This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json) Hash identifier: V0BoC/10nEmnAn8jrGvPg/r9onmv5ULbgZMhWdxLYlo= Subject key identifier: 30:84:CE:78:D0:04:E7:69:C3:75:25:F1:3F:C1:CB:C0:2F:08:8F:8B Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a Certificate serial: 019B10B877A0C9389BE5345EE3E5225095AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft Manifest number: 0764 Signing time: Fri 12 Dec 2025 04:01:23 +0000 Manifest this update: Fri 12 Dec 2025 04:01:23 +0000 Manifest next update: Sat 13 Dec 2025 04:01:23 +0000 Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: 3f0QI+/Lup9xlBY/bn53OsJEbvNpUZpbfQEdEBzW0Z0=) 2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:77:a0:c9:38:9b:e5:34:5e:e3:e5:22:50:95:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a Validity Not Before: Dec 12 04:01:23 2025 GMT Not After : Dec 13 04:01:23 2025 GMT Subject: CN=3084ce78d004e769c37525f13fc1cbc02f088f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e5:d7:2e:78:25:0f:01:e3:6a:11:02:b9:34: 99:42:96:15:11:8b:e1:30:19:30:6a:6b:aa:9f:6c: 3d:b4:dc:73:32:ac:05:40:71:c9:1e:e6:1f:fd:63: f9:37:7f:22:90:6c:bf:b9:cd:b4:2c:5e:e4:e1:f4: 92:3d:14:cf:df:ba:f0:11:20:22:42:c5:cc:8b:62: 36:ce:87:fa:c3:7d:67:e4:68:84:b5:42:2c:dc:dc: 93:0e:04:4f:93:b8:56:b7:00:e0:1f:47:98:8e:9f: d4:97:12:ef:92:7b:96:fb:44:9b:88:b4:c9:15:56: a2:16:29:13:77:ef:01:ed:cd:39:90:49:35:23:69: 6b:1c:32:11:81:fb:b1:7a:35:95:c1:30:41:2f:36: 42:97:fd:cf:2f:c7:72:5f:a1:14:a8:c6:3e:5e:dd: 74:0b:1e:5b:6c:9b:55:21:d5:93:a3:0d:f0:2d:9b: 30:12:86:e5:ae:03:33:75:25:97:f0:d7:a8:3d:bc: 2b:4a:a4:ec:b5:8d:82:02:00:cb:8a:a5:a8:a0:d3: fa:e5:54:72:6a:87:86:26:b1:f8:76:3e:85:31:8f: 0b:12:fa:78:ce:fd:0e:d9:62:49:1f:e5:3f:f8:db: fe:88:e7:a9:af:b2:45:13:00:bc:71:2a:ea:9c:08: e0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:84:CE:78:D0:04:E7:69:C3:75:25:F1:3F:C1:CB:C0:2F:08:8F:8B X509v3 Authority Key Identifier: keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ad:45:82:0f:4b:5f:cb:5a:cc:f6:c9:9e:ac:b7:23:01:0e: 04:d8:db:7b:04:cd:fa:17:13:97:61:ce:1d:81:01:86:5a:8f: f4:c2:81:de:7d:22:00:b7:e6:51:63:d4:7f:17:61:4d:4c:d9: fb:7b:ff:8f:64:aa:2e:42:dc:f1:8b:f3:51:38:e9:62:ab:ac: ed:71:d7:95:c2:19:63:c3:cb:53:d0:fa:2d:94:7e:d6:db:d2: ad:06:12:f7:a4:70:92:b2:e8:15:6c:5f:e8:40:6a:0f:53:c5: 76:61:1e:4f:9f:15:0b:a5:f1:25:b9:f2:0f:5c:56:a5:14:74: 15:d5:dc:6d:1c:42:6f:0c:34:95:2c:e0:e7:0e:51:d0:76:40: ed:f1:31:6a:95:3b:87:c5:71:ae:26:ce:22:5c:43:a5:b8:d3: b2:aa:ad:33:cb:ae:4b:88:47:a9:b5:64:a7:c3:cc:f5:48:88: f5:b7:49:db:dc:50:55:a8:fe:f6:eb:04:c8:7c:e8:1a:79:d4: e0:49:86:e9:9c:59:04:14:9b:ac:1a:2e:a5:41:9b:38:43:04: ca:05:50:ed:78:6b:9a:7f:ba:a6:71:b0:d0:ae:ea:01:1f:79: fa:1c:ef:76:1c:98:7a:fc:4e:9b:1d:8f:bb:4a:3d:36:52:4c: 2c:71:6b:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuHegyTib5TRe4+UiUJWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy NWEyNWEwHhcNMjUxMjEyMDQwMTIzWhcNMjUxMjEzMDQwMTIzWjAzMTEwLwYDVQQD EygzMDg0Y2U3OGQwMDRlNzY5YzM3NTI1ZjEzZmMxY2JjMDJmMDg4ZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uXXLnglDwHjahECuTSZQpYVEYvh MBkwamuqn2w9tNxzMqwFQHHJHuYf/WP5N38ikGy/uc20LF7k4fSSPRTP37rwESAi QsXMi2I2zof6w31n5GiEtUIs3NyTDgRPk7hWtwDgH0eYjp/UlxLvknuW+0SbiLTJ FVaiFikTd+8B7c05kEk1I2lrHDIRgfuxejWVwTBBLzZCl/3PL8dyX6EUqMY+Xt10 Cx5bbJtVIdWTow3wLZswEoblrgMzdSWX8NeoPbwrSqTstY2CAgDLiqWooNP65VRy aoeGJrH4dj6FMY8LEvp4zv0O2WJJH+U/+Nv+iOepr7JFEwC8cSrqnAjgnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCEznjQBOdpw3Ul8T/By8AvCI+LMB8GA1UdIwQY MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt NjkyNDI1NzUzMGIwLzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq1Fgg9L X8tazPbJnqy3IwEOBNjbewTN+hcTl2HOHYEBhlqP9MKB3n0iALfmUWPUfxdhTUzZ +3v/j2SqLkLc8YvzUTjpYqus7XHXlcIZY8PLU9D6LZR+1tvSrQYS96RwkrLoFWxf 6EBqD1PFdmEeT58VC6XxJbnyD1xWpRR0FdXcbRxCbww0lSzg5w5R0HZA7fExapU7 h8VxribOIlxDpbjTsqqtM8uuS4hHqbVkp8PM9UiI9bdJ29xQVaj+9usEyHzoGnnU 4EmG6ZxZBBSbrBoupUGbOEMEygVQ7Xhrmn+6pnGw0K7qAR95+hzvdhyYevxOmx2P u0o9NlJMLHFrNw== -----END CERTIFICATE-----Generated at Fri Dec 12 05:32:58 2025 by rpki-client