This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft File: RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json) Hash identifier: cxHwJByOkjLrg/X5xqkjQSiLSaJabn6mZvUtzjJZX6s= Subject key identifier: 8F:9F:BF:EC:05:C2:0F:25:AF:F4:01:DA:EB:CA:5A:B2:7D:08:72:D0 Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48 Certificate issuer: /CN=460c571111aafc0d51e5fde08230bf78b89e4a48 Certificate serial: 019B5373AE365E8AF3AE7EBA7F7C43E7BE3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft Manifest number: 1790 Signing time: Thu 25 Dec 2025 03:00:48 +0000 Manifest this update: Thu 25 Dec 2025 03:00:48 +0000 Manifest next update: Fri 26 Dec 2025 03:00:48 +0000 Files and hashes: 1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: 4Dvcv6fIy54l/jhHmaqSMPSkszRVb7ZV20h5oqYJDik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:73:ae:36:5e:8a:f3:ae:7e:ba:7f:7c:43:e7:be:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48 Validity Not Before: Dec 25 03:00:48 2025 GMT Not After : Dec 26 03:00:48 2025 GMT Subject: CN=8f9fbfec05c20f25aff401daebca5ab27d0872d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3c:82:c2:5f:0d:cd:5b:43:3c:4a:15:55:a8: 23:1c:f0:8e:38:64:8d:bc:8e:3e:66:1e:af:23:29: 5c:d0:47:ee:3f:84:9c:32:08:9c:75:a5:25:b7:93: 80:1d:f3:11:1d:e9:14:3f:18:0d:8f:b5:fb:c1:3a: 0d:89:d8:c2:49:2c:13:f8:1f:3e:72:47:29:06:e5: 18:d7:bc:1c:ab:14:36:70:79:57:58:8c:da:65:64: a7:2e:6d:0e:74:f3:36:a5:b7:e9:78:bd:23:98:c0: 8f:cd:d2:67:97:9f:b6:dc:89:9c:36:9c:06:1c:b7: 8f:8e:0b:4c:5e:ae:b1:91:1c:4a:65:6a:76:c2:b7: 50:4a:41:34:59:74:e2:4f:1e:87:d8:3d:ca:a3:48: 9b:36:29:d2:34:68:eb:46:10:f7:b2:7a:48:fa:ec: f2:ed:c6:3d:61:99:67:01:76:d7:e4:fc:cd:fa:d1: e0:5f:dd:81:0a:c4:02:3c:3e:8f:2b:e4:63:39:32: 05:c4:15:f8:a7:89:06:6e:9f:37:ce:e2:30:45:0e: 0f:23:27:4f:e1:08:62:2f:78:f4:06:81:0c:a9:ff: 39:61:bc:38:dd:74:65:73:a1:f6:2d:95:8d:f5:a5: 40:fe:62:f2:72:7e:c6:56:b3:46:7c:0c:62:80:9a: c7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9F:BF:EC:05:C2:0F:25:AF:F4:01:DA:EB:CA:5A:B2:7D:08:72:D0 X509v3 Authority Key Identifier: keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:4c:73:c0:05:73:82:39:7d:b8:8d:07:83:4d:fd:05:1f:76: 4a:c0:99:20:f5:62:a6:49:97:b9:9e:bb:01:59:ff:df:66:77: a0:40:8e:44:ae:0e:63:8b:41:bc:33:cf:d4:3a:73:a7:26:b4: a8:4d:80:67:0d:99:6c:c4:33:a8:e5:05:fd:6a:df:32:f9:16: e5:fc:96:a5:43:c7:8e:8c:1b:13:91:30:ea:80:14:21:21:b3: 47:15:05:6c:a5:f4:f2:27:d9:7d:60:9a:d1:ec:29:b7:8d:7a: a8:c1:65:b5:8e:9f:e4:0f:15:af:23:a6:5a:f8:3f:0c:ac:c9: 6b:75:57:f6:e2:e9:b5:09:cd:64:d6:bf:d6:33:fa:ba:48:45: fc:ae:f3:3c:e5:b6:98:9c:03:15:ea:a9:df:14:ab:d5:1a:9b: 16:56:36:b4:78:f1:62:5a:26:d4:9b:92:e6:dc:65:42:96:76: d7:34:a6:52:95:9b:a2:93:70:5d:d1:e9:28:02:7e:6a:78:52: 6f:e1:8b:67:8f:d5:bb:e4:4a:97:e0:3b:da:46:0c:81:51:08: 21:7d:0a:aa:03:2c:bf:d2:0a:b9:40:a8:60:bb:a7:5c:97:0a: 39:5b:ca:1f:74:ab:97:ca:fb:06:34:60:91:c9:da:fa:04:24: 0d:49:c9:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTc642Xorzrn66f3xD574+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGM1NzExMTFhYWZjMGQ1MWU1ZmRlMDgyMzBiZjc4Yjg5 ZTRhNDgwHhcNMjUxMjI1MDMwMDQ4WhcNMjUxMjI2MDMwMDQ4WjAzMTEwLwYDVQQD Eyg4ZjlmYmZlYzA1YzIwZjI1YWZmNDAxZGFlYmNhNWFiMjdkMDg3MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TyCwl8NzVtDPEoVVagjHPCOOGSN vI4+Zh6vIylc0EfuP4ScMgicdaUlt5OAHfMRHekUPxgNj7X7wToNidjCSSwT+B8+ ckcpBuUY17wcqxQ2cHlXWIzaZWSnLm0OdPM2pbfpeL0jmMCPzdJnl5+23ImcNpwG HLePjgtMXq6xkRxKZWp2wrdQSkE0WXTiTx6H2D3Ko0ibNinSNGjrRhD3snpI+uzy 7cY9YZlnAXbX5PzN+tHgX92BCsQCPD6PK+RjOTIFxBX4p4kGbp83zuIwRQ4PIydP 4QhiL3j0BoEMqf85Ybw43XRlc6H2LZWN9aVA/mLycn7GVrNGfAxigJrHBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+fv+wFwg8lr/QB2uvKWrJ9CHLQMB8GA1UdIwQY MBaAFEYMVxERqvwNUeX94IIwv3i4nkpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQt YmQyZmZmNWI4ODQ5LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQtYmQyZmZmNWI4ODQ5 LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVExzwAVz gjl9uI0Hg039BR92SsCZIPVipkmXuZ67AVn/32Z3oECORK4OY4tBvDPP1Dpzpya0 qE2AZw2ZbMQzqOUF/WrfMvkW5fyWpUPHjowbE5Ew6oAUISGzRxUFbKX08ifZfWCa 0ewpt416qMFltY6f5A8VryOmWvg/DKzJa3VX9uLptQnNZNa/1jP6ukhF/K7zPOW2 mJwDFeqp3xSr1RqbFlY2tHjxYlom1JuS5txlQpZ21zSmUpWbopNwXdHpKAJ+anhS b+GLZ4/Vu+RKl+A72kYMgVEIIX0KqgMsv9IKuUCoYLunXJcKOVvKH3Srl8r7BjRg kcna+gQkDUnJOw== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:07 2025 by rpki-client