This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json) Hash identifier: TvgKliOBPhnCJjG26DgvmMywJ/ZjxL7VuEtx8r3mWLE= Subject key identifier: 34:B5:B9:29:03:FC:08:53:35:AC:08:A6:AA:0C:01:D2:14:1E:F3:43 Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B3720ED4DA01FBE5CE6EE7BE5AEC2FCE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft Manifest number: 17D8 Signing time: Fri 19 Dec 2025 15:01:03 +0000 Manifest this update: Fri 19 Dec 2025 15:01:03 +0000 Manifest next update: Sat 20 Dec 2025 15:01:03 +0000 Files and hashes: 1: 5VA96XxOdurSo7WQjAVzmluh-RE.roa (hash: ENjWRws9JScAxQKlvyNZ2q/dH7OpFkNw9JoXC6WNRGE=) 2: FGXlA6UVg4gAwt0-6eXZrReUgS8.roa (hash: 0eUHM++ZY3T8J++w0MzORMUGNOUzM3SPmGXZ94wcHik=) 3: L1WB6fFL06KLR8h5wroGyolEGSE.roa (hash: EsmzyCISaRA+RTEpnMz8/CA04jKc2ysyeMO0Ptwc6t8=) 4: NXi6BiEUeLmLx0EnK11CHUUboHU.roa (hash: S/TsUoCXZkfTfOOKvUTF8Zz4Fuiobz4qRMGvcIUvZaQ=) 5: NlAZNsTG336vINTx1xxj4SUzqts.roa (hash: T0P9jDnfR0yqX7Hc3gPwsAdKsAiwxQjOGPkEUjHiuWo=) 6: eIuwLUi_tUH9axX7ffljFKWX964.roa (hash: vKLCpdvF8QvRc1psT7A0tODI7Pnut7s9GiVgwdIB8wc=) 7: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: lXe/gOpvEKoyXfMbQaBzo+14TDtB7sCAe1bCMEzQcc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:ed:4d:a0:1f:be:5c:e6:ee:7b:e5:ae:c2:fc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Dec 19 15:01:03 2025 GMT Not After : Dec 20 15:01:03 2025 GMT Subject: CN=34b5b92903fc085335ac08a6aa0c01d2141ef343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:df:6f:bf:ba:62:c0:94:b2:ad:d1:22:44: a7:a5:e6:00:53:ac:c1:3a:ef:18:c2:81:83:41:c4: 52:27:a9:5b:57:04:33:94:5d:f3:f1:5b:3e:bf:b5: 36:a6:89:d8:13:e3:83:5b:03:b3:ee:fe:a8:07:53: e1:7d:ab:b7:d5:8c:88:17:37:53:d5:7a:38:49:2e: 2d:8e:ec:47:ba:61:dc:aa:25:a2:19:9d:72:f1:f5: 9b:ec:20:27:5f:59:a3:7d:ea:af:47:da:d9:d6:d9: 1f:9e:43:8c:af:ca:71:77:f4:fb:2a:84:74:be:44: 01:97:f4:e0:6c:b1:83:79:04:54:38:80:f9:c0:46: ea:26:62:38:8c:5d:95:84:7c:d3:fe:3e:8f:c1:5a: 02:c8:c9:16:e8:0c:20:4b:64:aa:0b:2e:8c:2e:2a: 81:4c:de:6d:17:8f:1f:bb:7b:52:0a:90:9c:7d:a8: 43:cd:3e:8f:fd:61:b3:34:dc:f0:eb:04:dc:17:dd: d6:29:cb:69:15:f9:38:bf:90:8b:41:38:4d:25:3c: 15:97:f7:c0:a9:09:ca:3f:a1:b9:bd:86:9d:c3:10: bc:6c:4a:52:bc:3d:ce:5f:1a:32:74:cb:f6:b5:cb: 0d:bf:a8:8a:89:5b:e2:09:bd:88:c7:7c:bc:9a:f2: 3d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B5:B9:29:03:FC:08:53:35:AC:08:A6:AA:0C:01:D2:14:1E:F3:43 X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c7:76:8d:61:a2:46:c6:09:2f:07:e9:d9:d8:7c:67:82:ab: dc:91:36:7c:3f:a8:7f:20:b4:29:ec:0d:d7:c3:2e:c9:5a:68: 03:1b:d2:17:a9:71:22:33:ad:59:c4:a2:79:21:8b:13:3b:22: 8d:d5:0e:2e:aa:68:73:2b:ff:2e:f6:92:a9:91:51:e0:a8:8c: 6c:de:b6:69:ec:8b:8e:37:8d:c2:bf:74:9e:06:51:54:7a:3f: 82:f8:c9:3c:e6:be:64:cc:6e:90:d1:07:c8:57:51:e8:88:e0: 69:7a:e2:64:3a:98:cb:db:e2:17:a1:7c:b1:f5:97:da:85:22: 53:e4:b1:b0:65:ed:0c:f5:5d:15:a7:2e:c6:56:6b:e9:75:03: cc:c1:75:97:76:87:d7:d9:1c:e4:5e:3c:13:27:ef:07:bc:f8: 79:48:b8:f1:eb:0d:d0:74:0c:17:be:c7:60:31:30:df:9b:89: 53:5b:37:f8:05:43:34:2e:37:71:b9:10:3f:e6:39:8d:89:64: b5:41:aa:da:2e:5c:c4:5d:e2:ae:36:be:e4:45:f4:7d:be:4d: a0:be:73:a0:d1:4c:e0:b2:16:dd:64:10:b1:de:8b:22:95:6b: d2:17:70:45:f6:a7:40:f1:9a:cb:c9:e6:b8:72:96:9b:4e:93: 0a:eb:b7:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IO1NoB++XObue+WuwvzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjUxMjE5MTUwMTAzWhcNMjUxMjIwMTUwMTAzWjAzMTEwLwYDVQQD EygzNGI1YjkyOTAzZmMwODUzMzVhYzA4YTZhYTBjMDFkMjE0MWVmMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXvfb7+6YsCUsq3RIkSnpeYAU6zB Ou8YwoGDQcRSJ6lbVwQzlF3z8Vs+v7U2ponYE+ODWwOz7v6oB1Phfau31YyIFzdT 1Xo4SS4tjuxHumHcqiWiGZ1y8fWb7CAnX1mjfeqvR9rZ1tkfnkOMr8pxd/T7KoR0 vkQBl/TgbLGDeQRUOID5wEbqJmI4jF2VhHzT/j6PwVoCyMkW6AwgS2SqCy6MLiqB TN5tF48fu3tSCpCcfahDzT6P/WGzNNzw6wTcF93WKctpFfk4v5CLQThNJTwVl/fA qQnKP6G5vYadwxC8bEpSvD3OXxoydMv2tcsNv6iKiVviCb2Ix3y8mvI9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDS1uSkD/AhTNawIpqoMAdIUHvNDMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsd2jWGi RsYJLwfp2dh8Z4Kr3JE2fD+ofyC0KewN18MuyVpoAxvSF6lxIjOtWcSieSGLEzsi jdUOLqpocyv/LvaSqZFR4KiMbN62aeyLjjeNwr90ngZRVHo/gvjJPOa+ZMxukNEH yFdR6IjgaXriZDqYy9viF6F8sfWX2oUiU+SxsGXtDPVdFacuxlZr6XUDzMF1l3aH 19kc5F48EyfvB7z4eUi48esN0HQMF77HYDEw35uJU1s3+AVDNC43cbkQP+Y5jYlk tUGq2i5cxF3irja+5EX0fb5NoL5zoNFM4LIW3WQQsd6LIpVr0hdwRfanQPGay8nm uHKWm06TCuu3+g== -----END CERTIFICATE-----Generated at Sat Dec 20 00:54:44 2025 by rpki-client