This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json) Hash identifier: nUllDXrqoaFvfpdIfktbk3pkOoA0Jx8wn+m2jjCIcio= Subject key identifier: 2A:47:8F:CD:CD:89:63:E2:BE:39:1D:ED:35:D6:5A:3E:F9:2B:DA:CD Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57 Certificate serial: 019B360E1B54AEC03D1A2E3B01EC9591E9CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft Manifest number: 0327 Signing time: Fri 19 Dec 2025 10:00:52 +0000 Manifest this update: Fri 19 Dec 2025 10:00:52 +0000 Manifest next update: Sat 20 Dec 2025 10:00:52 +0000 Files and hashes: 1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: sRy3Qch5gbN4hwWBUOz3TuzWFGaN/b4aFe9r5d4B9gI=) 2: K_JZgBsGAVe42CM82ldUkYg0iAQ.roa (hash: bwVI85s3fTqLxVepdOjVCwyC9itDatE9AOSLnrN/zKU=) 3: O2ig3X7VNdoIgqEvSRSWulSevo4.roa (hash: b2vyXh49fwCqIp7fN7Ci84lv9+cxy1rLXbG95tTjerQ=) 4: df6ORV0T3_b0RdsmM3_USMPqdsg.roa (hash: q2PmH++N3IE0kcfGnwBqmXQjUmmTRWDH+eBviEbSMVk=) 5: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:1b:54:ae:c0:3d:1a:2e:3b:01:ec:95:91:e9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39557250543e4476af88c4612d4a89531313b57 Validity Not Before: Dec 19 10:00:52 2025 GMT Not After : Dec 20 10:00:52 2025 GMT Subject: CN=2a478fcdcd8963e2be391ded35d65a3ef92bdacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:ce:68:52:26:b9:62:e0:6f:a7:42:a6:f6: e1:bb:45:4f:68:55:a1:33:42:99:a4:fc:8e:68:d4: 68:87:36:7b:5e:10:a3:d3:94:2b:67:16:35:08:91: 8c:7e:c1:f6:b2:d2:e6:ae:1b:54:c0:12:55:e5:45: a8:6c:01:f9:c2:93:a8:fa:4d:aa:18:74:c9:7b:25: a4:0d:95:6f:13:27:d4:5f:4f:a4:57:bf:41:0a:cd: 7b:fe:1d:d8:6d:22:5c:23:d4:f8:d9:71:c7:d4:35: d5:dd:16:a1:6f:ec:bf:2a:72:b9:e1:11:6a:70:3d: 35:4d:2f:81:02:b7:36:bb:8c:af:5a:1e:10:15:5f: 2a:86:10:93:20:64:e3:7e:15:b5:da:25:71:19:78: a8:cd:de:7c:48:47:86:8f:f4:e8:55:d2:97:04:a3: 16:4b:3f:8a:12:d0:67:bc:c2:73:49:f2:fa:a7:4a: ea:49:99:b9:30:a2:62:2a:44:23:64:49:c7:cd:a9: e1:d9:49:cc:91:aa:bc:10:ae:34:da:01:5a:45:65: bf:dc:c0:0d:83:e4:86:43:98:2a:72:ee:3c:31:c7: 60:ef:2a:9b:05:cc:76:32:85:da:3c:b9:01:54:e8: 32:74:7c:74:8f:c4:81:00:b5:6e:44:60:02:5d:cf: 57:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:47:8F:CD:CD:89:63:E2:BE:39:1D:ED:35:D6:5A:3E:F9:2B:DA:CD X509v3 Authority Key Identifier: keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7e:25:47:56:48:34:48:be:5a:11:7f:12:b6:f9:6e:ca:37: 2b:f6:ae:ad:85:66:5e:57:34:e7:77:ae:2e:af:25:46:7c:39: fb:98:ad:92:bd:a2:22:32:72:bd:71:82:d1:f5:86:ec:35:de: 79:e6:6f:96:cd:56:bb:76:e1:98:5d:fc:65:88:09:d0:ac:df: a1:8a:3d:a6:74:23:0e:d8:fd:cb:a8:d1:2c:09:80:46:a0:fb: 82:b4:26:00:6c:05:a2:1f:ab:84:03:0b:ab:73:7a:5a:1f:0a: 1c:43:c0:4c:0a:98:75:5d:f9:1b:bc:13:ee:db:00:1c:ea:d2: 1c:1b:e5:2d:4e:0e:f2:06:64:e9:30:88:ea:f7:94:6c:18:aa: d5:17:bc:94:cd:f6:ef:e6:dd:ae:36:47:39:fe:31:d9:d6:1a: ca:33:e0:f3:1c:7e:62:a6:0d:02:1c:dd:91:49:cd:bf:56:3e: 54:7b:cd:e5:e3:f9:ad:46:56:f4:ed:e9:5e:0f:be:f9:9e:c0: 6e:cf:8d:14:3f:fc:9e:a0:5e:f4:8a:29:86:6e:88:b2:48:0b: 8a:51:ef:00:12:37:20:38:93:dd:8b:18:fe:20:df:d7:f9:ea: b8:1d:73:62:79:a1:e2:7c:94:15:4a:1f:f5:3d:18:4a:46:7e: 08:c7:8f:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DhtUrsA9Gi47AeyVkenNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz MTNiNTcwHhcNMjUxMjE5MTAwMDUyWhcNMjUxMjIwMTAwMDUyWjAzMTEwLwYDVQQD EygyYTQ3OGZjZGNkODk2M2UyYmUzOTFkZWQzNWQ2NWEzZWY5MmJkYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI/OaFImuWLgb6dCpvbhu0VPaFWh M0KZpPyOaNRohzZ7XhCj05QrZxY1CJGMfsH2stLmrhtUwBJV5UWobAH5wpOo+k2q GHTJeyWkDZVvEyfUX0+kV79BCs17/h3YbSJcI9T42XHH1DXV3Rahb+y/KnK54RFq cD01TS+BArc2u4yvWh4QFV8qhhCTIGTjfhW12iVxGXiozd58SEeGj/ToVdKXBKMW Sz+KEtBnvMJzSfL6p0rqSZm5MKJiKkQjZEnHzanh2UnMkaq8EK402gFaRWW/3MAN g+SGQ5gqcu48Mcdg7yqbBcx2MoXaPLkBVOgydHx0j8SBALVuRGACXc9XWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpHj83NiWPivjkd7TXWWj75K9rNMB8GA1UdIwQY MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt MjA2OTUxOTNhYzA3LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3 LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE34lR1ZI NEi+WhF/Erb5bso3K/aurYVmXlc053euLq8lRnw5+5itkr2iIjJyvXGC0fWG7DXe eeZvls1Wu3bhmF38ZYgJ0KzfoYo9pnQjDtj9y6jRLAmARqD7grQmAGwFoh+rhAML q3N6Wh8KHEPATAqYdV35G7wT7tsAHOrSHBvlLU4O8gZk6TCI6veUbBiq1Re8lM32 7+bdrjZHOf4x2dYayjPg8xx+YqYNAhzdkUnNv1Y+VHvN5eP5rUZW9O3pXg+++Z7A bs+NFD/8nqBe9Iophm6IskgLilHvABI3IDiT3YsY/iDf1/nquB1zYnmh4nyUFUof 9T0YSkZ+CMePYg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:08:12 2025 by rpki-client