This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft File: Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft (raw, json) Hash identifier: hs6Ro2d4JW5rcICtO67LgKcEfUUAvCVe3QbyhTsQUrs= Subject key identifier: 83:EF:8D:C6:AF:8A:DF:21:85:C7:E8:03:41:04:1B:00:77:06:12:C6 Authority key identifier: 46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88 Certificate issuer: /CN=46eea05ddbd389decaf18db80e3e11bf9c285a88 Certificate serial: 019B37FCF7C64D4417E99A8A660BED7FEF5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft Manifest number: 142D Signing time: Fri 19 Dec 2025 19:01:23 +0000 Manifest this update: Fri 19 Dec 2025 19:01:23 +0000 Manifest next update: Sat 20 Dec 2025 19:01:23 +0000 Files and hashes: 1: Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl (hash: o6gSJXFzIAKbNS3vMWI8PTjztFZAvMoHWzFqXrb5goQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:f7:c6:4d:44:17:e9:9a:8a:66:0b:ed:7f:ef:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46eea05ddbd389decaf18db80e3e11bf9c285a88 Validity Not Before: Dec 19 19:01:23 2025 GMT Not After : Dec 20 19:01:23 2025 GMT Subject: CN=83ef8dc6af8adf2185c7e80341041b00770612c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:b8:dc:e5:18:55:6b:7e:a1:0a:d3:90:26: 75:db:f7:0f:43:7d:39:64:db:a2:61:29:ec:7e:27: 4c:41:e2:3d:f2:cb:95:a6:df:fc:4e:ab:e8:4b:08: ab:cb:ef:2e:5e:5c:3d:63:6e:b0:2b:93:72:37:a2: 1b:d4:56:60:47:ce:6e:77:7f:e8:d8:e1:87:6d:d6: 80:f0:e7:8a:fd:c0:37:02:aa:ff:d3:0a:0f:f0:f8: 26:51:59:c4:d3:bc:c9:8a:66:4d:6d:f6:f6:8a:ca: 75:1d:36:a3:64:d1:3f:20:5a:30:a4:11:4f:af:db: 7f:3a:03:12:01:fb:c3:00:8f:73:e7:e7:c0:a3:e6: 17:7c:5c:9c:6b:94:8c:45:14:3e:3a:c6:2d:aa:1f: 41:3c:69:89:5e:43:6a:53:45:42:aa:4d:03:de:fb: b7:11:72:82:8b:ed:3f:a8:90:0a:d9:b7:00:45:e1: a1:c5:9c:ee:96:29:99:87:99:51:e8:b7:7d:b1:77: 0b:4b:7c:a1:3f:be:6f:6c:c4:a3:61:2e:ec:64:cc: 3f:25:01:6f:a4:72:40:c6:ac:b1:26:8d:7d:a5:88: 1b:4b:dc:3c:0a:00:2a:85:fc:94:8b:9f:13:a0:c3: 3a:ea:a4:3d:c9:e2:8c:42:3c:b0:38:7d:05:1a:8a: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EF:8D:C6:AF:8A:DF:21:85:C7:E8:03:41:04:1B:00:77:06:12:C6 X509v3 Authority Key Identifier: keyid:46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:09:0b:19:01:bc:bf:91:e9:3d:23:bc:2a:6e:25:3d:d8:73: 3d:6a:50:fc:d6:ba:6c:b2:59:87:13:bf:5f:8a:c9:c6:24:8d: 61:11:86:02:39:02:c3:ad:43:25:4b:a4:d0:ec:0a:5f:76:fd: a5:e8:6d:e4:3b:dc:a6:12:17:e0:7b:94:fe:60:56:8b:9a:43: 11:b5:41:d7:9a:2c:38:1b:bb:ae:27:83:7b:58:39:a4:2f:7a: db:73:15:50:cc:23:67:7f:12:1d:c6:42:46:f4:42:87:cd:cc: de:f1:19:d8:89:7e:a9:f6:b3:71:c9:f3:93:83:72:d2:0a:58: 9a:9a:2e:f0:96:e5:a4:af:f4:70:51:f0:6c:19:27:ee:de:2c: 89:a7:43:05:d6:26:66:3b:de:7d:4e:8e:c1:7a:7e:86:0d:5c: fe:36:ef:32:59:82:b9:ce:aa:da:eb:57:78:c3:14:55:81:60: 77:06:f1:bd:95:e7:cc:73:33:bc:ea:99:6c:4f:4a:9b:e3:61: 6e:44:9a:51:d5:87:13:d3:be:ef:dc:df:9d:9b:3d:bc:4f:02: 5d:39:87:9c:d8:cb:df:e0:47:61:92:cf:e2:60:33:c3:8f:22: 18:2c:0e:95:d3:17:33:62:81:10:fa:3a:8d:6f:a3:7f:f2:cd: 4a:11:87:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/PfGTUQX6ZqKZgvtf+9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWVhMDVkZGJkMzg5ZGVjYWYxOGRiODBlM2UxMWJmOWMy ODVhODgwHhcNMjUxMjE5MTkwMTIzWhcNMjUxMjIwMTkwMTIzWjAzMTEwLwYDVQQD Eyg4M2VmOGRjNmFmOGFkZjIxODVjN2U4MDM0MTA0MWIwMDc3MDYxMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9S43OUYVWt+oQrTkCZ12/cPQ305 ZNuiYSnsfidMQeI98suVpt/8TqvoSwiry+8uXlw9Y26wK5NyN6Ib1FZgR85ud3/o 2OGHbdaA8OeK/cA3Aqr/0woP8PgmUVnE07zJimZNbfb2isp1HTajZNE/IFowpBFP r9t/OgMSAfvDAI9z5+fAo+YXfFyca5SMRRQ+OsYtqh9BPGmJXkNqU0VCqk0D3vu3 EXKCi+0/qJAK2bcAReGhxZzulimZh5lR6Ld9sXcLS3yhP75vbMSjYS7sZMw/JQFv pHJAxqyxJo19pYgbS9w8CgAqhfyUi58ToMM66qQ9yeKMQjywOH0FGoorhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPvjcavit8hhcfoA0EEGwB3BhLGMB8GA1UdIwQY MBaAFEbuoF3b04neyvGNuA4+Eb+cKFqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnU2Z1hkdlRpZDdLOFkyNERqNFJ2NXdvV29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOTExNTAtZWY2Ni00NTBmLTg1NDQt OTJlMWU5ZGFjYTJmLzEvUnU2Z1hkdlRpZDdLOFkyNERqNFJ2NXdvV29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iOTExNTAtZWY2Ni00NTBmLTg1NDQtOTJlMWU5ZGFjYTJm LzEvUnU2Z1hkdlRpZDdLOFkyNERqNFJ2NXdvV29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQkLGQG8 v5HpPSO8Km4lPdhzPWpQ/Na6bLJZhxO/X4rJxiSNYRGGAjkCw61DJUuk0OwKX3b9 peht5DvcphIX4HuU/mBWi5pDEbVB15osOBu7rieDe1g5pC9623MVUMwjZ38SHcZC RvRCh83M3vEZ2Il+qfazccnzk4Ny0gpYmpou8JblpK/0cFHwbBkn7t4siadDBdYm ZjvefU6OwXp+hg1c/jbvMlmCuc6q2utXeMMUVYFgdwbxvZXnzHMzvOqZbE9Km+Nh bkSaUdWHE9O+79zfnZs9vE8CXTmHnNjL3+BHYZLP4mAzw48iGCwOldMXM2KBEPo6 jW+jf/LNShGHPg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:08:27 2025 by rpki-client