This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json) Hash identifier: Ufc6p918IimLvzfdgUUKbg8gsiuO7uaZu9Q+0deDm9o= Subject key identifier: C2:C4:A6:9A:53:99:2F:9F:FC:C0:2E:09:55:EE:E4:10:4C:98:9E:C0 Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71 Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471 Certificate serial: 019B2176A13BF7226683F3117486A59F6691 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 10:03:01 +0000 Manifest this update: Mon 15 Dec 2025 10:03:01 +0000 Manifest next update: Tue 16 Dec 2025 10:03:01 +0000 Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=) 2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: A5N2O/RXmC5IOYj1hn1t+5DcvrLeSunzbPHX42ZcR2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:a1:3b:f7:22:66:83:f3:11:74:86:a5:9f:66:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471 Validity Not Before: Dec 15 10:03:01 2025 GMT Not After : Dec 16 10:03:01 2025 GMT Subject: CN=c2c4a69a53992f9ffcc02e0955eee4104c989ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:b3:fb:e8:80:95:23:3d:b8:0e:b5:59:57: a0:d0:cc:d6:df:26:b6:fd:c5:88:52:c7:b2:1d:9b: c7:db:07:78:64:e3:8c:3b:87:7a:90:76:97:94:f0: 5e:e1:7d:4c:e3:79:6a:44:96:83:9c:7f:81:ee:53: 2f:f5:93:ea:ce:bf:d0:47:6a:84:e0:b0:3a:8c:ec: 3c:26:9e:45:1c:16:30:5d:e6:57:21:13:9a:13:02: 16:13:85:4a:6c:dd:55:bb:1d:36:67:62:b2:1c:df: 4e:27:dc:a5:34:c7:27:b8:9d:6b:97:eb:39:1c:be: 31:72:8c:35:41:4a:a1:90:b9:53:ed:6c:a6:bc:7d: df:3e:fd:a1:b9:90:3a:ab:5b:f1:99:06:4c:e6:9e: 24:a4:89:ae:01:60:70:e8:b7:86:6f:00:b4:95:e9: 18:6e:f4:74:5d:08:42:46:eb:27:b1:b5:42:1f:84: 01:d9:40:ec:cf:7f:5c:ff:84:58:cd:d4:55:b1:22: b2:e9:ca:ce:e5:a5:28:79:bd:3c:2c:1d:55:6f:03: d8:68:09:35:a3:ab:14:94:87:bc:10:0f:0d:23:9a: e0:e8:2c:fc:46:4f:b0:19:89:f0:f8:8f:be:32:79: 20:00:b4:82:bc:50:7e:68:0b:44:ee:3f:6d:76:6c: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C4:A6:9A:53:99:2F:9F:FC:C0:2E:09:55:EE:E4:10:4C:98:9E:C0 X509v3 Authority Key Identifier: keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b6:b0:2d:22:fd:01:aa:33:77:df:72:08:52:2a:8c:23:52: e8:0a:47:30:57:e2:aa:ef:57:40:a1:41:3e:1c:46:1e:0e:e5: dd:f9:f4:4e:e1:9a:68:4c:ea:ef:1d:b4:c9:dd:78:0b:ec:e3: 05:e8:91:df:fa:7d:a8:33:02:b0:f4:18:60:1e:97:ac:69:ca: 45:19:57:3a:ea:44:d5:dd:73:90:b4:70:90:95:3b:d8:67:74: 95:a5:80:73:b1:21:7d:c8:af:99:c0:d8:a3:32:ca:97:09:dd: a4:a9:ad:10:f6:c7:da:22:00:76:7c:1a:89:9d:56:6f:c8:95: 62:45:ee:96:7b:75:51:9b:70:0d:2c:e0:2a:95:40:5b:17:d5: fc:2b:ff:55:a0:32:e4:27:49:0b:9e:eb:47:ed:1a:5b:e7:8e: fd:70:60:23:ad:19:ff:44:ce:94:be:af:65:b5:b9:e3:97:c2: 3e:03:bd:f6:0d:7f:be:43:cf:0d:71:4c:b6:8e:95:37:62:ce: 8a:3d:9d:3f:b0:a6:34:f7:58:66:84:46:cb:59:72:26:46:24: f6:fd:4c:ce:ca:17:26:0b:e5:ec:bb:d2:f3:38:30:85:82:9b: bb:21:72:ac:ef:be:b2:26:55:8c:18:73:17:ae:16:a9:5b:cd: e0:fa:34:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdqE79yJmg/MRdIaln2aRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OWU0MjUyYmNiMjJlYTJjNmNmYjM5MjRjOGY4NGJkZGU3 YTc0NzEwHhcNMjUxMjE1MTAwMzAxWhcNMjUxMjE2MTAwMzAxWjAzMTEwLwYDVQQD EyhjMmM0YTY5YTUzOTkyZjlmZmNjMDJlMDk1NWVlZTQxMDRjOTg5ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka2z++iAlSM9uA61WVeg0MzW3ya2 /cWIUseyHZvH2wd4ZOOMO4d6kHaXlPBe4X1M43lqRJaDnH+B7lMv9ZPqzr/QR2qE 4LA6jOw8Jp5FHBYwXeZXIROaEwIWE4VKbN1Vux02Z2KyHN9OJ9ylNMcnuJ1rl+s5 HL4xcow1QUqhkLlT7WymvH3fPv2huZA6q1vxmQZM5p4kpImuAWBw6LeGbwC0lekY bvR0XQhCRusnsbVCH4QB2UDsz39c/4RYzdRVsSKy6crO5aUoeb08LB1VbwPYaAk1 o6sUlIe8EA8NI5rg6Cz8Rk+wGYnw+I++MnkgALSCvFB+aAtE7j9tdmzTawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLEpppTmS+f/MAuCVXu5BBMmJ7AMB8GA1UdIwQY MBaAFESeQlK8si6ixs+zkkyPhL3eenRxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMt NjhmMjE3NGM3OWVlLzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZTk1NTktOGYzYy00NWQwLTg1MWMtNjhmMjE3NGM3OWVl LzEvUko1Q1VyeXlMcUxHejdPU1RJLUV2ZDU2ZEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbawLSL9 Aaozd99yCFIqjCNS6ApHMFfiqu9XQKFBPhxGHg7l3fn0TuGaaEzq7x20yd14C+zj BeiR3/p9qDMCsPQYYB6XrGnKRRlXOupE1d1zkLRwkJU72Gd0laWAc7EhfcivmcDY ozLKlwndpKmtEPbH2iIAdnwaiZ1Wb8iVYkXulnt1UZtwDSzgKpVAWxfV/Cv/VaAy 5CdJC57rR+0aW+eO/XBgI60Z/0TOlL6vZbW545fCPgO99g1/vkPPDXFMto6VN2LO ij2dP7CmNPdYZoRGy1lyJkYk9v1MzsoXJgvl7LvS8zgwhYKbuyFyrO++siZVjBhz F64WqVvN4Po0nQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:08:26 2025 by rpki-client