This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft File: Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json) Hash identifier: vwbJDOlDnldHGKexiWfxvFG4r9abiuQDtiJu9HE6G2c= Subject key identifier: 52:BB:16:03:88:B8:21:97:33:AA:42:A9:70:30:89:E9:8E:EC:A2:EE Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f Certificate serial: 019AF1D18AE053C5C95FD087F8963DCFC0C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft Manifest number: 07A1 Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: b1nAqMbDaqglHUl41UGbgVxgd86MG0nxeW6EIHxX/yI=) 2: SL6led1HI-RxeSBiRf_KwOsdWMw.roa (hash: bUSyhumyZsuI3117QZlb6u67xKqgT+wxfjDPtnVzMSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8a:e0:53:c5:c9:5f:d0:87:f8:96:3d:cf:c0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=52bb160388b8219733aa42a9703089e98eeca2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:01:dd:09:31:4d:57:5c:a4:1e:a2:5b:61: ae:a3:cf:aa:49:c4:5f:d5:7c:9c:18:3a:3f:b0:8d: 83:eb:72:d1:07:1c:04:cd:b8:41:d2:c0:89:d6:36: b3:4d:8f:14:e6:9d:70:11:22:3a:d0:f6:fd:8d:95: 8c:95:0d:95:10:fd:af:3c:50:1e:81:24:2d:0b:8d: 49:a7:a6:0b:66:e1:56:47:9d:4d:0e:93:b2:10:2e: 04:8f:71:fc:7d:10:98:90:fa:5b:d0:4f:86:86:fa: e0:32:96:4f:18:c8:d8:a3:0e:56:c4:c1:eb:81:38: 33:e7:91:1e:4e:6f:b6:4e:40:24:77:ef:57:4c:26: 74:6a:3b:00:01:24:d2:3a:02:b6:67:4e:f6:44:12: 0c:56:ef:1f:1d:00:c7:83:13:a0:31:21:97:66:60: c0:8b:1b:a0:7d:c2:20:c7:9f:80:6e:61:f9:73:cb: e1:2c:f8:64:63:6a:07:6d:39:96:ae:cf:bc:51:d7: d8:5c:7a:3c:6e:f3:91:9f:a7:5f:e6:a0:a8:0f:be: 82:e4:9a:47:25:66:23:45:cd:31:0f:8d:da:f9:81: d0:f7:26:0a:f2:50:80:c2:30:64:54:41:e4:0f:6c: 21:b2:82:7a:0b:3f:b9:94:c1:ae:1e:46:78:06:26: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BB:16:03:88:B8:21:97:33:AA:42:A9:70:30:89:E9:8E:EC:A2:EE X509v3 Authority Key Identifier: keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5c:11:0c:28:a6:11:1b:b0:20:ff:05:c8:3f:eb:61:04:4a: 73:91:8f:71:38:1d:d8:b1:56:6f:dc:07:b3:e0:c7:93:fc:5e: ce:8c:a7:1f:27:b9:da:4e:ce:cf:8f:ef:e7:d7:76:02:13:19: 24:d0:9b:93:7f:b6:3e:c6:44:08:06:e2:68:1a:1a:0c:c6:70: 6d:e1:fa:a9:80:85:db:a7:d6:86:8d:0a:5d:e0:a2:6d:ab:e5: 47:b6:9c:5f:b8:de:58:93:c1:e3:5b:18:00:b8:38:51:76:cd: 43:0d:82:50:33:9b:86:40:79:d3:1d:91:6b:36:9c:21:7d:90: 6e:25:b0:89:f3:5a:31:7e:71:e5:13:02:3d:08:f7:42:d5:86: 56:e9:d0:0e:65:31:14:60:78:5c:98:d4:98:cf:c1:f4:13:5e: ce:b6:40:6a:26:01:ce:99:ad:82:6b:64:b5:45:29:06:b9:d3: 57:04:2b:6f:59:f5:8a:0b:50:6a:96:4f:bc:ca:5e:21:d3:c7: 4a:34:de:04:ac:5f:2f:03:d6:be:3d:75:c3:46:76:ec:eb:45: 82:74:6e:f0:00:45:2f:6f:87:82:38:d5:a2:ca:05:4a:0f:e6: 23:81:e8:43:53:4c:b1:77:c7:97:ee:cd:ce:bf:a7:86:33:6e: 50:59:b1:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YrgU8XJX9CH+JY9z8DHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWNhZmU2MTM0M2Q3MTBkZjYwY2Q5MWRlMDg5MDFmZGJi YTZmOGYwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD Eyg1MmJiMTYwMzg4YjgyMTk3MzNhYTQyYTk3MDMwODllOThlZWNhMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUgB3QkxTVdcpB6iW2Guo8+qScRf 1XycGDo/sI2D63LRBxwEzbhB0sCJ1jazTY8U5p1wESI60Pb9jZWMlQ2VEP2vPFAe gSQtC41Jp6YLZuFWR51NDpOyEC4Ej3H8fRCYkPpb0E+GhvrgMpZPGMjYow5WxMHr gTgz55EeTm+2TkAkd+9XTCZ0ajsAASTSOgK2Z072RBIMVu8fHQDHgxOgMSGXZmDA ixugfcIgx5+AbmH5c8vhLPhkY2oHbTmWrs+8UdfYXHo8bvORn6df5qCoD76C5JpH JWYjRc0xD43a+YHQ9yYK8lCAwjBkVEHkD2whsoJ6Cz+5lMGuHkZ4BiYiawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFK7FgOIuCGXM6pCqXAwiemO7KLuMB8GA1UdIwQY MBaAFEasr+YTQ9cQ32DNkd4IkB/bum+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iODg3ZGEtNDRiOS00YmUyLTg2NmYt ZDNhODVhNzFiMDI5LzEvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iODg3ZGEtNDRiOS00YmUyLTg2NmYtZDNhODVhNzFiMDI5 LzEvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1wRDCim ERuwIP8FyD/rYQRKc5GPcTgd2LFWb9wHs+DHk/xezoynHye52k7Oz4/v59d2AhMZ JNCbk3+2PsZECAbiaBoaDMZwbeH6qYCF26fWho0KXeCibavlR7acX7jeWJPB41sY ALg4UXbNQw2CUDObhkB50x2RazacIX2QbiWwifNaMX5x5RMCPQj3QtWGVunQDmUx FGB4XJjUmM/B9BNezrZAaiYBzpmtgmtktUUpBrnTVwQrb1n1igtQapZPvMpeIdPH SjTeBKxfLwPWvj11w0Z27OtFgnRu8ABFL2+HgjjVosoFSg/mI4HoQ1NMsXfHl+7N zr+nhjNuUFmxmg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:18 2025 by rpki-client