This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json) Hash identifier: KAuMfI7HSM9l71o66PpVAciimU0yNy1mYEE6JF4rJTg= Subject key identifier: 21:10:E3:2B:99:B1:CC:94:98:A0:4F:26:BF:EC:96:D2:8E:67:F7:7D Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc Certificate serial: 019B3FB67DB4295BE3BD3D8F63A279E0E13B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft Manifest number: 1187 Signing time: Sun 21 Dec 2025 07:01:22 +0000 Manifest this update: Sun 21 Dec 2025 07:01:22 +0000 Manifest next update: Mon 22 Dec 2025 07:01:22 +0000 Files and hashes: 1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=) 2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=) 3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: 4E+6cajXRccBPYWFyRl76rhjX5VC3rC7RBi9lLPk6p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:7d:b4:29:5b:e3:bd:3d:8f:63:a2:79:e0:e1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc Validity Not Before: Dec 21 07:01:22 2025 GMT Not After : Dec 22 07:01:22 2025 GMT Subject: CN=2110e32b99b1cc9498a04f26bfec96d28e67f77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:af:f7:c5:94:9b:35:6d:20:81:d4:47:6b: 35:1d:f6:94:6b:7c:50:5f:3b:d9:f3:df:36:8b:d0: ad:b3:8c:f8:9d:64:1e:2b:b7:ff:02:3e:94:34:32: c8:f9:47:fa:d4:df:a9:c0:63:4f:ea:d6:e9:f7:24: cc:dd:b6:8f:4b:e9:b2:4c:75:0b:bb:e6:c0:2e:33: ab:37:57:71:c2:a7:c0:ba:d4:7f:79:0b:35:88:8c: 1f:bf:86:21:32:d6:ee:80:ff:40:17:bb:2c:c4:ec: f5:1f:e9:3f:ce:64:07:1a:06:4d:8f:e5:bd:b5:40: 0a:0c:4a:42:5e:29:7a:f4:55:16:e1:03:8c:7e:c7: 39:59:5b:8f:de:be:12:ce:91:ca:36:24:d9:07:af: 52:63:0b:f9:a9:6d:0a:4a:fa:ac:b7:91:ac:d8:b8: 01:00:fe:aa:81:60:20:c5:ad:f0:53:36:c3:9e:58: ab:2a:a6:25:d0:0d:e1:4d:f8:b9:99:82:d1:e1:ab: 9d:d2:84:8a:c7:df:fb:db:a5:e8:28:78:b1:6e:f2: 72:b0:5a:46:12:81:0d:ad:10:0e:7d:3a:87:64:0a: 11:29:b0:d9:49:05:10:48:d4:90:3c:58:0e:a9:da: aa:36:6a:17:16:ab:dc:5d:54:ab:d9:79:4b:12:ae: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:10:E3:2B:99:B1:CC:94:98:A0:4F:26:BF:EC:96:D2:8E:67:F7:7D X509v3 Authority Key Identifier: keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ef:35:5e:f0:c6:3e:32:ff:2f:16:1b:d2:39:82:ac:12:1c: b2:02:eb:6b:d0:10:36:4c:e7:42:11:bf:b8:58:b1:80:3f:f3: f8:cb:e3:98:95:71:79:88:82:17:b1:ee:be:9a:4b:33:d9:67: 01:ce:29:20:36:40:ba:5d:db:54:4a:9b:14:e7:49:a0:7e:ac: 5b:89:7f:d2:d8:35:fc:88:35:d1:4e:4b:48:6c:68:92:8c:cc: e8:63:00:6b:13:dc:52:65:e9:62:67:2d:3f:55:9c:10:bd:ab: af:9a:ed:92:8d:52:a3:9d:66:f4:16:e2:ba:a1:08:99:7a:b5: c4:9d:6f:b8:6b:a8:03:d9:b5:7a:4c:9d:ab:e3:45:4b:ed:cc: ec:5d:d6:ef:e4:52:70:b6:26:5e:46:6f:d5:1c:b8:ce:8b:20: be:54:8f:df:d5:a7:eb:f7:51:e4:fd:4e:c5:a4:5a:13:f0:ad: 57:8a:a1:19:89:29:b6:cc:b5:d5:28:96:8b:17:f7:32:2e:f6: 51:7f:89:84:92:ec:5e:24:f2:12:9d:ac:ac:ca:c2:94:e5:6b: a9:5a:97:c4:4e:de:65:3c:84:f5:f1:7b:a3:b0:ac:95:ab:9d: 3a:f9:76:d4:a0:ce:2a:4b:e2:c1:a3:36:d4:a6:9a:15:ed:23: 1c:a0:08:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tn20KVvjvT2PY6J54OE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkY2UzYzJhYWZjNzc4M2NjZTgyMzQ1NTFmM2U5NjYxZDI3 ZWVmYmMwHhcNMjUxMjIxMDcwMTIyWhcNMjUxMjIyMDcwMTIyWjAzMTEwLwYDVQQD EygyMTEwZTMyYjk5YjFjYzk0OThhMDRmMjZiZmVjOTZkMjhlNjdmNzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrGv98WUmzVtIIHUR2s1HfaUa3xQ XzvZ8982i9Cts4z4nWQeK7f/Aj6UNDLI+Uf61N+pwGNP6tbp9yTM3baPS+myTHUL u+bALjOrN1dxwqfAutR/eQs1iIwfv4YhMtbugP9AF7ssxOz1H+k/zmQHGgZNj+W9 tUAKDEpCXil69FUW4QOMfsc5WVuP3r4SzpHKNiTZB69SYwv5qW0KSvqst5Gs2LgB AP6qgWAgxa3wUzbDnlirKqYl0A3hTfi5mYLR4aud0oSKx9/726XoKHixbvJysFpG EoENrRAOfTqHZAoRKbDZSQUQSNSQPFgOqdqqNmoXFqvcXVSr2XlLEq4EHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEQ4yuZscyUmKBPJr/sltKOZ/d9MB8GA1UdIwQY MBaAFK3OPCqvx3g8zoI0VR8+lmHSfu+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEt NjMxMDRkYjZhN2E1LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84MjRjY2QtYmM5Yi00YTgyLWJlOTEtNjMxMDRkYjZhN2E1 LzEvcmM0OEtxX0hlRHpPZ2pSVkh6NldZZEotNzd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw+81XvDG PjL/LxYb0jmCrBIcsgLra9AQNkznQhG/uFixgD/z+MvjmJVxeYiCF7HuvppLM9ln Ac4pIDZAul3bVEqbFOdJoH6sW4l/0tg1/Ig10U5LSGxokozM6GMAaxPcUmXpYmct P1WcEL2rr5rtko1So51m9BbiuqEImXq1xJ1vuGuoA9m1ekydq+NFS+3M7F3W7+RS cLYmXkZv1Ry4zosgvlSP39Wn6/dR5P1OxaRaE/CtV4qhGYkptsy11SiWixf3Mi72 UX+JhJLsXiTyEp2srMrClOVrqVqXxE7eZTyE9fF7o7CslaudOvl21KDOKkviwaM2 1KaaFe0jHKAI9A== -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:38 2025 by rpki-client