This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft File: rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json) Hash identifier: eEUDUztnEcYj5LXWig61hGkqv/WDuU5NQDoIztdCqvo= Subject key identifier: 11:33:34:15:35:25:C6:C4:77:AB:14:F4:45:A7:53:5B:AD:5F:15:A8 Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef Certificate serial: 019B5DC0BFEBF14E91F191D039B6ADB2987F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft Manifest number: 12A2 Signing time: Sat 27 Dec 2025 03:01:11 +0000 Manifest this update: Sat 27 Dec 2025 03:01:11 +0000 Manifest next update: Sun 28 Dec 2025 03:01:11 +0000 Files and hashes: 1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=) 2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: WefMvVImCKbhcDaq1umybFBXKpKkZO9jSLiya3BKbFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:bf:eb:f1:4e:91:f1:91:d0:39:b6:ad:b2:98:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef Validity Not Before: Dec 27 03:01:11 2025 GMT Not After : Dec 28 03:01:11 2025 GMT Subject: CN=113334153525c6c477ab14f445a7535bad5f15a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:27:ea:7a:b0:ab:d9:87:a3:6c:bd:bc:0f: c6:8f:01:89:2f:39:2c:99:e3:61:b2:85:c9:1c:72: ba:ca:d8:98:53:75:88:4f:6c:5b:08:cf:71:75:cd: e3:58:0f:a9:45:28:c3:d2:51:3a:37:e6:c9:06:01: 7b:57:34:b7:b4:3b:4b:56:0e:c1:ed:7f:96:b8:96: 1b:1f:8e:2f:26:48:8e:c0:45:35:f6:19:be:57:67: 30:a8:66:4f:6c:6f:10:c8:64:d2:6f:f9:98:62:c5: 19:0d:1b:91:9e:5d:5e:e4:6a:b6:17:17:77:2f:9a: cd:70:c9:af:fa:db:00:7b:b4:5c:4a:fe:9c:6e:de: 41:a5:f8:83:5d:3a:57:9d:60:d7:47:08:a0:44:19: 58:d4:56:69:ff:a9:24:ee:47:61:f4:57:3b:97:9f: a0:e1:5f:aa:4c:6c:7e:19:ea:c5:ea:76:de:5d:40: 6d:14:66:17:5a:d8:be:6c:02:22:e5:0a:e8:5b:8e: 62:1e:07:52:cd:14:a5:84:9f:07:89:8e:53:bf:f2: 96:ae:13:ec:f2:14:24:f2:88:6f:32:57:18:39:19: cc:62:ae:f2:bb:9a:56:9a:db:40:7c:ff:8c:f7:1e: 22:2e:fe:91:a0:90:6f:2c:22:09:7f:72:e3:7d:1b: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:33:34:15:35:25:C6:C4:77:AB:14:F4:45:A7:53:5B:AD:5F:15:A8 X509v3 Authority Key Identifier: keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:80:5e:a6:67:45:7e:03:4e:7a:17:39:e6:c4:67:ca:0e:11: 33:46:b0:7d:aa:b6:cb:bf:d6:1b:d4:ab:a5:af:6c:0c:30:96: 12:bd:40:7f:65:54:a1:3c:8a:de:8e:f2:74:0d:6f:20:ae:1d: 56:03:b2:48:2e:8d:5a:f8:ed:30:2a:8a:26:92:8f:c3:de:1f: cf:4d:4e:1e:a7:e7:83:f8:01:d8:8e:3e:bc:e2:f4:c1:fb:67: b8:8c:11:1c:a1:f3:00:dc:78:f4:1d:06:25:47:91:68:62:69: 4c:1a:47:39:85:52:dc:63:bf:bb:83:90:d7:d9:36:f7:9d:f5: d3:f5:4a:55:48:c6:49:13:ef:f2:ec:d2:25:af:91:11:20:a6: f5:bc:d5:f2:71:e1:55:bf:87:77:35:bb:33:1a:49:7a:8b:b2: d3:9b:ca:76:9a:ba:82:97:9b:8f:4d:5a:74:8a:70:09:58:09: 7b:99:20:39:5d:d8:bb:0e:d5:83:62:51:c2:c5:34:e7:49:a5: e4:65:08:32:d5:ef:c9:b0:45:80:f1:d8:ca:fa:e8:21:16:c0: 3a:21:88:08:db:b0:97:03:5f:4f:b4:b6:2c:64:8a:72:18:b3: 11:fc:65:cc:02:08:90:79:a5:61:09:82:7f:5c:18:f9:56:ea: 33:65:92:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwL/r8U6R8ZHQObatsph/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOTNjYzhjY2E4MWZhMDBkYzUzZTdiODA3OGU5MWI1YzEx YmEyZWYwHhcNMjUxMjI3MDMwMTExWhcNMjUxMjI4MDMwMTExWjAzMTEwLwYDVQQD EygxMTMzMzQxNTM1MjVjNmM0NzdhYjE0ZjQ0NWE3NTM1YmFkNWYxNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Tkn6nqwq9mHo2y9vA/GjwGJLzks meNhsoXJHHK6ytiYU3WIT2xbCM9xdc3jWA+pRSjD0lE6N+bJBgF7VzS3tDtLVg7B 7X+WuJYbH44vJkiOwEU19hm+V2cwqGZPbG8QyGTSb/mYYsUZDRuRnl1e5Gq2Fxd3 L5rNcMmv+tsAe7RcSv6cbt5BpfiDXTpXnWDXRwigRBlY1FZp/6kk7kdh9Fc7l5+g 4V+qTGx+GerF6nbeXUBtFGYXWti+bAIi5QroW45iHgdSzRSlhJ8HiY5Tv/KWrhPs 8hQk8ohvMlcYORnMYq7yu5pWmttAfP+M9x4iLv6RoJBvLCIJf3LjfRuGFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEzNBU1JcbEd6sU9EWnU1utXxWoMB8GA1UdIwQY MBaAFK6TzIzKgfoA3FPnuAeOkbXBG6LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgt ZjQwNmM4M2IzZmJhLzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xNzk4OTEtNDFjYy00YWEwLWFiNjgtZjQwNmM4M2IzZmJh LzEvcnBQTWpNcUItZ0RjVS1lNEI0NlJ0Y0Vib3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoBepmdF fgNOehc55sRnyg4RM0awfaq2y7/WG9Srpa9sDDCWEr1Af2VUoTyK3o7ydA1vIK4d VgOySC6NWvjtMCqKJpKPw94fz01OHqfng/gB2I4+vOL0wftnuIwRHKHzANx49B0G JUeRaGJpTBpHOYVS3GO/u4OQ19k295310/VKVUjGSRPv8uzSJa+RESCm9bzV8nHh Vb+HdzW7MxpJeouy05vKdpq6gpebj01adIpwCVgJe5kgOV3Yuw7Vg2JRwsU050ml 5GUIMtXvybBFgPHYyvroIRbAOiGICNuwlwNfT7S2LGSKchizEfxlzAIIkHmlYQmC f1wY+VbqM2WSEg== -----END CERTIFICATE-----Generated at Sat Dec 27 07:03:32 2025 by rpki-client