This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft File: RuUyMK589oaKpoO2JLWagRiI8Lo.mft (raw, json) Hash identifier: M7u2UM35vb763JJqrMIBGQOiHU2Wyogl4VNjSnlrv90= Subject key identifier: 11:73:5D:DF:FD:FE:B1:9D:D5:07:FA:B5:2F:60:C5:ED:40:BF:9F:3C Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA Certificate issuer: /CN=46e53230ae7cf6868aa683b624b59a811888f0ba Certificate serial: 019AF0BEFCC1DA40FFDFC9DE53C23EDF5CB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft Manifest number: 03E1 Signing time: Fri 05 Dec 2025 23:00:39 +0000 Manifest this update: Fri 05 Dec 2025 23:00:39 +0000 Manifest next update: Sat 06 Dec 2025 23:00:39 +0000 Files and hashes: 1: 2yUVHb7bKQBM4p7hGq3iiZimEbc.roa (hash: a9OMpn99so26tcAAD5Nx55fldNYwi9TBv8dYukEeMlU=) 2: RuUyMK589oaKpoO2JLWagRiI8Lo.crl (hash: +Vqy9n1hgL5GBl49ZQFf5WSbjj7c+05F63umnffZAoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:fc:c1:da:40:ff:df:c9:de:53:c2:3e:df:5c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba Validity Not Before: Dec 5 23:00:39 2025 GMT Not After : Dec 6 23:00:39 2025 GMT Subject: CN=11735ddffdfeb19dd507fab52f60c5ed40bf9f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:ae:f9:29:83:49:ba:95:05:47:72:7b:4f: 52:35:f1:a5:9c:20:71:00:fd:74:7c:6b:b4:54:0e: 93:bb:3e:53:8c:4e:ad:a2:81:ca:44:f4:7a:00:be: 62:3b:51:f9:c6:3e:cc:41:b7:7f:40:f1:30:44:06: 5b:ba:66:12:23:40:23:5a:13:ee:75:42:f2:21:2b: f0:3b:18:f9:19:f2:f0:8c:88:3b:2f:aa:2b:01:27: 47:9b:e8:d6:45:1b:4f:50:3c:a8:64:57:65:78:a6: 13:26:1c:f9:21:56:61:12:14:21:e5:e6:e8:74:79: de:72:70:c3:24:48:04:b5:b0:7e:dd:b4:ae:f3:20: 62:f3:89:33:d1:8d:6d:e4:da:06:2d:e0:57:a2:17: 27:09:89:5f:56:1d:b8:2d:cf:33:c7:2a:40:88:9e: cb:78:44:ed:2e:b9:e2:bf:25:6a:a2:2a:6e:2f:50: ab:70:d4:19:7e:cb:02:7e:d3:a1:88:50:7e:fa:8d: 50:93:a4:03:eb:e3:35:33:54:02:3e:d1:11:78:5a: e5:3b:fc:75:a3:33:a3:d6:93:6b:42:f4:87:15:cc: f3:eb:80:3b:91:85:0d:d2:a5:5e:c3:ce:66:cc:9c: a0:20:75:0f:60:53:4f:8c:ff:ee:95:76:10:ac:6e: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:73:5D:DF:FD:FE:B1:9D:D5:07:FA:B5:2F:60:C5:ED:40:BF:9F:3C X509v3 Authority Key Identifier: keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:69:4e:91:20:0d:d9:d0:a9:cc:bd:ba:da:b0:08:e9:c6:54: 18:c3:d0:16:47:e3:fc:aa:47:5a:99:28:60:7f:25:0f:38:6b: 2d:ff:b6:73:b6:86:43:6b:3c:9f:04:7b:1b:a0:d5:e2:ae:94: 55:0f:c4:0e:35:86:37:ac:ff:6e:17:a7:3c:2c:76:49:d6:24: 08:14:ab:d7:50:7f:0d:bc:e9:40:ed:de:39:46:56:4a:a3:fa: 4e:75:dc:7d:fc:f8:24:a9:9d:62:df:67:12:4f:74:aa:f1:af: f2:8d:cd:e7:24:9e:27:4d:15:2d:a6:9f:b3:a4:f8:0b:16:81: 65:2b:e2:bb:36:fc:7b:b4:57:09:74:d4:5d:b1:55:b4:62:3b: f9:c5:83:31:bc:00:b3:76:f6:34:35:56:08:78:a2:6e:a3:0c: 34:14:35:06:cc:b0:99:67:4d:fe:6f:96:31:42:96:b4:42:fa: b8:a5:7d:d1:35:be:1c:81:60:f9:c4:f8:38:9b:d6:e8:46:33: bc:9f:8c:b5:f5:92:90:4b:30:25:a0:4f:d9:70:1b:c3:a9:8e: c2:5b:ff:8b:7a:24:50:f4:58:27:7f:b3:6f:42:c8:ec:84:eb: ee:66:24:05:10:f9:c0:66:2c:4a:6c:e8:51:64:1a:de:16:75: ce:fd:94:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvvzB2kD/38neU8I+31yyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZTUzMjMwYWU3Y2Y2ODY4YWE2ODNiNjI0YjU5YTgxMTg4 OGYwYmEwHhcNMjUxMjA1MjMwMDM5WhcNMjUxMjA2MjMwMDM5WjAzMTEwLwYDVQQD EygxMTczNWRkZmZkZmViMTlkZDUwN2ZhYjUyZjYwYzVlZDQwYmY5ZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunuu+SmDSbqVBUdye09SNfGlnCBx AP10fGu0VA6Tuz5TjE6tooHKRPR6AL5iO1H5xj7MQbd/QPEwRAZbumYSI0AjWhPu dULyISvwOxj5GfLwjIg7L6orASdHm+jWRRtPUDyoZFdleKYTJhz5IVZhEhQh5ebo dHnecnDDJEgEtbB+3bSu8yBi84kz0Y1t5NoGLeBXohcnCYlfVh24Lc8zxypAiJ7L eETtLrnivyVqoipuL1CrcNQZfssCftOhiFB++o1Qk6QD6+M1M1QCPtEReFrlO/x1 ozOj1pNrQvSHFczz64A7kYUN0qVew85mzJygIHUPYFNPjP/ulXYQrG5qCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFzXd/9/rGd1Qf6tS9gxe1Av588MB8GA1UdIwQY MBaAFEblMjCufPaGiqaDtiS1moEYiPC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEt MjMyMjQwM2VjNzg3LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEtMjMyMjQwM2VjNzg3 LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWlOkSAN 2dCpzL262rAI6cZUGMPQFkfj/KpHWpkoYH8lDzhrLf+2c7aGQ2s8nwR7G6DV4q6U VQ/EDjWGN6z/bhenPCx2SdYkCBSr11B/DbzpQO3eOUZWSqP6TnXcffz4JKmdYt9n Ek90qvGv8o3N5ySeJ00VLaafs6T4CxaBZSviuzb8e7RXCXTUXbFVtGI7+cWDMbwA s3b2NDVWCHiibqMMNBQ1BsywmWdN/m+WMUKWtEL6uKV90TW+HIFg+cT4OJvW6EYz vJ+MtfWSkEswJaBP2XAbw6mOwlv/i3okUPRYJ3+zb0LI7ITr7mYkBRD5wGYsSmzo UWQa3hZ1zv2Udg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:54 2025 by rpki-client