This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft File: Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json) Hash identifier: AntccMbTlqjigtne7BJh8djmc3Diuor2Ngd4+XGu0vQ= Subject key identifier: 5D:58:19:EC:20:40:38:20:D5:3D:FB:4F:FF:1D:ED:34:78:DD:FC:66 Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019 Certificate serial: 019B47A64B73ED558A3EBABBC938FD10FC9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft Manifest number: 1656 Signing time: Mon 22 Dec 2025 20:00:39 +0000 Manifest this update: Mon 22 Dec 2025 20:00:39 +0000 Manifest next update: Tue 23 Dec 2025 20:00:39 +0000 Files and hashes: 1: 6ErfCPwAmfbVMHf0WQijaX8o94o.roa (hash: xIsd+voDU6heAFU10HoQQ5mHLbMtmpQhpDpDanQQkwY=) 2: En8rpl-LNaAq3f8AsyjWN5ulsXo.roa (hash: QoqgsrUKNtQmX6VXxOJGcohI9DGk9cLmQATRa7CEazs=) 3: JkyXPttoPAp3cCPnCVEZfnX2vVk.roa (hash: 09s5xjIn5aKowlmf/hI3/pYB+SNQW1utLJ78KCcVxLc=) 4: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: 3gwFGFh9iaqRwr0cAZbvy5c6hwBxACXDvK9nLlh7YaA=) 5: qcHe72FL2z-UmO_X8Rev1HToxnE.roa (hash: 4Z4lNAeftyjgjC/YKeKvbCrg253Zv9FXA7xaqcqk/0s=) 6: rFN0KDBiljkvhFQ66hAH56Hsc84.roa (hash: 2lh/B/WXfyLgwdob+PT24RTvz83sEjoawwppCzC07qk=) 7: ttl4gF5H4xVOsldpEtY--5SUL-g.roa (hash: SbdB5263yFvJJDlQfuHRPnaHcrA2J/RblHkI32JVk8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:4b:73:ed:55:8a:3e:ba:bb:c9:38:fd:10:fc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019 Validity Not Before: Dec 22 20:00:39 2025 GMT Not After : Dec 23 20:00:39 2025 GMT Subject: CN=5d5819ec20403820d53dfb4fff1ded3478ddfc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:14:1f:6f:c2:9f:b5:56:69:70:ad:1e:b5: c3:7f:95:18:17:3d:bb:97:64:8d:92:7e:d8:67:54: 64:72:52:12:75:78:7c:0d:af:23:89:c1:86:b3:fc: 15:f5:5b:b9:c2:2b:bd:0a:fb:8d:6d:2a:28:57:9b: 42:49:17:16:17:88:ee:f3:8a:59:71:a5:89:d0:51: 44:05:60:e7:10:4b:73:70:cb:97:a8:71:c6:bd:f8: c0:70:21:80:b8:d6:bd:02:77:52:35:a0:bf:ed:01: 94:be:6a:3b:ee:53:0f:03:b1:e0:99:7f:d9:ba:62: 18:66:e6:ab:db:83:c6:e7:4c:e7:bb:26:57:84:a9: 72:d1:73:c0:65:57:3c:74:b4:11:80:19:93:c5:a7: 09:fb:d0:5a:39:ee:f7:ef:8c:a2:52:9b:4b:8f:da: e5:32:68:a7:50:83:e7:dc:8a:08:31:d6:f3:e1:92: cc:97:f9:de:49:8d:ae:4f:15:4f:76:94:4a:d6:00: d7:be:ef:9d:85:7c:c6:a1:d3:2f:9b:73:32:a6:6e: 21:6b:04:af:44:af:8d:d0:e1:c9:81:98:43:11:34: 19:7d:f1:c4:8f:18:5d:7e:5d:39:87:5f:24:fa:31: 6b:33:0a:af:14:8e:54:da:68:1b:07:23:c7:5e:b2: 04:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:58:19:EC:20:40:38:20:D5:3D:FB:4F:FF:1D:ED:34:78:DD:FC:66 X509v3 Authority Key Identifier: keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:aa:1a:ac:df:91:fd:09:de:56:2e:02:c8:36:4b:d5:e9:03: ef:d4:a9:e8:ab:14:ea:c7:47:dd:1c:5d:67:da:59:74:2a:13: d7:cb:33:e0:64:06:df:44:d8:c7:5b:67:00:f3:6f:75:e3:9d: 56:0e:d8:8b:22:ca:5a:2a:fc:df:23:11:fc:b7:b3:8a:a5:a0: 68:f3:c8:f7:c9:03:cd:67:84:55:b6:10:5a:2c:4c:7e:82:f0: 2f:5c:a5:11:6c:7f:7a:68:ed:15:a8:bb:85:53:d2:23:3d:b0: 9b:60:df:31:ca:58:98:8a:46:64:f6:f6:27:1d:16:ea:8e:d5: c0:36:76:49:35:58:18:af:64:c4:14:1f:71:0f:70:bc:e1:58: dc:2c:c7:6c:a8:f8:96:95:8b:9e:6f:d5:8d:03:d3:b7:2c:e1: 15:28:2f:59:25:94:2e:32:1d:11:15:2e:2d:c5:dd:e6:44:9c: 22:ed:ee:fa:09:c9:81:e9:e6:5d:04:e5:bf:61:3a:21:70:32: b6:3f:39:38:83:4b:ad:db:d6:b5:ac:d1:95:2d:ba:04:ca:ab: d3:d1:ac:c0:6b:7b:9d:63:8b:8f:81:01:39:5e:a1:af:f6:44: ea:73:7a:23:44:66:62:b9:f1:c5:b5:01:31:c5:b9:0c:be:60: 1f:3c:0c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpktz7VWKPrq7yTj9EPydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0 YzUwMTkwHhcNMjUxMjIyMjAwMDM5WhcNMjUxMjIzMjAwMDM5WjAzMTEwLwYDVQQD Eyg1ZDU4MTllYzIwNDAzODIwZDUzZGZiNGZmZjFkZWQzNDc4ZGRmYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgcUH2/Cn7VWaXCtHrXDf5UYFz27 l2SNkn7YZ1RkclISdXh8Da8jicGGs/wV9Vu5wiu9CvuNbSooV5tCSRcWF4ju84pZ caWJ0FFEBWDnEEtzcMuXqHHGvfjAcCGAuNa9AndSNaC/7QGUvmo77lMPA7HgmX/Z umIYZuar24PG50znuyZXhKly0XPAZVc8dLQRgBmTxacJ+9BaOe7374yiUptLj9rl MminUIPn3IoIMdbz4ZLMl/neSY2uTxVPdpRK1gDXvu+dhXzGodMvm3Mypm4hawSv RK+N0OHJgZhDETQZffHEjxhdfl05h18k+jFrMwqvFI5U2mgbByPHXrIEmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1YGewgQDgg1T37T/8d7TR43fxmMB8GA1UdIwQY MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt NzViZDk0NmE3MzU1LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1 LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKoarN+R /QneVi4CyDZL1ekD79Sp6KsU6sdH3RxdZ9pZdCoT18sz4GQG30TYx1tnAPNvdeOd Vg7YiyLKWir83yMR/LeziqWgaPPI98kDzWeEVbYQWixMfoLwL1ylEWx/emjtFai7 hVPSIz2wm2DfMcpYmIpGZPb2Jx0W6o7VwDZ2STVYGK9kxBQfcQ9wvOFY3CzHbKj4 lpWLnm/VjQPTtyzhFSgvWSWULjIdERUuLcXd5kScIu3u+gnJgenmXQTlv2E6IXAy tj85OINLrdvWtazRlS26BMqr09GswGt7nWOLj4EBOV6hr/ZE6nN6I0RmYrnxxbUB McW5DL5gHzwMeg== -----END CERTIFICATE-----Generated at Tue Dec 23 04:28:00 2025 by rpki-client