This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json) Hash identifier: aiTr0F/5klLnDewfEn4LLqBPqL9mwOYPEXK46M15qrY= Subject key identifier: 51:FF:44:9F:F6:53:94:3A:1D:0A:F9:72:84:7A:F4:5E:56:8E:A5:52 Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Certificate serial: 019AF164087CF2441C9954250C75C73C9453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:00:56 +0000 Manifest this update: Sat 06 Dec 2025 02:00:56 +0000 Manifest next update: Sun 07 Dec 2025 02:00:56 +0000 Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: 3HAAw7YvbdfHKg/4b55fF0Zj1kL6GInUSfxQ2YbdDfM=) 2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:08:7c:f2:44:1c:99:54:25:0c:75:c7:3c:94:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Validity Not Before: Dec 6 02:00:56 2025 GMT Not After : Dec 7 02:00:56 2025 GMT Subject: CN=51ff449ff653943a1d0af972847af45e568ea552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:2f:55:7c:ff:4e:f4:ea:23:0b:d3:a7:1b: d6:3d:59:e3:72:93:36:63:88:cd:0c:0e:8d:dc:93: 3f:86:76:fb:d7:98:dd:3f:a6:06:84:b5:81:37:48: 5f:26:1f:5a:94:c5:87:cf:fa:36:b2:bc:8d:7a:08: a0:d4:6d:3a:47:f5:cb:d0:b0:a2:d7:55:f2:e5:f2: e6:77:24:b9:09:26:e5:dc:22:c5:50:70:77:f2:44: 72:2b:d0:e6:93:6c:45:c4:15:e2:34:43:3c:03:70: 95:d0:15:ef:77:d1:d1:93:e3:36:9f:15:b4:66:57: 5d:ad:b0:66:e1:54:b6:62:9f:f7:37:95:e6:d2:fe: b6:40:23:45:81:4b:6f:d8:bc:05:cf:0a:31:97:e5: a0:07:52:f2:df:02:c0:75:42:ae:63:78:7c:bd:e8: 6d:35:72:6e:0e:e2:dc:71:d0:70:ba:5d:bc:f3:78: 05:cc:9c:3e:80:2d:a7:17:ea:e1:8e:bf:f6:6a:f6: f2:7c:7e:78:fd:f5:e9:c2:bb:31:47:34:e5:fd:a6: 49:d2:7b:94:7d:e1:1a:24:9e:bb:8c:33:46:99:12: 95:31:3f:31:5d:2a:e1:25:60:b7:a1:de:ed:ae:d5: 4e:9c:17:b8:97:41:22:dd:3b:8b:b0:63:30:87:17: 26:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:44:9F:F6:53:94:3A:1D:0A:F9:72:84:7A:F4:5E:56:8E:A5:52 X509v3 Authority Key Identifier: keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:85:5f:2d:f7:7a:eb:11:77:71:f2:72:7e:b1:ff:fe:81:c3: b8:5b:36:13:15:c7:b5:03:a5:ff:d8:7d:5c:b2:f5:7d:8b:b9: 9c:76:ff:b2:6f:00:17:83:cf:a4:8f:e6:aa:15:2f:12:b3:4b: 8f:43:2e:87:69:6b:5b:ca:b0:7f:ec:bb:c4:73:ee:b8:6b:6b: b9:5f:de:2e:cc:98:e1:96:61:64:17:87:5b:d7:71:40:04:0c: f7:8f:22:ea:03:06:59:74:26:27:af:05:ba:9d:9e:0d:4a:2c: 6a:6c:37:a6:cf:05:90:39:ab:c5:a4:56:1f:73:14:64:ec:33: cc:c5:6b:f9:20:79:f6:01:ac:c5:c6:e3:90:36:ec:2d:d2:33: d3:59:f9:64:3b:8b:1b:ba:b2:66:cb:b3:26:e4:81:60:ef:29: a0:4b:f7:a1:aa:5b:56:ee:3e:f6:80:49:9a:2a:01:dd:ee:34: 1a:8c:cd:0a:78:1c:81:f2:93:45:5e:d5:65:d6:f0:97:c0:a7: b2:8f:1e:b2:0b:e2:fa:cd:8e:de:90:4b:e2:c6:35:cd:7a:14: cd:63:94:bf:bf:33:c1:fd:28:ef:20:54:d4:f6:fa:45:5d:7e: 24:45:f4:02:55:b7:ad:28:cb:72:ad:3a:7d:3a:80:b8:89:0d: da:31:78:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAh88kQcmVQlDHXHPJRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTBjNjliZWQwMzQ2NWJmZjhhZjlkNzFhNmFlOWIxODNi N2MyNGQwHhcNMjUxMjA2MDIwMDU2WhcNMjUxMjA3MDIwMDU2WjAzMTEwLwYDVQQD Eyg1MWZmNDQ5ZmY2NTM5NDNhMWQwYWY5NzI4NDdhZjQ1ZTU2OGVhNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42cvVXz/TvTqIwvTpxvWPVnjcpM2 Y4jNDA6N3JM/hnb715jdP6YGhLWBN0hfJh9alMWHz/o2sryNegig1G06R/XL0LCi 11Xy5fLmdyS5CSbl3CLFUHB38kRyK9Dmk2xFxBXiNEM8A3CV0BXvd9HRk+M2nxW0 ZlddrbBm4VS2Yp/3N5Xm0v62QCNFgUtv2LwFzwoxl+WgB1Ly3wLAdUKuY3h8veht NXJuDuLccdBwul2883gFzJw+gC2nF+rhjr/2avbyfH54/fXpwrsxRzTl/aZJ0nuU feEaJJ67jDNGmRKVMT8xXSrhJWC3od7trtVOnBe4l0Ei3TuLsGMwhxcmYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFH/RJ/2U5Q6HQr5coR69F5WjqVSMB8GA1UdIwQY MBaAFEUQxpvtA0Zb/4r51xpq6bGDt8JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2Ut ZTFmZDBiMWYwZWZkLzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2UtZTFmZDBiMWYwZWZk LzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYVfLfd6 6xF3cfJyfrH//oHDuFs2ExXHtQOl/9h9XLL1fYu5nHb/sm8AF4PPpI/mqhUvErNL j0Muh2lrW8qwf+y7xHPuuGtruV/eLsyY4ZZhZBeHW9dxQAQM948i6gMGWXQmJ68F up2eDUosamw3ps8FkDmrxaRWH3MUZOwzzMVr+SB59gGsxcbjkDbsLdIz01n5ZDuL G7qyZsuzJuSBYO8poEv3oapbVu4+9oBJmioB3e40GozNCngcgfKTRV7VZdbwl8Cn so8esgvi+s2O3pBL4sY1zXoUzWOUv78zwf0o7yBU1Pb6RV1+JEX0AlW3rSjLcq06 fTqAuIkN2jF4/g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:20 2025 by rpki-client