This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json) Hash identifier: qKHO7G0jc5dw67HNj/l+ZEpWcKaPDEd2NNVY5dbXcZo= Subject key identifier: 18:90:45:37:1B:8A:31:F0:0A:3B:D3:64:1A:B0:E4:60:D1:C7:9F:D2 Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76 Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076 Certificate serial: 019B3DFE84B430FA54B589014F2EA096DE3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft Manifest number: 0551 Signing time: Sat 20 Dec 2025 23:00:48 +0000 Manifest this update: Sat 20 Dec 2025 23:00:48 +0000 Manifest next update: Sun 21 Dec 2025 23:00:48 +0000 Files and hashes: 1: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: gFfSSiTYO8ZXqZuLAzNCY4shVD90IEKO+DKzqKu+LoY=) 2: etkRbnW9ryrJ6e3ywwJ1q9bD7Xw.roa (hash: JMmWgxd8mijwpLVsPTeG3AKA8OAxDNzyK+lSzQE8/U0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:84:b4:30:fa:54:b5:89:01:4f:2e:a0:96:de:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076 Validity Not Before: Dec 20 23:00:48 2025 GMT Not After : Dec 21 23:00:48 2025 GMT Subject: CN=189045371b8a31f00a3bd3641ab0e460d1c79fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d2:c9:f1:be:9e:13:f1:8d:6b:67:e8:61:34: aa:5a:c2:c4:03:89:7c:7a:6c:8e:2f:79:9a:a3:d8: 77:30:24:95:38:b4:e6:13:91:9c:a9:bf:db:bf:21: a7:85:d3:c8:b9:3b:32:bc:ae:1b:2f:d0:cf:08:62: a0:ea:61:de:eb:b0:f9:70:f1:16:3a:90:15:9b:40: 63:44:80:09:30:84:62:d2:84:32:6f:bd:23:d9:47: 69:8e:3d:56:04:12:77:bf:33:7b:a5:07:23:cd:7e: c5:fa:e4:d6:78:6e:87:b2:5c:fa:4b:3a:61:30:14: 28:d8:fe:ed:89:0f:e0:65:0f:fa:8e:68:dc:c7:f5: 3a:64:50:4c:dd:ac:db:c5:cf:54:f2:c4:6a:5c:79: 66:85:b7:b7:f8:99:67:b6:dd:64:e9:ec:85:c8:f0: 35:11:c6:ae:8e:e9:3d:26:d5:d0:7c:50:87:ca:73: be:69:9a:9c:f4:aa:f6:61:ba:a3:7a:7f:d5:bb:ef: 04:5b:06:c1:61:fb:f9:fb:1d:32:b3:70:ac:a5:52: fd:ba:13:6a:1f:7c:cb:39:97:1c:05:63:be:a2:69: 57:f4:a2:8c:f5:cc:85:13:15:87:1f:2b:7c:02:fc: e7:bb:51:ba:8a:3a:98:3f:86:06:a8:23:7c:c5:46: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:90:45:37:1B:8A:31:F0:0A:3B:D3:64:1A:B0:E4:60:D1:C7:9F:D2 X509v3 Authority Key Identifier: keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8e:1c:33:bc:9c:a0:75:40:82:a8:37:28:7d:e2:b9:48:ad: 60:24:aa:fb:3b:fd:67:1b:33:14:94:20:b5:e5:13:2f:9f:5c: 48:e4:b0:2e:0a:eb:6b:77:ea:9a:e0:16:b7:2e:79:3f:6a:70: 12:1d:e0:45:28:73:61:ca:c4:17:ca:f9:7d:3f:02:8a:0f:d3: b7:86:8e:a6:31:13:b8:40:7d:c2:d1:2b:4c:47:92:5a:ad:d2: 29:41:13:78:88:00:23:20:9f:27:f5:c2:da:11:80:a2:4c:d4: 3d:45:1e:a3:37:2c:a2:0e:1e:6b:47:60:10:d5:af:41:10:d8: 8a:a0:b4:de:e9:3f:94:97:ea:41:84:1d:f9:6e:ea:8f:28:1e: 6a:45:ba:8f:ba:21:ca:ed:93:a9:09:71:b2:d1:a2:c1:b0:38: b7:cc:a6:be:65:9f:5a:33:b3:61:00:88:2c:65:fb:b2:3e:35: bf:8d:05:02:17:0a:5c:72:2c:69:f2:f5:ad:6d:5e:8a:e3:4e: 7c:c7:f5:b5:41:15:ab:63:68:f6:b0:df:9a:6a:15:df:74:7f: fa:2b:14:20:18:84:85:24:e0:ed:6b:0c:78:23:ee:05:a9:e4: e3:10:aa:c2:16:d4:d2:cf:5a:a1:2a:db:ea:a2:5c:97:50:ae: 40:50:b4:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/oS0MPpUtYkBTy6glt46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh YzgwNzYwHhcNMjUxMjIwMjMwMDQ4WhcNMjUxMjIxMjMwMDQ4WjAzMTEwLwYDVQQD EygxODkwNDUzNzFiOGEzMWYwMGEzYmQzNjQxYWIwZTQ2MGQxYzc5ZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNLJ8b6eE/GNa2foYTSqWsLEA4l8 emyOL3mao9h3MCSVOLTmE5Gcqb/bvyGnhdPIuTsyvK4bL9DPCGKg6mHe67D5cPEW OpAVm0BjRIAJMIRi0oQyb70j2Udpjj1WBBJ3vzN7pQcjzX7F+uTWeG6Hslz6Szph MBQo2P7tiQ/gZQ/6jmjcx/U6ZFBM3azbxc9U8sRqXHlmhbe3+Jlntt1k6eyFyPA1 Ecaujuk9JtXQfFCHynO+aZqc9Kr2Ybqjen/Vu+8EWwbBYfv5+x0ys3CspVL9uhNq H3zLOZccBWO+omlX9KKM9cyFExWHHyt8Avznu1G6ijqYP4YGqCN8xUa6BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiQRTcbijHwCjvTZBqw5GDRx5/SMB8GA1UdIwQY MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADI4cM7yc oHVAgqg3KH3iuUitYCSq+zv9ZxszFJQgteUTL59cSOSwLgrra3fqmuAWty55P2pw Eh3gRShzYcrEF8r5fT8Cig/Tt4aOpjETuEB9wtErTEeSWq3SKUETeIgAIyCfJ/XC 2hGAokzUPUUeozcsog4ea0dgENWvQRDYiqC03uk/lJfqQYQd+W7qjygeakW6j7oh yu2TqQlxstGiwbA4t8ymvmWfWjOzYQCILGX7sj41v40FAhcKXHIsafL1rW1eiuNO fMf1tUEVq2No9rDfmmoV33R/+isUIBiEhSTg7WsMeCPuBank4xCqwhbU0s9aoSrb 6qJcl1CuQFC0rw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:13:00 2025 by rpki-client