This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft File: R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json) Hash identifier: XaxSqH9PKvCF82pcDKA0o+F45mhRuWvMaAaHThueAxI= Subject key identifier: 5D:33:E9:22:8D:62:77:88:99:4E:09:22:50:B1:52:46:AD:C6:50:DC Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78 Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978 Certificate serial: 019B3F489202F7059B820EA0547CFA1ABFD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft Manifest number: 1786 Signing time: Sun 21 Dec 2025 05:01:19 +0000 Manifest this update: Sun 21 Dec 2025 05:01:19 +0000 Manifest next update: Mon 22 Dec 2025 05:01:19 +0000 Files and hashes: 1: 55UIdoVHgz_zVQ06ZwTWNV5GXvE.roa (hash: BpKkh7LDQyf6uUNi8iRnAaBEcPZvxWPd4MzDyZiEyPU=) 2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: yLL/l7Nn+oyGIpt2teST8MIgCG5qPH6ECsZvuqZh2Eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:92:02:f7:05:9b:82:0e:a0:54:7c:fa:1a:bf:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978 Validity Not Before: Dec 21 05:01:19 2025 GMT Not After : Dec 22 05:01:19 2025 GMT Subject: CN=5d33e9228d627788994e092250b15246adc650dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:4b:c7:e8:63:d0:2d:0d:4f:44:e6:15:a5: 58:de:d2:7b:47:fd:98:14:91:9d:50:b1:1e:53:81: 82:65:7e:9e:94:43:6b:5f:06:14:32:60:d9:c6:94: ec:a3:a8:00:a6:a5:57:a3:c5:37:24:5f:75:b2:5f: ad:d6:2c:a3:a9:4c:ff:19:b2:ee:f9:c8:a9:3b:86: ae:d9:13:4a:fa:68:dd:0e:f9:13:ca:60:91:97:54: af:bd:6d:21:4a:6d:9f:49:a1:61:c1:6a:7d:16:44: 13:63:85:5a:9e:5d:1d:de:06:1d:39:15:d0:d2:9e: b1:2d:e4:14:85:47:c1:b7:39:fc:59:21:ba:60:88: 6b:f3:44:13:62:bb:3d:25:0b:61:71:ce:2a:dc:79: bd:4a:83:d5:74:36:0b:2a:81:64:39:c2:3b:35:ce: 91:d4:98:77:96:6d:e9:cf:ee:e2:4d:df:f2:d1:03: d6:f6:22:40:fc:0b:d9:a8:5c:60:c0:55:56:3b:84: 28:60:c5:50:c8:8b:f3:e6:7f:0f:7f:ec:c2:25:a4: 8e:23:10:19:f0:f9:81:f1:37:d5:45:31:77:ed:a5: ca:f2:f8:ed:f3:db:cc:32:74:52:5e:25:43:a6:30: 51:37:07:ac:7d:e3:c5:af:01:d1:23:a2:6a:e7:16: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:33:E9:22:8D:62:77:88:99:4E:09:22:50:B1:52:46:AD:C6:50:DC X509v3 Authority Key Identifier: keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f2:8d:d9:45:06:5b:17:c0:57:7a:d7:9c:47:f1:61:54:f2: 0b:81:aa:20:30:b9:4c:86:8c:c4:98:b2:40:f8:c5:02:6a:60: 6a:a0:9d:0a:75:12:c8:09:83:e3:f8:f3:78:f7:68:53:9e:98: ab:a4:b8:82:9c:89:c6:3d:7f:5f:98:ca:a8:3f:33:1d:12:cc: 8d:df:b7:c7:a2:5e:c6:d2:32:fb:f5:8b:4e:2d:5e:d1:53:f3: 42:0e:b3:c9:26:fd:b2:3d:d5:8e:18:b2:bb:18:f4:5c:10:9f: e8:fd:37:aa:12:06:a9:9e:b0:a6:0d:49:50:d7:79:67:07:66: 02:a1:93:cd:1e:9e:12:3e:6b:ca:fe:58:09:04:53:5d:1c:af: 20:f2:3b:9a:6d:c1:f5:25:8c:31:d5:0e:df:07:56:c2:0b:79: e3:a9:7b:5f:db:24:63:bf:46:bf:7e:2d:61:f9:f2:23:88:94: d4:c8:31:43:27:45:dc:4f:70:46:9b:54:7a:c9:2b:2d:b7:dc: 13:bd:72:61:f3:06:72:66:af:c5:54:1d:15:72:12:c6:8a:e8: 54:ce:e6:ae:cd:fb:92:29:6c:a9:5e:07:db:b4:dd:40:cb:31: 32:22:de:16:b3:b2:0c:b1:99:59:74:3f:01:b2:5f:34:57:cd: 0f:c7:92:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SJIC9wWbgg6gVHz6Gr/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGU2ZDdjZWJiZDA4MjEyY2E4YzhkNTkxYWU1YTA2YmMw M2I5NzgwHhcNMjUxMjIxMDUwMTE5WhcNMjUxMjIyMDUwMTE5WjAzMTEwLwYDVQQD Eyg1ZDMzZTkyMjhkNjI3Nzg4OTk0ZTA5MjI1MGIxNTI0NmFkYzY1MGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArINLx+hj0C0NT0TmFaVY3tJ7R/2Y FJGdULEeU4GCZX6elENrXwYUMmDZxpTso6gApqVXo8U3JF91sl+t1iyjqUz/GbLu +cipO4au2RNK+mjdDvkTymCRl1SvvW0hSm2fSaFhwWp9FkQTY4Vanl0d3gYdORXQ 0p6xLeQUhUfBtzn8WSG6YIhr80QTYrs9JQthcc4q3Hm9SoPVdDYLKoFkOcI7Nc6R 1Jh3lm3pz+7iTd/y0QPW9iJA/AvZqFxgwFVWO4QoYMVQyIvz5n8Pf+zCJaSOIxAZ 8PmB8TfVRTF37aXK8vjt89vMMnRSXiVDpjBRNwesfePFrwHRI6Jq5xYY6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0z6SKNYneImU4JIlCxUkatxlDcMB8GA1UdIwQY MBaAFEdObXzrvQghLKjI1ZGuWga8A7l4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUt MjljNzUyY2M1OTU2LzEvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUtMjljNzUyY2M1OTU2 LzEvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/KN2UUG WxfAV3rXnEfxYVTyC4GqIDC5TIaMxJiyQPjFAmpgaqCdCnUSyAmD4/jzePdoU56Y q6S4gpyJxj1/X5jKqD8zHRLMjd+3x6JextIy+/WLTi1e0VPzQg6zySb9sj3Vjhiy uxj0XBCf6P03qhIGqZ6wpg1JUNd5ZwdmAqGTzR6eEj5ryv5YCQRTXRyvIPI7mm3B 9SWMMdUO3wdWwgt546l7X9skY79Gv34tYfnyI4iU1MgxQydF3E9wRptUeskrLbfc E71yYfMGcmavxVQdFXISxoroVM7mrs37kilsqV4H27TdQMsxMiLeFrOyDLGZWXQ/ AbJfNFfND8eSVg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:19:54 2025 by rpki-client