This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft File: RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json) Hash identifier: wYum4xVGB7RViidv7yPn3NEi4VfBzY3Wt2IZhkyBbCE= Subject key identifier: 0E:41:8B:57:06:08:10:27:A8:7A:AC:8A:7D:90:2C:60:C0:F2:AE:10 Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B Certificate issuer: /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b Certificate serial: 019B397D2541ED1B5F8659647F13908F4CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft Manifest number: 086B Signing time: Sat 20 Dec 2025 02:01:01 +0000 Manifest this update: Sat 20 Dec 2025 02:01:01 +0000 Manifest next update: Sun 21 Dec 2025 02:01:01 +0000 Files and hashes: 1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: ZVDNL8QoOI3T4A14Mcxv1C/Im8aBiD7HOJ5h0pf11eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:25:41:ed:1b:5f:86:59:64:7f:13:90:8f:4c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b Validity Not Before: Dec 20 02:01:01 2025 GMT Not After : Dec 21 02:01:01 2025 GMT Subject: CN=0e418b5706081027a87aac8a7d902c60c0f2ae10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:c9:35:60:e8:6c:1b:84:92:62:02:8f:13: 57:0f:05:5c:de:36:79:10:13:ff:0c:76:df:9f:ae: bf:16:da:16:02:f1:b2:c1:a0:ef:f2:29:16:37:c7: 6d:5b:27:6b:a8:93:7f:1b:fd:c3:9d:e5:0f:74:14: 84:8a:3e:6d:2a:4f:57:23:55:ce:1c:b3:27:fa:1b: ba:90:18:da:5c:9a:f9:e0:6b:94:a9:a7:eb:65:e3: ad:de:64:49:05:b4:01:10:42:29:39:94:23:b4:f6: 1b:1f:f0:ad:e8:1d:d1:5e:7a:9a:f6:68:e2:59:dd: 0c:eb:73:b5:a0:d1:00:4a:df:fc:72:cf:ff:f1:4f: 28:ab:bf:02:99:13:81:22:79:42:a8:bf:51:dc:7c: cd:bc:2c:48:15:ff:48:c2:e7:31:a8:9a:e4:61:cc: 4d:95:bb:db:b3:d7:39:d6:88:03:c9:72:1d:0e:5c: f0:40:78:83:9f:fd:3f:5c:65:38:e9:6e:63:e7:70: 09:8a:f2:23:73:8f:7e:d1:41:fa:47:c8:f4:b8:3d: 35:1b:16:b0:ec:32:bc:a6:5c:a9:e3:8b:27:cf:11: 33:c4:61:e2:a7:66:ee:fb:7a:58:e6:79:1c:50:eb: 05:a0:99:f9:74:c1:a8:94:e1:48:29:73:8a:a4:6b: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:41:8B:57:06:08:10:27:A8:7A:AC:8A:7D:90:2C:60:C0:F2:AE:10 X509v3 Authority Key Identifier: keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:98:73:6f:ca:52:7b:3d:8e:77:1e:b5:99:33:25:97:c2:2c: 82:0f:74:39:15:ca:07:fa:4a:8c:60:d0:9a:3f:71:a8:a9:ba: db:5b:89:9f:00:aa:0e:0d:57:3f:30:9e:60:d2:32:7c:f5:fc: f6:89:7a:6e:70:b8:08:13:e7:0b:02:58:d3:7a:ba:e6:89:c6: d7:c7:5e:9a:cc:8a:61:6d:ab:15:4a:1a:c4:23:96:3b:99:af: d2:c7:dc:28:5e:2a:1b:4f:77:a2:4d:9a:4c:5b:c5:26:01:1f: eb:e0:04:52:8c:6a:2c:a4:d6:02:8a:db:5c:52:fc:3f:c6:e5: 05:0e:82:31:80:36:49:57:e7:da:49:fd:4b:61:a4:81:b2:d2: b5:52:f1:85:2f:c7:00:6b:e5:ae:e0:ae:bb:de:ba:ab:a1:8a: 54:0f:3e:c6:be:03:1e:e2:c8:ae:62:ad:86:e7:f2:0c:74:d0: 44:18:7a:5e:49:ab:b6:b2:f2:73:c4:a1:ad:36:30:18:c7:27: 95:6a:69:dc:e2:61:d8:53:8e:1a:bc:49:95:16:93:74:23:1c: e9:29:9f:ef:bc:b2:a0:6c:b3:48:9f:76:1b:ed:1f:79:62:3b: 88:53:f5:82:b1:ce:84:d8:a1:e8:29:c8:a7:51:23:2c:cb:b5: af:f8:15:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fSVB7RtfhllkfxOQj0y5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MTFiYmIzZWJiOWQyZDE3MGMzN2M2MmExMGNjZGMyMjkx NTU0NGIwHhcNMjUxMjIwMDIwMTAxWhcNMjUxMjIxMDIwMTAxWjAzMTEwLwYDVQQD EygwZTQxOGI1NzA2MDgxMDI3YTg3YWFjOGE3ZDkwMmM2MGMwZjJhZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU/JNWDobBuEkmICjxNXDwVc3jZ5 EBP/DHbfn66/FtoWAvGywaDv8ikWN8dtWydrqJN/G/3DneUPdBSEij5tKk9XI1XO HLMn+hu6kBjaXJr54GuUqafrZeOt3mRJBbQBEEIpOZQjtPYbH/Ct6B3RXnqa9mji Wd0M63O1oNEASt/8cs//8U8oq78CmROBInlCqL9R3HzNvCxIFf9IwucxqJrkYcxN lbvbs9c51ogDyXIdDlzwQHiDn/0/XGU46W5j53AJivIjc49+0UH6R8j0uD01Gxaw 7DK8plyp44snzxEzxGHip2bu+3pY5nkcUOsFoJn5dMGolOFIKXOKpGvAswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5Bi1cGCBAnqHqsin2QLGDA8q4QMB8GA1UdIwQY MBaAFEcRu7PrudLRcMN8YqEMzcIpFVRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTkt ZGExZTNjYjJkZWZhLzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS80OGViNTctOWZkNC00NTg2LWJmZTktZGExZTNjYjJkZWZh LzEvUnhHN3MtdTUwdEZ3dzN4aW9Rek53aWtWVkVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfphzb8pS ez2Odx61mTMll8Isgg90ORXKB/pKjGDQmj9xqKm621uJnwCqDg1XPzCeYNIyfPX8 9ol6bnC4CBPnCwJY03q65onG18demsyKYW2rFUoaxCOWO5mv0sfcKF4qG093ok2a TFvFJgEf6+AEUoxqLKTWAorbXFL8P8blBQ6CMYA2SVfn2kn9S2GkgbLStVLxhS/H AGvlruCuu966q6GKVA8+xr4DHuLIrmKthufyDHTQRBh6XkmrtrLyc8ShrTYwGMcn lWpp3OJh2FOOGrxJlRaTdCMc6Smf77yyoGyzSJ92G+0feWI7iFP1grHOhNih6CnI p1EjLMu1r/gViA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:52 2025 by rpki-client