This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft File: RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json) Hash identifier: qLMHepFeOgRlCS1V97OquxTdoSkTM+IT1xEuvRytncY= Subject key identifier: F4:A0:32:C5:F7:DE:A2:53:1C:8C:94:18:87:DA:81:34:D0:F7:5D:2E Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48 Certificate issuer: /CN=460c571111aafc0d51e5fde08230bf78b89e4a48 Certificate serial: 019B213DBB5881B4CF26854557F40197F30A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft Manifest number: 1776 Signing time: Mon 15 Dec 2025 09:00:52 +0000 Manifest this update: Mon 15 Dec 2025 09:00:52 +0000 Manifest next update: Tue 16 Dec 2025 09:00:52 +0000 Files and hashes: 1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: LebUmQAIcRorGMMmm67v8bGTAxLkyl7UGVQMpxujRAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:bb:58:81:b4:cf:26:85:45:57:f4:01:97:f3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48 Validity Not Before: Dec 15 09:00:52 2025 GMT Not After : Dec 16 09:00:52 2025 GMT Subject: CN=f4a032c5f7dea2531c8c941887da8134d0f75d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:5e:36:6a:09:c8:19:a0:3e:ec:38:a3:4a: bb:61:f3:bb:00:07:8a:81:38:5b:e7:1d:c6:b4:d9: 15:40:c2:63:8b:46:41:8e:2f:c2:cb:80:8e:3b:2a: 0e:33:a1:94:b0:52:d6:55:91:a2:fc:81:bb:f5:79: 98:e5:6c:d3:fb:b1:83:48:ff:f4:bd:7c:fd:a0:ba: d0:75:31:e0:7b:80:9a:4d:4a:8c:89:23:ac:29:8f: 51:20:46:3a:f2:f1:24:c5:c1:2b:8d:74:38:87:74: 25:9d:2b:ba:24:46:1c:e0:a3:ff:0c:a5:b2:a2:ab: 4c:6a:d7:61:8a:c5:93:bc:13:cf:33:80:11:4c:ae: 94:24:1c:72:56:8f:e6:53:43:6c:41:7a:90:8e:4e: db:26:7c:10:e2:4f:49:dc:87:76:c2:40:21:37:90: 14:ad:dc:34:d0:65:9f:ef:0f:f3:a4:2c:c8:bf:2b: f4:2e:bd:ad:43:24:3c:6a:fb:68:a7:d6:33:41:f2: e5:a6:e6:2b:3e:4e:4e:0f:5c:76:20:99:4d:4e:28: b1:66:fc:dd:04:6b:42:ad:75:e9:cc:bc:e1:cb:43: f8:f8:04:42:35:da:84:2b:42:8c:53:e4:b9:4a:9a: cb:3a:79:8c:cc:47:11:5a:55:2f:d3:6c:1f:4e:7a: e8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A0:32:C5:F7:DE:A2:53:1C:8C:94:18:87:DA:81:34:D0:F7:5D:2E X509v3 Authority Key Identifier: keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:6f:1d:98:bf:30:4a:a9:6c:a4:51:55:7a:e8:71:96:59:db: d4:96:4e:3f:0b:c9:89:f6:cb:f5:e0:ae:cf:62:b5:1b:ca:7b: 17:f6:60:51:77:c4:ed:28:cc:33:df:ed:96:bb:23:60:e6:62: 7d:a2:19:84:82:8c:69:48:fc:46:c2:33:6a:d9:ec:d6:9d:35: 62:d9:1c:77:13:16:19:0a:b2:00:43:8b:7c:f7:05:e3:fd:86: bd:af:2a:f4:dc:df:fa:41:8e:1f:43:5c:12:ca:db:d2:7b:2c: 96:51:7f:d1:19:25:1a:25:50:b8:49:da:d1:0e:c4:d8:fd:ea: 7f:e5:9c:c7:26:6a:96:30:45:b2:e5:e1:e1:85:12:4c:f4:93: 5e:d8:19:7c:93:d0:76:61:16:fc:32:2e:c4:21:14:69:d3:a5: 3f:80:bb:2f:be:ee:c9:8f:45:1c:91:b5:59:fb:22:ab:1b:32: 8c:f9:c9:52:bd:e9:0d:86:06:2b:7d:3a:86:e1:93:37:5c:09: ce:48:73:a6:6f:a8:2d:81:c8:21:0b:3f:07:2e:bb:a2:95:f0: bd:ff:54:54:05:9f:4c:c9:85:0f:7e:2e:fe:f5:ea:da:65:37: 43:a5:26:29:4c:fe:60:04:82:a9:c8:0d:c4:45:2d:df:d9:2a: 24:93:7b:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshPbtYgbTPJoVFV/QBl/MKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGM1NzExMTFhYWZjMGQ1MWU1ZmRlMDgyMzBiZjc4Yjg5 ZTRhNDgwHhcNMjUxMjE1MDkwMDUyWhcNMjUxMjE2MDkwMDUyWjAzMTEwLwYDVQQD EyhmNGEwMzJjNWY3ZGVhMjUzMWM4Yzk0MTg4N2RhODEzNGQwZjc1ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz81eNmoJyBmgPuw4o0q7YfO7AAeK gThb5x3GtNkVQMJji0ZBji/Cy4COOyoOM6GUsFLWVZGi/IG79XmY5WzT+7GDSP/0 vXz9oLrQdTHge4CaTUqMiSOsKY9RIEY68vEkxcErjXQ4h3QlnSu6JEYc4KP/DKWy oqtMatdhisWTvBPPM4ARTK6UJBxyVo/mU0NsQXqQjk7bJnwQ4k9J3Id2wkAhN5AU rdw00GWf7w/zpCzIvyv0Lr2tQyQ8avtop9YzQfLlpuYrPk5OD1x2IJlNTiixZvzd BGtCrXXpzLzhy0P4+ARCNdqEK0KMU+S5SprLOnmMzEcRWlUv02wfTnroFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSgMsX33qJTHIyUGIfagTTQ910uMB8GA1UdIwQY MBaAFEYMVxERqvwNUeX94IIwv3i4nkpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQt YmQyZmZmNWI4ODQ5LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQtYmQyZmZmNWI4ODQ5 LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS28dmL8w SqlspFFVeuhxllnb1JZOPwvJifbL9eCuz2K1G8p7F/ZgUXfE7SjMM9/tlrsjYOZi faIZhIKMaUj8RsIzatns1p01YtkcdxMWGQqyAEOLfPcF4/2Gva8q9Nzf+kGOH0Nc Esrb0nssllF/0RklGiVQuEna0Q7E2P3qf+WcxyZqljBFsuXh4YUSTPSTXtgZfJPQ dmEW/DIuxCEUadOlP4C7L77uyY9FHJG1WfsiqxsyjPnJUr3pDYYGK306huGTN1wJ zkhzpm+oLYHIIQs/By67opXwvf9UVAWfTMmFD34u/vXq2mU3Q6UmKUz+YASCqcgN xEUt39kqJJN78g== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:01 2025 by rpki-client