This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft (raw, json) Hash identifier: QDcmbknHkQ56CL9Ov/afjl/vnFwZSIpcchqNCs0P1uQ= Subject key identifier: 57:05:69:07:07:46:14:7A:EF:0C:05:A1:B4:0F:E3:BA:69:A3:95:F3 Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31 Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631 Certificate serial: 019B3C101E2DA156718BF8EBF54F95E15D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft Manifest number: 0A29 Signing time: Sat 20 Dec 2025 14:00:47 +0000 Manifest this update: Sat 20 Dec 2025 14:00:47 +0000 Manifest next update: Sun 21 Dec 2025 14:00:47 +0000 Files and hashes: 1: ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl (hash: jgChbrYriXdhchmcwxdbxhilppP+V7mBSoPoL2gq46w=) 2: c1218tMrC-SYY-Yo1ITctKUD9_k.roa (hash: 8AGbg1kAcimxxtZO8YTai8jQPbPTR+28UymCTknNVxU=) 3: v9XCpSvXJgFn93oqPO6QjvmDaV0.roa (hash: 2/0z9nylSvJWI46oSDGL4Lr6kTxicsj+PodL8IKe940=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:1e:2d:a1:56:71:8b:f8:eb:f5:4f:95:e1:5d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631 Validity Not Before: Dec 20 14:00:47 2025 GMT Not After : Dec 21 14:00:47 2025 GMT Subject: CN=570569070746147aef0c05a1b40fe3ba69a395f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:d5:94:e7:ff:4e:66:5d:1b:7a:29:24:cb: 23:9c:2c:00:c5:cf:9e:4b:b9:78:3a:3e:b0:e4:34: 84:a6:7f:fa:3b:ba:ee:a4:ae:69:58:9b:5c:09:bf: fc:b1:c1:29:70:4e:3c:50:b3:a6:59:4c:1c:9a:fe: 36:bd:95:ed:37:53:5a:e2:16:e7:bc:5a:2f:b9:be: 3e:9b:04:28:ba:66:bf:c5:8c:82:f7:ba:8b:98:d0: f3:56:3b:e1:22:04:7b:a5:59:22:d2:4f:69:c1:57: 41:6a:8f:59:c6:ae:c4:07:34:6d:96:21:1c:61:e5: 94:e0:ee:0f:d6:24:29:97:0d:6a:0a:3f:e9:1b:be: 23:88:11:95:35:2d:a0:3c:d2:96:42:e2:e6:52:23: b4:0c:fe:fe:c6:bb:9b:94:01:3b:89:51:4b:1b:d2: 68:90:28:af:cb:15:1f:16:27:47:1f:f0:61:1d:a3: 9e:9d:33:7f:48:7a:c1:59:6b:16:dc:d0:d6:76:fe: cb:79:01:c9:7c:c2:81:b1:17:e2:a4:d8:3b:f2:13: f3:ba:a3:29:31:70:64:ac:42:df:db:18:2c:6e:ab: 2d:a2:2b:22:1a:12:8f:0b:51:d4:ec:94:d1:6d:7c: 28:f5:dc:e4:d4:ff:ea:c8:d7:6c:8c:f5:c8:50:27: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:05:69:07:07:46:14:7A:EF:0C:05:A1:B4:0F:E3:BA:69:A3:95:F3 X509v3 Authority Key Identifier: keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4b:5a:a5:66:b3:9c:ca:91:f7:ac:9f:4e:57:cd:af:fd:28: cd:51:a2:d1:40:bb:cd:fb:d1:db:af:ab:5b:d4:cd:32:1c:8c: 0e:77:fd:61:65:60:cf:a5:59:f2:ad:34:ec:87:df:04:04:cc: 7a:2a:3a:26:fa:64:53:a5:6b:01:93:51:fe:cb:53:e8:9c:45: 31:2b:f8:45:1b:e1:c5:40:56:d2:77:c1:77:f1:a5:a0:be:ef: 32:33:89:4a:a4:36:ca:3e:9d:08:fd:2f:ca:f1:ac:33:41:6c: 62:05:97:94:4e:41:c9:8e:e6:a8:90:1d:bf:1f:d5:3b:33:cd: 4e:7c:97:5d:81:4d:f3:40:2f:8f:85:ab:8c:e9:84:5e:de:c4: 0e:08:39:9c:d1:94:65:84:46:2f:b4:8d:f9:9e:09:09:66:13: cd:ff:40:16:61:68:b9:1d:dd:6f:3d:48:48:0e:45:0f:f2:2e: 6b:fa:b6:74:29:c9:1b:e0:83:fe:58:d2:75:ec:e0:3b:c1:ba: ac:e0:35:17:a5:d3:31:9e:e8:38:29:e9:ed:f2:1b:fa:be:44: 79:fd:90:fe:38:69:29:9e:e6:29:9f:da:21:c0:b4:55:87:09: c0:06:8a:50:5f:78:9c:fa:af:97:71:2b:22:a6:3c:33:e1:e1: 26:96:4a:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EB4toVZxi/jr9U+V4V2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZTNhMGMxZjFkODFlZTA2OTY0M2I0MGMzMjM5OTliYjU1 ODQ2MzEwHhcNMjUxMjIwMTQwMDQ3WhcNMjUxMjIxMTQwMDQ3WjAzMTEwLwYDVQQD Eyg1NzA1NjkwNzA3NDYxNDdhZWYwYzA1YTFiNDBmZTNiYTY5YTM5NWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2vVlOf/TmZdG3opJMsjnCwAxc+e S7l4Oj6w5DSEpn/6O7rupK5pWJtcCb/8scEpcE48ULOmWUwcmv42vZXtN1Na4hbn vFovub4+mwQouma/xYyC97qLmNDzVjvhIgR7pVki0k9pwVdBao9Zxq7EBzRtliEc YeWU4O4P1iQplw1qCj/pG74jiBGVNS2gPNKWQuLmUiO0DP7+xrublAE7iVFLG9Jo kCivyxUfFidHH/BhHaOenTN/SHrBWWsW3NDWdv7LeQHJfMKBsRfipNg78hPzuqMp MXBkrELf2xgsbqstoisiGhKPC1HU7JTRbXwo9dzk1P/qyNdsjPXIUCfGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcFaQcHRhR67wwFobQP47ppo5XzMB8GA1UdIwQY MBaAFEXjoMHx2B7gaWQ7QMMjmZu1WEYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUt M2Q1N2I2NmIyMTM0LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jYjMxZGEtNDQ5MS00ZjNlLWJhZTUtM2Q1N2I2NmIyMTM0 LzEvUmVPZ3dmSFlIdUJwWkR0QXd5T1ptN1ZZUmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqktapWaz nMqR96yfTlfNr/0ozVGi0UC7zfvR26+rW9TNMhyMDnf9YWVgz6VZ8q007IffBATM eio6JvpkU6VrAZNR/stT6JxFMSv4RRvhxUBW0nfBd/GloL7vMjOJSqQ2yj6dCP0v yvGsM0FsYgWXlE5ByY7mqJAdvx/VOzPNTnyXXYFN80Avj4WrjOmEXt7EDgg5nNGU ZYRGL7SN+Z4JCWYTzf9AFmFouR3dbz1ISA5FD/Iua/q2dCnJG+CD/ljSdezgO8G6 rOA1F6XTMZ7oOCnp7fIb+r5Eef2Q/jhpKZ7mKZ/aIcC0VYcJwAaKUF94nPqvl3Er IqY8M+HhJpZKEg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:02:03 2025 by rpki-client