This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json) Hash identifier: Z+8oI6injTwsUWEQ7SZcQzdEQojqKrUoPNXWLLoQOq0= Subject key identifier: 2A:17:2E:50:BF:0B:C4:0E:0A:5C:31:16:F1:C0:09:23:D2:79:36:F8 Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76 Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076 Certificate serial: 019B43C9B11455E63D08196B5D94ED99865C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft Manifest number: 0554 Signing time: Mon 22 Dec 2025 02:00:50 +0000 Manifest this update: Mon 22 Dec 2025 02:00:50 +0000 Manifest next update: Tue 23 Dec 2025 02:00:50 +0000 Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: Uk/qrHkRYYgU9+C8A8HVFbQzhYTSH2d3+I+iStCHUlE=) 2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:b1:14:55:e6:3d:08:19:6b:5d:94:ed:99:86:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076 Validity Not Before: Dec 22 02:00:50 2025 GMT Not After : Dec 23 02:00:50 2025 GMT Subject: CN=2a172e50bf0bc40e0a5c3116f1c00923d27936f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:61:5f:fe:00:22:2f:e4:20:1a:92:50:f8: b7:06:b5:41:3d:ee:3c:1e:cb:1d:19:3d:e2:31:1d: ab:5c:0e:44:32:d1:de:4d:e5:ec:23:bf:14:d0:2f: 01:fc:f4:bb:6b:88:37:8c:73:06:a4:61:f4:20:15: 6b:a5:40:8c:09:af:e1:fc:85:fb:82:0a:41:a5:16: 42:6e:15:f9:f1:39:8a:cc:d8:b6:5a:36:4c:d8:28: cc:49:87:7f:36:7f:65:0b:38:db:36:6b:35:31:1f: 71:6e:a5:0b:24:1b:47:5c:65:99:54:68:a8:58:a6: 3b:f5:05:54:26:9b:15:7e:eb:10:95:f3:53:6d:71: 88:00:65:0c:96:c3:7d:90:df:8a:41:ec:47:ec:42: 3f:3c:13:5f:c2:26:5f:4d:c0:80:5e:24:3c:f7:0b: 93:91:88:19:29:d9:34:6d:63:5b:4f:24:56:78:32: a6:a6:02:ac:ea:2c:d2:8d:05:34:63:7a:14:af:ac: d2:e9:4f:e2:12:1b:17:7c:f4:a1:ef:37:b0:b1:b8: 22:ce:cb:a3:21:7f:d7:a2:3f:56:ba:06:2e:1a:51: 46:84:fb:da:b6:14:45:0d:0d:e0:c2:0a:7e:7c:79: a5:8a:d9:a3:20:de:36:26:3b:91:0c:96:b6:a0:d3: 8f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:17:2E:50:BF:0B:C4:0E:0A:5C:31:16:F1:C0:09:23:D2:79:36:F8 X509v3 Authority Key Identifier: keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:11:9f:27:43:35:17:15:6c:89:9d:c9:e3:64:38:46:af:bb: 5b:73:6f:fa:96:a6:4e:ce:18:8d:e8:ef:a7:97:a1:8a:e9:b4: bb:0e:47:fc:d3:7a:cf:eb:bd:de:33:5c:29:50:eb:03:2a:86: 6b:d9:14:c4:ac:ab:91:01:cf:3f:82:3a:fd:5c:c8:92:50:bb: f8:de:5b:99:ea:9b:74:97:ce:b1:55:b2:f4:ac:bd:4b:01:8c: 15:08:b9:09:4a:4e:3c:df:97:e6:8e:51:b4:4f:04:0b:ec:38: c1:37:f7:a4:50:4b:f8:17:75:6e:5b:2e:9a:1d:47:5c:32:17: 67:f8:76:89:d2:ff:a5:f3:05:95:62:75:fa:97:95:a2:d8:fe: 62:b5:34:66:2a:1a:91:7f:fb:dd:db:ca:50:3d:1a:84:e6:af: 71:17:bb:49:ba:db:0b:41:48:2c:ae:e2:d5:31:ec:58:aa:4f: 75:33:8b:e2:e3:49:6c:1d:3b:d3:26:b3:37:6f:ea:dd:29:17: c3:44:38:7a:ec:82:6c:02:10:31:23:7e:89:9b:c8:e1:26:86: 19:e6:a3:d2:ca:12:2d:c6:0e:ee:7f:53:76:1b:9c:db:4a:8e: 38:1d:43:68:86:75:25:f6:d3:a8:4b:87:a6:00:ff:e2:fd:c3: b7:d0:63:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDybEUVeY9CBlrXZTtmYZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh YzgwNzYwHhcNMjUxMjIyMDIwMDUwWhcNMjUxMjIzMDIwMDUwWjAzMTEwLwYDVQQD EygyYTE3MmU1MGJmMGJjNDBlMGE1YzMxMTZmMWMwMDkyM2QyNzkzNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR1hX/4AIi/kIBqSUPi3BrVBPe48 HssdGT3iMR2rXA5EMtHeTeXsI78U0C8B/PS7a4g3jHMGpGH0IBVrpUCMCa/h/IX7 ggpBpRZCbhX58TmKzNi2WjZM2CjMSYd/Nn9lCzjbNms1MR9xbqULJBtHXGWZVGio WKY79QVUJpsVfusQlfNTbXGIAGUMlsN9kN+KQexH7EI/PBNfwiZfTcCAXiQ89wuT kYgZKdk0bWNbTyRWeDKmpgKs6izSjQU0Y3oUr6zS6U/iEhsXfPSh7zewsbgizsuj IX/Xoj9WugYuGlFGhPvathRFDQ3gwgp+fHmlitmjIN42JjuRDJa2oNOPUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoXLlC/C8QOClwxFvHACSPSeTb4MB8GA1UdIwQY MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBGfJ0M1 FxVsiZ3J42Q4Rq+7W3Nv+pamTs4Yjejvp5ehium0uw5H/NN6z+u93jNcKVDrAyqG a9kUxKyrkQHPP4I6/VzIklC7+N5bmeqbdJfOsVWy9Ky9SwGMFQi5CUpOPN+X5o5R tE8EC+w4wTf3pFBL+Bd1blsumh1HXDIXZ/h2idL/pfMFlWJ1+peVotj+YrU0Zioa kX/73dvKUD0ahOavcRe7SbrbC0FILK7i1THsWKpPdTOL4uNJbB070yazN2/q3SkX w0Q4euyCbAIQMSN+iZvI4SaGGeaj0soSLcYO7n9Tdhuc20qOOB1DaIZ1JfbTqEuH pgD/4v3Dt9BjFg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:04:55 2025 by rpki-client