd:fa:d6:ab:9d:ac:ca:e8:60:0f:ea: e0:f1:fe:7e:65:b0:88:ae:c2:8d:9c:ad:a8:03:6e: f5:23:db:0c:41:9d:26:76:da:b1:59:9c:fc:98:94: f1:8b:1a:e2:26:0d:f4:11:52:00:83:52:de:ee:16: a3:d5:1f:d5:4c:90:52:4a:ff:94:32:07:b2:71:88: e9:c9:d2:15:8d:29:2f:2b:c8:a1:29:70:1d:61:38: ba:97:2c:44:db:ac:78:93:48:ae:51:e0:a0:95:64: b5:d0:0c:b6:ba:4a:30:33:00:ec:4d:55:43:c0:78: 89:78:ff:9f:66:e8:f0:64:1d:ad:78:c0:46:9a:10: 1a:9c:b0:65:3b:c1:56:5d:55:24:0f:1e:30:b4:b0: 4a:b5:06:80:46:87:be:88:38:14:2d:39:d2:75:69: af:d6:75:c1:47:91:93:ba:ba:61:53:84:62:6f:0a: 2a:17:47:f9:99:86:98:67:c7:26:2e:44:dc:a2:c6: 72:62:02:da:4c:62:bb:d0:19:9c:eb:af:9b:76:55: b8:79:1d:2c:1e:97:dc:a4:ed:e9:f9:82:60:05:a9: 04:ad:48:ad:b1:b9:6b:a4:54:1c:d4:28:02:e3:05: 51:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F9:BE:9B:EB:02:21:5F:0C:3B:F7:FF:2D:B6:75:00:32:9D:3F:4A X509v3 Authority Key Identifier: keyid:46:B2:C5:44:02:35:22:00:6D:71:C1:79:56:1C:4B:D3:05:BA:D3:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RrLFRAI1IgBtccF5VhxL0wW6030.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/25b4ac-4953-400f-b5d5-e0ac7a4a4fec/1/RrLFRAI1IgBtccF5VhxL0wW6030.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:05:fb:83:f6:36:82:ac:84:fd:53:d6:a6:ab:59:59:ca:a2: c7:00:59:6c:c7:48:7a:7f:0e:d8:81:83:9e:a7:07:63:b5:9a: e5:a9:4a:5c:29:14:b1:f6:e7:44:e7:3b:cd:a9:de:5e:e4:f5: 59:fb:62:51:0b:37:e7:62:56:00:79:af:ba:8d:6c:d1:d9:fc: cf:da:a4:94:bd:04:ae:5b:e2:ac:8e:c9:92:54:8b:d1:d6:d6: 9d:56:f3:79:3a:60:ae:2a:0b:8d:48:65:b0:13:36:e1:eb:fe: 9a:31:16:fc:75:73:8c:99:27:fc:29:ea:b8:fc:f6:c7:ec:b6: 38:10:79:cf:c4:69:b8:2b:34:1f:e5:cf:73:43:4e:e7:6f:35: 77:5d:57:ff:73:03:fc:d8:d1:2c:9f:ab:89:e0:c3:4a:72:57: db:66:e0:c6:b1:fe:0d:c1:6e:86:77:80:37:08:31:d5:5d:b4: 1e:68:b3:e0:07:ed:c4:1e:83:41:b2:a2:16:fc:90:da:8b:55: 90:a5:1e:56:9c:49:3a:ca:59:27:e0:27:c8:41:7d:1d:ec:c8: d9:87:ae:11:10:14:c1:ca:2d:d8:67:86:e8:68:d9:59:35:7b: 20:1d:d6:a4:00:0f:72:be:d1:33:0f:49:1f:71:99:a8:d6:c9: e5:21:c7:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U0HoX0hQgFUtMmkUdXrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YjJjNTQ0MDIzNTIyMDA2ZDcxYzE3OTU2MWM0YmQzMDVi YWQzN2QwHhcNMjUxMjA3MDEwMDQyWhcNMjUxMjA4MDEwMDQyWjAzMTEwLwYDVQQD Eyg3ZWY5YmU5YmViMDIyMTVmMGMzYmY3ZmYyZGI2NzUwMDMyOWQzZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX9defYs/jt8j+2jVGl4jW/A/frW q52syuhgD+rg8f5+ZbCIrsKNnK2oA271I9sMQZ0mdtqxWZz8mJTxixriJg30EVIA g1Le7haj1R/VTJBSSv+UMgeycYjpydIVjSkvK8ihKXAdYTi6lyxE26x4k0iuUeCg lWS10Ay2ukowMwDsTVVDwHiJeP+fZujwZB2teMBGmhAanLBlO8FWXVUkDx4wtLBK tQaARoe+iDgULTnSdWmv1nXBR5GTurphU4RibwoqF0f5mYaYZ8cmLkTcosZyYgLa TGK70Bmc66+bdlW4eR0sHpfcpO3p+YJgBakErUitsblrpFQc1CgC4wVRawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH75vpvrAiFfDDv3/y22dQAynT9KMB8GA1UdIwQY MBaAFEayxUQCNSIAbXHBeVYcS9MFutN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNWI0YWMtNDk1My00MDBmLWI1ZDUt ZTBhYzdhNGE0ZmVjLzEvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yNWI0YWMtNDk1My00MDBmLWI1ZDUtZTBhYzdhNGE0ZmVj LzEvUnJMRlJBSTFJZ0J0Y2NGNVZoeEwwd1c2MDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwX7g/Y2 gqyE/VPWpqtZWcqixwBZbMdIen8O2IGDnqcHY7Wa5alKXCkUsfbnROc7zaneXuT1 WftiUQs352JWAHmvuo1s0dn8z9qklL0ErlvirI7JklSL0dbWnVbzeTpgrioLjUhl sBM24ev+mjEW/HVzjJkn/CnquPz2x+y2OBB5z8RpuCs0H+XPc0NO5281d11X/3MD /NjRLJ+rieDDSnJX22bgxrH+DcFuhneANwgx1V20Hmiz4AftxB6DQbKiFvyQ2otV kKUeVpxJOspZJ+AnyEF9HezI2YeuERAUwcot2GeG6GjZWTV7IB3WpAAPcr7RMw9J H3GZqNbJ5SHHiA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:27 2025 by rpki-client