This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft File: Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft (raw, json) Hash identifier: MaAfe6oGGMh2ME2zvTE8njOd/oLlW0I7CBAjK8kVCEM= Subject key identifier: AC:57:62:EF:2B:64:0C:A8:46:17:1E:25:4F:DD:03:75:12:BA:AC:00 Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48 Certificate issuer: /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848 Certificate serial: 019AF31C5DEE40B5F2B4DF3A87D9C181C714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft Manifest number: 05D8 Signing time: Sat 06 Dec 2025 10:01:53 +0000 Manifest this update: Sat 06 Dec 2025 10:01:53 +0000 Manifest next update: Sun 07 Dec 2025 10:01:53 +0000 Files and hashes: 1: Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl (hash: nVep3f911hNBLsYYrRL9MlfrnsrQac6U7ETM1qIFesE=) 2: laXjmsr5wiUZR5pUuEVXQE2tlq4.roa (hash: lZiORjXr/RyEYVt6VHpENnlIs3IOUoCnLBaaTPOTOeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5d:ee:40:b5:f2:b4:df:3a:87:d9:c1:81:c7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848 Validity Not Before: Dec 6 10:01:53 2025 GMT Not After : Dec 7 10:01:53 2025 GMT Subject: CN=ac5762ef2b640ca846171e254fdd037512baac00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:d5:e9:35:d6:38:cc:b5:5d:97:08:75:91: 6f:59:8e:99:d9:29:78:58:c5:27:ae:3f:a2:47:fe: 19:22:54:7e:10:66:28:fb:c8:5b:a1:ce:8e:1d:10: 45:e0:1b:39:13:38:48:54:5e:f9:9c:b0:bf:2c:fb: 10:8c:a8:6c:bd:94:a7:84:1a:57:41:0e:9d:7e:e7: 89:46:f7:35:f6:34:13:3d:6f:c0:e6:e3:d1:79:8c: 10:61:94:b0:3a:cf:c1:38:68:6a:fa:e7:a4:51:97: 68:47:1b:26:d0:0c:fa:06:58:ff:38:7f:9c:1c:a9: bd:de:94:9b:c8:d8:1b:31:c5:17:f5:47:43:3b:f5: db:66:14:30:5c:85:19:fa:54:71:fd:02:4c:f4:e3: 53:da:f9:cb:a7:a9:66:33:44:b7:1a:91:be:99:b1: a2:3b:b9:b7:d9:8d:48:d5:22:c9:3e:ff:13:12:d1: c0:44:87:ee:85:98:e6:f6:aa:fe:34:8c:4e:c5:c3: f6:61:d8:f6:7d:42:9d:cf:06:e5:a3:b9:28:38:50: d7:3f:da:d1:79:13:5c:05:fb:45:d9:51:b2:f3:e3: 28:20:a5:a7:35:aa:47:88:9b:99:c6:10:b1:72:87: d9:36:63:65:1b:fd:a0:6e:5b:35:28:66:d6:f2:b7: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:57:62:EF:2B:64:0C:A8:46:17:1E:25:4F:DD:03:75:12:BA:AC:00 X509v3 Authority Key Identifier: keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2d:e5:1b:33:f6:98:a9:9f:e3:2d:61:f6:34:1b:85:b4:23: 33:e1:3f:59:f4:66:6c:d9:b1:a1:63:8a:e0:31:9d:de:7b:0e: 12:d5:7b:1a:b2:08:0c:5c:32:61:96:87:0f:08:6d:5d:14:fd: ba:45:6e:1e:e1:57:cc:bc:0f:d4:3b:46:d2:e9:ca:c8:00:fe: 3d:d3:3c:21:9a:64:78:d9:7b:d6:79:95:b2:be:df:32:d4:f7: f9:c3:3c:93:2e:ee:9c:f2:dd:27:8a:3a:f1:59:5f:8e:0a:e8: a3:3b:0a:fd:bc:71:0b:5b:35:69:ef:fd:d5:a0:39:6c:63:88: bc:94:bd:5e:4f:4c:5f:6e:cc:c4:e0:5a:9d:6a:c9:50:f1:71: 81:5a:d3:11:15:9f:11:f4:f0:d4:7f:ac:80:d3:b4:db:f7:34: 30:e1:ca:8d:b4:2d:b9:3d:45:25:b9:0c:12:fd:81:f3:dd:d1: 94:28:f5:42:c2:23:79:af:5e:c4:73:fa:96:df:2f:13:3d:76: 20:2c:76:4d:8e:b4:5a:d5:54:f0:d5:2b:a5:06:3c:90:a0:dc: 8a:75:08:8d:4d:5d:f4:02:f6:9a:2d:35:c1:8d:66:1a:69:69: 17:11:b3:b9:56:f3:30:16:55:5f:96:1d:b0:99:70:65:9c:55: 42:df:e8:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHF3uQLXytN86h9nBgccUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZDZlYmVhNmU2ZWE5ZTYwMDZhODEzNDRkMTE2M2ZiZWM0 ZmE4NDgwHhcNMjUxMjA2MTAwMTUzWhcNMjUxMjA3MTAwMTUzWjAzMTEwLwYDVQQD EyhhYzU3NjJlZjJiNjQwY2E4NDYxNzFlMjU0ZmRkMDM3NTEyYmFhYzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcjV6TXWOMy1XZcIdZFvWY6Z2Sl4 WMUnrj+iR/4ZIlR+EGYo+8hboc6OHRBF4Bs5EzhIVF75nLC/LPsQjKhsvZSnhBpX QQ6dfueJRvc19jQTPW/A5uPReYwQYZSwOs/BOGhq+uekUZdoRxsm0Az6Blj/OH+c HKm93pSbyNgbMcUX9UdDO/XbZhQwXIUZ+lRx/QJM9ONT2vnLp6lmM0S3GpG+mbGi O7m32Y1I1SLJPv8TEtHARIfuhZjm9qr+NIxOxcP2Ydj2fUKdzwblo7koOFDXP9rR eRNcBftF2VGy8+MoIKWnNapHiJuZxhCxcofZNmNlG/2gbls1KGbW8rdHAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxXYu8rZAyoRhceJU/dA3USuqwAMB8GA1UdIwQY MBaAFEbW6+pubqnmAGqBNE0RY/vsT6hIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnRicjZtNXVxZVlBYW9FMFRSRmotLXhQcUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xNTU0MWQtYTdiYS00NzEwLWE1Y2Yt OTY1Y2MyMDhlZTQwLzEvUnRicjZtNXVxZVlBYW9FMFRSRmotLXhQcUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xNTU0MWQtYTdiYS00NzEwLWE1Y2YtOTY1Y2MyMDhlZTQw LzEvUnRicjZtNXVxZVlBYW9FMFRSRmotLXhQcUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni3lGzP2 mKmf4y1h9jQbhbQjM+E/WfRmbNmxoWOK4DGd3nsOEtV7GrIIDFwyYZaHDwhtXRT9 ukVuHuFXzLwP1DtG0unKyAD+PdM8IZpkeNl71nmVsr7fMtT3+cM8ky7unPLdJ4o6 8VlfjgroozsK/bxxC1s1ae/91aA5bGOIvJS9Xk9MX27MxOBanWrJUPFxgVrTERWf EfTw1H+sgNO02/c0MOHKjbQtuT1FJbkMEv2B893RlCj1QsIjea9exHP6lt8vEz12 ICx2TY60WtVU8NUrpQY8kKDcinUIjU1d9AL2mi01wY1mGmlpFxGzuVbzMBZVX5Yd sJlwZZxVQt/oGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:52 2025 by rpki-client