This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft File: Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json) Hash identifier: r8V4npmSoh7X2KOoqJZNaE2HH1YTOUHh/bLVoVJDTq0= Subject key identifier: 54:98:ED:B0:B8:C8:E8:A1:A5:AF:C4:92:65:DB:0C:46:F2:76:8B:E4 Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5 Certificate issuer: /CN=45bbb0c37704bfd558849c6549af9734e7d14be5 Certificate serial: 019B46274D35339DA94AC46F2DCABBBD995E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft Manifest number: 06C1 Signing time: Mon 22 Dec 2025 13:02:19 +0000 Manifest this update: Mon 22 Dec 2025 13:02:19 +0000 Manifest next update: Tue 23 Dec 2025 13:02:19 +0000 Files and hashes: 1: HrWHZLwLz9SHQNWDWAqLUzhWNgM.roa (hash: +TAR64SkVojwAPPcj29LtZXZh5haH9rqB2EiQmQF6cY=) 2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: vfQSxe+wYSFafSeztBMF0k8NRAyKEoHcl75eZuHr6/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:4d:35:33:9d:a9:4a:c4:6f:2d:ca:bb:bd:99:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5 Validity Not Before: Dec 22 13:02:19 2025 GMT Not After : Dec 23 13:02:19 2025 GMT Subject: CN=5498edb0b8c8e8a1a5afc49265db0c46f2768be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:12:00:44:52:d2:df:e0:5e:ea:34:c7:8d: ac:e8:2b:af:52:9c:92:d1:5b:f5:4d:6c:6c:76:3a: 4e:63:f1:87:c0:7a:0b:57:06:5c:02:53:53:cf:30: f4:6e:71:88:f3:c6:b0:75:4e:e1:aa:a9:cc:58:76: 97:32:df:8e:25:67:e0:a4:03:48:4d:f6:ca:dc:a2: 58:71:3b:81:40:51:49:22:1a:5c:fb:7c:24:c2:be: f3:ef:9b:fe:4a:3a:d4:d8:0f:fb:97:b9:e9:e3:f9: a6:d3:5c:c2:8b:84:6b:ec:1b:60:6f:b6:00:f4:39: 31:d2:d2:d3:c6:7a:a8:f1:25:51:05:09:62:87:f0: e8:e9:5c:04:e0:5b:b1:1d:eb:04:cb:16:27:ba:69: 9a:52:f4:b0:dd:3a:3a:6d:12:67:7a:75:7d:a4:60: 8c:a2:0d:21:62:89:04:b2:be:ef:62:e8:98:2a:b1: 47:08:f7:83:f8:c6:bb:7b:f6:ee:fc:d5:3e:a0:45: 89:9f:64:02:c2:48:7c:93:d4:b7:82:de:ed:22:89: d9:4f:46:6a:d8:a6:2f:8d:07:5d:5a:2d:7e:62:b7: 18:c8:ca:61:c3:7a:64:6e:c7:e0:dc:3b:37:f6:2f: 0a:65:74:3e:cd:ca:40:46:48:38:dd:7a:bb:da:f0: bf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:98:ED:B0:B8:C8:E8:A1:A5:AF:C4:92:65:DB:0C:46:F2:76:8B:E4 X509v3 Authority Key Identifier: keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d4:3c:59:bb:6e:fc:3f:3b:22:9f:92:c9:79:2d:84:43:c1: bb:4f:c1:bf:75:1c:ba:ff:c6:a1:36:5c:8b:95:69:b1:d2:d2: fa:8f:1e:97:cc:cd:9d:86:64:ce:7b:da:6c:53:48:d1:56:77: 0b:7b:f1:01:31:54:1b:fc:67:2d:51:6a:31:d7:e3:ff:73:03: 09:6a:b7:35:43:72:76:b9:eb:c5:ee:93:1d:c3:8a:c1:0e:de: 98:36:e0:25:c7:a8:49:59:af:46:7f:f4:99:19:2c:4e:92:74: 54:cd:14:77:b3:05:f2:df:52:07:6f:83:fa:c2:71:e8:65:0e: 62:50:18:e1:1d:8c:de:36:49:56:0f:b7:6f:5b:ad:2b:35:5a: c6:72:57:28:f3:f9:f2:c0:8c:42:0a:9c:49:62:de:cb:f0:78: 6d:33:94:a3:f0:79:15:93:da:c2:8e:8e:33:6f:e3:9f:71:66: ba:8a:5d:6a:20:cc:56:d6:2e:eb:f0:4f:86:59:80:cd:19:d4: 3b:0f:f7:be:33:11:a4:91:ee:1a:93:dd:af:b8:ec:b6:f0:80: f6:41:89:e8:95:27:aa:72:10:90:9a:bc:ec:51:00:aa:be:e8: d3:13:05:26:60:85:3b:fd:62:b1:d6:93:0e:a4:37:74:33:36: 9a:b0:43:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ001M52pSsRvLcq7vZleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YmJiMGMzNzcwNGJmZDU1ODg0OWM2NTQ5YWY5NzM0ZTdk MTRiZTUwHhcNMjUxMjIyMTMwMjE5WhcNMjUxMjIzMTMwMjE5WjAzMTEwLwYDVQQD Eyg1NDk4ZWRiMGI4YzhlOGExYTVhZmM0OTI2NWRiMGM0NmYyNzY4YmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFESAERS0t/gXuo0x42s6CuvUpyS 0Vv1TWxsdjpOY/GHwHoLVwZcAlNTzzD0bnGI88awdU7hqqnMWHaXMt+OJWfgpANI TfbK3KJYcTuBQFFJIhpc+3wkwr7z75v+SjrU2A/7l7np4/mm01zCi4Rr7Btgb7YA 9Dkx0tLTxnqo8SVRBQlih/Do6VwE4FuxHesEyxYnummaUvSw3To6bRJnenV9pGCM og0hYokEsr7vYuiYKrFHCPeD+Ma7e/bu/NU+oEWJn2QCwkh8k9S3gt7tIonZT0Zq 2KYvjQddWi1+YrcYyMphw3pkbsfg3Ds39i8KZXQ+zcpARkg43Xq72vC/aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSY7bC4yOihpa/EkmXbDEbydovkMB8GA1UdIwQY MBaAFEW7sMN3BL/VWIScZUmvlzTn0UvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zM2Q4YWEtOTNkOC00OTM2LWEzZGUt OTNhMzY2NWM0YjY4LzEvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zM2Q4YWEtOTNkOC00OTM2LWEzZGUtOTNhMzY2NWM0YjY4 LzEvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9Q8Wbtu /D87Ip+SyXkthEPBu0/Bv3Ucuv/GoTZci5VpsdLS+o8el8zNnYZkznvabFNI0VZ3 C3vxATFUG/xnLVFqMdfj/3MDCWq3NUNydrnrxe6THcOKwQ7emDbgJceoSVmvRn/0 mRksTpJ0VM0Ud7MF8t9SB2+D+sJx6GUOYlAY4R2M3jZJVg+3b1utKzVaxnJXKPP5 8sCMQgqcSWLey/B4bTOUo/B5FZPawo6OM2/jn3FmuopdaiDMVtYu6/BPhlmAzRnU Ow/3vjMRpJHuGpPdr7jstvCA9kGJ6JUnqnIQkJq87FEAqr7o0xMFJmCFO/1isdaT DqQ3dDM2mrBDIA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:31:15 2025 by rpki-client