This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft File: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json) Hash identifier: Qe5SuEXJNQCKxiLviPswDQGxIPF/1oE/c7kClgqOeRI= Subject key identifier: 2A:63:9B:33:92:85:D8:7A:08:E5:AC:C8:F0:B3:08:19:1A:BA:4D:BF Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3 Certificate issuer: /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3 Certificate serial: 019B3F7EE0C56C520160A981A154CD3B9609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft Manifest number: 120D Signing time: Sun 21 Dec 2025 06:00:38 +0000 Manifest this update: Sun 21 Dec 2025 06:00:38 +0000 Manifest next update: Mon 22 Dec 2025 06:00:38 +0000 Files and hashes: 1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: 6CT+j71UlGMx9iACtLAqJRjqu4O5XhuLJKZBJ6cVoTE=) 2: o6lJ-qfhS9C09IpxbbRvCOiFoHM.roa (hash: s9YF0YMackzUIop5+kUK7Z2zh1o4IPsYyQyvrXKhSCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:e0:c5:6c:52:01:60:a9:81:a1:54:cd:3b:96:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3 Validity Not Before: Dec 21 06:00:38 2025 GMT Not After : Dec 22 06:00:38 2025 GMT Subject: CN=2a639b339285d87a08e5acc8f0b308191aba4dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:d5:06:12:4d:ec:90:7a:2d:48:d8:71:c6: 53:1c:20:65:6a:89:ff:8f:38:65:03:6b:89:ec:f0: 34:5d:be:d8:4c:ca:ec:9c:32:f3:6f:70:e0:82:60: eb:18:1f:ea:b5:a2:68:f1:10:a5:05:e1:e2:c1:77: b0:33:5a:80:29:e3:c1:29:c7:a8:da:ec:60:26:0f: 4c:0b:b1:5e:72:df:d8:1f:42:3e:6c:05:37:67:ad: f4:f8:cc:ea:07:1a:f8:90:e1:53:09:e4:94:fc:4a: ea:c8:be:b2:a0:1e:79:10:c0:65:6b:01:e9:39:77: 48:a8:fa:c3:e6:7c:70:68:d4:68:5a:8c:fa:a4:70: 58:f3:e6:32:b6:95:ac:16:db:33:ad:c1:7e:b1:02: 1b:a7:ce:69:a9:79:41:49:63:04:dc:90:a0:33:53: 8c:ea:e2:90:02:b0:0c:51:a8:fa:47:6c:46:a5:ea: 97:de:a3:70:fc:7b:b7:52:7c:7c:c6:82:f1:bc:65: b0:5d:5c:a2:a3:a0:44:58:aa:59:e2:01:7c:ed:90: 39:28:69:98:f4:a8:af:44:56:1e:9f:6e:d2:51:83: c6:fa:50:db:ab:be:38:38:52:2a:d6:3d:42:8e:0b: 09:5a:9c:2c:c9:4c:df:f4:a0:6d:1b:67:ea:b2:38: da:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:63:9B:33:92:85:D8:7A:08:E5:AC:C8:F0:B3:08:19:1A:BA:4D:BF X509v3 Authority Key Identifier: keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:80:51:c1:33:84:ed:d7:a2:17:74:6a:06:d3:33:72:66:47: 5e:63:84:3f:4a:e7:b0:ec:4d:2e:bd:4e:b8:42:6d:d1:21:4e: 57:a2:2e:2c:e2:17:94:26:21:55:fd:81:7d:96:eb:32:e2:94: 13:69:e5:6a:1c:2f:b8:90:1b:22:16:47:00:4a:e6:4e:3a:fb: b7:76:f8:4a:63:58:87:d1:02:37:b3:3a:9b:65:b7:c8:d1:78: bc:6d:a5:ef:8f:5a:56:40:1e:79:50:c9:f3:25:f5:10:b5:0f: e2:08:8a:8a:16:e5:b7:9f:dd:21:0b:16:86:ae:c5:89:c2:38: bd:b6:1e:d0:a9:f8:40:51:e6:fe:92:4e:af:a5:6c:d8:1d:b5: e9:1f:fd:4c:0e:cd:ca:30:a4:9e:d0:f6:ef:56:5f:7a:3b:8d: 59:b8:45:9e:e5:d6:09:10:60:59:25:b8:4d:57:89:0c:d8:7f: 3c:46:f5:57:ce:ff:d0:00:72:e7:a6:0e:76:82:b5:85:9e:ab: 63:7f:94:b1:86:69:fb:b6:a5:cb:93:0e:2a:92:a1:c6:ec:f5: 6b:4b:0a:78:0a:96:8c:74:c1:e5:45:ce:b5:a0:7e:9c:69:1a: 49:97:ac:1c:82:1a:c1:13:55:1c:76:c7:2d:34:e7:a9:61:93: 78:40:cd:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fuDFbFIBYKmBoVTNO5YJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1Y2Y5ZGMwYzdiN2ZjNGEzMzZlNGVlZTU3YjFlYzE5NDhj OGRkZjMwHhcNMjUxMjIxMDYwMDM4WhcNMjUxMjIyMDYwMDM4WjAzMTEwLwYDVQQD EygyYTYzOWIzMzkyODVkODdhMDhlNWFjYzhmMGIzMDgxOTFhYmE0ZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QvVBhJN7JB6LUjYccZTHCBlaon/ jzhlA2uJ7PA0Xb7YTMrsnDLzb3DggmDrGB/qtaJo8RClBeHiwXewM1qAKePBKceo 2uxgJg9MC7Fect/YH0I+bAU3Z630+MzqBxr4kOFTCeSU/ErqyL6yoB55EMBlawHp OXdIqPrD5nxwaNRoWoz6pHBY8+YytpWsFtszrcF+sQIbp85pqXlBSWME3JCgM1OM 6uKQArAMUaj6R2xGpeqX3qNw/Hu3Unx8xoLxvGWwXVyio6BEWKpZ4gF87ZA5KGmY 9KivRFYen27SUYPG+lDbq744OFIq1j1CjgsJWpwsyUzf9KBtG2fqsjjadQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpjmzOShdh6COWsyPCzCBkauk2/MB8GA1UdIwQY MBaAFEXPncDHt/xKM25O7lex7BlIyN3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84OTIwZmMtYmJhZS00MTMyLWI3NTIt ZWU3MmYyYjNhNDczLzEvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy84OTIwZmMtYmJhZS00MTMyLWI3NTItZWU3MmYyYjNhNDcz LzEvUmMtZHdNZTNfRW96Yms3dVY3SHNHVWpJM2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4BRwTOE 7deiF3RqBtMzcmZHXmOEP0rnsOxNLr1OuEJt0SFOV6IuLOIXlCYhVf2BfZbrMuKU E2nlahwvuJAbIhZHAErmTjr7t3b4SmNYh9ECN7M6m2W3yNF4vG2l749aVkAeeVDJ 8yX1ELUP4giKihblt5/dIQsWhq7FicI4vbYe0Kn4QFHm/pJOr6Vs2B216R/9TA7N yjCkntD271ZfejuNWbhFnuXWCRBgWSW4TVeJDNh/PEb1V87/0ABy56YOdoK1hZ6r Y3+UsYZp+7aly5MOKpKhxuz1a0sKeAqWjHTB5UXOtaB+nGkaSZesHIIawRNVHHbH LTTnqWGTeEDNZw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:48:05 2025 by rpki-client