This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json) Hash identifier: ZUkR4U96GqkU7hC9fsPSKluABpAo49GvAS3sQAx+Vbs= Subject key identifier: 30:30:6B:BA:9B:44:33:39:D5:59:1F:EE:F1:CB:B7:D9:1D:11:8A:71 Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd Certificate serial: 019AF2091A0B7749F33EF13DF3B829DA8899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: iJ/atJ49ll+SuSPuE1nXjbvFn56i5JYEJF4wGe3qsZo=) 2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1a:0b:77:49:f3:3e:f1:3d:f3:b8:29:da:88:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=30306bba9b443339d5591feef1cbb7d91d118a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:a6:35:69:ab:49:ce:74:4e:ac:76:94:5e: 7a:46:a4:56:8d:d7:55:be:8d:f3:4b:44:31:5a:03: 25:26:20:d7:49:b2:06:a6:f6:10:13:c2:59:25:0d: bd:29:ca:aa:2e:47:4f:75:a4:68:99:66:96:f2:e2: 34:21:40:6f:dc:bc:94:30:36:0f:fb:1d:fd:3b:7f: a7:3e:28:9f:35:fc:67:91:49:5a:72:9f:50:7f:7d: dc:25:37:8f:5a:9a:a6:a9:a7:a0:51:a2:54:da:e5: 60:37:ea:8d:26:a9:d2:b8:ee:e1:eb:e7:d9:d2:2c: 53:e5:d9:3c:11:86:df:27:69:58:b7:2b:9c:0d:85: f2:4a:8e:19:56:c5:55:f9:9d:f2:c2:8e:24:fd:8c: 5a:0f:80:a5:a7:1c:d0:0c:aa:52:72:e8:02:88:45: ca:25:cc:b9:70:24:d1:6a:d6:ca:7b:65:eb:b0:78: a0:8a:24:5e:cb:f7:a0:75:4b:4f:85:5e:2c:61:35: 38:17:45:ac:5e:62:42:5a:b3:e7:79:8b:f2:32:9d: 11:1d:72:c5:78:bd:f5:a9:c8:06:90:d4:92:5d:d5: e6:70:c6:40:30:27:85:07:af:40:18:12:aa:41:25: 95:32:8a:9d:a3:92:dc:13:0a:06:01:85:db:96:9c: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:30:6B:BA:9B:44:33:39:D5:59:1F:EE:F1:CB:B7:D9:1D:11:8A:71 X509v3 Authority Key Identifier: keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:66:13:e6:79:cd:1b:b0:d0:55:fd:02:e4:5e:b4:bb:22:1c: d3:f4:ea:0f:e2:ee:8e:df:8c:e4:7d:fa:61:4b:f2:e2:af:a0: 72:51:b6:c0:40:7f:dd:55:6f:aa:1e:c3:7f:ad:05:53:f6:1a: 51:3d:ef:44:15:17:86:77:24:1a:e4:2d:17:ae:e1:79:75:da: f7:fd:f7:7c:2d:a7:81:35:49:72:6c:0f:fd:c8:3f:60:2a:a1: a9:d1:2c:c8:cf:dd:81:9f:ab:23:cc:7f:32:53:3e:93:61:88: 24:ff:b0:2a:6c:be:02:44:7c:57:7d:ed:44:a2:f5:98:ab:63: 89:5a:e2:8c:fc:1f:25:82:61:b3:c6:32:d4:36:4a:3f:64:92: cc:02:38:87:d5:ae:67:64:e6:23:c7:4b:5a:a0:40:64:56:08: 52:0c:f7:ac:18:74:a4:ba:f9:b6:56:fb:e0:8b:8f:4e:e0:64: 9c:2b:8a:87:a3:9e:06:a6:0e:55:13:21:e4:3a:d2:25:43:29: 63:55:5b:2e:a0:9e:c6:01:c5:b1:e3:43:0c:91:0a:e3:2c:b4: a3:09:f3:1b:89:61:02:a0:83:d3:c5:f8:ae:a8:06:5f:df:c2: dd:36:6a:65:9d:70:00:ae:fe:5c:84:e9:6c:37:a9:24:5f:57: fc:5d:bf:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRoLd0nzPvE987gp2oiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYzg1YzM3YWQyNTI3NGM3MTJjMjQ0NzNlMDc4YWRjZTcz MmMxZGQwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EygzMDMwNmJiYTliNDQzMzM5ZDU1OTFmZWVmMWNiYjdkOTFkMTE4YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAmmNWmrSc50Tqx2lF56RqRWjddV vo3zS0QxWgMlJiDXSbIGpvYQE8JZJQ29KcqqLkdPdaRomWaW8uI0IUBv3LyUMDYP +x39O3+nPiifNfxnkUlacp9Qf33cJTePWpqmqaegUaJU2uVgN+qNJqnSuO7h6+fZ 0ixT5dk8EYbfJ2lYtyucDYXySo4ZVsVV+Z3ywo4k/YxaD4ClpxzQDKpScugCiEXK Jcy5cCTRatbKe2XrsHigiiRey/egdUtPhV4sYTU4F0WsXmJCWrPneYvyMp0RHXLF eL31qcgGkNSSXdXmcMZAMCeFB69AGBKqQSWVMoqdo5LcEwoGAYXblpytDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAwa7qbRDM51Vkf7vHLt9kdEYpxMB8GA1UdIwQY MBaAFOPIXDetJSdMcSwkRz4HitznMsHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUt ZGNlM2ZhM2ZiYWU5LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUtZGNlM2ZhM2ZiYWU5 LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGYT5nnN G7DQVf0C5F60uyIc0/TqD+Lujt+M5H36YUvy4q+gclG2wEB/3VVvqh7Df60FU/Ya UT3vRBUXhnckGuQtF67heXXa9/33fC2ngTVJcmwP/cg/YCqhqdEsyM/dgZ+rI8x/ MlM+k2GIJP+wKmy+AkR8V33tRKL1mKtjiVrijPwfJYJhs8Yy1DZKP2SSzAI4h9Wu Z2TmI8dLWqBAZFYIUgz3rBh0pLr5tlb74IuPTuBknCuKh6OeBqYOVRMh5DrSJUMp Y1VbLqCexgHFseNDDJEK4yy0ownzG4lhAqCD08X4rqgGX9/C3TZqZZ1wAK7+XITp bDepJF9X/F2/gg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:55 2025 by rpki-client