This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft File: 484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json) Hash identifier: Yhmxpszun8izgqFq211zQu1PnXRy4VsCXwioXtMax04= Subject key identifier: 06:7E:2C:F8:E6:5C:9D:B9:3E:BC:4F:D3:DA:CE:9A:F4:C4:2F:BD:D1 Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2 Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2 Certificate serial: 019B435C092B3B647C7E77E5B0E9320A50D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft Manifest number: 0E1E Signing time: Mon 22 Dec 2025 00:01:03 +0000 Manifest this update: Mon 22 Dec 2025 00:01:03 +0000 Manifest next update: Tue 23 Dec 2025 00:01:03 +0000 Files and hashes: 1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: Gjb5wWWWU++nFzn1/NonBoBMQlTNr/o0hgBeriv4Hxs=) 2: qcoI9QRYFLMa_u8cjDZFd9W6S20.roa (hash: G2neLmn+8/k9VBrxT3PrvfgosA6NhKRornhd6evsbec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:09:2b:3b:64:7c:7e:77:e5:b0:e9:32:0a:50:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2 Validity Not Before: Dec 22 00:01:03 2025 GMT Not After : Dec 23 00:01:03 2025 GMT Subject: CN=067e2cf8e65c9db93ebc4fd3dace9af4c42fbdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:2a:94:48:5c:e2:19:14:e5:86:06:77:fa: ad:db:78:fa:05:5b:8e:18:7c:0c:47:d9:2c:ae:9d: 94:7b:f8:a9:81:9f:13:ef:8a:c6:36:1e:51:00:fa: a5:ea:20:d9:fa:9d:eb:16:4a:76:8c:4e:eb:ef:cd: 3b:9a:e1:a4:21:2b:1b:97:fa:68:5f:fd:19:72:d4: 44:b2:09:c0:ee:93:9a:02:39:03:98:db:ee:ca:18: e3:0d:d6:6a:7e:07:4b:94:4a:06:b2:17:3f:2d:ba: 0d:b8:0e:ad:0f:93:e3:8c:11:3b:5d:1f:47:5d:6d: 6e:2d:1e:c5:77:b1:5e:03:f6:65:ba:68:86:0b:59: 4a:2f:fa:6e:73:de:3a:ff:2a:46:ae:e2:0b:f2:17: 65:1e:08:6c:d5:eb:c4:a5:62:68:20:ab:24:48:3e: f5:f9:f2:09:1b:81:e8:9c:32:1c:9c:31:2f:de:d9: 0a:82:b2:74:42:8f:01:d6:4e:5c:51:ce:15:9d:ec: 0a:12:37:2a:80:82:5b:c0:4a:ca:fd:0c:64:ca:c7: a2:50:6c:18:1a:bc:3d:62:c2:62:b3:10:0f:70:37: fe:09:d0:2f:e3:8c:47:a6:70:97:59:bf:f5:56:37: 83:7e:3d:e4:de:cc:af:68:7a:12:ae:ce:54:2b:6f: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7E:2C:F8:E6:5C:9D:B9:3E:BC:4F:D3:DA:CE:9A:F4:C4:2F:BD:D1 X509v3 Authority Key Identifier: keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:2c:ab:61:5a:17:43:5e:a9:d4:00:bc:99:31:c6:1e:be:44: 3e:33:35:ef:93:92:2c:2f:72:57:d4:43:60:94:eb:09:a7:f2: ff:66:69:ac:2f:33:77:1e:6c:48:d5:11:a0:c6:0a:15:9c:c6: 5e:e3:e7:cf:c7:8f:f6:8c:9d:b8:c6:38:04:d8:e0:4e:ea:7d: 7b:fe:4f:7d:c5:2e:45:e6:cd:d0:bc:e7:12:74:b3:b9:be:71: ce:bf:c2:b3:11:d7:5e:93:81:d8:58:de:98:c5:7c:80:57:e9: ab:11:d3:02:9a:ec:0c:42:4a:f8:51:b3:9a:6f:a3:83:77:45: e1:8e:51:1d:b2:64:64:6f:2c:41:e2:b5:97:d5:35:10:dd:d8: ed:12:82:32:8c:b5:b7:84:26:85:bc:f6:d8:1c:29:c6:5a:08: ea:d0:7f:7e:51:12:2e:f6:3c:32:06:40:bf:da:d9:0c:a8:64: 55:52:00:bb:98:44:cb:45:ed:28:ca:71:c7:29:d3:87:ea:52: fb:f3:4c:a7:1b:ef:cc:3e:b2:d3:28:00:86:82:96:29:29:4b: fe:1c:78:40:08:df:37:32:7e:3a:bc:27:98:51:89:f4:6c:2a: 5c:32:79:51:76:25:f4:3b:db:e4:82:31:13:69:25:d5:b5:c5: 05:65:09:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXAkrO2R8fnflsOkyClDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzY2UwNjlkZmM1YjYwODg3NmQ2NDI0YTMyZTc4M2E5OGE5 MmVmZjIwHhcNMjUxMjIyMDAwMTAzWhcNMjUxMjIzMDAwMTAzWjAzMTEwLwYDVQQD EygwNjdlMmNmOGU2NWM5ZGI5M2ViYzRmZDNkYWNlOWFmNGM0MmZiZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUwqlEhc4hkU5YYGd/qt23j6BVuO GHwMR9ksrp2Ue/ipgZ8T74rGNh5RAPql6iDZ+p3rFkp2jE7r7807muGkISsbl/po X/0ZctREsgnA7pOaAjkDmNvuyhjjDdZqfgdLlEoGshc/LboNuA6tD5PjjBE7XR9H XW1uLR7Fd7FeA/ZlumiGC1lKL/puc946/ypGruIL8hdlHghs1evEpWJoIKskSD71 +fIJG4HonDIcnDEv3tkKgrJ0Qo8B1k5cUc4VnewKEjcqgIJbwErK/QxkyseiUGwY Grw9YsJisxAPcDf+CdAv44xHpnCXWb/1VjeDfj3k3syvaHoSrs5UK2/fzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ+LPjmXJ25PrxP09rOmvTEL73RMB8GA1UdIwQY MBaAFOPOBp38W2CIdtZCSjLng6mKku/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYt OTA4MTU0NWY1NjkxLzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYtOTA4MTU0NWY1Njkx LzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECyrYVoX Q16p1AC8mTHGHr5EPjM175OSLC9yV9RDYJTrCafy/2ZprC8zdx5sSNURoMYKFZzG XuPnz8eP9oyduMY4BNjgTup9e/5PfcUuRebN0LznEnSzub5xzr/CsxHXXpOB2Fje mMV8gFfpqxHTAprsDEJK+FGzmm+jg3dF4Y5RHbJkZG8sQeK1l9U1EN3Y7RKCMoy1 t4Qmhbz22BwpxloI6tB/flESLvY8MgZAv9rZDKhkVVIAu5hEy0XtKMpxxynTh+pS +/NMpxvvzD6y0ygAhoKWKSlL/hx4QAjfNzJ+OrwnmFGJ9GwqXDJ5UXYl9Dvb5IIx E2kl1bXFBWUJNA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:41 2025 by rpki-client