This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft File: Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json) Hash identifier: axiD3UuFV9j9VRF4TxSKa1JthACnUPM+nl0LyxESFYo= Subject key identifier: BA:6D:59:96:FD:40:10:ED:11:4D:13:59:7D:27:02:4F:43:B0:20:57 Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5 Certificate issuer: /CN=45bbb0c37704bfd558849c6549af9734e7d14be5 Certificate serial: 019AF12ECE7468E60607B833889CD7278496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft Manifest number: 0695 Signing time: Sat 06 Dec 2025 01:02:47 +0000 Manifest this update: Sat 06 Dec 2025 01:02:47 +0000 Manifest next update: Sun 07 Dec 2025 01:02:47 +0000 Files and hashes: 1: HrWHZLwLz9SHQNWDWAqLUzhWNgM.roa (hash: +TAR64SkVojwAPPcj29LtZXZh5haH9rqB2EiQmQF6cY=) 2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: W6TtsLn6YpmUJC+lPICpbmCBLTRAcaj7zs7j9QNHsEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ce:74:68:e6:06:07:b8:33:88:9c:d7:27:84:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5 Validity Not Before: Dec 6 01:02:47 2025 GMT Not After : Dec 7 01:02:47 2025 GMT Subject: CN=ba6d5996fd4010ed114d13597d27024f43b02057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:6c:4c:91:43:93:9c:47:33:ac:5f:dc:ac: e9:f3:13:45:cb:36:34:6e:de:23:c6:13:4d:5d:42: 1a:f2:1a:28:b5:5b:0e:e3:7d:a0:96:79:8f:d7:5b: 94:a9:5a:b5:1c:d4:3d:5b:be:28:3d:a8:8d:87:1d: 48:e8:34:1a:ba:8a:ba:74:6d:40:b9:51:49:72:79: 41:0c:63:f0:16:bf:b9:93:52:5f:56:db:bf:af:15: e1:ba:f7:f5:80:44:b0:50:2b:37:c2:b2:63:9c:9a: 9c:f0:fa:a9:17:c4:ed:ae:97:6b:97:df:8a:20:7a: 25:5f:08:a4:8e:4c:35:7a:36:cb:a2:ad:01:a8:2d: 63:0b:f2:22:3a:ca:a1:9f:fc:e8:de:33:b0:f4:3e: e5:84:f0:04:bb:70:d0:85:f7:f1:ac:de:62:8d:18: a4:5a:c0:51:e8:01:48:c7:8a:d4:1a:51:9c:7d:62: 99:b5:46:9c:9d:76:6d:20:91:07:d9:26:3c:3a:ca: b4:24:34:ee:9e:55:d8:a9:19:33:11:bf:6d:d2:c4: 5f:3e:39:e8:e3:40:9b:71:ae:8f:c8:30:24:e9:10: 45:da:2d:18:a9:b1:8f:32:6e:09:3d:f3:7b:de:bd: 2e:ed:fc:aa:8c:88:e3:c1:5b:a8:00:06:c2:34:d5: 08:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6D:59:96:FD:40:10:ED:11:4D:13:59:7D:27:02:4F:43:B0:20:57 X509v3 Authority Key Identifier: keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4e:c3:41:19:af:f2:f9:17:b9:f4:b5:46:47:84:13:cd:15: bd:e1:55:b6:5d:b9:1f:28:f1:14:ae:29:41:e5:de:47:11:96: 30:cf:57:39:a8:ee:ca:fc:76:19:90:85:ed:85:8e:1b:73:10: a1:05:39:b5:bf:5c:9d:aa:5a:4e:17:4b:29:5c:7c:0d:44:49: 12:60:8a:9f:27:0e:d0:12:06:ee:d9:de:f6:55:d4:9f:7c:0e: f1:8e:60:59:f6:3e:1a:fb:bc:a3:61:75:6e:90:00:cf:c3:2d: 8c:1f:43:38:49:f5:68:88:bc:ef:1a:8f:42:6d:2a:30:18:65: 8c:a5:95:6b:db:d1:fd:3c:27:2c:88:50:40:dc:b3:01:be:3a: bb:a7:98:ce:f0:23:5e:e6:84:54:4c:d5:dd:7d:7a:66:74:4c: be:71:9e:86:d3:9e:b5:64:27:68:68:f2:f4:c9:41:cb:d8:f3: db:fa:27:1a:d2:57:62:cb:54:91:d7:18:fe:a9:40:3c:a5:d0: 4a:c4:52:cd:14:f9:4d:93:7d:e4:64:88:d7:98:a8:0f:aa:a6: 41:83:4c:5a:d9:01:80:77:31:67:1c:ed:36:22:b4:d0:37:46: e5:31:e8:8d:c9:20:b9:dd:c0:71:02:35:68:16:5c:93:86:65: 49:50:7e:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLs50aOYGB7gziJzXJ4SWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJiMGMzNzcwNGJmZDU1ODg0OWM2NTQ5YWY5NzM0ZTdk MTRiZTUwHhcNMjUxMjA2MDEwMjQ3WhcNMjUxMjA3MDEwMjQ3WjAzMTEwLwYDVQQD EyhiYTZkNTk5NmZkNDAxMGVkMTE0ZDEzNTk3ZDI3MDI0ZjQzYjAyMDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvJsTJFDk5xHM6xf3Kzp8xNFyzY0 bt4jxhNNXUIa8hootVsO432glnmP11uUqVq1HNQ9W74oPaiNhx1I6DQauoq6dG1A uVFJcnlBDGPwFr+5k1JfVtu/rxXhuvf1gESwUCs3wrJjnJqc8PqpF8Ttrpdrl9+K IHolXwikjkw1ejbLoq0BqC1jC/IiOsqhn/zo3jOw9D7lhPAEu3DQhffxrN5ijRik WsBR6AFIx4rUGlGcfWKZtUacnXZtIJEH2SY8Osq0JDTunlXYqRkzEb9t0sRfPjno 40Cbca6PyDAk6RBF2i0YqbGPMm4JPfN73r0u7fyqjIjjwVuoAAbCNNUIAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLptWZb9QBDtEU0TWX0nAk9DsCBXMB8GA1UdIwQY MBaAFEW7sMN3BL/VWIScZUmvlzTn0UvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zM2Q4YWEtOTNkOC00OTM2LWEzZGUt OTNhMzY2NWM0YjY4LzEvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zM2Q4YWEtOTNkOC00OTM2LWEzZGUtOTNhMzY2NWM0YjY4 LzEvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYE7DQRmv 8vkXufS1RkeEE80VveFVtl25HyjxFK4pQeXeRxGWMM9XOajuyvx2GZCF7YWOG3MQ oQU5tb9cnapaThdLKVx8DURJEmCKnycO0BIG7tne9lXUn3wO8Y5gWfY+Gvu8o2F1 bpAAz8MtjB9DOEn1aIi87xqPQm0qMBhljKWVa9vR/TwnLIhQQNyzAb46u6eYzvAj XuaEVEzV3X16ZnRMvnGehtOetWQnaGjy9MlBy9jz2/onGtJXYstUkdcY/qlAPKXQ SsRSzRT5TZN95GSI15ioD6qmQYNMWtkBgHcxZxztNiK00DdG5THojckgud3AcQI1 aBZck4ZlSVB+NQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:47 2025 by rpki-client