This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft File: RgeLLcCGzllV5i25IvNUuC0TzVs.mft (raw, json) Hash identifier: YJ4SoBI36yl5p3bNymK+BxyfkFlOZLvPJiQn3kdaUV4= Subject key identifier: 46:9A:16:76:32:76:AB:29:DA:3C:74:C7:4C:38:05:78:F1:00:51:8E Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b Certificate serial: 019B59E3D84F3AF16C2B5D26134B1508F732 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:01:02 +0000 Manifest this update: Fri 26 Dec 2025 09:01:02 +0000 Manifest next update: Sat 27 Dec 2025 09:01:02 +0000 Files and hashes: 1: RgeLLcCGzllV5i25IvNUuC0TzVs.crl (hash: cfkI5fAVRkk1BYGpJx9S4mV0wPPnf2B5yrn6Nf+wHAo=) 2: tev87foGLf9TpZQHMwDHXLYnBL4.roa (hash: jHI7Ehm4mIeH8EgzDR4OOBosKPRgVoLZvuWOXFcKqHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:d8:4f:3a:f1:6c:2b:5d:26:13:4b:15:08:f7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b Validity Not Before: Dec 26 09:01:02 2025 GMT Not After : Dec 27 09:01:02 2025 GMT Subject: CN=469a16763276ab29da3c74c74c380578f100518e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:a4:6d:a9:fa:2d:c5:03:5c:e9:f5:83:59: f2:09:db:d8:8a:e2:38:35:03:32:29:05:bb:53:82: 20:1c:2a:4b:e9:4e:70:7e:7f:60:62:ea:9e:42:b6: c6:45:26:bc:6a:ab:17:b8:b0:81:48:a9:5d:5f:36: 0f:db:a0:c1:d4:8c:52:79:3d:79:23:a8:ff:b2:61: e5:56:fa:a1:60:19:9c:9d:f8:f2:e8:fa:25:fd:78: ce:11:67:f1:b4:12:94:4c:60:61:e6:96:76:60:d5: b0:96:0c:83:a1:df:69:78:40:fe:7e:81:12:ae:a8: e2:fd:27:10:db:65:f4:a7:af:53:3a:a9:bc:07:94: f2:6e:3e:ba:20:c4:b5:ca:af:9b:e5:39:94:64:bf: 06:0a:98:de:61:4a:95:18:bf:4d:1e:b8:34:4f:11: 01:58:3a:81:46:95:76:4c:99:14:d3:d5:3b:77:65: f9:51:00:3e:5b:28:5f:28:71:24:2b:e3:3a:29:e5: 42:4f:7a:9a:e7:53:70:3a:97:ba:63:dc:04:b1:68: e3:1e:31:3a:4a:b2:5f:0d:40:b9:30:15:63:cd:9c: 8e:13:d5:02:cd:ad:41:e0:c7:e1:c8:1f:e9:48:f0: 4f:18:be:dc:e2:9e:fb:57:42:06:98:55:84:1f:74: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9A:16:76:32:76:AB:29:DA:3C:74:C7:4C:38:05:78:F1:00:51:8E X509v3 Authority Key Identifier: keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:67:a1:e7:bd:2e:1a:13:ac:44:a9:ff:c5:ec:2f:a7:cc:89: 27:07:eb:46:fc:65:ae:3f:61:29:8b:13:d4:db:13:23:d5:7c: 85:6e:7d:16:b0:80:85:42:1d:14:e2:44:fb:22:f5:b6:c9:c3: 8f:75:6f:05:74:bd:3d:2a:51:9a:bb:a3:04:e7:a5:b6:24:bc: 20:85:67:31:62:a8:ac:01:22:32:b4:19:3d:de:3f:52:5e:6e: 41:d2:4b:58:bf:ee:5c:2b:fc:6c:d0:ae:f3:7f:ab:d7:50:33: 6a:ff:33:14:fe:b7:bd:74:96:fd:e4:e0:cd:eb:be:9d:f5:18: 21:e1:66:e2:0a:32:3a:ab:3f:50:5f:e5:27:94:71:2b:95:7b: bb:b7:60:ea:c8:6f:44:49:b6:dd:ac:c0:39:d8:59:27:f9:47: 2c:e4:c8:fc:30:22:3b:ab:34:a5:a9:f7:f0:b2:d9:e4:1a:65: 01:f4:82:e6:8f:f4:be:72:a4:35:1e:8e:e6:e9:bf:4b:80:dd: fd:0a:22:85:75:c0:ee:5f:fc:3d:05:b7:ce:fe:ce:c1:d3:48: 70:76:7b:4c:87:15:ec:ed:aa:e8:79:eb:01:f8:fc:42:0a:dc: 64:6a:d4:4d:41:80:b6:36:6b:04:37:79:cd:4f:23:04:6e:2e: 0e:56:2f:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ49hPOvFsK10mE0sVCPcyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDc4YjJkYzA4NmNlNTk1NWU2MmRiOTIyZjM1NGI4MmQx M2NkNWIwHhcNMjUxMjI2MDkwMTAyWhcNMjUxMjI3MDkwMTAyWjAzMTEwLwYDVQQD Eyg0NjlhMTY3NjMyNzZhYjI5ZGEzYzc0Yzc0YzM4MDU3OGYxMDA1MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7akban6LcUDXOn1g1nyCdvYiuI4 NQMyKQW7U4IgHCpL6U5wfn9gYuqeQrbGRSa8aqsXuLCBSKldXzYP26DB1IxSeT15 I6j/smHlVvqhYBmcnfjy6Pol/XjOEWfxtBKUTGBh5pZ2YNWwlgyDod9peED+foES rqji/ScQ22X0p69TOqm8B5Tybj66IMS1yq+b5TmUZL8GCpjeYUqVGL9NHrg0TxEB WDqBRpV2TJkU09U7d2X5UQA+WyhfKHEkK+M6KeVCT3qa51NwOpe6Y9wEsWjjHjE6 SrJfDUC5MBVjzZyOE9UCza1B4MfhyB/pSPBPGL7c4p77V0IGmFWEH3Tb4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaaFnYydqsp2jx0x0w4BXjxAFGOMB8GA1UdIwQY MBaAFEYHiy3Ahs5ZVeYtuSLzVLgtE81bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85ZmY4YTEtMzY0Ny00MTM0LWIxNWYt ZTVkZDYzODJhMWM3LzEvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85ZmY4YTEtMzY0Ny00MTM0LWIxNWYtZTVkZDYzODJhMWM3 LzEvUmdlTExjQ0d6bGxWNWkyNUl2TlV1QzBUelZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmeh570u GhOsRKn/xewvp8yJJwfrRvxlrj9hKYsT1NsTI9V8hW59FrCAhUIdFOJE+yL1tsnD j3VvBXS9PSpRmrujBOeltiS8IIVnMWKorAEiMrQZPd4/Ul5uQdJLWL/uXCv8bNCu 83+r11Azav8zFP63vXSW/eTgzeu+nfUYIeFm4goyOqs/UF/lJ5RxK5V7u7dg6shv REm23azAOdhZJ/lHLOTI/DAiO6s0pan38LLZ5BplAfSC5o/0vnKkNR6O5um/S4Dd /QoihXXA7l/8PQW3zv7OwdNIcHZ7TIcV7O2q6HnrAfj8QgrcZGrUTUGAtjZrBDd5 zU8jBG4uDlYviQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:55 2025 by rpki-client