This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json) Hash identifier: Zf/ApMkA6hf13vs48PFPgdf/dlM/uzWATrlJe5wsX64= Subject key identifier: 41:F1:9F:4E:F6:25:0D:B6:83:59:37:84:27:E3:56:02:BC:B3:0E:42 Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d Certificate serial: 019B3BD94E4B4FAA93ECDAFA05640A25DB76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:00:55 +0000 Manifest this update: Sat 20 Dec 2025 13:00:55 +0000 Manifest next update: Sun 21 Dec 2025 13:00:55 +0000 Files and hashes: 1: 3NLIuHMmWgQs4wJxVy9Hy-aW-pg.roa (hash: E1YEQO+V+WEVpKPvVd6pcBugEFAnXKdDCtGzwwDY3UY=) 2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: 6hjQoMRnbt0+nG1iXDvQSgG9pJmVv/E/+c3c++BDTIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:4e:4b:4f:aa:93:ec:da:fa:05:64:0a:25:db:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d Validity Not Before: Dec 20 13:00:55 2025 GMT Not After : Dec 21 13:00:55 2025 GMT Subject: CN=41f19f4ef6250db68359378427e35602bcb30e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:0a:61:6b:1e:43:e1:b6:2f:47:00:c8:8e: 31:f7:36:81:1e:0e:6c:a7:b4:93:36:ab:2d:b2:81: 5d:3f:18:e9:05:ba:df:f9:ec:91:1c:03:3d:91:62: cd:77:cf:d6:d1:80:23:9d:98:a4:09:fd:67:78:1a: c9:28:3b:d1:fd:e7:a0:76:fa:53:b5:82:0d:2b:be: 50:a4:ee:f4:61:48:b3:1f:72:ca:66:06:c3:3c:6a: 84:e6:7f:05:c7:97:e5:8b:55:e8:90:13:fd:7b:51: e5:a3:c5:b5:e2:52:37:69:42:7d:4d:99:af:d1:11: 3e:86:86:89:02:af:08:c9:84:c7:52:27:e6:7d:3b: 12:7c:14:7d:a8:20:48:5c:7a:ee:96:19:fa:a9:b3: b4:89:00:e7:98:e2:d2:89:73:48:19:26:ff:73:f6: 8c:ce:65:3d:1a:d8:52:97:72:f0:6f:56:01:c0:92: 6c:dc:57:3f:46:af:6d:59:e7:b3:7d:a6:28:4e:76: dc:4a:14:d5:f0:db:24:60:0e:67:bc:5d:d2:5e:73: ac:22:e3:0a:38:1e:a2:8f:79:20:bc:11:08:2f:37: 51:35:ca:0e:d1:02:59:eb:a9:a2:05:34:fb:20:84: 6d:83:b8:22:73:d2:8d:e3:c8:2e:87:73:fa:c7:e2: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F1:9F:4E:F6:25:0D:B6:83:59:37:84:27:E3:56:02:BC:B3:0E:42 X509v3 Authority Key Identifier: keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d6:82:97:5b:52:d0:86:f4:16:f6:80:b5:c0:61:53:0c:37: 3d:ac:13:69:b7:89:36:9d:54:c0:e7:2a:9d:bf:e4:e8:25:fb: ee:e2:c9:17:3b:07:dc:8b:21:0e:dc:3c:bf:0c:82:a6:91:9c: e6:3b:6a:d8:e6:34:07:e4:34:84:78:0c:e8:bd:74:d5:bd:4e: c2:a6:f1:d0:d8:72:5b:de:82:ad:63:df:aa:66:37:d4:54:4d: 66:bb:8a:26:dd:7b:36:30:ba:85:8f:ef:ba:c4:22:06:e2:78: e3:ab:7f:a5:e5:8c:9b:9c:db:8f:94:a4:f5:e8:84:2a:a7:e5: e9:68:cd:49:60:dd:a3:20:26:dd:2a:81:3b:96:a0:2c:2f:9d: 7a:c5:59:51:93:d6:0b:f9:b0:09:5f:09:4d:47:e1:9f:5d:a3: dd:1a:43:13:3d:23:7a:01:c3:4a:7a:f7:1c:d4:21:63:3b:db: ee:25:a4:66:ab:f8:cd:fe:fb:eb:78:33:4c:d0:95:94:74:9c: b2:c3:bc:c8:f5:28:2a:ab:b3:89:1a:64:6d:6e:d9:1a:77:d2: 25:98:81:21:e5:c9:d0:00:97:b4:84:0e:79:ac:3f:aa:72:15: 8c:75:63:03:db:d4:e0:d3:8d:bc:0a:04:32:c7:4e:fd:84:69: 3c:7a:d9:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72U5LT6qT7Nr6BWQKJdt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NTBjNmMwMmE5YmRlNGUxNzE4N2YwNWIwZWNhOTUwNDgz YmY5MmQwHhcNMjUxMjIwMTMwMDU1WhcNMjUxMjIxMTMwMDU1WjAzMTEwLwYDVQQD Eyg0MWYxOWY0ZWY2MjUwZGI2ODM1OTM3ODQyN2UzNTYwMmJjYjMwZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsosKYWseQ+G2L0cAyI4x9zaBHg5s p7STNqstsoFdPxjpBbrf+eyRHAM9kWLNd8/W0YAjnZikCf1neBrJKDvR/eegdvpT tYINK75QpO70YUizH3LKZgbDPGqE5n8Fx5fli1XokBP9e1Hlo8W14lI3aUJ9TZmv 0RE+hoaJAq8IyYTHUifmfTsSfBR9qCBIXHrulhn6qbO0iQDnmOLSiXNIGSb/c/aM zmU9GthSl3Lwb1YBwJJs3Fc/Rq9tWeezfaYoTnbcShTV8NskYA5nvF3SXnOsIuMK OB6ij3kgvBEILzdRNcoO0QJZ66miBTT7IIRtg7gic9KN48guh3P6x+IyUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHxn072JQ22g1k3hCfjVgK8sw5CMB8GA1UdIwQY MBaAFEZQxsAqm95OFxh/BbDsqVBIO/ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUt NDljMjQyOTJlOWJkLzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUtNDljMjQyOTJlOWJk LzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNaCl1tS 0Ib0FvaAtcBhUww3PawTabeJNp1UwOcqnb/k6CX77uLJFzsH3IshDtw8vwyCppGc 5jtq2OY0B+Q0hHgM6L101b1Owqbx0NhyW96CrWPfqmY31FRNZruKJt17NjC6hY/v usQiBuJ446t/peWMm5zbj5Sk9eiEKqfl6WjNSWDdoyAm3SqBO5agLC+desVZUZPW C/mwCV8JTUfhn12j3RpDEz0jegHDSnr3HNQhYzvb7iWkZqv4zf7763gzTNCVlHSc ssO8yPUoKquziRpkbW7ZGnfSJZiBIeXJ0ACXtIQOeaw/qnIVjHVjA9vU4NONvAoE MsdO/YRpPHrZVg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:00 2025 by rpki-client