This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json) Hash identifier: q/90ZL2D96rGw7mmPpnObxypAyGK5Y5TpUG0hQ4P6xw= Subject key identifier: 50:13:EA:57:A9:43:4F:CD:77:A1:35:8D:77:F1:93:11:55:D5:C2:0D Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf Certificate serial: 019B35A01F5FF57CC84CB0C3127A4A891719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft Manifest number: 14D9 Signing time: Fri 19 Dec 2025 08:00:44 +0000 Manifest this update: Fri 19 Dec 2025 08:00:44 +0000 Manifest next update: Sat 20 Dec 2025 08:00:44 +0000 Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=) 2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: b5S4zfZSbnF/a0uMNeaRapGTMl5mhXXWwfuLcdkeRoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:1f:5f:f5:7c:c8:4c:b0:c3:12:7a:4a:89:17:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf Validity Not Before: Dec 19 08:00:44 2025 GMT Not After : Dec 20 08:00:44 2025 GMT Subject: CN=5013ea57a9434fcd77a1358d77f1931155d5c20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:15:3e:c3:76:e9:3e:c2:0e:1d:82:03:82: 88:49:e8:c7:5b:1e:83:cf:af:04:17:d2:7d:7e:9f: d2:ae:12:75:b0:b5:a6:7d:ea:db:94:b3:90:83:af: 1f:7d:ee:c7:f8:ab:3d:b6:53:a6:91:be:08:c8:17: 04:87:fb:1d:00:cf:a8:d1:53:05:7d:0a:70:f6:77: eb:d1:48:7a:32:16:3d:7f:ce:27:b1:60:a1:52:73: d4:e7:56:43:4e:9c:c4:eb:40:d4:5a:b3:64:cb:4d: 9d:f2:a6:9a:13:c2:2d:1d:88:0e:b8:ee:45:75:c4: bc:bd:87:83:16:01:29:25:b6:80:94:cc:c6:13:e4: c4:42:69:8b:24:5b:88:83:d1:76:09:21:d0:0e:eb: 99:77:6e:1b:a8:f1:2c:ca:87:15:ae:6c:f3:c2:02: b8:fc:e8:1c:e9:20:e5:2d:ad:33:fa:9a:f3:e8:94: 05:3f:2f:1a:23:df:ac:c0:0f:f8:c1:00:31:7a:c6: 15:5f:b6:c1:49:20:19:9b:eb:aa:89:90:5e:23:7b: 20:e2:51:98:96:6f:7a:7b:42:9b:39:d5:08:25:02: 21:b5:94:7b:3d:06:6d:23:63:93:46:a9:0c:bb:df: 47:01:fc:00:2f:c3:b4:24:5b:92:4e:50:02:67:ae: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:13:EA:57:A9:43:4F:CD:77:A1:35:8D:77:F1:93:11:55:D5:C2:0D X509v3 Authority Key Identifier: keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ff:d3:c4:58:9b:fe:2e:d9:46:c1:ce:7f:85:92:69:5a:93: 8d:ac:75:e5:5f:a2:b5:73:60:0a:d7:9f:b9:b7:1d:65:6e:4d: 65:40:df:bd:a6:df:f6:cb:39:60:f9:67:97:f4:bb:ec:01:ca: a7:7b:25:1e:be:89:78:e1:75:42:7c:4a:f2:a1:63:8b:ef:77: 73:80:58:ad:59:cd:2c:cc:a0:ba:e4:ba:e7:3d:7a:72:1b:29: 8c:f2:3c:61:6f:73:a1:42:1f:b5:bc:8d:82:62:e0:6b:49:ad: 44:c8:ba:40:8a:f7:65:1b:ff:ea:bc:1e:a9:f6:0f:50:e2:38: 36:d0:b4:62:59:fb:57:1c:b9:ba:c0:70:4c:49:15:4d:17:5f: 71:c7:64:70:fe:2c:49:73:21:8d:ab:88:0a:c1:3d:42:1c:e6: 74:ef:9d:00:5d:0d:67:0b:31:c9:eb:f8:ab:a2:d5:5d:89:8f: 73:4f:49:9b:86:40:ce:17:29:07:3f:cc:83:07:7a:ef:d4:66: b1:42:da:13:9c:40:8b:a0:93:0a:42:2b:de:c2:60:13:9d:fd: e0:f1:cf:88:25:96:37:dc:d1:ad:c5:45:b3:29:9f:96:a7:49: 76:45:07:61:e7:49:91:34:3c:b2:92:8d:17:e3:2e:99:16:24: 01:c0:6f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oB9f9XzITLDDEnpKiRcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDU2NTc5YTUxNzJmY2EwOGUwNDNiMDJiYjk3MmZiNzUw M2FlYWYwHhcNMjUxMjE5MDgwMDQ0WhcNMjUxMjIwMDgwMDQ0WjAzMTEwLwYDVQQD Eyg1MDEzZWE1N2E5NDM0ZmNkNzdhMTM1OGQ3N2YxOTMxMTU1ZDVjMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliQVPsN26T7CDh2CA4KISejHWx6D z68EF9J9fp/SrhJ1sLWmferblLOQg68ffe7H+Ks9tlOmkb4IyBcEh/sdAM+o0VMF fQpw9nfr0Uh6MhY9f84nsWChUnPU51ZDTpzE60DUWrNky02d8qaaE8ItHYgOuO5F dcS8vYeDFgEpJbaAlMzGE+TEQmmLJFuIg9F2CSHQDuuZd24bqPEsyocVrmzzwgK4 /Ogc6SDlLa0z+prz6JQFPy8aI9+swA/4wQAxesYVX7bBSSAZm+uqiZBeI3sg4lGY lm96e0KbOdUIJQIhtZR7PQZtI2OTRqkMu99HAfwAL8O0JFuSTlACZ67fFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAT6lepQ0/Nd6E1jXfxkxFV1cINMB8GA1UdIwQY MBaAFEZFZXmlFy/KCOBDsCu5cvt1A66vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYt YTM0Yzg1NWI1YWFiLzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYtYTM0Yzg1NWI1YWFi LzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP/TxFib /i7ZRsHOf4WSaVqTjax15V+itXNgCtefubcdZW5NZUDfvabf9ss5YPlnl/S77AHK p3slHr6JeOF1QnxK8qFji+93c4BYrVnNLMyguuS65z16chspjPI8YW9zoUIftbyN gmLga0mtRMi6QIr3ZRv/6rweqfYPUOI4NtC0Yln7Vxy5usBwTEkVTRdfccdkcP4s SXMhjauICsE9QhzmdO+dAF0NZwsxyev4q6LVXYmPc09Jm4ZAzhcpBz/Mgwd679Rm sULaE5xAi6CTCkIr3sJgE5394PHPiCWWN9zRrcVFsymflqdJdkUHYedJkTQ8spKN F+MumRYkAcBv/A== -----END CERTIFICATE-----Generated at Fri Dec 19 14:29:50 2025 by rpki-client