This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft File: 45WDhONGlWoAZjpWVQe5bxTMCXM.mft (raw, json) Hash identifier: u6+iOPaqM+2cmtxrSFoh2A1gFkeG7hWgWbdJ36L8STk= Subject key identifier: 87:AA:97:FD:AB:8E:BA:BC:DB:45:C2:51:CC:F9:3D:78:63:6A:5C:13 Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73 Certificate issuer: /CN=e3958384e346956a00663a565507b96f14cc0973 Certificate serial: 019B58D1BEBEE64E6C6A506D2216508ACC1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft Manifest number: 9F Signing time: Fri 26 Dec 2025 04:01:39 +0000 Manifest this update: Fri 26 Dec 2025 04:01:39 +0000 Manifest next update: Sat 27 Dec 2025 04:01:39 +0000 Files and hashes: 1: 45WDhONGlWoAZjpWVQe5bxTMCXM.crl (hash: PXNy4YbNLAi+5cxjWtxpiT1IIrii8jQnp1EmVGwCPP8=) 2: 7DaGcZguX6rZmp70WlL3jIsnpbM.roa (hash: KsS60nPCDyv8jj+cofaFoNq94Rj7AglBtrtXHDvUhUs=) 3: qR79y5L3S13clIm_R-nn98Pfxqc.roa (hash: nXOF1VQroYBhfSkisMJXwE5JIc0371e5TucciqAwtz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:be:be:e6:4e:6c:6a:50:6d:22:16:50:8a:cc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3958384e346956a00663a565507b96f14cc0973 Validity Not Before: Dec 26 04:01:39 2025 GMT Not After : Dec 27 04:01:39 2025 GMT Subject: CN=87aa97fdab8ebabcdb45c251ccf93d78636a5c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:20:57:94:14:3a:d8:87:dc:cd:dd:d5:13:d3: 06:1c:37:7f:b3:2f:11:c8:ab:e1:f8:45:ef:74:f1: 18:ff:74:30:db:2e:fb:4d:0d:58:55:89:91:d4:4c: 15:2c:7a:b3:2c:27:5b:c6:25:1a:4d:a5:b8:2c:3f: 40:d4:0f:8a:6e:30:d8:09:29:ba:9d:4f:a3:3f:bc: 12:8d:99:e1:bd:d0:92:a3:c8:7e:54:64:15:1f:2a: c6:43:df:1c:3b:d8:8f:85:cc:d3:94:29:b3:05:01: 89:f6:26:29:0a:b7:d5:30:9d:d6:e0:24:42:1c:09: 27:d2:64:6c:ea:8f:be:9a:2e:9f:bd:be:5b:0c:7e: 4d:ad:52:39:1a:ef:97:f3:ad:20:5f:24:54:17:d0: 8b:f0:49:39:31:a2:00:6b:4e:24:dd:c0:ac:e2:73: 6f:df:66:de:8a:cd:ee:0d:2f:b0:35:d2:08:b7:12: 82:96:9a:e4:30:90:04:73:fe:9a:76:32:1a:ec:78: 18:ad:98:73:1d:ed:6a:39:8b:11:b7:9c:71:33:94: f8:b3:c8:16:eb:a0:03:93:2b:b6:ed:f9:24:71:12: 95:0e:41:87:ad:f0:60:8c:db:04:62:b0:1d:1d:82: 18:3d:60:b7:b4:0a:6d:43:b7:1e:f7:25:67:29:e8: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AA:97:FD:AB:8E:BA:BC:DB:45:C2:51:CC:F9:3D:78:63:6A:5C:13 X509v3 Authority Key Identifier: keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:07:fa:7f:60:32:d4:76:0e:0f:3b:c5:0f:4c:99:bf:91:ac: b2:89:09:2d:5b:31:ed:d6:31:6b:b6:69:1a:4b:02:b9:5f:2d: c3:e9:13:cb:47:a5:7d:3f:fc:4f:94:b7:15:a5:10:6d:6b:74: 15:2d:32:df:fa:98:98:ce:1b:25:57:8c:94:7e:3a:d9:49:f4: 76:2d:08:37:b0:ec:95:b3:0e:f8:07:b0:0b:d8:d1:a8:46:23: 6b:08:b3:6c:06:a2:b3:02:a9:88:e3:5c:4c:ec:57:3d:21:e6: cc:3b:bc:e4:cf:7d:f5:76:aa:25:88:3e:82:8b:75:25:e9:37: f9:ae:e2:81:83:b8:1f:ca:c3:bf:b6:32:1d:16:f8:2d:a3:09: 5a:1c:e9:6b:b7:e2:8a:24:1a:df:6a:53:16:17:ec:0c:be:ff: 9a:dd:5e:a1:4b:2f:69:a5:1f:7a:89:cb:3f:0e:b6:a6:fe:ba: 81:dc:8e:2c:7b:cb:d9:9d:cd:c7:3a:59:94:eb:3f:05:a9:a3: 9e:87:99:af:c9:cd:74:4f:1c:3d:e8:8d:ce:cf:0e:8c:e5:48: 01:6c:31:6d:e3:96:97:f0:91:1a:4d:75:fe:52:02:ea:10:59: e1:e4:bb:ad:a3:19:2b:0e:72:1f:2a:26:a0:d5:c5:aa:ae:0e: 23:5e:f9:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0b6+5k5salBtIhZQiswdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOTU4Mzg0ZTM0Njk1NmEwMDY2M2E1NjU1MDdiOTZmMTRj YzA5NzMwHhcNMjUxMjI2MDQwMTM5WhcNMjUxMjI3MDQwMTM5WjAzMTEwLwYDVQQD Eyg4N2FhOTdmZGFiOGViYWJjZGI0NWMyNTFjY2Y5M2Q3ODYzNmE1YzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iBXlBQ62Ifczd3VE9MGHDd/sy8R yKvh+EXvdPEY/3Qw2y77TQ1YVYmR1EwVLHqzLCdbxiUaTaW4LD9A1A+KbjDYCSm6 nU+jP7wSjZnhvdCSo8h+VGQVHyrGQ98cO9iPhczTlCmzBQGJ9iYpCrfVMJ3W4CRC HAkn0mRs6o++mi6fvb5bDH5NrVI5Gu+X860gXyRUF9CL8Ek5MaIAa04k3cCs4nNv 32beis3uDS+wNdIItxKClprkMJAEc/6adjIa7HgYrZhzHe1qOYsRt5xxM5T4s8gW 66ADkyu27fkkcRKVDkGHrfBgjNsEYrAdHYIYPWC3tAptQ7ce9yVnKegabwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeql/2rjrq820XCUcz5PXhjalwTMB8GA1UdIwQY MBaAFOOVg4TjRpVqAGY6VlUHuW8UzAlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NDBiMWQtNzUxZC00YWZhLWI3MDAt MTk0M2JiN2VhZWM3LzEvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83NDBiMWQtNzUxZC00YWZhLWI3MDAtMTk0M2JiN2VhZWM3 LzEvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQf6f2Ay 1HYODzvFD0yZv5GssokJLVsx7dYxa7ZpGksCuV8tw+kTy0elfT/8T5S3FaUQbWt0 FS0y3/qYmM4bJVeMlH462Un0di0IN7DslbMO+AewC9jRqEYjawizbAaiswKpiONc TOxXPSHmzDu85M999XaqJYg+got1Jek3+a7igYO4H8rDv7YyHRb4LaMJWhzpa7fi iiQa32pTFhfsDL7/mt1eoUsvaaUfeonLPw62pv66gdyOLHvL2Z3NxzpZlOs/Bamj noeZr8nNdE8cPeiNzs8OjOVIAWwxbeOWl/CRGk11/lIC6hBZ4eS7raMZKw5yHyom oNXFqq4OI175BQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:27 2025 by rpki-client