This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft File: rrcMp77FOQL1z1eeuT7bDZKi-0M.mft (raw, json) Hash identifier: jr6CVy0o2dH6DuERPaoOUImw5UB8nypXNM0er/N+S9w= Subject key identifier: 24:98:F1:37:00:10:2D:73:2F:7A:C5:22:FF:C2:B8:F5:D3:17:1F:86 Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43 Certificate issuer: /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43 Certificate serial: 019B41A4A3E936CD0D7B3DA02C20BDA22367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft Manifest number: 1F Signing time: Sun 21 Dec 2025 16:01:07 +0000 Manifest this update: Sun 21 Dec 2025 16:01:07 +0000 Manifest next update: Mon 22 Dec 2025 16:01:07 +0000 Files and hashes: 1: rrcMp77FOQL1z1eeuT7bDZKi-0M.crl (hash: j/kU9Kubd6jDtV1C9kRXjli2TYkQBGXJOdqFLITjHqw=) 2: zQc44ptSUrokmTLWecWvBz270Ro.roa (hash: rbDa8TLVcAzHn7tPbjZXCwZR4jhdDO7cF/1OM9wMeyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:a3:e9:36:cd:0d:7b:3d:a0:2c:20:bd:a2:23:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43 Validity Not Before: Dec 21 16:01:07 2025 GMT Not After : Dec 22 16:01:07 2025 GMT Subject: CN=2498f13700102d732f7ac522ffc2b8f5d3171f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:32:dc:15:e3:79:06:c7:04:5b:c0:4f:84: ae:ab:ed:af:67:8a:ad:e7:af:3c:04:1c:d1:4f:9e: 4a:03:c3:88:2e:ce:97:b4:ce:e2:09:d9:e8:72:f3: 34:dc:4a:a6:34:75:2e:8b:c0:63:d9:fc:44:82:81: 2c:50:76:30:94:9a:f2:63:bd:27:88:9f:b6:0e:65: a7:35:30:80:0f:f2:13:fc:57:a0:f5:48:59:aa:1d: 2d:8e:1f:ae:2d:66:1b:8d:35:66:1c:a4:b2:dc:38: be:4d:a4:cd:c2:b6:7b:f3:3c:a8:e0:9c:af:14:5b: f3:ca:d4:bd:3d:8a:f0:ff:9b:c2:fe:32:4e:de:6b: 76:57:ad:eb:cd:c7:70:7a:b4:10:89:5b:79:5c:67: 26:6e:c6:5d:f4:f6:db:e6:0c:20:d4:66:27:7c:cc: 34:44:d5:80:16:e8:95:b2:4e:cc:40:82:53:50:b7: 30:1b:fd:61:8e:f5:6b:9a:52:db:80:d7:f5:2e:ce: fe:be:61:c3:81:62:f8:5a:f3:64:33:de:3d:65:14: 91:95:96:8e:53:3e:5a:5d:40:27:94:b3:a1:d3:82: 18:01:25:39:34:d1:a1:af:8c:e6:53:94:53:b8:f7: 23:67:cf:b3:69:32:23:4b:12:e6:d7:16:89:be:fd: 50:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:98:F1:37:00:10:2D:73:2F:7A:C5:22:FF:C2:B8:F5:D3:17:1F:86 X509v3 Authority Key Identifier: keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:72:02:3b:b3:af:d6:b6:7f:8d:b1:10:0d:8a:ae:c1:80:59: 17:c7:35:48:eb:3c:46:ea:cb:56:d5:fe:dd:0f:a6:91:6f:13: ad:de:3b:71:31:3b:06:a1:cb:3f:c4:10:fe:01:c8:e9:80:70: a7:fc:98:04:2a:ec:b6:9d:01:79:cc:08:54:0f:29:7d:e9:f0: 78:6f:89:cb:53:dd:04:30:50:a2:c7:e6:45:ca:08:ae:a7:e1: 0b:0e:b3:af:97:41:bd:d5:4e:9e:a8:0f:4b:11:0b:db:a6:0b: 15:f2:6b:3d:2e:a9:54:d8:71:20:32:2b:c5:03:23:60:40:2a: 48:82:05:7d:2f:60:f8:dc:bb:ed:01:cd:a1:63:11:11:c9:46: 68:cf:fe:18:31:1b:a8:41:31:8d:fd:1e:4d:01:19:29:45:48: 6c:00:ed:49:5d:41:8b:40:d5:5f:e4:b5:81:69:09:26:14:24: 5a:60:53:c7:e7:b5:7c:2e:35:a5:23:5a:37:40:40:7a:f7:14: 18:f6:20:e1:be:61:2d:8d:4b:ed:53:7f:05:0f:cf:a1:0c:2a: 54:6d:55:8d:31:dd:e4:5e:50:f5:cd:9d:99:cc:69:3c:5b:4b: 25:28:50:bd:ff:45:03:da:4d:18:c2:b0:9a:e4:f6:6c:44:87: 85:57:c8:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpKPpNs0Nez2gLCC9oiNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjcwY2E3YmVjNTM5MDJmNWNmNTc5ZWI5M2VkYjBkOTJh MmZiNDMwHhcNMjUxMjIxMTYwMTA3WhcNMjUxMjIyMTYwMTA3WjAzMTEwLwYDVQQD EygyNDk4ZjEzNzAwMTAyZDczMmY3YWM1MjJmZmMyYjhmNWQzMTcxZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y8y3BXjeQbHBFvAT4Suq+2vZ4qt 5688BBzRT55KA8OILs6XtM7iCdnocvM03EqmNHUui8Bj2fxEgoEsUHYwlJryY70n iJ+2DmWnNTCAD/IT/Feg9UhZqh0tjh+uLWYbjTVmHKSy3Di+TaTNwrZ78zyo4Jyv FFvzytS9PYrw/5vC/jJO3mt2V63rzcdwerQQiVt5XGcmbsZd9Pbb5gwg1GYnfMw0 RNWAFuiVsk7MQIJTULcwG/1hjvVrmlLbgNf1Ls7+vmHDgWL4WvNkM949ZRSRlZaO Uz5aXUAnlLOh04IYASU5NNGhr4zmU5RTuPcjZ8+zaTIjSxLm1xaJvv1QawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSY8TcAEC1zL3rFIv/CuPXTFx+GMB8GA1UdIwQY MBaAFK63DKe+xTkC9c9Xnrk+2w2SovtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJjTXA3N0ZPUUwxejFlZXVUN2JEWktpLTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MTYzMjMtYTlhZi00M2Q1LTlhOGIt OTFkYjIzNDVmNDM2LzEvcnJjTXA3N0ZPUUwxejFlZXVUN2JEWktpLTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83MTYzMjMtYTlhZi00M2Q1LTlhOGItOTFkYjIzNDVmNDM2 LzEvcnJjTXA3N0ZPUUwxejFlZXVUN2JEWktpLTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3ICO7Ov 1rZ/jbEQDYquwYBZF8c1SOs8RurLVtX+3Q+mkW8Trd47cTE7BqHLP8QQ/gHI6YBw p/yYBCrstp0BecwIVA8pfenweG+Jy1PdBDBQosfmRcoIrqfhCw6zr5dBvdVOnqgP SxEL26YLFfJrPS6pVNhxIDIrxQMjYEAqSIIFfS9g+Ny77QHNoWMREclGaM/+GDEb qEExjf0eTQEZKUVIbADtSV1Bi0DVX+S1gWkJJhQkWmBTx+e1fC41pSNaN0BAevcU GPYg4b5hLY1L7VN/BQ/PoQwqVG1VjTHd5F5Q9c2dmcxpPFtLJShQvf9FA9pNGMKw muT2bESHhVfIZA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:30:17 2025 by rpki-client