This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json) Hash identifier: R7IXZBrem6OjbAoOBrKYOWGC+AGY4VLU53cNoKrAZiw= Subject key identifier: FC:DA:10:6D:46:89:4E:01:5B:9A:B9:0A:55:5F:BA:89:C2:6D:7A:9F Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc Certificate serial: 019B3BD90A210A443B9DA6C4393E0B88B8CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft Manifest number: 0C20 Signing time: Sat 20 Dec 2025 13:00:38 +0000 Manifest this update: Sat 20 Dec 2025 13:00:38 +0000 Manifest next update: Sun 21 Dec 2025 13:00:38 +0000 Files and hashes: 1: qFRwlcrfdF3Qq45jqbo3fYRpJBM.roa (hash: FGK/heawLx9gSMqV8ukWyZP5a/uXIX9nti48EjMoYys=) 2: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: L7X6vwuHw5RVZYuL4YlkFHzsETcsowVUQiyJDcDpdgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:0a:21:0a:44:3b:9d:a6:c4:39:3e:0b:88:b8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc Validity Not Before: Dec 20 13:00:38 2025 GMT Not After : Dec 21 13:00:38 2025 GMT Subject: CN=fcda106d46894e015b9ab90a555fba89c26d7a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:52:1e:d1:dc:be:df:e4:2c:e8:8d:5a:2a: fe:6d:86:77:e7:e0:ee:a8:c3:1a:39:4f:b4:0d:bb: cd:75:c6:f3:84:d5:18:29:48:c4:f7:d3:67:74:a7: 92:c4:6f:d0:11:f0:e4:51:74:bc:1d:97:f3:e7:1d: 0a:e3:bc:7c:58:9b:e2:f7:82:d2:4d:99:d2:0f:0a: 51:ad:64:4f:30:3e:09:e0:9e:b6:92:02:88:19:f3: d5:01:8c:37:c3:42:7c:fa:48:34:77:18:18:08:01: 94:9c:42:f2:40:3b:66:f2:da:f9:09:90:b6:16:7b: 7f:57:7f:45:be:e4:23:4e:80:5d:96:2e:ce:ed:b4: cb:db:f5:b7:e9:57:71:a1:96:f7:67:61:fe:bc:16: 04:97:38:2a:bb:ce:55:bf:b7:5c:e5:77:70:1f:71: fa:18:f0:7d:c8:b0:ad:62:93:5b:13:ae:ed:9d:51: b5:b7:59:e5:51:cc:40:4c:72:44:b3:80:88:9e:d8: 5f:48:d0:6d:47:7e:13:fd:47:33:b4:d2:56:f9:c3: ca:33:67:2a:c7:37:67:55:c8:37:f9:59:e8:33:b7: f3:dc:75:1b:00:c3:39:0f:e3:5f:f6:92:31:eb:98: 3a:6a:26:91:0e:f2:e3:4c:ba:06:22:70:68:12:28: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DA:10:6D:46:89:4E:01:5B:9A:B9:0A:55:5F:BA:89:C2:6D:7A:9F X509v3 Authority Key Identifier: keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:52:73:49:0c:bc:b7:46:68:21:af:9c:fe:88:e3:94:2d:c9: 2c:78:f6:9e:bc:f6:c7:5f:33:0f:6a:08:5a:c6:e9:03:8a:ba: 2f:7b:b4:d1:6b:63:c4:3c:c5:69:d0:53:06:8a:66:6a:06:0c: 3d:36:d6:c1:82:6c:99:07:cf:11:9d:72:09:a1:5a:66:d0:f1: 51:c8:33:e5:37:56:80:55:df:aa:80:78:42:fb:7f:5f:ee:d6: 0a:38:65:c4:05:8e:d1:6b:67:a5:a8:2e:07:a0:b4:63:99:b9: 33:49:a7:d0:0d:b0:a5:5f:98:1f:cd:32:cc:69:0f:89:e6:ab: 9b:78:bb:97:0b:93:85:8e:1b:56:a2:82:d0:1b:66:0c:02:66: 7b:0a:36:b4:d1:64:71:e6:6f:c0:c6:4e:78:15:c8:cf:81:35: d9:e5:3b:f0:42:a9:0c:8c:ac:dc:34:5e:a0:df:96:e0:13:6c: 33:e9:01:5e:bc:15:36:6a:2d:9d:39:cc:bc:3d:4d:6f:af:80: 80:a2:b6:81:34:08:f0:75:66:8b:9c:ce:02:4e:9d:ce:17:b9: 79:8f:a4:23:51:62:29:ce:0b:34:b6:39:26:99:6d:61:9d:b7: 51:6d:eb:09:57:13:29:26:7f:ac:0e:5b:20:ba:9c:92:a3:db: a9:67:2a:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72QohCkQ7nabEOT4LiLjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZWFhMDk2ZWJiMzc2NTdlNGQzYWQyMTc2NjQxMTcyZDZl MjAyYmMwHhcNMjUxMjIwMTMwMDM4WhcNMjUxMjIxMTMwMDM4WjAzMTEwLwYDVQQD EyhmY2RhMTA2ZDQ2ODk0ZTAxNWI5YWI5MGE1NTVmYmE4OWMyNmQ3YTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRpSHtHcvt/kLOiNWir+bYZ35+Du qMMaOU+0DbvNdcbzhNUYKUjE99NndKeSxG/QEfDkUXS8HZfz5x0K47x8WJvi94LS TZnSDwpRrWRPMD4J4J62kgKIGfPVAYw3w0J8+kg0dxgYCAGUnELyQDtm8tr5CZC2 Fnt/V39FvuQjToBdli7O7bTL2/W36VdxoZb3Z2H+vBYElzgqu85Vv7dc5XdwH3H6 GPB9yLCtYpNbE67tnVG1t1nlUcxATHJEs4CInthfSNBtR34T/UcztNJW+cPKM2cq xzdnVcg3+VnoM7fz3HUbAMM5D+Nf9pIx65g6aiaRDvLjTLoGInBoEiiYRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzaEG1GiU4BW5q5ClVfuonCbXqfMB8GA1UdIwQY MBaAFK7qoJbrs3ZX5NOtIXZkEXLW4gK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMt ZmZkNWJmNTk2OWRmLzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMtZmZkNWJmNTk2OWRm LzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVJzSQy8 t0ZoIa+c/ojjlC3JLHj2nrz2x18zD2oIWsbpA4q6L3u00WtjxDzFadBTBopmagYM PTbWwYJsmQfPEZ1yCaFaZtDxUcgz5TdWgFXfqoB4Qvt/X+7WCjhlxAWO0Wtnpagu B6C0Y5m5M0mn0A2wpV+YH80yzGkPiearm3i7lwuThY4bVqKC0BtmDAJmewo2tNFk ceZvwMZOeBXIz4E12eU78EKpDIys3DReoN+W4BNsM+kBXrwVNmotnTnMvD1Nb6+A gKK2gTQI8HVmi5zOAk6dzhe5eY+kI1FiKc4LNLY5JpltYZ23UW3rCVcTKSZ/rA5b ILqckqPbqWcqYA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:56:35 2025 by rpki-client