This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft File: Ru0nXFpziIjVgGle3TZxWVlEeSE.mft (raw, json) Hash identifier: TA0HF5c4mbWX0dYe9bfp20Nz02uaFwLuvYZaJvS8h2M= Subject key identifier: 2D:65:AE:64:3E:CD:03:4F:31:8F:89:79:9E:56:78:18:1A:3D:BF:47 Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21 Certificate issuer: /CN=46ed275c5a738888d580695edd36715959447921 Certificate serial: 019AF35231E227874D6E44B479082110763A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft Manifest number: 07B3 Signing time: Sat 06 Dec 2025 11:00:41 +0000 Manifest this update: Sat 06 Dec 2025 11:00:41 +0000 Manifest next update: Sun 07 Dec 2025 11:00:41 +0000 Files and hashes: 1: Ru0nXFpziIjVgGle3TZxWVlEeSE.crl (hash: eykW8It59Tklv96huectZiCqdgt6I3kie1SG8CeVSz8=) 2: uOExWuSOVw3WsjvU2eYOWMWKUpM.roa (hash: hA0HItJlYM+q1aZPrXih9b73zlhaFUPXGNtsx6XoxS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:31:e2:27:87:4d:6e:44:b4:79:08:21:10:76:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ed275c5a738888d580695edd36715959447921 Validity Not Before: Dec 6 11:00:41 2025 GMT Not After : Dec 7 11:00:41 2025 GMT Subject: CN=2d65ae643ecd034f318f89799e5678181a3dbf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6c:1f:90:08:09:77:3f:e3:2c:fe:cc:8d:57: f1:7c:cb:8a:dc:88:04:a0:01:12:c5:5d:7a:d1:f0: a3:7f:b7:4d:09:10:fa:19:7e:d7:79:64:ec:e9:e2: ad:cc:da:7d:b7:f1:0e:90:16:cd:c9:cd:92:73:31: e7:5f:4c:7a:e2:e0:f3:c6:70:a7:25:15:e4:e2:a5: c4:a9:f3:bc:50:1d:d6:5b:fb:df:00:0d:91:90:15: a1:80:29:81:85:f6:8a:08:7c:4d:41:2d:89:2b:24: c9:0c:b8:9e:e9:b7:99:e7:54:59:2d:5e:19:97:e3: de:d4:c1:46:55:fb:6a:e7:ec:c1:df:76:25:da:c6: ac:25:ab:a3:87:6c:24:76:2d:05:8e:35:fa:3b:53: cd:7a:21:ac:fb:3c:7a:31:2e:8b:56:6f:83:12:f4: 4b:29:b6:bf:00:9e:47:53:c6:82:aa:ac:b0:5c:8c: 48:ff:42:b2:25:d1:0d:a5:c8:e6:90:ba:65:01:69: 23:fa:a2:b3:5a:00:af:4f:01:5f:0c:dd:db:dc:68: 5d:45:64:76:5e:a6:e7:32:48:ab:ea:e8:dd:96:60: 14:00:a8:77:94:c5:fa:a1:eb:2d:0a:70:c3:3d:f0: 58:14:7e:64:26:87:fa:33:61:70:92:fa:b5:95:38: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:65:AE:64:3E:CD:03:4F:31:8F:89:79:9E:56:78:18:1A:3D:BF:47 X509v3 Authority Key Identifier: keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ac:0a:96:ec:98:6d:37:90:be:54:c8:7a:dd:bd:2b:c7:37: e0:11:60:d7:0e:06:8b:6d:af:6e:da:17:79:42:51:91:30:08: 5c:c2:d7:82:97:ac:59:06:dc:7a:57:8a:6c:04:ce:38:8c:04: c6:3e:02:0a:32:73:1b:c1:f8:6a:6b:d2:7d:f4:6b:74:f6:4a: a0:57:1b:83:00:b9:87:ff:8b:9f:c2:46:dd:c9:f6:7c:d4:14: 4e:39:9c:31:65:ca:99:b3:e7:1b:0f:27:3a:45:30:95:f1:67: bd:ff:d5:78:db:86:b4:ad:4a:40:6f:5b:73:c8:4d:d3:a2:37: 88:b0:80:43:e2:33:ef:c6:2d:b5:50:2a:84:4b:90:1a:b1:b3: e3:7a:d5:38:ed:d0:dd:e4:6b:37:f3:d4:fa:33:f6:09:f9:2f: 4a:cf:1d:ed:31:17:d9:34:83:af:57:7c:49:33:d6:2d:b6:eb: e0:36:df:d4:00:71:57:8d:60:1f:00:c6:c7:d0:b6:58:b0:50: 9f:a9:6f:3d:fc:6d:ba:f3:11:82:a0:cc:a6:70:11:a7:9d:16: 61:53:55:a0:fa:8b:4b:21:22:0d:63:41:4a:a5:b2:ab:99:88: 55:b6:d2:41:c8:05:f0:ae:8b:3c:61:c3:dd:76:14:a0:d5:cc: f0:2d:a7:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjHiJ4dNbkS0eQghEHY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWQyNzVjNWE3Mzg4ODhkNTgwNjk1ZWRkMzY3MTU5NTk0 NDc5MjEwHhcNMjUxMjA2MTEwMDQxWhcNMjUxMjA3MTEwMDQxWjAzMTEwLwYDVQQD EygyZDY1YWU2NDNlY2QwMzRmMzE4Zjg5Nzk5ZTU2NzgxODFhM2RiZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmwfkAgJdz/jLP7MjVfxfMuK3IgE oAESxV160fCjf7dNCRD6GX7XeWTs6eKtzNp9t/EOkBbNyc2SczHnX0x64uDzxnCn JRXk4qXEqfO8UB3WW/vfAA2RkBWhgCmBhfaKCHxNQS2JKyTJDLie6beZ51RZLV4Z l+Pe1MFGVftq5+zB33Yl2sasJaujh2wkdi0FjjX6O1PNeiGs+zx6MS6LVm+DEvRL Kba/AJ5HU8aCqqywXIxI/0KyJdENpcjmkLplAWkj+qKzWgCvTwFfDN3b3GhdRWR2 XqbnMkir6ujdlmAUAKh3lMX6oestCnDDPfBYFH5kJof6M2Fwkvq1lTi2XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1lrmQ+zQNPMY+JeZ5WeBgaPb9HMB8GA1UdIwQY MBaAFEbtJ1xac4iI1YBpXt02cVlZRHkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2Ut M2Y4ZTdmMTAzODk5LzEvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2UtM2Y4ZTdmMTAzODk5 LzEvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOawKluyY bTeQvlTIet29K8c34BFg1w4Gi22vbtoXeUJRkTAIXMLXgpesWQbceleKbATOOIwE xj4CCjJzG8H4amvSffRrdPZKoFcbgwC5h/+Ln8JG3cn2fNQUTjmcMWXKmbPnGw8n OkUwlfFnvf/VeNuGtK1KQG9bc8hN06I3iLCAQ+Iz78YttVAqhEuQGrGz43rVOO3Q 3eRrN/PU+jP2CfkvSs8d7TEX2TSDr1d8STPWLbbr4Dbf1ABxV41gHwDGx9C2WLBQ n6lvPfxtuvMRgqDMpnARp50WYVNVoPqLSyEiDWNBSqWyq5mIVbbSQcgF8K6LPGHD 3XYUoNXM8C2nwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:35 2025 by rpki-client