This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft File: RuUyMK589oaKpoO2JLWagRiI8Lo.mft (raw, json) Hash identifier: WK0s8GRZ0Rma7zrK+7EjKhm357+0Dnnzbtc+HFQt+fo= Subject key identifier: 6A:85:7F:5B:4D:F9:DB:4F:97:27:29:11:CA:8E:72:DB:54:92:A2:B4 Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA Certificate issuer: /CN=46e53230ae7cf6868aa683b624b59a811888f0ba Certificate serial: 019B4F604AB58EC1F40D652D24336C091FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft Manifest number: 0412 Signing time: Wed 24 Dec 2025 08:01:09 +0000 Manifest this update: Wed 24 Dec 2025 08:01:09 +0000 Manifest next update: Thu 25 Dec 2025 08:01:09 +0000 Files and hashes: 1: 2yUVHb7bKQBM4p7hGq3iiZimEbc.roa (hash: a9OMpn99so26tcAAD5Nx55fldNYwi9TBv8dYukEeMlU=) 2: RuUyMK589oaKpoO2JLWagRiI8Lo.crl (hash: 9EPx2gGQYV/Icvvc6804l7ZsoAW7Dcq4T2yNkV2ob30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:4a:b5:8e:c1:f4:0d:65:2d:24:33:6c:09:1f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba Validity Not Before: Dec 24 08:01:09 2025 GMT Not After : Dec 25 08:01:09 2025 GMT Subject: CN=6a857f5b4df9db4f97272911ca8e72db5492a2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:8b:f8:4e:4e:53:53:53:f8:0e:d3:35:ec: 95:67:06:fb:08:b0:55:b7:15:00:bc:53:70:1a:91: f8:5a:70:f4:69:42:f0:82:0f:02:ea:25:1e:c5:ae: 3b:b2:17:d1:c1:ed:64:c3:bb:d1:a9:15:87:8f:1f: 5d:34:bf:f3:43:ab:4a:bc:14:17:8f:b1:13:2c:d7: d1:44:45:9a:59:b5:03:3d:3b:8a:1b:ce:eb:3f:1e: 05:c5:52:fe:14:39:ae:b4:4b:f7:13:1a:a7:f1:93: 05:e7:69:20:2b:6f:16:59:ea:8b:18:71:73:29:21: 6c:ff:84:c5:f8:32:5e:9e:18:e6:61:cc:e6:b8:d9: 5f:94:3e:bd:86:65:cb:50:c6:6c:6a:6a:e2:f8:83: 17:ef:fe:92:5c:97:93:de:f8:26:4b:fe:f2:72:50: 04:d7:4c:24:f6:56:4e:c1:10:ed:89:6d:07:6a:ef: 16:20:4b:c9:2f:b4:46:e9:49:8e:05:98:a6:c3:47: 69:69:e9:15:e9:00:5a:5b:b9:9a:91:ae:66:01:ea: 99:89:4e:21:0a:84:69:43:33:a8:eb:71:27:43:33: de:e7:7b:f3:1a:f5:b5:33:f0:04:79:3b:1c:c2:ac: dc:76:32:8c:7e:89:a3:b3:3c:f4:e0:12:19:66:e2: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:85:7F:5B:4D:F9:DB:4F:97:27:29:11:CA:8E:72:DB:54:92:A2:B4 X509v3 Authority Key Identifier: keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c7:b1:78:8e:c9:cf:41:b5:fb:af:51:f2:d6:31:85:35:59: 6b:eb:62:03:a2:91:b1:33:cc:5c:be:91:f5:a3:6a:09:24:1d: 79:be:58:21:58:3b:21:cc:73:a0:ff:4f:9b:b1:db:b9:bf:71: b7:5b:c1:ed:39:e9:f4:f4:5d:3e:0b:da:58:41:c6:9f:14:74: 9e:ef:7f:b8:4d:23:ac:44:5f:39:c8:47:1e:57:2f:ef:12:d1: a5:ad:3f:ad:6a:56:9b:ad:5c:d8:3a:a8:04:b5:7a:01:05:9b: cf:74:1f:21:61:24:53:d6:ff:c3:c1:48:c9:07:8f:3a:6f:63: 08:cc:ba:3a:b7:0c:12:db:a0:68:19:44:01:2e:1f:ba:c5:67: 38:bb:27:bb:a7:1f:9c:8e:23:fc:bc:69:ab:cf:80:67:9b:9a: 26:be:90:70:26:40:77:79:07:dc:b0:70:95:f1:cf:63:9f:b6: cf:72:ab:e9:ec:17:9a:32:7f:97:ce:50:08:5f:e1:99:29:bd: 62:24:69:e4:22:f4:fb:5b:5c:9a:5f:12:46:94:2e:d3:0b:ec: 3b:25:ef:ca:6e:e8:a5:c1:2a:70:a2:0b:15:69:a8:7e:4f:13: b2:8c:46:96:a0:15:c4:49:e6:4a:76:fb:77:10:10:26:1b:f6: 33:3d:ff:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYEq1jsH0DWUtJDNsCR/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZTUzMjMwYWU3Y2Y2ODY4YWE2ODNiNjI0YjU5YTgxMTg4 OGYwYmEwHhcNMjUxMjI0MDgwMTA5WhcNMjUxMjI1MDgwMTA5WjAzMTEwLwYDVQQD Eyg2YTg1N2Y1YjRkZjlkYjRmOTcyNzI5MTFjYThlNzJkYjU0OTJhMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheOL+E5OU1NT+A7TNeyVZwb7CLBV txUAvFNwGpH4WnD0aULwgg8C6iUexa47shfRwe1kw7vRqRWHjx9dNL/zQ6tKvBQX j7ETLNfRREWaWbUDPTuKG87rPx4FxVL+FDmutEv3Exqn8ZMF52kgK28WWeqLGHFz KSFs/4TF+DJenhjmYczmuNlflD69hmXLUMZsamri+IMX7/6SXJeT3vgmS/7yclAE 10wk9lZOwRDtiW0Hau8WIEvJL7RG6UmOBZimw0dpaekV6QBaW7maka5mAeqZiU4h CoRpQzOo63EnQzPe53vzGvW1M/AEeTscwqzcdjKMfomjszz04BIZZuInrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqFf1tN+dtPlycpEcqOcttUkqK0MB8GA1UdIwQY MBaAFEblMjCufPaGiqaDtiS1moEYiPC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEt MjMyMjQwM2VjNzg3LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEtMjMyMjQwM2VjNzg3 LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsexeI7J z0G1+69R8tYxhTVZa+tiA6KRsTPMXL6R9aNqCSQdeb5YIVg7IcxzoP9Pm7Hbub9x t1vB7Tnp9PRdPgvaWEHGnxR0nu9/uE0jrERfOchHHlcv7xLRpa0/rWpWm61c2Dqo BLV6AQWbz3QfIWEkU9b/w8FIyQePOm9jCMy6OrcMEtugaBlEAS4fusVnOLsnu6cf nI4j/Lxpq8+AZ5uaJr6QcCZAd3kH3LBwlfHPY5+2z3Kr6ewXmjJ/l85QCF/hmSm9 YiRp5CL0+1tcml8SRpQu0wvsOyXvym7opcEqcKILFWmofk8TsoxGlqAVxEnmSnb7 dxAQJhv2Mz3/Kg== -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:50 2025 by rpki-client