This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json) Hash identifier: /OyXLiodpSlUsnIeI5JLmaVw/4FvWofM8QdGurJDHHg= Subject key identifier: 22:9E:5C:ED:AE:7A:42:E1:CC:11:AB:79:B5:1A:4D:E7:B5:A4:9B:2A Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290 Certificate serial: 019B3F482FBC2F514DC7BCDB41008BE0597E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft Manifest number: 0B79 Signing time: Sun 21 Dec 2025 05:00:53 +0000 Manifest this update: Sun 21 Dec 2025 05:00:53 +0000 Manifest next update: Mon 22 Dec 2025 05:00:53 +0000 Files and hashes: 1: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: RuNLew7sJo7CqLJsTDDGkgSkbKNJpQEqR7Io9Vii/n8=) 2: lbF_l02xwlPuqyIyhvc-CUJUU3g.roa (hash: 7hIs2Gkxh47foaseC5DC1sFgdBVuaxJrQVf2xLhJkbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:2f:bc:2f:51:4d:c7:bc:db:41:00:8b:e0:59:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290 Validity Not Before: Dec 21 05:00:53 2025 GMT Not After : Dec 22 05:00:53 2025 GMT Subject: CN=229e5cedae7a42e1cc11ab79b51a4de7b5a49b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:99:87:e4:95:69:9f:14:16:33:7e:4e:a4: 58:6a:a9:54:12:c0:79:15:8e:57:3f:62:97:53:16: a1:e9:c0:32:79:eb:76:68:15:83:53:a5:68:72:93: aa:d7:0f:66:c7:c5:c2:97:3a:e0:07:fa:9e:3d:59: 9d:57:ce:21:4f:b9:e4:2c:85:aa:35:ab:a0:ce:fc: 3f:bd:cf:a7:6e:35:af:9b:c1:a3:a7:29:79:0a:45: 2c:57:b5:15:af:b2:c4:b8:96:99:7f:3a:36:b3:98: 97:0d:45:22:47:c7:e6:e1:d3:9d:26:a6:b4:97:85: 4f:34:bf:9b:cc:f4:f8:03:1f:79:68:54:67:e9:5c: a6:c3:1b:1d:52:e1:54:d9:df:72:5f:22:ce:51:51: 47:3a:74:5d:c9:76:1d:44:46:5f:4e:73:77:3d:d0: c8:1a:e4:2d:1f:b8:83:d9:0d:26:c7:82:64:c5:b3: d4:37:c2:56:89:6f:2f:cc:68:99:fb:29:0f:c4:9b: ad:9a:99:18:a8:04:1a:a3:2d:d4:27:34:d0:00:ac: b8:c8:8a:7b:ac:e7:ef:a1:48:4e:b7:f2:a9:e7:de: ae:12:5c:7d:51:36:e3:bd:26:6f:82:f2:d9:b1:9c: 41:76:e3:30:56:9f:f8:30:2e:b4:7d:da:34:fc:57: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9E:5C:ED:AE:7A:42:E1:CC:11:AB:79:B5:1A:4D:E7:B5:A4:9B:2A X509v3 Authority Key Identifier: keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:37:82:7d:da:12:a2:c9:84:a1:8b:bf:d1:61:82:b2:d0:85: f3:cf:f7:20:fc:b6:b7:41:63:78:d7:db:5b:ef:e3:ae:a3:82: 58:41:36:43:9b:49:d0:27:9e:91:e7:ed:97:0c:24:dd:17:fb: d7:ac:bd:9d:2b:e6:b5:f9:56:69:59:5f:a9:9b:db:dd:6f:09: 31:c3:31:4d:e6:79:7b:50:f9:85:4d:af:52:d8:99:1f:d9:72: a3:7c:b5:83:44:77:a3:ff:b8:52:98:cf:06:68:94:ad:f0:ac: d6:85:ce:cd:93:b6:34:4f:2e:ed:6e:84:4c:e6:76:2b:02:e9: 34:3e:9a:99:80:5a:f9:f1:02:c8:7a:7d:24:b1:15:19:99:37: 4d:3d:60:0b:d0:9f:4d:2a:b6:d5:1f:86:ae:db:13:43:26:ec: b9:04:20:93:e4:77:b5:87:6b:b2:e3:55:d9:2d:00:e3:5a:1f: c6:96:b5:9c:46:66:01:31:60:0a:e2:c5:e2:9a:45:13:1f:4f: c6:44:7a:6b:1e:cd:c2:56:39:1c:68:7c:bc:eb:3d:ae:d3:34: d8:3c:90:5d:3f:db:60:84:7e:90:6d:bc:9c:48:d6:7d:bf:6c: f9:22:c6:86:30:63:5d:3a:e3:b0:ae:6f:d0:e0:40:74:ee:54: 7e:33:f1:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SC+8L1FNx7zbQQCL4Fl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWQ1NmVlNjAxZGFjM2RmYTYxZGZlNTJjYmY1YjAwYjdi N2EyOTAwHhcNMjUxMjIxMDUwMDUzWhcNMjUxMjIyMDUwMDUzWjAzMTEwLwYDVQQD EygyMjllNWNlZGFlN2E0MmUxY2MxMWFiNzliNTFhNGRlN2I1YTQ5YjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7CZh+SVaZ8UFjN+TqRYaqlUEsB5 FY5XP2KXUxah6cAyeet2aBWDU6VocpOq1w9mx8XClzrgB/qePVmdV84hT7nkLIWq Naugzvw/vc+nbjWvm8Gjpyl5CkUsV7UVr7LEuJaZfzo2s5iXDUUiR8fm4dOdJqa0 l4VPNL+bzPT4Ax95aFRn6VymwxsdUuFU2d9yXyLOUVFHOnRdyXYdREZfTnN3PdDI GuQtH7iD2Q0mx4JkxbPUN8JWiW8vzGiZ+ykPxJutmpkYqAQaoy3UJzTQAKy4yIp7 rOfvoUhOt/Kp596uElx9UTbjvSZvgvLZsZxBduMwVp/4MC60fdo0/FdxlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKeXO2uekLhzBGrebUaTee1pJsqMB8GA1UdIwQY MBaAFEStVu5gHaw9+mHf5Sy/WwC3t6KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUt ZWVkMjA0ZWQ5NzgwLzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9jZmE1YjAtNzk4OC00ZmU5LTlkZDUtZWVkMjA0ZWQ5Nzgw LzEvUksxVzdtQWRyRDM2WWRfbExMOWJBTGUzb3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTeCfdoS osmEoYu/0WGCstCF88/3IPy2t0FjeNfbW+/jrqOCWEE2Q5tJ0Ceekeftlwwk3Rf7 16y9nSvmtflWaVlfqZvb3W8JMcMxTeZ5e1D5hU2vUtiZH9lyo3y1g0R3o/+4UpjP BmiUrfCs1oXOzZO2NE8u7W6ETOZ2KwLpND6amYBa+fECyHp9JLEVGZk3TT1gC9Cf TSq21R+GrtsTQybsuQQgk+R3tYdrsuNV2S0A41ofxpa1nEZmATFgCuLF4ppFEx9P xkR6ax7NwlY5HGh8vOs9rtM02DyQXT/bYIR+kG28nEjWfb9s+SLGhjBjXTrjsK5v 0OBAdO5UfjPxPA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:07:47 2025 by rpki-client