This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json) Hash identifier: F8/4LK6l5jRTe1wx3Df9Ea63AafBubX3amq7LYEiXWA= Subject key identifier: E3:11:87:1A:F1:75:C4:1A:56:C3:FE:F0:13:71:BE:90:CC:47:F2:7B Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d Certificate serial: 019B3BD9580BB120938240781CD91C74B788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 13:00:58 +0000 Manifest this update: Sat 20 Dec 2025 13:00:58 +0000 Manifest next update: Sun 21 Dec 2025 13:00:58 +0000 Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=) 2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: R1E5fLlD1FhOVUYxUIc4DF+9iLcxmA35e45dDRiy0X0=) 3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:58:0b:b1:20:93:82:40:78:1c:d9:1c:74:b7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d Validity Not Before: Dec 20 13:00:58 2025 GMT Not After : Dec 21 13:00:58 2025 GMT Subject: CN=e311871af175c41a56c3fef01371be90cc47f27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:9e:fd:62:d0:07:c4:0e:47:06:f2:3c:47: 2a:91:63:e5:3a:f8:85:e3:00:ed:19:7c:36:09:2d: 3c:c9:a7:6b:23:97:4f:7e:95:3e:3c:88:ab:a5:1d: 56:68:7c:4d:dd:cc:c2:3a:91:5d:7d:0a:84:1f:24: 5b:2b:3d:3c:62:d0:eb:59:a1:3f:c8:3c:f8:3b:9d: fa:75:00:cb:23:a1:06:16:c1:7d:6e:da:be:f0:af: 48:5d:4b:bf:ba:59:1f:32:80:21:21:2b:3b:f7:77: 86:fe:ef:08:d9:9f:a5:11:9b:a8:7c:e8:4d:91:46: 42:51:17:7f:25:14:68:43:6e:e6:8d:26:55:63:21: 84:dc:23:3a:98:ae:2a:1a:e0:5b:bb:b5:c8:e2:46: 4c:0b:fd:44:f8:e9:1d:be:de:2a:5a:b1:95:95:62: 43:01:3a:77:e8:ab:68:16:74:46:25:22:f3:e4:12: ae:37:13:ac:09:3a:1f:7e:8c:a9:3c:bf:d9:ed:c5: 51:13:aa:30:fa:ec:6a:8e:98:f3:f8:0b:53:94:4b: 0e:a7:d9:df:24:3e:4d:f6:c6:89:c6:ec:07:e3:8f: 06:6c:4b:64:e8:96:db:48:ad:fe:40:74:25:89:40: 85:dd:44:28:5c:7f:0b:e3:51:e4:1e:d0:3b:5b:54: 0e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:11:87:1A:F1:75:C4:1A:56:C3:FE:F0:13:71:BE:90:CC:47:F2:7B X509v3 Authority Key Identifier: keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e8:de:b1:9e:7a:f3:5b:1c:7f:05:1d:fd:05:c1:25:82:df: db:b7:0e:47:a6:9f:73:a9:25:c4:d3:e0:c7:75:ff:68:0e:7a: 28:1b:21:90:f4:4a:e0:a3:b7:01:fe:71:71:dc:df:bb:22:73: a7:ed:9e:0c:1a:d1:d4:ac:5b:a2:7f:77:f4:40:75:21:fe:84: 49:3e:81:46:b2:67:d5:bf:44:19:bc:03:bd:6b:64:51:ef:f5: 8a:81:79:0d:1b:17:5c:44:35:16:39:9d:d7:ae:a9:7c:b6:34: 1e:d8:ab:c9:6b:cd:96:d8:bf:ec:53:1b:92:b1:cc:46:d5:9c: f6:a8:9f:18:05:c8:c2:5c:ac:d8:46:8f:01:8c:42:c6:f2:d5: d7:16:53:ae:60:72:97:15:4e:1e:c8:a0:bd:04:92:34:d8:0d: eb:b4:18:86:5c:d0:a0:e3:a5:eb:a5:aa:b2:6e:04:e9:25:03: 0b:51:8e:14:53:77:dd:12:3f:b2:c8:2a:3f:f3:e7:1c:da:c8: 0d:d4:ec:55:ea:fd:d8:2a:ee:75:fe:a1:be:b6:63:f2:7f:82: f0:b6:40:c7:98:23:d2:ed:1b:2a:01:9f:f8:79:42:5b:c8:5c: 9c:c7:21:5e:6d:25:93:ab:c3:f8:fe:41:b7:c8:68:4c:de:a5: 61:92:b0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72VgLsSCTgkB4HNkcdLeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZTJhOWZiNzc3MDEwMjk2ZjliOGUyMTVlZTBkYjQ0Njcx NzRkMmQwHhcNMjUxMjIwMTMwMDU4WhcNMjUxMjIxMTMwMDU4WjAzMTEwLwYDVQQD EyhlMzExODcxYWYxNzVjNDFhNTZjM2ZlZjAxMzcxYmU5MGNjNDdmMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE+e/WLQB8QORwbyPEcqkWPlOviF 4wDtGXw2CS08yadrI5dPfpU+PIirpR1WaHxN3czCOpFdfQqEHyRbKz08YtDrWaE/ yDz4O536dQDLI6EGFsF9btq+8K9IXUu/ulkfMoAhISs793eG/u8I2Z+lEZuofOhN kUZCURd/JRRoQ27mjSZVYyGE3CM6mK4qGuBbu7XI4kZMC/1E+Okdvt4qWrGVlWJD ATp36KtoFnRGJSLz5BKuNxOsCToffoypPL/Z7cVRE6ow+uxqjpjz+AtTlEsOp9nf JD5N9saJxuwH448GbEtk6JbbSK3+QHQliUCF3UQoXH8L41HkHtA7W1QO/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMRhxrxdcQaVsP+8BNxvpDMR/J7MB8GA1UdIwQY MBaAFEXiqft3cBApb5uOIV7g20RnF00tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGIt ZWJkMzE0NTQyMmVhLzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGItZWJkMzE0NTQyMmVh LzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbejesZ56 81scfwUd/QXBJYLf27cOR6afc6klxNPgx3X/aA56KBshkPRK4KO3Af5xcdzfuyJz p+2eDBrR1Kxbon939EB1If6EST6BRrJn1b9EGbwDvWtkUe/1ioF5DRsXXEQ1Fjmd 166pfLY0HtiryWvNlti/7FMbkrHMRtWc9qifGAXIwlys2EaPAYxCxvLV1xZTrmBy lxVOHsigvQSSNNgN67QYhlzQoOOl66Wqsm4E6SUDC1GOFFN33RI/ssgqP/PnHNrI DdTsVer92Crudf6hvrZj8n+C8LZAx5gj0u0bKgGf+HlCW8hcnMchXm0lk6vD+P5B t8hoTN6lYZKwVg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:32:20 2025 by rpki-client