This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft File: RoWpxIcmUu55Z7pfSieCDGcVKNY.mft (raw, json) Hash identifier: KXzI96RkNyGQLZVEwD6BL/TtUoZeWA4QO7QlK7F7Nqc= Subject key identifier: 45:F2:74:30:51:80:F9:E8:5D:4A:AB:1B:3B:90:44:06:50:C5:C5:77 Authority key identifier: 46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6 Certificate issuer: /CN=4685a9c4872652ee7967ba5f4a27820c671528d6 Certificate serial: 019AF3899EA48AB668C320E97806525B3558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft Manifest number: 065C Signing time: Sat 06 Dec 2025 12:01:13 +0000 Manifest this update: Sat 06 Dec 2025 12:01:13 +0000 Manifest next update: Sun 07 Dec 2025 12:01:13 +0000 Files and hashes: 1: RoWpxIcmUu55Z7pfSieCDGcVKNY.crl (hash: KkH4FuI8FhMJnos6qCFV6UooyeIA7w1fJjkz4LIAOc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.crl rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:9e:a4:8a:b6:68:c3:20:e9:78:06:52:5b:35:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4685a9c4872652ee7967ba5f4a27820c671528d6 Validity Not Before: Dec 6 12:01:13 2025 GMT Not After : Dec 7 12:01:13 2025 GMT Subject: CN=45f274305180f9e85d4aab1b3b90440650c5c577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:b9:3b:cc:9e:45:b6:f1:02:f2:ec:59:d8: 4f:7c:1c:3e:fa:f3:8f:d6:f2:d6:9a:7e:68:72:88: 79:80:dc:81:d7:e0:80:74:e0:22:a8:8d:f5:cf:b4: a7:75:cf:9c:5e:00:eb:48:4f:77:7b:ba:a9:12:44: 69:32:0f:09:89:50:fb:7d:77:89:45:95:d3:da:af: 11:3f:a2:99:ee:88:a6:c7:75:84:17:b9:52:00:bf: 16:c0:f3:31:73:54:c6:25:fb:ab:ab:e2:ef:b6:af: a7:d9:16:b6:e8:50:b6:a0:43:bc:ff:3b:37:71:b7: 70:67:1b:0d:ae:25:cc:b4:e3:b7:39:21:ed:14:2e: 02:69:be:68:59:f4:24:ad:5b:3a:86:4b:f3:17:93: f9:af:18:fa:c3:c5:a7:69:81:c9:17:7c:c1:c1:4c: 56:19:ba:22:e4:85:d0:c9:02:29:3f:8f:b9:e1:88: e8:60:99:42:3c:b5:e8:a2:04:99:3c:5b:c5:dd:47: ca:6f:15:d6:7a:b1:da:b3:d6:8a:3b:fe:3e:be:cd: 3f:8e:2d:c1:a2:a4:1c:3a:0a:0b:fe:5c:7a:5a:a2: 23:9a:c4:4a:02:92:de:27:32:b2:6c:5e:f9:58:c2: 10:ac:f2:ec:69:77:39:ff:d4:ff:63:29:9b:f5:5f: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F2:74:30:51:80:F9:E8:5D:4A:AB:1B:3B:90:44:06:50:C5:C5:77 X509v3 Authority Key Identifier: keyid:46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:38:d5:39:88:05:c2:db:5c:8f:c7:10:de:59:18:1a:1a:77: df:95:94:3c:e8:fb:99:a0:ff:fa:9f:32:ab:2a:07:ba:28:ca: 98:93:ae:88:c8:ea:01:e3:1e:68:43:18:d8:75:35:5f:9c:77: be:3f:da:0a:aa:c0:cc:aa:92:84:a7:3e:c8:65:1a:95:44:5a: 4d:78:d0:65:a8:36:89:06:2f:1b:97:09:19:93:64:97:46:0a: 80:c4:32:a3:e1:82:20:f8:93:7f:93:22:66:7a:e1:95:e6:e3: 6b:27:fa:92:9a:7e:47:c2:e8:92:54:bf:2e:fe:93:dd:c0:b3: 4c:f0:cb:6c:31:be:8b:d2:6f:1a:9d:de:33:af:72:56:55:0d: b5:2e:d4:ec:d1:8b:ac:08:9c:e7:fc:2b:3a:4b:fa:2d:bf:81: 9e:67:18:14:0d:c9:ef:16:ae:13:31:84:3f:d4:a7:ad:d8:20: 39:0c:46:c8:be:26:d4:df:01:c5:56:1e:91:e0:66:4e:30:82: f2:27:eb:8e:d7:dd:ef:2f:10:a9:df:ad:44:6f:43:b7:a4:42: cc:7b:40:75:12:ae:7e:2a:c2:b9:15:96:4a:2e:06:b4:eb:02: 6a:6f:1b:e9:eb:9c:73:51:9a:6a:40:70:0b:06:4b:e3:a5:b4: 68:19:55:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZ6kirZowyDpeAZSWzVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODVhOWM0ODcyNjUyZWU3OTY3YmE1ZjRhMjc4MjBjNjcx NTI4ZDYwHhcNMjUxMjA2MTIwMTEzWhcNMjUxMjA3MTIwMTEzWjAzMTEwLwYDVQQD Eyg0NWYyNzQzMDUxODBmOWU4NWQ0YWFiMWIzYjkwNDQwNjUwYzVjNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCW5O8yeRbbxAvLsWdhPfBw++vOP 1vLWmn5ocoh5gNyB1+CAdOAiqI31z7Sndc+cXgDrSE93e7qpEkRpMg8JiVD7fXeJ RZXT2q8RP6KZ7oimx3WEF7lSAL8WwPMxc1TGJfurq+Lvtq+n2Ra26FC2oEO8/zs3 cbdwZxsNriXMtOO3OSHtFC4Cab5oWfQkrVs6hkvzF5P5rxj6w8WnaYHJF3zBwUxW Gboi5IXQyQIpP4+54YjoYJlCPLXoogSZPFvF3UfKbxXWerHas9aKO/4+vs0/ji3B oqQcOgoL/lx6WqIjmsRKApLeJzKybF75WMIQrPLsaXc5/9T/Yymb9V+O/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXydDBRgPnoXUqrGzuQRAZQxcV3MB8GA1UdIwQY MBaAFEaFqcSHJlLueWe6X0onggxnFSjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9XcHhJY21VdTU1WjdwZlNpZUNER2NWS05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8wY2NjMDgtZGQzNS00MDUxLWExODUt YTM1ZTJiZmVkNjA4LzEvUm9XcHhJY21VdTU1WjdwZlNpZUNER2NWS05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8wY2NjMDgtZGQzNS00MDUxLWExODUtYTM1ZTJiZmVkNjA4 LzEvUm9XcHhJY21VdTU1WjdwZlNpZUNER2NWS05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjjVOYgF wttcj8cQ3lkYGhp335WUPOj7maD/+p8yqyoHuijKmJOuiMjqAeMeaEMY2HU1X5x3 vj/aCqrAzKqShKc+yGUalURaTXjQZag2iQYvG5cJGZNkl0YKgMQyo+GCIPiTf5Mi Znrhlebjayf6kpp+R8LoklS/Lv6T3cCzTPDLbDG+i9JvGp3eM69yVlUNtS7U7NGL rAic5/wrOkv6Lb+BnmcYFA3J7xauEzGEP9SnrdggOQxGyL4m1N8BxVYekeBmTjCC 8ifrjtfd7y8Qqd+tRG9Dt6RCzHtAdRKufirCuRWWSi4GtOsCam8b6eucc1GaakBw CwZL46W0aBlVbw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:45:32 2025 by rpki-client