This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json) Hash identifier: G8/WqEafiqw0OGQQgOXANNdU5SRD4rAiGu8hIbAUmTI= Subject key identifier: 93:B6:73:08:AB:97:93:FF:52:6E:24:DE:C6:6F:3F:35:BB:1B:60:05 Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d Certificate serial: 019B269BA9B2E42D6CE8173A298BE038E6BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 10:01:34 +0000 Manifest this update: Tue 16 Dec 2025 10:01:34 +0000 Manifest next update: Wed 17 Dec 2025 10:01:34 +0000 Files and hashes: 1: 3NLIuHMmWgQs4wJxVy9Hy-aW-pg.roa (hash: E1YEQO+V+WEVpKPvVd6pcBugEFAnXKdDCtGzwwDY3UY=) 2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: 69LQN9UTHVIJbBmec0SsraeIuPaTPg0EL7WuKLAAlwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:a9:b2:e4:2d:6c:e8:17:3a:29:8b:e0:38:e6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d Validity Not Before: Dec 16 10:01:34 2025 GMT Not After : Dec 17 10:01:34 2025 GMT Subject: CN=93b67308ab9793ff526e24dec66f3f35bb1b6005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:2a:1c:3a:e7:61:f0:cf:af:fa:f7:cf:ed: 7b:e9:c7:df:65:8e:9d:0f:3a:2e:d3:2a:ad:15:a8: 9e:d2:3e:b2:bd:ac:25:d8:33:e6:49:7e:e8:6f:cc: 4d:bd:4f:10:01:2e:3b:39:c7:c8:de:f1:d5:41:cc: 9a:21:f4:e7:d6:0b:3c:d4:3f:f6:c4:85:7f:a3:42: b7:90:5e:53:b6:02:12:7b:ec:74:db:d1:45:7a:ce: 96:bc:28:a9:2d:01:b4:1f:21:59:5b:9b:e6:65:e7: 04:c9:5e:89:6c:24:26:37:50:c8:52:cd:cf:80:74: 61:e2:7e:8d:b6:22:0e:a5:57:d3:2b:05:13:b6:58: 7d:24:89:da:8f:cc:03:80:b0:69:60:f7:87:04:c1: 5e:c3:af:4e:fb:1a:cd:12:b3:0b:36:f1:b1:9b:25: 6c:62:82:20:a6:2a:31:40:be:36:40:25:b7:04:f6: cf:96:b3:60:a6:1b:58:ad:bb:2f:b2:09:1c:60:2d: 91:08:35:80:6f:86:b3:8f:4f:74:4d:07:18:f0:8c: 49:92:ed:cc:31:21:de:8a:10:86:b0:a3:80:8d:6c: f9:64:e0:12:86:79:b2:b1:13:01:88:36:08:d1:85: f4:fe:6f:13:e6:7e:3e:0b:4b:5b:9b:67:73:70:45: d6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:73:08:AB:97:93:FF:52:6E:24:DE:C6:6F:3F:35:BB:1B:60:05 X509v3 Authority Key Identifier: keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f4:7f:6c:dc:0f:b1:0b:51:0e:71:95:9b:12:0c:50:02:af: 90:d7:8b:89:2e:13:91:ef:e5:03:d6:ac:b6:b7:65:36:c1:7e: d1:b4:00:df:34:9a:92:3f:c6:3e:da:9a:ae:87:20:b6:7e:d9: 86:2f:8e:a8:3e:37:45:47:b0:e7:33:03:7f:20:ce:c3:8f:0f: ee:84:df:9e:6b:3e:25:83:9d:e8:b8:1d:7b:95:ff:57:8f:d2: f6:f4:e4:36:b2:e5:a9:a2:0f:25:b5:ce:f1:39:79:ea:a7:36: 75:f3:71:ac:04:fa:fb:07:e9:0c:46:55:75:0a:1d:14:61:3b: 2a:85:e7:df:47:5d:85:b7:86:49:a7:55:c8:39:fa:3b:d7:16: 44:e7:67:59:38:3b:cb:1c:ad:3b:97:6a:0a:d7:07:b7:50:68: 08:cb:11:21:87:22:f1:b5:11:1b:b0:6a:84:f6:29:77:c6:8f: e0:bd:7e:cd:43:83:75:7b:3b:f3:99:e9:d3:c2:f8:3c:79:1c: 84:a7:37:76:79:45:c7:fc:8c:4f:2a:3f:22:43:99:69:b0:e4: 9e:25:4e:3e:9a:91:4d:1a:21:d5:da:32:2b:01:8e:f2:f3:bf: d5:c0:7a:77:4b:7e:e5:87:8b:ea:df:91:94:ad:d4:42:33:0e: bd:d3:1d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm6my5C1s6Bc6KYvgOOa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NTBjNmMwMmE5YmRlNGUxNzE4N2YwNWIwZWNhOTUwNDgz YmY5MmQwHhcNMjUxMjE2MTAwMTM0WhcNMjUxMjE3MTAwMTM0WjAzMTEwLwYDVQQD Eyg5M2I2NzMwOGFiOTc5M2ZmNTI2ZTI0ZGVjNjZmM2YzNWJiMWI2MDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh4qHDrnYfDPr/r3z+176cffZY6d Dzou0yqtFaie0j6yvawl2DPmSX7ob8xNvU8QAS47OcfI3vHVQcyaIfTn1gs81D/2 xIV/o0K3kF5TtgISe+x029FFes6WvCipLQG0HyFZW5vmZecEyV6JbCQmN1DIUs3P gHRh4n6NtiIOpVfTKwUTtlh9JInaj8wDgLBpYPeHBMFew69O+xrNErMLNvGxmyVs YoIgpioxQL42QCW3BPbPlrNgphtYrbsvsgkcYC2RCDWAb4azj090TQcY8IxJku3M MSHeihCGsKOAjWz5ZOAShnmysRMBiDYI0YX0/m8T5n4+C0tbm2dzcEXW+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJO2cwirl5P/Um4k3sZvPzW7G2AFMB8GA1UdIwQY MBaAFEZQxsAqm95OFxh/BbDsqVBIO/ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUt NDljMjQyOTJlOWJkLzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUtNDljMjQyOTJlOWJk LzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPR/bNwP sQtRDnGVmxIMUAKvkNeLiS4Tke/lA9astrdlNsF+0bQA3zSakj/GPtqarocgtn7Z hi+OqD43RUew5zMDfyDOw48P7oTfnms+JYOd6Lgde5X/V4/S9vTkNrLlqaIPJbXO 8Tl56qc2dfNxrAT6+wfpDEZVdQodFGE7KoXn30ddhbeGSadVyDn6O9cWROdnWTg7 yxytO5dqCtcHt1BoCMsRIYci8bURG7BqhPYpd8aP4L1+zUODdXs785np08L4PHkc hKc3dnlFx/yMTyo/IkOZabDkniVOPpqRTRoh1doyKwGO8vO/1cB6d0t+5YeL6t+R lK3UQjMOvdMdPw== -----END CERTIFICATE-----Generated at Tue Dec 16 13:41:33 2025 by rpki-client