This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json) Hash identifier: lv+MfzC9kDoA+uhPHmKuCqMyQF8eHDwZeKbInzXJG5w= Subject key identifier: C1:98:9B:18:11:C5:A0:6C:B5:8C:52:40:89:72:03:BB:78:B4:C6:3D Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B65430CE23EB9B418F9190CAA75579EA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft Manifest number: 17F3 Signing time: Sun 28 Dec 2025 14:00:51 +0000 Manifest this update: Sun 28 Dec 2025 14:00:51 +0000 Manifest next update: Mon 29 Dec 2025 14:00:51 +0000 Files and hashes: 1: 6LIzgfsZkg2tPdbkOjDSOljrSKQ.roa (hash: 8fR+oEr/YpHgkv3YGPInYqqKqxKmrcvr14NXaDplfeU=) 2: FGXlA6UVg4gAwt0-6eXZrReUgS8.roa (hash: 0eUHM++ZY3T8J++w0MzORMUGNOUzM3SPmGXZ94wcHik=) 3: NXi6BiEUeLmLx0EnK11CHUUboHU.roa (hash: S/TsUoCXZkfTfOOKvUTF8Zz4Fuiobz4qRMGvcIUvZaQ=) 4: NlAZNsTG336vINTx1xxj4SUzqts.roa (hash: T0P9jDnfR0yqX7Hc3gPwsAdKsAiwxQjOGPkEUjHiuWo=) 5: eIuwLUi_tUH9axX7ffljFKWX964.roa (hash: vKLCpdvF8QvRc1psT7A0tODI7Pnut7s9GiVgwdIB8wc=) 6: jj7lrd4ums4XXEu1B-RIch-GVLs.roa (hash: 6xBXfxQkdwUKWq6SGCwdJclZp2IkiTGHVyy092oPilA=) 7: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: JjJs+/pp5aIqhSUpJzZaK4Lj0cY5Gu+hg7u61DLkuQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:43:0c:e2:3e:b9:b4:18:f9:19:0c:aa:75:57:9e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Dec 28 14:00:51 2025 GMT Not After : Dec 29 14:00:51 2025 GMT Subject: CN=c1989b1811c5a06cb58c5240897203bb78b4c63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:86:c4:44:80:4f:5d:91:20:28:7b:1f:94: 1d:30:d4:b9:ee:f9:fc:c8:22:0c:ee:50:6f:a5:2e: 79:4e:2a:7c:de:04:c6:f8:6c:a9:0b:30:ae:c4:7c: f9:82:c8:64:6c:f5:5c:11:2a:3a:a0:e6:82:50:aa: 63:e0:fc:27:ee:1d:27:80:5b:94:86:77:ba:2a:39: cc:10:e2:91:7e:a8:b5:e7:a3:e2:5b:f0:b8:3d:13: d0:a9:3c:70:42:6e:16:e8:7e:57:c2:f3:ac:b8:cc: 41:ea:ec:64:be:e3:f6:24:d1:36:46:47:96:9c:9c: 5d:6e:4d:e9:0a:72:2c:dd:1a:b5:2b:80:cb:13:50: 10:19:cc:b8:12:e8:c0:ae:7e:32:90:5d:3c:09:bf: f3:0b:be:0d:19:f9:05:60:63:f3:81:a4:b9:94:d2: 00:94:fc:1d:83:7a:e5:f5:ac:68:0b:dc:de:89:b7: 03:16:14:76:91:22:d4:0a:54:44:b0:a5:46:c8:93: 39:5b:0d:0d:da:ce:7b:69:1e:70:05:58:3f:15:79: d2:1a:ee:5e:c7:ee:81:cc:6c:d7:3b:ec:e8:42:c0: 5d:07:9d:c5:eb:35:fb:c9:e4:c3:31:24:f1:6a:72: d9:3d:f2:6a:ba:41:18:39:16:d6:28:dd:b6:ac:ec: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:98:9B:18:11:C5:A0:6C:B5:8C:52:40:89:72:03:BB:78:B4:C6:3D X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:88:53:39:42:bb:9c:1e:d5:6c:f9:83:37:8b:5b:61:6f:27: f6:e5:eb:72:3c:be:c6:f4:83:75:29:56:be:ec:61:98:11:c0: e0:1d:85:c5:85:dd:b9:bf:9d:02:cb:56:54:64:9b:aa:86:ad: 37:9c:15:4a:bc:bb:f9:a6:51:cc:93:7b:94:50:2c:ff:b4:98: 8a:d6:6d:52:07:ab:7b:c6:9b:57:69:02:28:49:15:c1:87:9e: b3:5a:68:68:ed:d2:44:aa:08:9d:64:c0:d9:04:db:28:31:cf: 31:3a:36:db:f7:1a:a7:2c:12:a0:0f:26:ec:c4:c6:16:83:6e: 0f:d7:80:5b:1c:db:3e:bd:3f:15:c0:00:27:7e:5c:4b:d9:6d: 77:70:26:f9:40:90:ab:af:e0:6f:b0:1b:60:7c:81:1d:c0:2a: 54:6d:31:79:cc:c6:15:be:0e:d1:49:ea:e0:f0:93:d5:ff:78: f5:3e:3a:8e:1c:ef:99:3b:bd:d4:fb:a6:1a:84:36:3a:49:13: 2d:c1:52:30:0d:79:6e:99:f7:62:69:bc:bb:a7:66:d2:5b:32: ee:a3:6a:50:48:24:82:69:e0:c7:67:70:b5:db:6f:bc:df:5b: e3:27:b4:44:6e:d3:24:74:02:0c:6f:74:22:bc:c6:be:a3:40: 58:91:d1:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQwziPrm0GPkZDKp1V56mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjUxMjI4MTQwMDUxWhcNMjUxMjI5MTQwMDUxWjAzMTEwLwYDVQQD EyhjMTk4OWIxODExYzVhMDZjYjU4YzUyNDA4OTcyMDNiYjc4YjRjNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAqGxESAT12RICh7H5QdMNS57vn8 yCIM7lBvpS55Tip83gTG+GypCzCuxHz5gshkbPVcESo6oOaCUKpj4Pwn7h0ngFuU hne6KjnMEOKRfqi156PiW/C4PRPQqTxwQm4W6H5XwvOsuMxB6uxkvuP2JNE2RkeW nJxdbk3pCnIs3Rq1K4DLE1AQGcy4EujArn4ykF08Cb/zC74NGfkFYGPzgaS5lNIA lPwdg3rl9axoC9zeibcDFhR2kSLUClREsKVGyJM5Ww0N2s57aR5wBVg/FXnSGu5e x+6BzGzXO+zoQsBdB53F6zX7yeTDMSTxanLZPfJqukEYORbWKN22rOyddwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGYmxgRxaBstYxSQIlyA7t4tMY9MB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIhTOUK7 nB7VbPmDN4tbYW8n9uXrcjy+xvSDdSlWvuxhmBHA4B2FxYXdub+dAstWVGSbqoat N5wVSry7+aZRzJN7lFAs/7SYitZtUgere8abV2kCKEkVwYees1poaO3SRKoInWTA 2QTbKDHPMTo22/capywSoA8m7MTGFoNuD9eAWxzbPr0/FcAAJ35cS9ltd3Am+UCQ q6/gb7AbYHyBHcAqVG0xeczGFb4O0Unq4PCT1f949T46jhzvmTu91PumGoQ2OkkT LcFSMA15bpn3Ymm8u6dm0lsy7qNqUEgkgmngx2dwtdtvvN9b4ye0RG7TJHQCDG90 IrzGvqNAWJHRQw== -----END CERTIFICATE-----Generated at Sun Dec 28 22:13:56 2025 by rpki-client