This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json) Hash identifier: cpPAJafIKc9NsekaRMXiHLrU2okkJE8H0H8K4kfEU3A= Subject key identifier: B1:10:70:A1:8F:ED:40:45:D5:EA:4B:6C:10:AB:25:77:4F:D3:F3:AC Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78 Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78 Certificate serial: 019B3AFDFB6736F08A11AD1C08714FCC5827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft Manifest number: 10FC Signing time: Sat 20 Dec 2025 09:01:21 +0000 Manifest this update: Sat 20 Dec 2025 09:01:21 +0000 Manifest next update: Sun 21 Dec 2025 09:01:21 +0000 Files and hashes: 1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=) 2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: m4XOvZBRl0NMyklEJViQMrjy2KYjpXdoZv/RHhNfXIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:fb:67:36:f0:8a:11:ad:1c:08:71:4f:cc:58:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78 Validity Not Before: Dec 20 09:01:21 2025 GMT Not After : Dec 21 09:01:21 2025 GMT Subject: CN=b11070a18fed4045d5ea4b6c10ab25774fd3f3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:1d:2f:62:de:63:a6:f1:28:b8:79:37:6b: cc:39:a0:28:16:52:07:ff:3f:6d:2a:2a:fc:bb:df: b7:52:13:c5:35:30:28:06:3b:06:e6:26:38:58:54: 89:31:2a:25:f4:5c:ad:02:d8:b4:cb:09:d5:89:1e: b2:bf:e6:05:74:a7:03:93:62:db:c5:00:29:cd:1e: 7c:aa:12:e2:da:06:a0:37:7f:98:58:8e:52:44:23: e1:a8:e1:bc:d5:66:68:2a:6d:41:69:f7:e0:ac:65: 0b:59:c9:a1:ed:75:f4:8c:52:2a:85:35:04:87:f8: 63:fc:b8:79:25:5e:ed:4a:5d:2c:64:a8:1c:2f:fd: 85:3a:c2:d9:1b:24:79:d9:d6:e5:44:16:5a:62:08: ae:9c:b8:d5:49:3c:02:56:04:43:15:ee:4e:75:14: 9b:0b:54:12:5b:95:9a:f0:bf:c3:ea:cf:0e:15:e5: d5:5a:66:43:1a:3b:1d:b3:80:5f:06:3b:96:c2:f1: 1b:73:db:d4:2b:d7:df:23:93:d4:1c:69:13:24:96: 9b:d9:e9:4d:a4:e3:15:e6:da:00:c0:30:23:29:2b: 04:60:ef:5c:24:35:47:f2:de:36:b6:69:dd:9e:64: 1a:8f:ee:20:d5:2d:e1:d7:8b:a9:ef:96:c0:f5:b2: d7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:10:70:A1:8F:ED:40:45:D5:EA:4B:6C:10:AB:25:77:4F:D3:F3:AC X509v3 Authority Key Identifier: keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5c:76:a2:1e:a1:e7:47:15:a8:10:8f:15:04:75:0d:fe:37: 4f:99:99:7a:45:a6:af:8c:de:88:58:14:f3:c0:0e:1c:5e:02: 3a:ac:fc:c5:40:e0:02:9b:fd:45:31:27:c4:db:50:24:89:16: 3a:05:c8:35:59:89:ea:64:c3:b1:f6:9b:8d:60:d7:d3:59:d0: 2e:0b:22:c3:b9:ad:9c:16:19:0a:eb:a8:89:c8:a7:24:a1:ce: 1e:32:e2:1a:75:2f:39:1e:a7:e2:b0:cb:17:26:eb:0e:ef:11: 44:f3:91:f1:50:e0:0b:6a:dd:7f:34:ff:b0:9a:32:dc:86:7a: 63:c8:99:61:7a:6b:31:a9:0e:df:57:ac:54:e1:10:4b:9d:25: c9:f1:4f:2c:a7:65:fe:aa:c4:ad:40:ab:8c:65:2f:25:62:8d: b1:3a:40:dc:a7:18:d6:cc:0c:fc:cf:bc:0d:26:ce:00:75:99: 1a:52:c6:b6:15:fd:a1:85:27:7b:1f:5e:c7:77:c9:19:65:fb: d6:3d:5d:e2:5c:7d:6d:7e:e3:f0:46:6d:c4:c0:2d:25:be:ad: fa:9a:b4:25:4d:76:7c:8c:2f:c3:aa:84:5c:c9:02:79:7c:3c: b7:56:92:9f:6f:e8:33:0e:4e:3d:c9:2a:52:e4:d5:b6:d0:c7: dc:a7:0a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/ftnNvCKEa0cCHFPzFgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0M2VkNGFlNDNmYTE5MGMxMGZkMmM1M2ExMGUzZGUwYWJk OThiNzgwHhcNMjUxMjIwMDkwMTIxWhcNMjUxMjIxMDkwMTIxWjAzMTEwLwYDVQQD EyhiMTEwNzBhMThmZWQ0MDQ1ZDVlYTRiNmMxMGFiMjU3NzRmZDNmM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvUdL2LeY6bxKLh5N2vMOaAoFlIH /z9tKir8u9+3UhPFNTAoBjsG5iY4WFSJMSol9FytAti0ywnViR6yv+YFdKcDk2Lb xQApzR58qhLi2gagN3+YWI5SRCPhqOG81WZoKm1BaffgrGULWcmh7XX0jFIqhTUE h/hj/Lh5JV7tSl0sZKgcL/2FOsLZGyR52dblRBZaYgiunLjVSTwCVgRDFe5OdRSb C1QSW5Wa8L/D6s8OFeXVWmZDGjsds4BfBjuWwvEbc9vUK9ffI5PUHGkTJJab2elN pOMV5toAwDAjKSsEYO9cJDVH8t42tmndnmQaj+4g1S3h14up75bA9bLXOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEQcKGP7UBF1epLbBCrJXdP0/OsMB8GA1UdIwQY MBaAFEQ+1K5D+hkMEP0sU6EOPeCr2Yt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYt MjFmZTVhZTllZjNiLzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYtMjFmZTVhZTllZjNi LzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilx2oh6h 50cVqBCPFQR1Df43T5mZekWmr4zeiFgU88AOHF4COqz8xUDgApv9RTEnxNtQJIkW OgXINVmJ6mTDsfabjWDX01nQLgsiw7mtnBYZCuuoicinJKHOHjLiGnUvOR6n4rDL FybrDu8RRPOR8VDgC2rdfzT/sJoy3IZ6Y8iZYXprMakO31esVOEQS50lyfFPLKdl /qrErUCrjGUvJWKNsTpA3KcY1swM/M+8DSbOAHWZGlLGthX9oYUnex9ex3fJGWX7 1j1d4lx9bX7j8EZtxMAtJb6t+pq0JU12fIwvw6qEXMkCeXw8t1aSn2/oMw5OPckq UuTVttDH3KcKEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:25:40 2025 by rpki-client