This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json) Hash identifier: 1vEGEVl3Uc1of+Pfd46way7s5YFk1JHTPoWG0yELYoU= Subject key identifier: C2:78:AA:01:1E:95:DD:A9:60:24:CD:C4:D8:34:F7:F1:AA:6A:E8:C5 Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b Certificate serial: 019B33B1CCAAC29734EA6E432C8A3C6E34DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft Manifest number: 0868 Signing time: Thu 18 Dec 2025 23:00:48 +0000 Manifest this update: Thu 18 Dec 2025 23:00:48 +0000 Manifest next update: Fri 19 Dec 2025 23:00:48 +0000 Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: Br8Cg6f8fYAOqAObOOZi/TkaBRdq3oVe0iJJqXLqgSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:cc:aa:c2:97:34:ea:6e:43:2c:8a:3c:6e:34:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b Validity Not Before: Dec 18 23:00:48 2025 GMT Not After : Dec 19 23:00:48 2025 GMT Subject: CN=c278aa011e95dda96024cdc4d834f7f1aa6ae8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:14:43:e8:54:87:37:5e:a2:c4:f6:ac:1a: 07:e0:55:d4:3c:a9:82:b3:b5:a2:29:59:5b:dd:92: a8:bc:9d:ca:04:6d:e5:52:42:03:c6:de:da:38:5a: 68:34:ad:41:3d:e3:d7:47:e4:1e:08:3b:4d:9e:29: a4:98:26:75:db:23:c2:c6:8a:06:92:39:8e:16:ba: cc:82:31:36:b3:d2:14:04:fb:bc:49:72:bc:82:3a: 52:fc:42:fb:64:65:98:c7:09:5c:04:93:d5:ae:24: 0f:89:53:2a:a9:d5:a7:2b:3c:f6:5e:c2:0b:b2:9c: ea:7a:c1:61:dc:c0:59:4c:ae:ce:c5:b9:30:f7:f9: 34:f9:f9:38:fd:1b:03:fe:fd:10:a7:9f:a4:8b:19: 80:6a:43:75:bd:8b:02:06:53:73:6d:20:da:b5:0e: 4b:65:61:54:93:73:ca:45:40:b0:51:ac:87:0a:f2: a5:d4:dd:c4:e0:e6:d1:f7:6d:7a:3b:c0:3e:70:ad: 99:57:4a:be:69:2b:ff:f7:4d:53:59:98:83:64:67: 8f:a0:2e:83:a3:92:c7:de:fd:8a:f1:2d:0d:7e:82: c5:03:e3:fc:c5:12:9a:24:af:0b:f0:60:a3:eb:ea: 9e:7e:62:b7:0f:b7:32:13:62:59:bc:3f:09:ae:5f: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:78:AA:01:1E:95:DD:A9:60:24:CD:C4:D8:34:F7:F1:AA:6A:E8:C5 X509v3 Authority Key Identifier: keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:7a:96:bf:9b:f2:ae:85:22:e9:83:64:95:66:e6:f0:4a:ed: d8:a8:87:5d:b2:53:47:d4:ff:73:7c:93:46:37:4a:85:0d:23: 6c:24:0e:68:f5:3d:d9:4c:2e:7b:3a:b2:95:2d:4b:45:ed:ea: 36:00:08:78:5a:bd:9a:51:8c:fe:ff:6a:31:cf:5f:43:af:47: 2b:af:c3:c0:0f:c8:f1:ef:e9:5c:cf:93:fa:72:02:9f:6f:18: e1:3f:2b:51:49:d1:75:d4:d1:80:6b:08:cd:ac:58:3a:09:e8: 2d:cd:ce:03:b2:4a:cf:c2:23:f2:13:d5:f2:86:66:38:6a:c7: 2b:08:22:a6:8c:6a:54:26:b0:4f:a4:25:93:eb:21:ff:42:84: 57:cd:78:8f:1a:cc:cf:84:6e:29:f1:11:21:67:96:c5:76:0a: 90:b7:fb:93:69:0f:02:d8:fb:8d:7b:92:f0:8b:4b:7b:f0:96: f9:97:2c:06:cb:0c:5f:bf:b0:d9:ee:1b:20:fb:79:6d:32:2e: cf:e6:39:a0:83:a5:4d:c0:37:c4:ab:34:3f:c1:79:58:d3:9b: 75:0a:9e:0f:48:ac:84:11:f9:3d:8e:62:01:0f:ad:47:24:91: c8:19:e3:f7:41:8d:98:3f:98:cf:38:e1:1f:9d:ef:d9:d9:08: 48:6b:b1:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszscyqwpc06m5DLIo8bjTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTFiYmIzZWJiOWQyZDE3MGMzN2M2MmExMGNjZGMyMjkx NTU0NGIwHhcNMjUxMjE4MjMwMDQ4WhcNMjUxMjE5MjMwMDQ4WjAzMTEwLwYDVQQD EyhjMjc4YWEwMTFlOTVkZGE5NjAyNGNkYzRkODM0ZjdmMWFhNmFlOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbkUQ+hUhzdeosT2rBoH4FXUPKmC s7WiKVlb3ZKovJ3KBG3lUkIDxt7aOFpoNK1BPePXR+QeCDtNnimkmCZ12yPCxooG kjmOFrrMgjE2s9IUBPu8SXK8gjpS/EL7ZGWYxwlcBJPVriQPiVMqqdWnKzz2XsIL spzqesFh3MBZTK7Oxbkw9/k0+fk4/RsD/v0Qp5+kixmAakN1vYsCBlNzbSDatQ5L ZWFUk3PKRUCwUayHCvKl1N3E4ObR9216O8A+cK2ZV0q+aSv/901TWZiDZGePoC6D o5LH3v2K8S0NfoLFA+P8xRKaJK8L8GCj6+qefmK3D7cyE2JZvD8Jrl9qxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ4qgEeld2pYCTNxNg09/GqaujFMB8GA1UdIwQY MBaAFEcRu7PrudLRcMN8YqEMzcIpFVRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTkt ZGExZTNjYjJkZWZhLzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTktZGExZTNjYjJkZWZh LzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXqWv5vy roUi6YNklWbm8Ert2KiHXbJTR9T/c3yTRjdKhQ0jbCQOaPU92UwuezqylS1LRe3q NgAIeFq9mlGM/v9qMc9fQ69HK6/DwA/I8e/pXM+T+nICn28Y4T8rUUnRddTRgGsI zaxYOgnoLc3OA7JKz8Ij8hPV8oZmOGrHKwgipoxqVCawT6Qlk+sh/0KEV814jxrM z4RuKfERIWeWxXYKkLf7k2kPAtj7jXuS8ItLe/CW+ZcsBssMX7+w2e4bIPt5bTIu z+Y5oIOlTcA3xKs0P8F5WNObdQqeD0ishBH5PY5iAQ+tRySRyBnj90GNmD+Yzzjh H53v2dkISGuxlw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:25:36 2025 by rpki-client