This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json) Hash identifier: Gvr3FWZ7A4fzPk963OudGOg7TcmUH7rNffeilhh4u4o= Subject key identifier: 5D:88:1D:EB:01:5B:B8:6F:16:3B:34:DE:32:27:D0:B6:A6:2E:06:5F Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13 Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713 Certificate serial: 019B077E0EB4C4D77739EEB287F5DBBB77F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft Manifest number: 11F4 Signing time: Wed 10 Dec 2025 09:01:00 +0000 Manifest this update: Wed 10 Dec 2025 09:01:00 +0000 Manifest next update: Thu 11 Dec 2025 09:01:00 +0000 Files and hashes: 1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=) 2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=) 3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: bVc4/6T3r5R2G1DBDD69wNHwaePudzYxgBR/C9e1ej0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:0e:b4:c4:d7:77:39:ee:b2:87:f5:db:bb:77:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713 Validity Not Before: Dec 10 09:01:00 2025 GMT Not After : Dec 11 09:01:00 2025 GMT Subject: CN=5d881deb015bb86f163b34de3227d0b6a62e065f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:d1:c4:62:c9:e0:ae:26:ce:e1:3e:29:5d: f3:3d:1f:8c:06:5b:c6:0e:13:e5:76:dc:5c:80:57: 85:c5:8c:b5:08:52:58:96:4b:f3:28:6f:00:79:3a: 3d:68:0f:55:96:f0:47:1f:b0:d0:6e:b6:b5:90:53: be:77:45:dd:41:ff:37:57:1a:e0:80:f6:f2:6e:70: 3b:bb:03:a0:36:d7:e6:c8:0f:6d:45:3e:6f:2b:c7: 47:25:79:88:43:9e:1f:99:c3:86:7d:d3:bc:29:87: d0:50:92:52:3d:da:5b:90:b1:12:af:27:d7:56:28: 1a:b8:42:b0:c2:7a:36:da:02:c4:99:96:93:e1:e5: fa:5b:48:b5:e5:2e:5c:02:24:9c:d5:c0:e3:03:62: b7:fe:f2:27:0a:c1:cd:f2:81:f2:63:fc:86:99:ee: f4:93:b6:f3:3a:9d:2c:3e:73:9b:d4:85:71:bd:94: b7:7b:32:dc:6f:b7:7c:18:f2:1e:9e:c8:4f:1a:46: 38:e0:41:3c:f1:be:42:03:59:ab:e0:e9:9d:d2:a6: 12:ba:a5:77:6f:bc:82:37:22:bc:ad:16:7d:01:20: 56:12:32:a6:a7:07:29:54:1c:e3:ac:ca:9d:c3:25: 03:18:de:cf:b8:90:51:2d:ac:f4:4c:2a:21:1c:ab: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:88:1D:EB:01:5B:B8:6F:16:3B:34:DE:32:27:D0:B6:A6:2E:06:5F X509v3 Authority Key Identifier: keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:30:bd:8c:4f:ed:bb:97:2c:42:3e:1a:16:7d:3c:7f:0f:47: 44:6b:39:c4:fe:c9:75:41:94:4c:5e:cf:b1:37:6b:9c:fc:dd: 0d:70:c8:35:9c:b5:04:3f:36:a4:62:0d:94:75:1a:f6:13:1a: 0b:5c:a9:90:6b:58:9a:28:13:ab:7f:4c:6c:41:86:96:be:7f: 3e:d8:cc:ad:c6:4e:0e:11:13:9c:ec:a4:f9:51:53:d5:dd:ae: 0a:41:03:b6:2d:b6:92:93:e3:bb:42:91:e0:f5:fc:ae:ba:12: 5b:05:26:5e:d4:0d:c5:ed:11:54:eb:8b:94:fc:c4:b2:71:27: 6c:0d:7b:1c:e7:32:fa:d8:b0:92:d4:52:0e:8d:e5:e3:1c:19: 9b:29:cb:40:b9:ec:6d:50:b0:df:8f:e0:0f:30:3a:13:e5:3f: 20:03:e0:08:f4:ed:1c:7c:d0:e7:da:20:2c:71:bd:38:b9:0d: 35:81:41:f3:0d:79:dd:82:6c:fa:ad:92:a9:78:cb:61:cc:30: a6:d3:03:e8:55:d5:2b:c4:69:02:50:4a:eb:d5:c1:c8:49:74: 28:40:32:4a:ee:b5:5d:2d:e9:e9:b6:81:72:37:20:e9:3b:94: fb:8b:76:cd:7f:0e:f5:ae:78:45:87:27:07:d3:ee:a4:e9:4e: 32:35:4f:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfg60xNd3Oe6yh/Xbu3f2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NGJmNTgxMTljZmU5OWYxNzQ5YmNkOWJkMTI0NzAyYmE5 Y2I3MTMwHhcNMjUxMjEwMDkwMTAwWhcNMjUxMjExMDkwMTAwWjAzMTEwLwYDVQQD Eyg1ZDg4MWRlYjAxNWJiODZmMTYzYjM0ZGUzMjI3ZDBiNmE2MmUwNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QjRxGLJ4K4mzuE+KV3zPR+MBlvG DhPldtxcgFeFxYy1CFJYlkvzKG8AeTo9aA9VlvBHH7DQbra1kFO+d0XdQf83Vxrg gPbybnA7uwOgNtfmyA9tRT5vK8dHJXmIQ54fmcOGfdO8KYfQUJJSPdpbkLESryfX VigauEKwwno22gLEmZaT4eX6W0i15S5cAiSc1cDjA2K3/vInCsHN8oHyY/yGme70 k7bzOp0sPnOb1IVxvZS3ezLcb7d8GPIenshPGkY44EE88b5CA1mr4Omd0qYSuqV3 b7yCNyK8rRZ9ASBWEjKmpwcpVBzjrMqdwyUDGN7PuJBRLaz0TCohHKsQFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2IHesBW7hvFjs03jIn0LamLgZfMB8GA1UdIwQY MBaAFEVL9YEZz+mfF0m82b0SRwK6nLcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAt MGE2ZTZkZmJkMmUzLzEvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAtMGE2ZTZkZmJkMmUz LzEvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzC9jE/t u5csQj4aFn08fw9HRGs5xP7JdUGUTF7PsTdrnPzdDXDINZy1BD82pGINlHUa9hMa C1ypkGtYmigTq39MbEGGlr5/PtjMrcZODhETnOyk+VFT1d2uCkEDti22kpPju0KR 4PX8rroSWwUmXtQNxe0RVOuLlPzEsnEnbA17HOcy+tiwktRSDo3l4xwZmynLQLns bVCw34/gDzA6E+U/IAPgCPTtHHzQ59ogLHG9OLkNNYFB8w153YJs+q2SqXjLYcww ptMD6FXVK8RpAlBK69XByEl0KEAySu61XS3p6baBcjcg6TuU+4t2zX8O9a54RYcn B9PupOlOMjVPtQ== -----END CERTIFICATE-----Generated at Wed Dec 10 12:25:38 2025 by rpki-client