This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft File: ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json) Hash identifier: lFcE2C8zB9yWNcGcnoOjbWoqK+9vPVu6nmq9vCbY8d4= Subject key identifier: 3C:C4:CD:1F:0F:71:98:B5:87:80:25:C4:87:A8:42:30:3C:4F:B9:36 Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32 Certificate issuer: /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132 Certificate serial: 019AF35273900068896CBBC2D81DBDE14E70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft Manifest number: 053E Signing time: Sat 06 Dec 2025 11:00:57 +0000 Manifest this update: Sat 06 Dec 2025 11:00:57 +0000 Manifest next update: Sun 07 Dec 2025 11:00:57 +0000 Files and hashes: 1: Y8bxmFfpWoR5ksX0Qq13ZOagVPo.roa (hash: C0DVCgE5f6/2s7WXTWOG0D5IiTtwmNwV6icT5/Rn4Qg=) 2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: hhGqMNkcHGwFUVuaYMqekSEj2In+INjx22q0X+bUTcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:73:90:00:68:89:6c:bb:c2:d8:1d:bd:e1:4e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132 Validity Not Before: Dec 6 11:00:57 2025 GMT Not After : Dec 7 11:00:57 2025 GMT Subject: CN=3cc4cd1f0f7198b5878025c487a842303c4fb936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:4a:f9:11:4b:cb:ed:b9:f3:d2:53:0b:9f: 30:43:25:8a:58:3b:45:d9:6c:3d:ba:62:7d:cf:ab: 4d:f1:73:0b:28:e5:6e:df:0e:08:6d:a1:0c:d2:12: e4:a1:99:c3:da:5f:03:d8:10:6d:dc:fb:5e:54:f6: c6:34:e5:2f:02:86:5a:8c:4f:48:9d:eb:60:fb:5e: 80:3e:07:1c:f4:00:fc:b7:85:2a:da:4d:13:cd:2c: c3:84:75:6e:20:43:56:af:50:08:77:65:57:b8:b1: ed:52:a2:14:95:55:d2:47:13:c3:0b:56:11:cb:2e: 66:3a:a9:d6:29:56:55:5a:39:33:83:7f:8b:2b:b1: ee:9a:1f:69:42:e3:37:78:36:e2:c3:a9:f3:8e:8e: f1:38:f3:bf:b3:9c:e3:0b:9a:6d:84:21:8b:a6:91: df:a0:f4:8a:7d:02:96:fb:e8:d0:aa:03:f2:d7:fb: f9:1b:d5:4d:db:ac:fe:dc:c7:75:87:33:c3:d5:97: 9b:82:c7:ae:49:94:52:38:93:f5:73:7b:97:57:c0: 17:4e:3f:3a:66:f0:6a:f9:1e:63:e5:04:14:18:63: dc:49:ec:ba:af:bc:f9:7b:c1:08:d4:b9:e0:68:dc: 49:18:45:7a:bc:65:a3:da:af:9c:6a:fb:cf:10:53: 9e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C4:CD:1F:0F:71:98:B5:87:80:25:C4:87:A8:42:30:3C:4F:B9:36 X509v3 Authority Key Identifier: keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:f0:f2:56:38:f7:59:58:ab:b5:9c:e9:14:34:55:7d:38:27: 83:1d:56:cd:96:d5:65:20:da:14:14:7b:64:1b:da:f7:79:6b: 7f:4b:ac:d2:66:f8:6d:d1:62:e4:9d:3e:fa:bc:4c:76:ff:da: 7f:67:01:32:2e:64:93:1a:06:fa:1c:a3:f2:7b:8c:74:64:2e: 89:89:a5:e1:56:5d:82:9f:10:eb:b5:e9:5c:d1:71:f1:79:5f: 39:ee:90:05:37:b8:60:76:d5:5d:8b:d0:f2:7b:44:ef:43:94: 0b:5a:0c:49:15:c4:01:69:d3:79:30:72:99:a9:5f:10:1d:be: f6:cd:e6:19:90:32:e1:0b:23:5d:50:cd:41:50:a6:bf:e4:5e: 26:0e:23:93:63:67:14:f2:e5:84:94:dc:29:5c:c3:97:64:da: f7:e5:5b:28:e0:f5:64:21:77:96:d0:ad:18:94:7a:f1:6d:5b: a7:47:d9:61:1f:a5:b8:69:d5:56:a4:2a:09:e4:25:1d:37:76: e7:37:b9:cf:05:57:a2:71:21:89:1a:27:98:80:e0:fb:8e:41: a6:02:ec:d7:03:e6:af:41:14:6a:04:58:ea:aa:83:a7:e2:f4: 50:50:84:b8:ec:0d:87:21:96:a4:aa:6c:6d:f5:07:29:28:9b: 9d:04:48:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnOQAGiJbLvC2B294U5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTFkM2E0MjVlZGJkOWQ4YWRhZDA0MTA2YWIxMmQ3Yzc2 YWMxMzIwHhcNMjUxMjA2MTEwMDU3WhcNMjUxMjA3MTEwMDU3WjAzMTEwLwYDVQQD EygzY2M0Y2QxZjBmNzE5OGI1ODc4MDI1YzQ4N2E4NDIzMDNjNGZiOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy9K+RFLy+2589JTC58wQyWKWDtF 2Ww9umJ9z6tN8XMLKOVu3w4IbaEM0hLkoZnD2l8D2BBt3PteVPbGNOUvAoZajE9I netg+16APgcc9AD8t4Uq2k0TzSzDhHVuIENWr1AId2VXuLHtUqIUlVXSRxPDC1YR yy5mOqnWKVZVWjkzg3+LK7Humh9pQuM3eDbiw6nzjo7xOPO/s5zjC5pthCGLppHf oPSKfQKW++jQqgPy1/v5G9VN26z+3Md1hzPD1ZebgseuSZRSOJP1c3uXV8AXTj86 ZvBq+R5j5QQUGGPcSey6r7z5e8EI1LngaNxJGEV6vGWj2q+cavvPEFOeGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzEzR8PcZi1h4AlxIeoQjA8T7k2MB8GA1UdIwQY MBaAFK7h06Ql7b2ditrQQQarEtfHasEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hY2E0YWQtMWRmMC00Nzk3LTlhOTAt ZmJlNWZkY2YwZWQzLzEvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hY2E0YWQtMWRmMC00Nzk3LTlhOTAtZmJlNWZkY2YwZWQz LzEvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxvDyVjj3 WVirtZzpFDRVfTgngx1WzZbVZSDaFBR7ZBva93lrf0us0mb4bdFi5J0++rxMdv/a f2cBMi5kkxoG+hyj8nuMdGQuiYml4VZdgp8Q67XpXNFx8XlfOe6QBTe4YHbVXYvQ 8ntE70OUC1oMSRXEAWnTeTBymalfEB2+9s3mGZAy4QsjXVDNQVCmv+ReJg4jk2Nn FPLlhJTcKVzDl2Ta9+VbKOD1ZCF3ltCtGJR68W1bp0fZYR+luGnVVqQqCeQlHTd2 5ze5zwVXonEhiRonmIDg+45BpgLs1wPmr0EUagRY6qqDp+L0UFCEuOwNhyGWpKps bfUHKSibnQRIMA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:28 2025 by rpki-client