This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json) Hash identifier: HWLN6rOMA/0TFlyR6nup7/K6AtiC5WzE0WjfIZ8jZg8= Subject key identifier: 25:52:AD:55:A8:8B:F7:E2:E3:57:88:D9:EA:5C:44:73:1F:F7:E7:7B Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c Certificate serial: 019B61D401AE9908A5E00DFF193865CAC174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft Manifest number: 0CCA Signing time: Sat 27 Dec 2025 22:00:42 +0000 Manifest this update: Sat 27 Dec 2025 22:00:42 +0000 Manifest next update: Sun 28 Dec 2025 22:00:42 +0000 Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=) 2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: TDLob8JqDJ+GCJPxp6STiSiufiJihEvUQtrd9vvn9s0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d4:01:ae:99:08:a5:e0:0d:ff:19:38:65:ca:c1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c Validity Not Before: Dec 27 22:00:42 2025 GMT Not After : Dec 28 22:00:42 2025 GMT Subject: CN=2552ad55a88bf7e2e35788d9ea5c44731ff7e77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:92:e0:0f:2d:aa:d3:3b:43:7e:79:92:9d:cc: 78:3a:8f:88:30:af:3a:d9:86:b7:e6:af:2c:2e:0e: 56:85:cf:34:00:88:84:94:37:74:16:a9:66:99:da: 60:73:30:e7:d8:22:95:1e:be:10:5a:8e:a1:00:4a: e5:4a:69:20:ea:56:13:0b:17:60:50:ee:4e:eb:41: 2c:66:83:fa:c7:14:e2:56:af:7a:01:7f:17:15:96: 33:b0:3c:01:f6:47:32:ad:7e:94:67:cf:51:a0:25: bf:7c:ae:a6:ac:69:fd:f1:18:68:54:9f:8c:30:f1: a4:36:b5:99:2f:05:cc:7b:8e:73:73:6f:14:17:48: 2b:1f:bc:13:c8:85:a8:b9:10:46:a3:4e:db:84:56: ec:fe:e7:7d:48:b0:08:08:50:b5:44:d0:58:0b:37: 81:72:60:de:41:66:a4:d7:c4:e4:0f:26:62:27:f3: 34:61:00:43:60:01:39:8e:b7:0a:b5:5d:5f:e1:dd: 57:22:ef:3d:79:99:24:1f:c9:c1:ba:b7:bd:60:4f: 4a:42:5b:95:b7:4f:1b:04:48:67:14:8d:0e:5b:83: e3:6d:e0:94:0b:85:28:6a:4a:8d:31:9f:15:5a:8a: 04:1d:f8:cb:11:8f:0d:5e:8d:c7:dc:eb:27:ed:99: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:52:AD:55:A8:8B:F7:E2:E3:57:88:D9:EA:5C:44:73:1F:F7:E7:7B X509v3 Authority Key Identifier: keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:76:17:cb:aa:d7:7c:68:32:45:41:2e:7e:49:b4:87:f9:ac: 67:24:d4:d1:95:1e:78:d0:00:65:fb:b3:8c:6f:b3:0e:b7:31: b3:86:18:30:82:38:62:de:37:9b:ef:26:63:b4:ba:67:65:fd: 85:25:ec:e7:09:7a:e8:c8:47:ba:70:46:82:b5:ce:fa:a9:20: 76:46:f2:72:d4:02:43:0a:f1:56:46:44:c1:ea:e1:a6:52:77: b7:e3:38:9c:75:38:9b:6e:95:5f:a1:b0:58:93:8a:23:53:6d: a9:76:80:ca:b0:33:2a:03:4e:dd:4c:c3:8c:1b:d5:f7:30:8e: a8:d9:4e:d1:80:b4:10:96:9f:13:32:fa:10:6c:1e:4b:fd:3a: 6b:d2:5e:ff:f9:16:80:77:9c:6e:47:48:e0:15:42:e9:2d:4b: c7:a1:eb:ff:31:a4:dc:a8:6d:9f:1d:a5:da:96:59:61:8c:7c: c3:f2:e3:c3:06:0c:f1:28:ba:c1:5d:16:70:f6:27:28:7c:e7: 9c:ad:7b:e0:aa:6f:91:97:76:3f:2a:50:5a:42:3d:3e:d2:c4: 00:e9:b0:0d:a9:8b:36:eb:92:4e:7b:54:aa:db:a3:e3:24:a7: e2:f2:1b:0f:1c:bb:82:dd:28:cb:89:01:5a:e9:e8:a8:a7:1b: bb:17:6b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth1AGumQil4A3/GThlysF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZWM0MzRmODIxYzg2YjdlZTYzMTY2OTFkNzFjYzYxYzQw YzM0NmMwHhcNMjUxMjI3MjIwMDQyWhcNMjUxMjI4MjIwMDQyWjAzMTEwLwYDVQQD EygyNTUyYWQ1NWE4OGJmN2UyZTM1Nzg4ZDllYTVjNDQ3MzFmZjdlNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZLgDy2q0ztDfnmSncx4Oo+IMK86 2Ya35q8sLg5Whc80AIiElDd0FqlmmdpgczDn2CKVHr4QWo6hAErlSmkg6lYTCxdg UO5O60EsZoP6xxTiVq96AX8XFZYzsDwB9kcyrX6UZ89RoCW/fK6mrGn98RhoVJ+M MPGkNrWZLwXMe45zc28UF0grH7wTyIWouRBGo07bhFbs/ud9SLAICFC1RNBYCzeB cmDeQWak18TkDyZiJ/M0YQBDYAE5jrcKtV1f4d1XIu89eZkkH8nBure9YE9KQluV t08bBEhnFI0OW4PjbeCUC4UoakqNMZ8VWooEHfjLEY8NXo3H3Osn7ZlkAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVSrVWoi/fi41eI2epcRHMf9+d7MB8GA1UdIwQY MBaAFK7sQ0+CHIa37mMWaR1xzGHEDDRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUt OTEwZTA4MTBjYTk0LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUtOTEwZTA4MTBjYTk0 LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3YXy6rX fGgyRUEufkm0h/msZyTU0ZUeeNAAZfuzjG+zDrcxs4YYMII4Yt43m+8mY7S6Z2X9 hSXs5wl66MhHunBGgrXO+qkgdkbyctQCQwrxVkZEwerhplJ3t+M4nHU4m26VX6Gw WJOKI1NtqXaAyrAzKgNO3UzDjBvV9zCOqNlO0YC0EJafEzL6EGweS/06a9Je//kW gHecbkdI4BVC6S1Lx6Hr/zGk3Khtnx2l2pZZYYx8w/LjwwYM8Si6wV0WcPYnKHzn nK174KpvkZd2PypQWkI9PtLEAOmwDamLNuuSTntUqtuj4ySn4vIbDxy7gt0oy4kB WunoqKcbuxdrog== -----END CERTIFICATE-----Generated at Sun Dec 28 07:31:05 2025 by rpki-client