This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft File: RuUyMK589oaKpoO2JLWagRiI8Lo.mft (raw, json) Hash identifier: /pY5QWkLXDZhGMIVLa1bJ0bZJcowTpkwdvGBBieweQ4= Subject key identifier: F0:1B:BE:A4:97:26:B2:85:18:5B:18:FA:3B:C9:32:A9:7C:F0:2E:8B Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA Certificate issuer: /CN=46e53230ae7cf6868aa683b624b59a811888f0ba Certificate serial: 019B6A6907189C6ABDDD649153037E15E85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft Manifest number: 0420 Signing time: Mon 29 Dec 2025 14:00:26 +0000 Manifest this update: Mon 29 Dec 2025 14:00:26 +0000 Manifest next update: Tue 30 Dec 2025 14:00:26 +0000 Files and hashes: 1: 2yUVHb7bKQBM4p7hGq3iiZimEbc.roa (hash: a9OMpn99so26tcAAD5Nx55fldNYwi9TBv8dYukEeMlU=) 2: RuUyMK589oaKpoO2JLWagRiI8Lo.crl (hash: 5NFr30+CDIYfomw5jiQH5FqFtooxWgN+gktuUtKaYRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:07:18:9c:6a:bd:dd:64:91:53:03:7e:15:e8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba Validity Not Before: Dec 29 14:00:26 2025 GMT Not After : Dec 30 14:00:26 2025 GMT Subject: CN=f01bbea49726b285185b18fa3bc932a97cf02e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:59:47:74:f3:2b:60:97:9e:e7:0f:b3:63: 45:e1:82:ae:03:5a:c9:92:88:12:7b:6d:a6:83:67: 08:49:6a:3c:36:7b:8e:f0:e4:7c:8c:54:d0:fd:63: 34:a1:1b:4e:ea:db:33:ca:21:e2:5e:c9:0a:77:a1: 13:98:81:53:62:0f:13:e2:c7:69:32:c1:53:53:a7: 6e:1e:a8:60:90:2b:37:e4:49:d1:cb:81:45:4d:f3: 4c:e3:38:c3:2f:8a:0d:3e:a1:99:5c:00:95:4e:69: d5:93:59:87:ae:02:17:ab:ae:39:92:ee:46:c6:42: 80:38:34:8b:75:b1:e7:a8:9a:30:91:d1:06:7c:f3: 4c:9b:ac:3a:e1:65:15:90:88:9c:d2:2b:fd:73:43: f6:6f:69:ad:e0:a9:83:b9:3b:3e:22:73:13:95:32: 8a:32:d2:d4:7b:8d:50:83:a3:16:80:c4:55:91:87: fd:2e:12:f1:20:1e:d4:e2:e4:d0:f8:6f:e6:f2:fe: 70:19:72:c5:8b:a0:66:fc:7f:ca:09:c4:3a:10:1f: 25:ea:2c:62:15:5d:1f:80:7c:14:9d:aa:ed:5d:3f: 2a:09:32:f5:f5:82:24:91:91:1b:16:d6:d0:04:21: 08:5b:72:6c:1d:2a:72:f2:27:b2:cf:eb:de:c3:3e: b7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1B:BE:A4:97:26:B2:85:18:5B:18:FA:3B:C9:32:A9:7C:F0:2E:8B X509v3 Authority Key Identifier: keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:2c:c1:00:94:b3:45:ae:45:f8:57:44:63:82:84:0f:49:b7: fe:0c:ce:82:2d:93:65:ec:51:5d:00:9e:48:d6:23:00:55:0c: f6:15:26:cc:f3:43:04:70:98:91:5d:c7:f9:fa:98:37:17:b3: e6:1c:01:17:e4:ca:b0:6c:95:b9:9c:84:5d:21:55:de:dd:47: d3:c4:c3:5b:70:1f:e8:eb:25:52:67:cb:34:3d:dc:79:0f:ec: 86:6a:3d:70:c6:d9:02:7d:dd:da:8f:44:49:2d:11:d5:25:db: 01:43:4d:d8:f0:4c:ff:11:90:b6:9b:a3:e7:bf:18:03:e9:cc: f6:7c:48:0e:05:94:d6:3d:0d:c4:59:e8:83:7c:80:1f:17:7e: d6:65:b3:50:00:41:19:20:66:f9:63:cb:55:7e:cb:f7:bc:25: 24:34:0c:3a:bd:1d:1b:ac:c6:ef:dc:4b:10:23:cb:82:bc:76: 20:2b:11:96:34:26:6b:73:75:2c:6c:10:3f:ab:fe:77:4c:37: 66:d7:c4:42:4d:89:64:1d:e0:71:99:30:d3:1d:d1:c5:7d:23: a0:9c:1f:06:9d:96:0a:fe:20:20:b2:c6:1b:d1:8f:6d:38:98: 9d:3b:bd:7b:f6:78:a3:04:1e:68:6f:99:f0:1f:7f:08:66:8e: 98:68:30:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaQcYnGq93WSRUwN+FehdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZTUzMjMwYWU3Y2Y2ODY4YWE2ODNiNjI0YjU5YTgxMTg4 OGYwYmEwHhcNMjUxMjI5MTQwMDI2WhcNMjUxMjMwMTQwMDI2WjAzMTEwLwYDVQQD EyhmMDFiYmVhNDk3MjZiMjg1MTg1YjE4ZmEzYmM5MzJhOTdjZjAyZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqStZR3TzK2CXnucPs2NF4YKuA1rJ kogSe22mg2cISWo8NnuO8OR8jFTQ/WM0oRtO6tszyiHiXskKd6ETmIFTYg8T4sdp MsFTU6duHqhgkCs35EnRy4FFTfNM4zjDL4oNPqGZXACVTmnVk1mHrgIXq645ku5G xkKAODSLdbHnqJowkdEGfPNMm6w64WUVkIic0iv9c0P2b2mt4KmDuTs+InMTlTKK MtLUe41Qg6MWgMRVkYf9LhLxIB7U4uTQ+G/m8v5wGXLFi6Bm/H/KCcQ6EB8l6ixi FV0fgHwUnartXT8qCTL19YIkkZEbFtbQBCEIW3JsHSpy8ieyz+vewz63FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAbvqSXJrKFGFsY+jvJMql88C6LMB8GA1UdIwQY MBaAFEblMjCufPaGiqaDtiS1moEYiPC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEt MjMyMjQwM2VjNzg3LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9jMzNhMmItMzlhMC00OTIwLWE0NDEtMjMyMjQwM2VjNzg3 LzEvUnVVeU1LNTg5b2FLcG9PMkpMV2FnUmlJOExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuSzBAJSz Ra5F+FdEY4KED0m3/gzOgi2TZexRXQCeSNYjAFUM9hUmzPNDBHCYkV3H+fqYNxez 5hwBF+TKsGyVuZyEXSFV3t1H08TDW3Af6OslUmfLND3ceQ/shmo9cMbZAn3d2o9E SS0R1SXbAUNN2PBM/xGQtpuj578YA+nM9nxIDgWU1j0NxFnog3yAHxd+1mWzUABB GSBm+WPLVX7L97wlJDQMOr0dG6zG79xLECPLgrx2ICsRljQma3N1LGwQP6v+d0w3 ZtfEQk2JZB3gcZkw0x3RxX0joJwfBp2WCv4gILLGG9GPbTiYnTu9e/Z4owQeaG+Z 8B9/CGaOmGgwAw== -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:35 2025 by rpki-client