This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json) Hash identifier: GLHbLcRRqE/ZasZj8IvU/J9vBnRPp7U8xVXV53d+EJ4= Subject key identifier: 55:53:07:EE:5A:70:CC:F6:82:D6:D7:A8:F1:64:23:6A:DB:2E:BC:B6 Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4 Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4 Certificate serial: 019AF19BA8C735337241535F5EB1902FEB9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft Manifest number: 067F Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=) 2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: yrFCh9Y5dg/c5M7Cd+zhBkvj8Ipof1V+BT9+bFVOwfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a8:c7:35:33:72:41:53:5f:5e:b1:90:2f:eb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=555307ee5a70ccf682d6d7a8f164236adb2ebcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:84:9e:4e:7e:58:06:b8:c6:ab:3d:ad:06: 26:10:6f:67:51:24:8a:6a:38:6b:88:4c:c7:95:7f: 9c:bd:95:c0:bd:66:f2:41:6b:ee:cd:b7:82:28:c1: 7f:88:90:48:c5:f5:8c:16:c0:c8:8b:5e:e5:07:7c: 8a:b4:76:33:28:1a:36:c2:df:d3:21:dd:97:30:40: 76:41:eb:e6:a0:2a:58:c5:0d:f1:b7:a3:94:e3:d7: d4:01:96:c0:93:ed:f6:a2:fe:9b:1d:f8:33:c3:62: 32:19:70:8c:d4:71:7e:d2:7a:10:20:c5:a8:28:27: 9e:69:a2:c6:06:19:84:82:43:6d:b5:a2:95:2a:f5: cb:39:10:a9:3b:bf:da:75:0e:3c:0b:82:aa:66:a1: 42:80:4d:d7:f5:79:bf:0f:da:0b:e1:67:88:ae:cc: e5:ed:b3:7b:1e:33:2f:2e:9d:a1:e8:71:b0:db:a3: bd:8f:0b:ea:7c:a8:e9:98:f9:e6:4c:69:71:91:3c: 63:99:70:26:6d:18:8e:64:57:59:b2:ae:6c:3e:9b: 0d:d2:c8:9c:94:3b:ad:e4:4d:94:48:ad:3d:4d:03: 10:d3:51:39:29:b9:b9:e1:4f:68:52:28:7c:36:23: 3b:7f:ef:3f:e5:db:bf:08:05:f7:c6:e3:8c:8f:0d: 6f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:53:07:EE:5A:70:CC:F6:82:D6:D7:A8:F1:64:23:6A:DB:2E:BC:B6 X509v3 Authority Key Identifier: keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:c9:88:49:a4:be:14:9f:50:66:56:0c:b8:24:e6:9a:9b:3d: 43:10:fc:5f:eb:33:9d:1a:be:c0:9a:30:96:95:30:d8:10:1e: f3:ac:73:d2:e1:1f:e5:b3:56:2a:76:6d:80:ec:6f:33:fe:9e: 9a:ba:90:62:c1:34:bf:9c:89:a3:6e:76:84:ea:90:b2:6d:c6: c6:cb:ec:23:03:7c:91:29:e1:00:90:f1:0d:ea:ff:a9:c9:48: d6:b6:cf:59:57:31:f3:74:e7:3a:02:fe:7f:d4:4c:17:1e:a9: 64:5f:4e:07:f1:7b:56:ad:b9:13:1e:2d:34:74:07:a6:77:9a: e4:eb:f9:cf:f0:49:ec:92:6f:9f:44:c5:ac:8a:8e:d5:cc:2c: 27:2a:46:41:0e:4b:e3:db:81:e5:9b:c7:85:a5:1b:cc:8b:1c: c7:24:6e:e8:50:b9:ff:94:9b:c8:db:93:c1:7e:4b:0c:be:b6: 09:f0:74:09:1f:3d:1f:c6:c7:f2:38:d8:8a:65:39:85:4c:9b: f0:c9:68:fd:68:34:e6:c6:91:18:6d:71:30:8d:65:13:02:b2: 97:72:25:3c:91:4f:e4:0b:66:83:d6:72:8d:07:10:91:df:32: be:47:0a:ed:aa:10:18:22:87:c1:25:ed:37:4c:02:09:ad:c9: 16:5d:e6:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6jHNTNyQVNfXrGQL+ueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYzY0N2JhMDE3YzhhNDU5OWMwMDliZTA0ZDgxYjI2OGVj YTYyZjQwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD Eyg1NTUzMDdlZTVhNzBjY2Y2ODJkNmQ3YThmMTY0MjM2YWRiMmViY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhCEnk5+WAa4xqs9rQYmEG9nUSSK ajhriEzHlX+cvZXAvWbyQWvuzbeCKMF/iJBIxfWMFsDIi17lB3yKtHYzKBo2wt/T Id2XMEB2QevmoCpYxQ3xt6OU49fUAZbAk+32ov6bHfgzw2IyGXCM1HF+0noQIMWo KCeeaaLGBhmEgkNttaKVKvXLORCpO7/adQ48C4KqZqFCgE3X9Xm/D9oL4WeIrszl 7bN7HjMvLp2h6HGw26O9jwvqfKjpmPnmTGlxkTxjmXAmbRiOZFdZsq5sPpsN0sic lDut5E2USK09TQMQ01E5Kbm54U9oUih8NiM7f+8/5du/CAX3xuOMjw1vmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVTB+5acMz2gtbXqPFkI2rbLry2MB8GA1UdIwQY MBaAFK3GR7oBfIpFmcAJvgTYGyaOymL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUt ZGQ1ZjU1MDEwYTA2LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lMWQ0YjctNzQ2Yy00MjZmLWE2YzUtZGQ1ZjU1MDEwYTA2 LzEvcmNaSHVnRjhpa1dad0FtLUJOZ2JKbzdLWXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0MmISaS+ FJ9QZlYMuCTmmps9QxD8X+sznRq+wJowlpUw2BAe86xz0uEf5bNWKnZtgOxvM/6e mrqQYsE0v5yJo252hOqQsm3GxsvsIwN8kSnhAJDxDer/qclI1rbPWVcx83TnOgL+ f9RMFx6pZF9OB/F7Vq25Ex4tNHQHpnea5Ov5z/BJ7JJvn0TFrIqO1cwsJypGQQ5L 49uB5ZvHhaUbzIscxyRu6FC5/5SbyNuTwX5LDL62CfB0CR89H8bH8jjYimU5hUyb 8Mlo/Wg05saRGG1xMI1lEwKyl3IlPJFP5Atmg9ZyjQcQkd8yvkcK7aoQGCKHwSXt N0wCCa3JFl3mUA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:17 2025 by rpki-client