This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft File: RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json) Hash identifier: j63c9esTlwFsu6jy8gg2Iu/4DZFBXB99EMp/gOuYxzE= Subject key identifier: 0A:66:0B:91:39:12:1C:F4:C1:3D:72:76:C0:C6:DA:67:F9:4F:01:C0 Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75 Certificate issuer: /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675 Certificate serial: 019AF2768D6AFD49FDD3E9021B91E5DD39CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: JQi8irEw8w79Pg3ph+69ThULc6duFTpbzr7ZtF/FYuc=) 2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8d:6a:fd:49:fd:d3:e9:02:1b:91:e5:dd:39:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675 Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=0a660b9139121cf4c13d7276c0c6da67f94f01c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c8:ce:80:82:e1:78:bd:94:71:3f:5f:b8:22: c4:a7:c5:5a:a2:06:b5:22:bb:dc:a3:7f:d6:af:59: cc:44:3c:3c:ab:fc:88:07:2a:82:a2:c4:e8:be:04: 7d:07:b3:15:45:c3:b1:0f:31:10:69:57:cd:bf:fd: f3:39:8d:44:df:04:35:5a:1c:c6:88:e6:5e:61:f6: ee:8d:7d:fd:c4:9d:55:03:12:64:97:b3:e2:91:c7: 13:2a:78:f6:0b:0c:7d:ff:b8:6a:7d:d1:3a:70:b3: 4c:b5:8b:d1:86:8c:1e:68:de:cc:d4:ee:42:49:48: 15:07:93:07:69:97:7d:15:2e:73:5e:0e:22:d8:09: 6f:ee:8a:94:aa:89:fb:cf:ad:cc:bf:76:b3:27:1d: 03:76:85:b1:23:63:57:ea:f0:d2:a1:33:e2:13:2a: 2e:cd:50:51:fb:5a:3e:4b:e2:d7:18:8f:2a:71:43: d7:9e:47:19:55:91:22:6c:1d:78:91:03:1d:af:1e: 82:98:4c:03:43:48:c3:fa:19:e9:32:33:55:10:88: 48:d1:66:90:1c:62:1f:fc:75:7c:1d:a9:21:8e:78: 6f:bc:6e:9a:83:83:31:76:03:ee:59:bc:85:dd:70: 2f:09:63:d5:70:1a:d8:17:f7:fb:7d:b7:49:87:80: a4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:66:0B:91:39:12:1C:F4:C1:3D:72:76:C0:C6:DA:67:F9:4F:01:C0 X509v3 Authority Key Identifier: keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e2:e5:c9:d2:80:fc:13:9c:6a:32:a7:8c:d8:58:fd:23:a0: 9d:bf:f1:6e:46:48:26:66:fb:08:10:f8:ab:35:8e:20:ba:f9: ac:9b:de:e5:93:9a:7a:3e:fd:59:34:5c:2f:86:ec:2f:20:af: e6:93:43:3d:cb:f7:72:73:a5:23:78:5c:a5:45:59:b0:41:b5: b4:bf:b6:fe:bc:c8:f5:5e:9e:23:21:ff:e8:28:17:38:c8:47: 7f:f6:13:75:77:db:d2:a5:a1:08:41:da:52:fc:ba:49:2d:82: 96:fc:a0:89:13:f1:73:64:bd:20:34:8a:02:1f:2c:22:1d:8c: dc:22:7e:67:bb:8e:a9:69:61:26:25:15:4e:76:a2:f5:69:7e: 02:3a:34:8b:84:42:56:ed:c0:5d:58:f4:f0:6f:7b:b8:06:91: 3e:cf:04:d8:f8:85:7a:ea:76:04:86:08:f4:a4:58:7b:ba:60: 9e:f8:c7:ae:a7:2e:71:2d:86:f7:d1:9b:9d:a3:d9:de:24:e6: 0c:75:0a:34:5e:2f:47:57:ff:ba:01:2b:c9:17:e9:b8:b4:9a: 25:04:53:b4:12:cd:2d:2b:f1:ea:59:a5:36:ca:d4:65:8d:f8: ba:b3:eb:03:02:b5:2a:b5:a5:87:af:49:2b:5c:01:65:aa:74: 07:04:d5:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo1q/Un90+kCG5Hl3TnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NzRhZjFiYmRjNGNhNDgzYzY2OWM0ZmUwYmRkNzY0Yjhh YzE2NzUwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD EygwYTY2MGI5MTM5MTIxY2Y0YzEzZDcyNzZjMGM2ZGE2N2Y5NGYwMWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MjOgILheL2UcT9fuCLEp8Vaoga1 Irvco3/Wr1nMRDw8q/yIByqCosTovgR9B7MVRcOxDzEQaVfNv/3zOY1E3wQ1WhzG iOZeYfbujX39xJ1VAxJkl7PikccTKnj2Cwx9/7hqfdE6cLNMtYvRhoweaN7M1O5C SUgVB5MHaZd9FS5zXg4i2Alv7oqUqon7z63Mv3azJx0DdoWxI2NX6vDSoTPiEyou zVBR+1o+S+LXGI8qcUPXnkcZVZEibB14kQMdrx6CmEwDQ0jD+hnpMjNVEIhI0WaQ HGIf/HV8HakhjnhvvG6ag4MxdgPuWbyF3XAvCWPVcBrYF/f7fbdJh4CkawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApmC5E5Ehz0wT1ydsDG2mf5TwHAMB8GA1UdIwQY MBaAFEZ0rxu9xMpIPGacT+C912S4rBZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAt NTQ5MmUwZTRlYmMzLzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAtNTQ5MmUwZTRlYmMz LzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOLlydKA /BOcajKnjNhY/SOgnb/xbkZIJmb7CBD4qzWOILr5rJve5ZOaej79WTRcL4bsLyCv 5pNDPcv3cnOlI3hcpUVZsEG1tL+2/rzI9V6eIyH/6CgXOMhHf/YTdXfb0qWhCEHa Uvy6SS2ClvygiRPxc2S9IDSKAh8sIh2M3CJ+Z7uOqWlhJiUVTnai9Wl+Ajo0i4RC Vu3AXVj08G97uAaRPs8E2PiFeup2BIYI9KRYe7pgnvjHrqcucS2G99GbnaPZ3iTm DHUKNF4vR1f/ugEryRfpuLSaJQRTtBLNLSvx6lmlNsrUZY34urPrAwK1KrWlh69J K1wBZap0BwTVWw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:02 2025 by rpki-client