This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json) Hash identifier: u5Ha2sdUGMYP+P51QcrNGCZaRInRpHmwu2AOPcLXHkI= Subject key identifier: 3D:05:97:8D:9A:0E:E1:0F:40:E4:2E:58:CE:B5:C7:81:A8:33:A6:52 Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62 Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762 Certificate serial: 019B5FAF2B383082557615B1A4CC45836955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft Manifest number: 1057 Signing time: Sat 27 Dec 2025 12:01:13 +0000 Manifest this update: Sat 27 Dec 2025 12:01:13 +0000 Manifest next update: Sun 28 Dec 2025 12:01:13 +0000 Files and hashes: 1: I1hQSc_aI8nnk6g1vpjyTdXYNJI.roa (hash: h2IeKZyMJz7T7nR3ubhVngPyKXqYp/CJM8eA4imhJCk=) 2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: m3vh2SFCb2cqIcAOPfQjePlbKOrJwePgDAZUqNrKG9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:2b:38:30:82:55:76:15:b1:a4:cc:45:83:69:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762 Validity Not Before: Dec 27 12:01:13 2025 GMT Not After : Dec 28 12:01:13 2025 GMT Subject: CN=3d05978d9a0ee10f40e42e58ceb5c781a833a652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:51:00:11:02:e3:4a:60:56:42:2c:2a:03: ca:a9:2f:14:b0:e4:14:c4:66:6c:ff:38:aa:16:e6: bc:cd:70:ae:63:45:b2:62:3c:fe:2b:35:65:8c:1a: 06:ef:dc:13:04:ce:12:e6:ef:77:3f:f5:98:e7:47: f3:e7:6b:f2:56:8d:af:b0:45:77:09:e8:7d:29:33: 39:4f:c0:33:04:58:32:fd:12:52:6a:bd:9f:a2:5f: a8:1f:89:e2:81:cd:e9:4b:8e:0f:e3:1e:bf:80:42: e2:60:8b:66:13:e3:2c:15:61:ef:ef:56:df:02:eb: 9c:d7:83:bc:9d:8d:ce:06:10:c7:33:4b:d0:b8:99: 78:c3:0b:38:4a:cb:8e:21:40:0e:be:f8:b4:ef:f2: a4:b9:70:01:a6:d7:13:88:23:53:1b:35:33:ef:87: 80:31:85:21:a8:4e:d6:47:e4:bb:c6:d2:fa:f6:14: bf:3b:7c:32:37:cb:1a:a6:80:03:a7:0b:22:5e:25: 56:9f:11:0e:2c:a7:50:11:8e:35:95:1a:7b:6b:77: e8:51:56:4e:1a:e2:1c:e3:a2:da:7c:2d:08:e4:c8: e9:ae:c6:bc:c3:1d:99:69:68:05:8c:8e:f1:b1:3d: 6c:4d:7b:cc:15:1c:29:13:e6:cc:a7:cb:a6:7f:8b: d0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:05:97:8D:9A:0E:E1:0F:40:E4:2E:58:CE:B5:C7:81:A8:33:A6:52 X509v3 Authority Key Identifier: keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6a:6a:43:00:5f:fd:9b:83:bf:f4:fb:af:06:56:b2:8d:a8: e6:70:f2:6b:74:6f:86:64:a7:71:a7:69:39:13:a5:dc:4c:c1: dc:0c:3d:02:27:30:05:13:a8:a1:7a:8d:b8:23:de:a1:ad:85: 58:ad:c8:3a:c4:e0:45:a5:89:71:eb:d9:14:27:5e:7c:1f:a8: 9d:05:11:5d:e4:93:b5:fe:0a:b1:82:92:24:8b:5b:8d:2a:75: 0e:04:6c:15:53:f9:e1:13:a8:65:d6:4c:96:34:2b:93:a0:ba: 67:9f:7e:d7:22:a1:51:6b:f1:aa:7a:6f:37:8e:4e:43:48:51: 76:3f:d6:61:be:82:f8:47:b1:3e:3f:31:d6:75:49:9b:a8:21: b3:90:7d:cb:bd:5d:89:b1:1d:e8:87:15:8e:7f:18:0c:6c:9c: 7f:0d:88:db:27:00:0e:23:df:3e:b2:57:c0:f8:5d:d4:e0:7b: 0c:ec:82:5a:c9:1f:e4:b9:c6:f0:f0:9e:5e:0c:27:75:e8:61: 23:02:52:4b:a3:1b:f8:eb:57:47:9c:69:38:2d:4e:a2:e5:86: 38:31:93:d2:87:7c:1d:13:05:f5:a8:60:b1:1c:38:fe:ea:f3: 73:53:eb:2e:5e:bb:7f:77:6f:a1:af:fa:27:da:ac:79:ba:cc: 26:67:90:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfrys4MIJVdhWxpMxFg2lVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZThlNWRmZWM2ODNhZTVmMWEwZWJlMGZiOTZmYTI1NmIz MDQ3NjIwHhcNMjUxMjI3MTIwMTEzWhcNMjUxMjI4MTIwMTEzWjAzMTEwLwYDVQQD EygzZDA1OTc4ZDlhMGVlMTBmNDBlNDJlNThjZWI1Yzc4MWE4MzNhNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY1RABEC40pgVkIsKgPKqS8UsOQU xGZs/ziqFua8zXCuY0WyYjz+KzVljBoG79wTBM4S5u93P/WY50fz52vyVo2vsEV3 Ceh9KTM5T8AzBFgy/RJSar2fol+oH4nigc3pS44P4x6/gELiYItmE+MsFWHv71bf Auuc14O8nY3OBhDHM0vQuJl4wws4SsuOIUAOvvi07/KkuXABptcTiCNTGzUz74eA MYUhqE7WR+S7xtL69hS/O3wyN8sapoADpwsiXiVWnxEOLKdQEY41lRp7a3foUVZO GuIc46LafC0I5Mjprsa8wx2ZaWgFjI7xsT1sTXvMFRwpE+bMp8umf4vQywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0Fl42aDuEPQOQuWM61x4GoM6ZSMB8GA1UdIwQY MBaAFK7o5d/saDrl8aDr4PuW+iVrMEdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgt NjNhMGJlNmE4ZTVmLzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgtNjNhMGJlNmE4ZTVm LzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2pqQwBf /ZuDv/T7rwZWso2o5nDya3RvhmSncadpOROl3EzB3Aw9AicwBROooXqNuCPeoa2F WK3IOsTgRaWJcevZFCdefB+onQURXeSTtf4KsYKSJItbjSp1DgRsFVP54ROoZdZM ljQrk6C6Z59+1yKhUWvxqnpvN45OQ0hRdj/WYb6C+EexPj8x1nVJm6ghs5B9y71d ibEd6IcVjn8YDGycfw2I2ycADiPfPrJXwPhd1OB7DOyCWskf5LnG8PCeXgwndehh IwJSS6Mb+OtXR5xpOC1OouWGODGT0od8HRMF9ahgsRw4/urzc1PrLl67f3dvoa/6 J9qsebrMJmeQAw== -----END CERTIFICATE-----Generated at Sat Dec 27 19:24:58 2025 by rpki-client