This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json) Hash identifier: BMW5O7heXz68/XH0ygRaR8FUhT25h9a0cLNrzvbHQME= Subject key identifier: 21:2D:19:CA:4B:8A:B2:0C:E7:9C:65:61:0C:2A:2A:3A:5A:3D:EA:7F Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02 Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002 Certificate serial: 019AF209BCF28B0BA9B05E3E40F9E061BDE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft Manifest number: 1653 Signing time: Sat 06 Dec 2025 05:01:55 +0000 Manifest this update: Sat 06 Dec 2025 05:01:55 +0000 Manifest next update: Sun 07 Dec 2025 05:01:55 +0000 Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=) 2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=) 3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: O67W6sp2rYSnbmeUhu7xcbSunLWq6gMo6xK3lKdQ3BE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:bc:f2:8b:0b:a9:b0:5e:3e:40:f9:e0:61:bd:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002 Validity Not Before: Dec 6 05:01:55 2025 GMT Not After : Dec 7 05:01:55 2025 GMT Subject: CN=212d19ca4b8ab20ce79c65610c2a2a3a5a3dea7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:dc:93:e9:dc:8b:a3:7f:a4:8a:70:0b:1b: a9:3f:5d:81:28:03:dd:87:28:83:02:fd:5a:67:e0: c6:08:a8:4d:25:b8:74:25:e0:50:1c:ff:8e:2c:ff: ed:2b:f2:f1:3b:89:80:4e:22:e0:2b:92:3b:c9:7b: d0:4b:09:bd:0f:cb:58:80:2a:d8:5f:b7:ac:23:9f: 91:92:6f:12:61:5e:64:5b:b2:59:15:a8:ae:25:73: e7:81:cf:e1:ad:13:a6:78:fd:7e:69:a2:79:e0:50: e2:4c:29:24:85:f0:85:13:56:ee:9f:c0:e0:82:db: c9:8e:8e:32:75:1f:60:b9:56:66:f4:bf:ea:97:a0: 74:1a:84:e3:3a:60:be:2f:7b:77:42:41:ab:11:b9: 88:27:52:b1:ab:de:95:59:4a:ec:2f:0f:2e:39:1e: fd:a0:23:f5:4a:5d:ea:31:28:69:75:65:aa:15:72: 41:7f:5f:08:51:c1:f0:fd:e4:23:04:34:ca:a4:96: 9f:58:1d:db:f9:68:44:3f:4b:e0:13:1d:87:d3:0d: 80:71:f7:c9:e4:c1:e9:88:ae:b4:bf:30:37:c9:fb: 64:01:ef:9d:1d:35:ae:f3:03:08:2b:bd:2d:3c:c9: 62:8d:e3:30:7d:3f:3a:74:ff:f7:69:2e:62:04:ab: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2D:19:CA:4B:8A:B2:0C:E7:9C:65:61:0C:2A:2A:3A:5A:3D:EA:7F X509v3 Authority Key Identifier: keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b4:04:cc:11:f8:33:4d:33:3e:5e:65:14:86:25:c6:c7:9d: 80:3b:b4:9a:aa:d3:9c:8e:10:ec:61:8b:9d:43:ed:a9:a9:52: d5:07:96:49:ec:2c:bd:c4:28:3d:e9:16:d6:86:cf:c3:aa:d5: 45:70:b5:31:63:fc:e1:12:4f:cb:dc:f4:39:e1:39:f2:62:ee: e1:6f:06:28:8b:d1:83:2d:2e:af:29:b0:3a:6e:9f:b6:f6:5e: 47:69:43:f5:80:54:07:8c:fd:d1:db:14:79:80:2a:d9:3f:a3: 5a:d7:63:fb:5e:95:1d:cc:a1:4b:c7:2a:b7:29:a7:d8:48:ec: 89:18:f3:ff:08:a8:84:14:a1:ea:9d:37:dc:39:c9:c1:83:8a: f4:92:ad:da:ab:0b:1c:66:32:8d:ec:ef:6c:04:ab:6b:d1:12: 78:f5:45:29:c0:40:7d:cb:2e:55:2a:9e:0a:2d:a6:12:3c:ef: 5b:18:ad:77:17:85:68:de:1c:db:4c:83:e5:f7:69:4c:f2:28: 56:c1:94:20:05:2a:d3:49:25:56:11:f0:b6:16:ec:3f:0d:16: 21:d9:c3:2a:65:1b:e6:74:98:7e:c3:68:fb:82:6a:98:72:f1: 9e:5d:14:86:04:df:ee:bc:93:ad:65:06:e5:a0:b0:7b:c1:f1: ed:68:3f:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbzyiwupsF4+QPngYb3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTJmOGU1MzYyN2FkYzI3Njc4MDYzYjkzZDNkOWZkNmVj ZTkwMDIwHhcNMjUxMjA2MDUwMTU1WhcNMjUxMjA3MDUwMTU1WjAzMTEwLwYDVQQD EygyMTJkMTljYTRiOGFiMjBjZTc5YzY1NjEwYzJhMmEzYTVhM2RlYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+nck+nci6N/pIpwCxupP12BKAPd hyiDAv1aZ+DGCKhNJbh0JeBQHP+OLP/tK/LxO4mATiLgK5I7yXvQSwm9D8tYgCrY X7esI5+Rkm8SYV5kW7JZFaiuJXPngc/hrROmeP1+aaJ54FDiTCkkhfCFE1bun8Dg gtvJjo4ydR9guVZm9L/ql6B0GoTjOmC+L3t3QkGrEbmIJ1Kxq96VWUrsLw8uOR79 oCP1Sl3qMShpdWWqFXJBf18IUcHw/eQjBDTKpJafWB3b+WhEP0vgEx2H0w2AcffJ 5MHpiK60vzA3yftkAe+dHTWu8wMIK70tPMlijeMwfT86dP/3aS5iBKuGAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEtGcpLirIM55xlYQwqKjpaPep/MB8GA1UdIwQY MBaAFK7i+OU2J63CdngGO5PT2f1uzpACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2Yt YTQ2NTY0MWE0OGZhLzEvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xOTNlZDItYjc3NC00MmYwLWFhM2YtYTQ2NTY0MWE0OGZh LzEvcnVMNDVUWW5yY0oyZUFZN2s5UFpfVzdPa0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrQEzBH4 M00zPl5lFIYlxsedgDu0mqrTnI4Q7GGLnUPtqalS1QeWSewsvcQoPekW1obPw6rV RXC1MWP84RJPy9z0OeE58mLu4W8GKIvRgy0urymwOm6ftvZeR2lD9YBUB4z90dsU eYAq2T+jWtdj+16VHcyhS8cqtymn2EjsiRjz/wiohBSh6p033DnJwYOK9JKt2qsL HGYyjezvbASra9ESePVFKcBAfcsuVSqeCi2mEjzvWxitdxeFaN4c20yD5fdpTPIo VsGUIAUq00klVhHwthbsPw0WIdnDKmUb5nSYfsNo+4JqmHLxnl0UhgTf7ryTrWUG 5aCwe8Hx7Wg//g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:31 2025 by rpki-client