This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft File: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft (raw, json) Hash identifier: nAfWtMV1DIMS0XDnugiXviOhs6Ezdwsst/yIeRPZSyw= Subject key identifier: E9:E0:E7:4C:F2:28:B5:43:66:ED:E5:D0:E8:79:B0:BC:91:88:D3:74 Authority key identifier: 45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6 Certificate issuer: /CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6 Certificate serial: 019AF31B1AC8D0E992067BC94C7051D87C8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft Manifest number: 1196 Signing time: Sat 06 Dec 2025 10:00:31 +0000 Manifest this update: Sat 06 Dec 2025 10:00:31 +0000 Manifest next update: Sun 07 Dec 2025 10:00:31 +0000 Files and hashes: 1: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl (hash: KF9+u+MRTFTYyD1Bguz0nqahlnlNteqKlVo31DkkeGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:1a:c8:d0:e9:92:06:7b:c9:4c:70:51:d8:7c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6 Validity Not Before: Dec 6 10:00:31 2025 GMT Not After : Dec 7 10:00:31 2025 GMT Subject: CN=e9e0e74cf228b54366ede5d0e879b0bc9188d374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:34:d8:6a:b1:b6:c1:49:3f:c4:a6:03:ec: 3c:7a:4e:53:02:ca:9a:ce:11:b9:3a:35:1a:09:3f: 02:43:97:81:0d:0c:92:ec:08:8d:a9:50:de:e0:62: c9:72:f1:0b:1b:8e:84:89:d7:15:77:1a:2b:f4:a2: bf:02:5f:9c:0c:f9:fd:e5:77:52:38:a2:43:db:19: 56:0f:8b:75:e1:9d:4a:6e:70:d3:25:32:58:4e:3b: 35:0a:86:ff:3b:a9:16:1a:90:38:b1:63:aa:03:0b: b1:e8:ad:1d:5e:c2:de:99:2a:7a:8c:54:6b:57:a7: 9d:62:18:96:fe:c3:38:f9:c4:68:91:f6:eb:c6:da: 1e:32:f1:4d:02:f7:86:03:ac:22:85:ce:06:5a:ff: 13:10:32:79:d0:ca:24:63:df:e2:9a:fc:93:0a:ae: 8d:0c:10:fc:4a:a8:c1:11:d4:f0:9c:55:05:80:59: 6a:c4:c1:ac:89:d8:ae:72:21:5d:05:85:60:cc:91: 7a:f4:40:f9:00:05:e2:27:7e:e2:90:79:a2:bb:b4: a8:12:9d:5a:18:65:5a:bc:8a:7c:57:6b:d9:b4:be: e4:fe:a4:f3:c5:da:d1:65:e6:4a:23:c5:aa:75:bf: 18:51:48:0a:7f:26:e8:f9:f5:c6:ee:d4:3b:30:c7: 8c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:E7:4C:F2:28:B5:43:66:ED:E5:D0:E8:79:B0:BC:91:88:D3:74 X509v3 Authority Key Identifier: keyid:45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:1f:20:20:a2:80:f3:88:83:f1:80:37:c6:a0:ae:1d:3f:47: 4c:db:52:73:fa:e2:e6:5a:93:6f:28:8c:dc:75:fe:d3:a4:6d: 7e:d6:09:39:93:1c:80:8d:33:53:8a:97:e5:54:d8:47:0d:a3: 3b:90:b2:33:2d:a6:df:19:3f:90:35:40:75:15:c9:a6:f9:5b: 7f:11:73:f6:47:6f:3c:ba:59:b1:e0:83:5c:d1:1f:8a:3a:a9: c5:0d:13:b5:21:ac:65:2a:08:89:09:60:62:c4:65:a3:94:96: a8:72:49:69:a1:56:99:f3:ea:65:e6:8c:f8:06:76:fb:b3:87: 6d:ab:1d:d5:65:ae:db:cc:8d:8d:73:13:b9:ba:54:b1:d2:75: 3a:05:22:5e:5c:1f:b4:a5:5e:e3:8d:e3:1c:48:de:62:7a:c8: 69:ca:14:42:86:00:d5:b3:c6:91:9f:a7:0e:23:60:70:49:95: 5a:63:7d:dc:ac:b6:aa:55:b6:62:39:e0:00:d4:5c:71:ff:64: b2:ba:9e:09:d2:38:94:d1:dc:34:91:ba:ae:c5:f5:58:09:d2: 49:31:9d:02:1e:35:0e:c7:8c:6e:c9:8f:4d:d5:f1:0c:52:bc: 5f:a8:4c:ba:9f:9e:0f:33:78:e1:56:5c:91:86:d9:56:8b:8a: 00:18:72:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGxrI0OmSBnvJTHBR2HyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1Y2Q4MWY0OTg2NjE4MGZjYmRkM2I3NzVlNzlkNjE5YmZk YjU3ZTYwHhcNMjUxMjA2MTAwMDMxWhcNMjUxMjA3MTAwMDMxWjAzMTEwLwYDVQQD EyhlOWUwZTc0Y2YyMjhiNTQzNjZlZGU1ZDBlODc5YjBiYzkxODhkMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vg02GqxtsFJP8SmA+w8ek5TAsqa zhG5OjUaCT8CQ5eBDQyS7AiNqVDe4GLJcvELG46EidcVdxor9KK/Al+cDPn95XdS OKJD2xlWD4t14Z1KbnDTJTJYTjs1Cob/O6kWGpA4sWOqAwux6K0dXsLemSp6jFRr V6edYhiW/sM4+cRokfbrxtoeMvFNAveGA6wihc4GWv8TEDJ50MokY9/imvyTCq6N DBD8SqjBEdTwnFUFgFlqxMGsidiuciFdBYVgzJF69ED5AAXiJ37ikHmiu7SoEp1a GGVavIp8V2vZtL7k/qTzxdrRZeZKI8Wqdb8YUUgKfybo+fXG7tQ7MMeM5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOng50zyKLVDZu3l0Oh5sLyRiNN0MB8GA1UdIwQY MBaAFEXNgfSYZhgPy907d1551hm/21fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmMyQjlKaG1HQV9MM1R0M1hubldHYl9iVi1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zMTFhZWYtM2JmYy00M2U5LTk1NWMt OWIwYjNmMDI0ODI5LzEvUmMyQjlKaG1HQV9MM1R0M1hubldHYl9iVi1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zMTFhZWYtM2JmYy00M2U5LTk1NWMtOWIwYjNmMDI0ODI5 LzEvUmMyQjlKaG1HQV9MM1R0M1hubldHYl9iVi1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZB8gIKKA 84iD8YA3xqCuHT9HTNtSc/ri5lqTbyiM3HX+06RtftYJOZMcgI0zU4qX5VTYRw2j O5CyMy2m3xk/kDVAdRXJpvlbfxFz9kdvPLpZseCDXNEfijqpxQ0TtSGsZSoIiQlg YsRlo5SWqHJJaaFWmfPqZeaM+AZ2+7OHbasd1WWu28yNjXMTubpUsdJ1OgUiXlwf tKVe443jHEjeYnrIacoUQoYA1bPGkZ+nDiNgcEmVWmN93Ky2qlW2YjngANRccf9k srqeCdI4lNHcNJG6rsX1WAnSSTGdAh41DseMbsmPTdXxDFK8X6hMup+eDzN44VZc kYbZVouKABhyOA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:49 2025 by rpki-client