This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft File: RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json) Hash identifier: Nldc8fMUQtEhSP/O9Hs+qKvKBsnxOn6QewRlSscebXQ= Subject key identifier: AF:7A:D0:28:F5:8E:C6:1F:10:9F:80:24:DD:EA:DC:32:44:8C:FD:21 Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48 Certificate issuer: /CN=460c571111aafc0d51e5fde08230bf78b89e4a48 Certificate serial: 019AF2E42B554ED278A7FC2E442C5ED3A6FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 09:00:30 +0000 Manifest this update: Sat 06 Dec 2025 09:00:30 +0000 Manifest next update: Sun 07 Dec 2025 09:00:30 +0000 Files and hashes: 1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: Kij0jQYLF8hI+xQvA0U6f7/zyF2DoigT3zT8q8cRCTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:2b:55:4e:d2:78:a7:fc:2e:44:2c:5e:d3:a6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48 Validity Not Before: Dec 6 09:00:30 2025 GMT Not After : Dec 7 09:00:30 2025 GMT Subject: CN=af7ad028f58ec61f109f8024ddeadc32448cfd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b3:6c:35:71:4c:66:f3:cb:e4:24:a4:63:21: 5d:2b:d6:3f:8a:c5:c3:8c:cc:8c:04:38:14:98:36: e2:fb:35:f5:56:b3:9c:83:35:d9:11:17:d1:25:ac: b4:eb:ce:3b:0c:ce:8e:d7:66:9f:03:cf:aa:a1:fd: d3:8d:43:51:c5:dc:01:dd:b1:de:67:5b:de:61:1b: 30:53:d3:42:08:be:9f:cb:9d:be:9f:10:3f:1a:4b: 5f:cc:37:a8:b9:ff:98:ea:a5:c5:6a:7c:bd:90:b7: c8:bf:cb:24:77:d4:bf:b1:4e:6b:88:6a:c0:45:cd: 10:13:3f:eb:85:b5:e4:45:08:de:21:85:fa:77:46: 41:84:8b:c8:c8:67:73:15:e6:5e:b3:0c:29:10:3a: 0a:c1:7b:54:17:aa:d8:64:24:4a:76:c8:e9:a7:b3: ae:e6:2d:2f:f1:86:de:ec:8a:25:f1:01:8c:ef:34: 01:7d:f0:21:40:5d:e9:88:7f:68:ac:20:9a:55:fa: 27:21:3c:d5:ae:e6:27:e7:b3:7f:e1:b5:86:80:39: 7a:e5:4a:f0:34:f0:27:ca:f6:f2:76:54:7b:ea:41: f3:db:67:83:be:10:a1:21:5d:1e:94:46:64:df:12: 0d:5e:8c:9c:d2:e8:9f:f1:91:c2:a1:ff:43:75:69: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7A:D0:28:F5:8E:C6:1F:10:9F:80:24:DD:EA:DC:32:44:8C:FD:21 X509v3 Authority Key Identifier: keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8f:1b:34:5c:f6:76:ab:62:9c:5e:54:af:0d:6b:ec:09:47: 48:9e:dd:32:b2:1c:5b:d5:04:17:44:44:bf:af:36:d4:8b:20: 9e:c5:69:ec:c4:d6:47:b5:f1:31:5e:18:9c:8a:24:3c:ba:f6: 78:3d:a4:fc:e3:f2:f4:29:c1:c1:2c:a2:bf:0b:f7:ec:b9:32: 9f:d2:1f:97:2c:d0:29:61:0d:72:55:bd:34:0a:48:94:91:bf: 0a:ca:60:34:7d:c0:3c:60:a5:47:e2:03:d3:62:8c:26:0c:55: 7e:2f:5b:25:35:66:3b:8b:e0:66:6a:71:3b:a3:9d:c5:b7:8e: 96:44:e6:f9:07:86:c1:8f:0b:3c:d5:68:4f:57:c0:ec:49:5d: 7a:b9:77:da:0d:48:22:1e:61:e8:dc:3e:b2:44:14:b3:37:27: a7:0b:16:48:ae:20:26:80:71:8b:3a:e8:e0:72:c0:7a:d3:bc: 0c:ce:c8:a4:c6:b6:a8:f8:be:41:32:4f:da:34:ab:0c:0b:dd: 31:8b:90:90:d5:f1:d7:af:fb:ad:cd:d9:e2:ad:6e:75:c3:c1: 01:b9:99:72:66:35:19:c6:25:53:af:ac:bc:46:91:cc:b1:af: 8b:a2:41:d4:c5:cd:b1:16:a3:ed:42:4e:04:a6:27:28:c0:62: d6:3f:8c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5CtVTtJ4p/wuRCxe06b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGM1NzExMTFhYWZjMGQ1MWU1ZmRlMDgyMzBiZjc4Yjg5 ZTRhNDgwHhcNMjUxMjA2MDkwMDMwWhcNMjUxMjA3MDkwMDMwWjAzMTEwLwYDVQQD EyhhZjdhZDAyOGY1OGVjNjFmMTA5ZjgwMjRkZGVhZGMzMjQ0OGNmZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurNsNXFMZvPL5CSkYyFdK9Y/isXD jMyMBDgUmDbi+zX1VrOcgzXZERfRJay06847DM6O12afA8+qof3TjUNRxdwB3bHe Z1veYRswU9NCCL6fy52+nxA/GktfzDeouf+Y6qXFany9kLfIv8skd9S/sU5riGrA Rc0QEz/rhbXkRQjeIYX6d0ZBhIvIyGdzFeZeswwpEDoKwXtUF6rYZCRKdsjpp7Ou 5i0v8Ybe7Iol8QGM7zQBffAhQF3piH9orCCaVfonITzVruYn57N/4bWGgDl65Urw NPAnyvbydlR76kHz22eDvhChIV0elEZk3xINXoyc0uif8ZHCof9DdWm+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK960Cj1jsYfEJ+AJN3q3DJEjP0hMB8GA1UdIwQY MBaAFEYMVxERqvwNUeX94IIwv3i4nkpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQt YmQyZmZmNWI4ODQ5LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQtYmQyZmZmNWI4ODQ5 LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABY8bNFz2 dqtinF5Urw1r7AlHSJ7dMrIcW9UEF0REv6821IsgnsVp7MTWR7XxMV4YnIokPLr2 eD2k/OPy9CnBwSyivwv37Lkyn9IflyzQKWENclW9NApIlJG/CspgNH3APGClR+ID 02KMJgxVfi9bJTVmO4vgZmpxO6OdxbeOlkTm+QeGwY8LPNVoT1fA7Elderl32g1I Ih5h6Nw+skQUszcnpwsWSK4gJoBxizro4HLAetO8DM7IpMa2qPi+QTJP2jSrDAvd MYuQkNXx16/7rc3Z4q1udcPBAbmZcmY1GcYlU6+svEaRzLGvi6JB1MXNsRaj7UJO BKYnKMBi1j+MGA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:37 2025 by rpki-client