This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft File: rrcMp77FOQL1z1eeuT7bDZKi-0M.mft (raw, json) Hash identifier: TJGbyMGcfLWk0i3oEvmyfBGcsOMVguRh5wu8DuKySMM= Subject key identifier: 6D:47:27:15:5A:2D:75:64:9D:5A:DC:B8:78:E3:6E:2D:EB:55:8A:A2 Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43 Certificate issuer: /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43 Certificate serial: 019B5ABFEEE65FE2198A2C1937059BC696ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft Manifest number: 2C Signing time: Fri 26 Dec 2025 13:01:26 +0000 Manifest this update: Fri 26 Dec 2025 13:01:26 +0000 Manifest next update: Sat 27 Dec 2025 13:01:26 +0000 Files and hashes: 1: rrcMp77FOQL1z1eeuT7bDZKi-0M.crl (hash: 4imSI005kYfaq3izC99OU07NgcASfG0rHOrui+nrVxQ=) 2: zQc44ptSUrokmTLWecWvBz270Ro.roa (hash: rbDa8TLVcAzHn7tPbjZXCwZR4jhdDO7cF/1OM9wMeyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:ee:e6:5f:e2:19:8a:2c:19:37:05:9b:c6:96:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43 Validity Not Before: Dec 26 13:01:26 2025 GMT Not After : Dec 27 13:01:26 2025 GMT Subject: CN=6d4727155a2d75649d5adcb878e36e2deb558aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:e5:13:24:5c:a6:a6:cf:91:2e:1f:f9:8c: 09:de:5b:ae:e9:b9:d1:98:39:d5:e4:a8:e0:1f:54: 64:f2:e0:84:9d:d0:3b:cb:ab:dc:63:67:36:52:7e: 6b:52:61:55:fe:9e:4e:ad:fc:f1:b1:0d:e8:be:10: 0f:8a:8a:92:36:8a:bb:17:d4:4a:15:13:eb:ca:6c: b2:e7:c5:36:0a:8e:80:f3:da:7a:b3:58:a0:35:af: 23:44:ec:7a:ce:53:ce:96:16:e4:bb:75:9a:c2:c4: d9:5d:8e:75:e2:47:85:58:91:af:e3:2b:69:e7:f1: 5e:81:34:58:ab:d1:5b:b5:73:01:3d:1d:18:79:ea: 3f:e3:0c:64:a0:f0:a3:65:cd:b7:b7:c5:da:9d:71: 36:52:a6:e3:cc:3d:bf:8b:4a:b1:d3:57:fc:e1:fb: 77:6f:17:d8:3a:e7:e5:6a:21:65:27:b3:31:da:b0: 4b:03:fb:4b:b6:32:34:70:70:54:60:71:e0:96:ab: 37:66:e5:24:c9:c0:21:25:c1:11:67:2f:7e:f0:12: f6:d5:25:d5:eb:3d:0a:bc:d0:b0:d7:d5:b7:bd:13: f3:1e:29:44:03:74:93:11:8e:c8:87:e8:bb:c6:3b: 87:f6:7d:f9:b9:3f:73:12:74:27:1c:46:cf:cd:57: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:27:15:5A:2D:75:64:9D:5A:DC:B8:78:E3:6E:2D:EB:55:8A:A2 X509v3 Authority Key Identifier: keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:17:e3:03:85:30:2b:a5:95:64:07:83:b9:4d:0b:36:60:5b: 60:62:37:ce:40:b5:e9:8d:e4:7c:76:6c:15:9b:62:27:97:65: 8b:0c:2c:82:3e:5d:46:89:1b:f0:6c:7a:11:22:07:39:55:f5: cf:8f:ae:40:94:e0:9d:fa:49:97:a2:b1:27:7a:96:d7:b5:41: 3e:69:42:ec:ae:60:c3:dc:61:83:00:c1:30:44:03:41:c2:03: a6:ca:de:2f:85:68:16:b5:05:1c:56:e2:d6:2e:a2:be:80:0d: 6a:80:5b:57:ba:38:a1:73:68:7c:92:78:ff:e8:45:a8:c3:77: ea:b9:10:d3:4c:e5:21:48:9c:a5:ed:6e:d2:60:13:42:4b:35: ba:1c:97:8d:c7:10:c0:15:1e:6e:b4:4f:b0:47:90:6d:e3:a0: ff:47:4e:83:b7:d3:ac:74:f1:20:72:95:d0:a4:4c:ce:f9:3a: 84:c2:2d:72:eb:e3:4e:19:ba:68:9a:78:b8:47:43:7b:35:29: 7b:da:8e:bb:ea:64:02:6a:c5:f0:1c:85:02:5f:41:e7:6a:f1: cd:e1:e7:c2:c5:74:ca:01:a2:a8:56:af:43:aa:51:20:de:9b: 0c:2e:d1:60:60:57:5e:d1:cc:7b:31:01:0d:cb:36:8c:aa:44: 0b:ea:26:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+7mX+IZiiwZNwWbxpbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjcwY2E3YmVjNTM5MDJmNWNmNTc5ZWI5M2VkYjBkOTJh MmZiNDMwHhcNMjUxMjI2MTMwMTI2WhcNMjUxMjI3MTMwMTI2WjAzMTEwLwYDVQQD Eyg2ZDQ3MjcxNTVhMmQ3NTY0OWQ1YWRjYjg3OGUzNmUyZGViNTU4YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBDlEyRcpqbPkS4f+YwJ3luu6bnR mDnV5KjgH1Rk8uCEndA7y6vcY2c2Un5rUmFV/p5OrfzxsQ3ovhAPioqSNoq7F9RK FRPrymyy58U2Co6A89p6s1igNa8jROx6zlPOlhbku3WawsTZXY514keFWJGv4ytp 5/FegTRYq9FbtXMBPR0Yeeo/4wxkoPCjZc23t8XanXE2UqbjzD2/i0qx01f84ft3 bxfYOuflaiFlJ7Mx2rBLA/tLtjI0cHBUYHHglqs3ZuUkycAhJcERZy9+8BL21SXV 6z0KvNCw19W3vRPzHilEA3STEY7Ih+i7xjuH9n35uT9zEnQnHEbPzVeAewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1HJxVaLXVknVrcuHjjbi3rVYqiMB8GA1UdIwQY MBaAFK63DKe+xTkC9c9Xnrk+2w2SovtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJjTXA3N0ZPUUwxejFlZXVUN2JEWktpLTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MTYzMjMtYTlhZi00M2Q1LTlhOGIt OTFkYjIzNDVmNDM2LzEvcnJjTXA3N0ZPUUwxejFlZXVUN2JEWktpLTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83MTYzMjMtYTlhZi00M2Q1LTlhOGItOTFkYjIzNDVmNDM2 LzEvcnJjTXA3N0ZPUUwxejFlZXVUN2JEWktpLTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohfjA4Uw K6WVZAeDuU0LNmBbYGI3zkC16Y3kfHZsFZtiJ5dliwwsgj5dRokb8Gx6ESIHOVX1 z4+uQJTgnfpJl6KxJ3qW17VBPmlC7K5gw9xhgwDBMEQDQcIDpsreL4VoFrUFHFbi 1i6ivoANaoBbV7o4oXNofJJ4/+hFqMN36rkQ00zlIUicpe1u0mATQks1uhyXjccQ wBUebrRPsEeQbeOg/0dOg7fTrHTxIHKV0KRMzvk6hMItcuvjThm6aJp4uEdDezUp e9qOu+pkAmrF8ByFAl9B52rxzeHnwsV0ygGiqFavQ6pRIN6bDC7RYGBXXtHMezEB Dcs2jKpEC+omFg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:13 2025 by rpki-client