This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json) Hash identifier: 1F7K7g6NajR0+cfRp9SPUgr6c4o+9qnn2sGoAScjQ0Q= Subject key identifier: 6D:92:23:C8:62:BD:C3:C5:84:03:F6:33:A6:D6:A8:00:56:04:61:96 Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b Certificate serial: 019AF3F78209B82EB32DB557CD8A3C51FBAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft Manifest number: 0847 Signing time: Sat 06 Dec 2025 14:01:15 +0000 Manifest this update: Sat 06 Dec 2025 14:01:15 +0000 Manifest next update: Sun 07 Dec 2025 14:01:15 +0000 Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: d+IplhHra7tI7nvrtZRBMRhow7dFUZ9PjOzszCNAMGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:82:09:b8:2e:b3:2d:b5:57:cd:8a:3c:51:fb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b Validity Not Before: Dec 6 14:01:15 2025 GMT Not After : Dec 7 14:01:15 2025 GMT Subject: CN=6d9223c862bdc3c58403f633a6d6a80056046196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:19:25:73:11:ee:6e:ac:e3:40:37:65:04: d4:03:63:43:b0:70:87:27:51:c0:f7:a2:0e:a7:0f: 86:2a:5a:b8:ae:1c:17:d6:d9:f4:e0:32:ea:fd:4d: e6:27:ab:f7:e2:16:20:ae:c2:78:15:41:0b:41:c7: 68:ef:a4:7e:75:90:f5:f4:f9:ae:d2:fb:bc:da:1c: 4d:21:0f:84:14:6a:1e:39:8c:41:9c:ba:e5:5d:28: b4:a5:74:62:3a:a8:c0:ac:33:09:d7:81:80:bc:04: 39:1a:e8:ba:d5:64:6e:bc:c5:54:85:95:0c:65:be: 3e:f5:94:06:ee:a9:c2:9e:cc:e0:3c:77:0c:9c:fd: 75:36:13:49:85:de:b4:f3:10:e4:c4:19:47:67:ab: 2b:c3:ef:86:94:d9:52:7a:0b:c3:f2:30:58:48:3e: 47:9a:50:1f:e5:69:af:6a:d5:27:21:d1:fe:e7:49: f1:7d:e4:25:81:bf:02:b4:35:ac:d5:cc:e2:3e:c5: d3:16:6b:77:73:ca:f2:54:ad:ad:6f:f4:7a:54:25: f0:8c:7e:5e:78:2f:a9:9d:a1:8a:ac:7f:b9:fa:90: dc:42:41:8a:c9:fc:06:f8:85:a1:bd:ed:d4:4f:9b: 16:df:0c:1e:47:a7:d6:7e:48:15:50:73:64:00:6e: 14:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:92:23:C8:62:BD:C3:C5:84:03:F6:33:A6:D6:A8:00:56:04:61:96 X509v3 Authority Key Identifier: keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f1:f2:44:cd:57:9e:cb:9f:e5:bf:ea:b0:1b:cf:ab:22:37: b7:6b:2a:bc:ac:bc:03:c0:16:29:fd:2a:76:8a:43:29:ed:01: f8:3a:07:cc:d8:4b:32:77:04:15:8d:5b:90:78:99:77:e6:c1: 91:6e:80:92:5f:53:71:f0:97:d2:75:db:5a:06:ce:88:3f:5b: 3a:b1:3c:d0:d7:2c:15:8b:7c:f5:90:68:23:8d:92:d4:9d:07: 02:a7:f9:9c:df:5d:ac:4f:50:ff:6d:fd:97:e6:f8:49:14:66: 65:e2:b3:b6:b9:34:80:52:3f:dd:64:96:6b:fa:68:f0:7e:68: 29:b0:7b:56:75:00:62:fb:19:e1:22:31:7a:df:f7:48:8d:e8: f6:b0:6a:79:af:d9:9f:20:ce:47:3c:53:1a:09:88:b5:25:70: 9c:49:f0:4c:65:ab:94:8d:e1:28:10:45:d5:06:f7:19:77:66: d5:cd:05:f7:93:80:90:56:fb:a6:e1:ce:54:c1:be:64:cc:df: 16:f2:a6:71:53:a1:f5:17:97:10:21:89:2c:75:7a:16:5d:3b: d3:cf:dd:01:10:86:38:c3:b3:1e:09:bf:d9:70:d4:34:17:47: f1:7a:21:6f:28:88:78:04:6d:8c:09:72:79:89:7c:de:0b:13: 90:1f:89:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94IJuC6zLbVXzYo8UfutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTFiYmIzZWJiOWQyZDE3MGMzN2M2MmExMGNjZGMyMjkx NTU0NGIwHhcNMjUxMjA2MTQwMTE1WhcNMjUxMjA3MTQwMTE1WjAzMTEwLwYDVQQD Eyg2ZDkyMjNjODYyYmRjM2M1ODQwM2Y2MzNhNmQ2YTgwMDU2MDQ2MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWgZJXMR7m6s40A3ZQTUA2NDsHCH J1HA96IOpw+GKlq4rhwX1tn04DLq/U3mJ6v34hYgrsJ4FUELQcdo76R+dZD19Pmu 0vu82hxNIQ+EFGoeOYxBnLrlXSi0pXRiOqjArDMJ14GAvAQ5Gui61WRuvMVUhZUM Zb4+9ZQG7qnCnszgPHcMnP11NhNJhd608xDkxBlHZ6srw++GlNlSegvD8jBYSD5H mlAf5WmvatUnIdH+50nxfeQlgb8CtDWs1cziPsXTFmt3c8ryVK2tb/R6VCXwjH5e eC+pnaGKrH+5+pDcQkGKyfwG+IWhve3UT5sW3wweR6fWfkgVUHNkAG4UAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2SI8hivcPFhAP2M6bWqABWBGGWMB8GA1UdIwQY MBaAFEcRu7PrudLRcMN8YqEMzcIpFVRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTkt ZGExZTNjYjJkZWZhLzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTktZGExZTNjYjJkZWZh LzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvHyRM1X nsuf5b/qsBvPqyI3t2sqvKy8A8AWKf0qdopDKe0B+DoHzNhLMncEFY1bkHiZd+bB kW6Akl9TcfCX0nXbWgbOiD9bOrE80NcsFYt89ZBoI42S1J0HAqf5nN9drE9Q/239 l+b4SRRmZeKztrk0gFI/3WSWa/po8H5oKbB7VnUAYvsZ4SIxet/3SI3o9rBqea/Z nyDORzxTGgmItSVwnEnwTGWrlI3hKBBF1Qb3GXdm1c0F95OAkFb7puHOVMG+ZMzf FvKmcVOh9ReXECGJLHV6Fl0708/dARCGOMOzHgm/2XDUNBdH8XohbyiIeARtjAly eYl83gsTkB+Jhg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:47 2025 by rpki-client