This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json) Hash identifier: BMiUyU6fxNYCUDZaSxURxuPWt+p73o4105DiZ92WAt0= Subject key identifier: 1E:D6:5E:FC:43:9F:16:3F:A3:9C:BA:71:07:35:68:FD:BE:9B:75:25 Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Certificate serial: 019B428000A6F7A286E7EF8BFB7AB329958D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 20:00:43 +0000 Manifest this update: Sun 21 Dec 2025 20:00:43 +0000 Manifest next update: Mon 22 Dec 2025 20:00:43 +0000 Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: civizjFMBz3tyHS3s8O57b7YNOoDIl51uexo/okhCcY=) 2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:00:a6:f7:a2:86:e7:ef:8b:fb:7a:b3:29:95:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Validity Not Before: Dec 21 20:00:43 2025 GMT Not After : Dec 22 20:00:43 2025 GMT Subject: CN=1ed65efc439f163fa39cba71073568fdbe9b7525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a1:5e:ae:59:9c:8d:7b:fc:67:f1:4c:4f:f6: fb:3a:82:df:7b:7f:06:90:9e:28:46:e4:21:a9:ed: 38:8e:49:4e:58:63:ff:f1:e9:c3:91:fd:b6:d5:ae: a1:e5:81:a6:ce:d0:40:4a:4c:dd:56:22:59:1b:26: b4:c5:69:9f:f4:21:87:af:94:38:03:b3:f2:2c:72: 68:fb:fc:a1:fc:ee:e8:e5:15:9c:58:0b:52:ac:9e: 63:b0:4c:b6:f4:52:43:6e:ce:af:b7:09:51:ee:f5: 14:44:23:75:82:1d:27:d2:22:4f:f3:3f:f1:05:56: 42:f0:ff:9b:1e:e6:57:dc:f0:da:7b:14:1c:05:92: 7b:dd:78:ff:90:54:77:b5:92:dd:c2:76:db:ee:a6: 5b:c3:9e:e1:c9:85:b2:ee:bc:46:0d:44:a3:1b:30: d5:2a:52:bb:d0:1c:ee:4e:db:94:0c:90:8e:01:d3: da:26:5e:3b:f9:b3:a7:f9:f9:20:e4:4b:4c:e7:ff: c2:c0:2e:4d:46:7d:28:c0:78:fb:90:c9:b8:68:b1: 46:1b:00:54:bd:f2:d1:f6:db:f0:0e:ed:8f:be:ac: b3:4c:eb:0b:68:99:fb:ef:ea:af:62:8c:f5:b2:07: 3b:61:37:cb:36:a8:0b:c3:9e:ea:d5:40:b8:5e:e1: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D6:5E:FC:43:9F:16:3F:A3:9C:BA:71:07:35:68:FD:BE:9B:75:25 X509v3 Authority Key Identifier: keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c1:f9:f0:37:02:27:f9:e3:a3:04:49:0a:e3:e8:bd:a8:d2: 8b:47:8b:09:1c:14:8f:c5:b3:28:03:a8:12:e6:4a:04:97:3c: f4:a0:58:77:eb:36:fe:7a:a5:52:5b:29:38:51:7b:2b:7a:bf: 66:e6:25:f1:47:cc:c0:00:67:e6:4d:49:b5:ab:35:28:33:43: 36:79:7b:b6:df:ba:1a:7c:92:b4:b9:e6:1f:2d:89:aa:7d:9b: e0:2c:c7:81:9c:db:a9:08:b1:bb:cb:e0:9f:d8:48:f4:44:70: 59:71:f7:10:3d:b8:d5:b7:17:bd:34:51:95:21:dc:02:e5:97: fe:9b:b2:38:38:4e:cd:3b:24:84:50:9f:b3:55:f3:ed:2b:fa: d0:a5:c9:5b:5c:70:ed:b4:00:e0:9f:a0:00:b4:9f:38:25:4a: 15:a8:05:d8:8f:2f:05:fb:7b:67:de:6f:c3:65:6c:2f:1b:a4: d1:64:04:a1:bc:bc:ae:66:28:05:8a:98:37:ba:e0:bd:0a:59: d1:db:8e:75:af:39:b4:02:8e:82:c7:19:6b:c3:2a:4c:93:88: 78:2e:df:ec:19:ae:60:d7:28:c6:a6:12:f0:67:e8:96:6d:a0: b8:33:5c:1c:17:14:47:29:57:44:e2:de:3c:ef:71:c6:93:d6: 5d:2e:2a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgACm96KG5++L+3qzKZWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTBjNjliZWQwMzQ2NWJmZjhhZjlkNzFhNmFlOWIxODNi N2MyNGQwHhcNMjUxMjIxMjAwMDQzWhcNMjUxMjIyMjAwMDQzWjAzMTEwLwYDVQQD EygxZWQ2NWVmYzQzOWYxNjNmYTM5Y2JhNzEwNzM1NjhmZGJlOWI3NTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KFerlmcjXv8Z/FMT/b7OoLfe38G kJ4oRuQhqe04jklOWGP/8enDkf221a6h5YGmztBASkzdViJZGya0xWmf9CGHr5Q4 A7PyLHJo+/yh/O7o5RWcWAtSrJ5jsEy29FJDbs6vtwlR7vUURCN1gh0n0iJP8z/x BVZC8P+bHuZX3PDaexQcBZJ73Xj/kFR3tZLdwnbb7qZbw57hyYWy7rxGDUSjGzDV KlK70BzuTtuUDJCOAdPaJl47+bOn+fkg5EtM5//CwC5NRn0owHj7kMm4aLFGGwBU vfLR9tvwDu2PvqyzTOsLaJn77+qvYoz1sgc7YTfLNqgLw57q1UC4XuHS9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7WXvxDnxY/o5y6cQc1aP2+m3UlMB8GA1UdIwQY MBaAFEUQxpvtA0Zb/4r51xpq6bGDt8JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2Ut ZTFmZDBiMWYwZWZkLzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2UtZTFmZDBiMWYwZWZk LzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMH58DcC J/njowRJCuPovajSi0eLCRwUj8WzKAOoEuZKBJc89KBYd+s2/nqlUlspOFF7K3q/ ZuYl8UfMwABn5k1Jtas1KDNDNnl7tt+6GnyStLnmHy2Jqn2b4CzHgZzbqQixu8vg n9hI9ERwWXH3ED241bcXvTRRlSHcAuWX/puyODhOzTskhFCfs1Xz7Sv60KXJW1xw 7bQA4J+gALSfOCVKFagF2I8vBft7Z95vw2VsLxuk0WQEoby8rmYoBYqYN7rgvQpZ 0duOda85tAKOgscZa8MqTJOIeC7f7BmuYNcoxqYS8Gfolm2guDNcHBcURylXROLe PO9xxpPWXS4q1Q== -----END CERTIFICATE-----Generated at Mon Dec 22 01:42:15 2025 by rpki-client