This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json) Hash identifier: G7EQIfFgNtlPfy7IHSj8Y5f3yMQPbKAHfE2koR8s79k= Subject key identifier: 95:2D:90:BE:DA:31:FA:07:67:21:98:28:50:E4:4A:DE:39:1E:44:6E Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Certificate serial: 019B589A6173AA9E1F3CEADD4924DA004E21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft Manifest number: 07AE Signing time: Fri 26 Dec 2025 03:01:11 +0000 Manifest this update: Fri 26 Dec 2025 03:01:11 +0000 Manifest next update: Sat 27 Dec 2025 03:01:11 +0000 Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: 4GLhKz5z8Jv3y57w4v1qa5tTeJvCPP3wwk3Nv9JKjTo=) 2: dulLD0ENjA9tfgPr9DrSQJxWn5k.roa (hash: ecAhh1+SnR4Xv8G0G+2S5KTuId8TsIACx8G94ng9hIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:9a:61:73:aa:9e:1f:3c:ea:dd:49:24:da:00:4e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Validity Not Before: Dec 26 03:01:11 2025 GMT Not After : Dec 27 03:01:11 2025 GMT Subject: CN=952d90beda31fa076721982850e44ade391e446e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:98:2e:62:c4:eb:a3:75:b9:18:0e:bc:0a: 3f:46:b8:5c:da:db:92:d0:97:49:a6:6c:b3:d5:e9: 9d:43:53:89:0f:a0:63:03:9f:c3:bd:f6:63:da:7a: 11:33:af:3f:d7:6f:6b:bb:fa:ea:0d:12:6f:a9:2c: 53:2b:c4:43:2d:98:6e:54:83:3e:ea:8c:d0:72:1c: b3:0e:2b:7d:59:d6:03:9f:52:52:00:c7:ec:f8:55: 99:dc:a3:51:9d:50:68:da:d1:25:9e:20:87:d7:27: 25:90:70:45:52:3a:14:3b:58:0b:0b:f3:69:91:9a: b8:39:a3:2c:3e:f9:0d:13:ce:df:25:58:82:d4:a9: 14:5e:4d:1e:88:58:df:82:83:1c:ca:02:a2:48:32: 97:68:92:de:78:ea:74:43:ae:30:c1:a0:81:d2:8a: 0e:f6:d5:99:c0:e6:44:c2:93:e7:5e:50:13:8d:4e: 14:07:0a:9a:ad:cd:d7:71:95:36:3c:94:ca:26:13: 1a:94:55:ba:07:1d:78:20:4e:05:a1:0c:30:63:5c: 74:7e:0f:94:24:50:ef:0f:fa:e0:c6:65:49:75:8b: 2c:38:47:75:0e:7a:4f:60:7f:99:7c:cb:ac:df:be: 1a:be:98:e8:3a:93:fc:e7:a0:ce:a3:de:f6:23:2e: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:90:BE:DA:31:FA:07:67:21:98:28:50:E4:4A:DE:39:1E:44:6E X509v3 Authority Key Identifier: keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:96:08:f0:28:e9:4a:21:3e:63:96:6d:ae:f6:1a:65:24:f5: f4:9f:6d:37:9e:a7:9c:ae:4f:22:be:60:be:c7:f5:92:24:bc: a2:9c:43:5e:57:89:8f:0f:ad:41:53:6c:52:14:7c:d9:15:60: d0:4b:19:66:52:54:d1:e2:e9:bd:20:e9:a6:bb:07:29:8e:4c: eb:e3:c6:12:de:bb:9c:2b:a4:5e:de:8b:7b:8e:2e:aa:47:d8: ed:31:b7:0f:c5:f1:7d:5c:d6:9a:88:d5:9a:ec:c5:da:82:3b: 6d:4d:fb:18:e8:69:47:af:dc:14:7b:f6:61:d6:3d:12:3e:77: ab:3f:63:84:5a:51:52:a7:f2:6b:cc:24:f3:b8:91:63:cd:c8: 98:43:a4:67:d2:9c:37:1f:b4:7f:d4:cf:56:98:c2:4c:35:2f: ee:4a:a8:16:1f:c4:62:e9:87:cb:84:ae:b0:b4:97:91:12:fc: 3d:b3:0b:f2:72:a2:09:89:b0:e0:46:a8:08:f2:6b:70:7d:4d: b8:aa:40:4e:17:a8:45:09:3d:83:f9:9f:c2:9b:a9:1e:e9:f6: ac:7e:11:0a:93:65:39:3e:66:38:74:05:cf:74:4d:de:f2:b1: 6b:53:f2:d8:60:d8:1d:d4:10:e2:48:04:70:4b:33:c8:82:69: d1:56:5b:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYmmFzqp4fPOrdSSTaAE4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWE4MTMxMzljMDZiMWRjZjFiZmU4MzMyYjliODAxYWIz ZWIzMDIwHhcNMjUxMjI2MDMwMTExWhcNMjUxMjI3MDMwMTExWjAzMTEwLwYDVQQD Eyg5NTJkOTBiZWRhMzFmYTA3NjcyMTk4Mjg1MGU0NGFkZTM5MWU0NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseeYLmLE66N1uRgOvAo/Rrhc2tuS 0JdJpmyz1emdQ1OJD6BjA5/DvfZj2noRM68/129ru/rqDRJvqSxTK8RDLZhuVIM+ 6ozQchyzDit9WdYDn1JSAMfs+FWZ3KNRnVBo2tElniCH1yclkHBFUjoUO1gLC/Np kZq4OaMsPvkNE87fJViC1KkUXk0eiFjfgoMcygKiSDKXaJLeeOp0Q64wwaCB0ooO 9tWZwOZEwpPnXlATjU4UBwqarc3XcZU2PJTKJhMalFW6Bx14IE4FoQwwY1x0fg+U JFDvD/rgxmVJdYssOEd1DnpPYH+ZfMus374avpjoOpP856DOo972Iy4B+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUtkL7aMfoHZyGYKFDkSt45HkRuMB8GA1UdIwQY MBaAFESqgTE5wGsdzxv+gzK5uAGrPrMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUt NDFkZDdmM2VhN2E0LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUtNDFkZDdmM2VhN2E0 LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJYI8Cjp SiE+Y5ZtrvYaZST19J9tN56nnK5PIr5gvsf1kiS8opxDXleJjw+tQVNsUhR82RVg 0EsZZlJU0eLpvSDpprsHKY5M6+PGEt67nCukXt6Le44uqkfY7TG3D8XxfVzWmojV muzF2oI7bU37GOhpR6/cFHv2YdY9Ej53qz9jhFpRUqfya8wk87iRY83ImEOkZ9Kc Nx+0f9TPVpjCTDUv7kqoFh/EYumHy4SusLSXkRL8PbML8nKiCYmw4EaoCPJrcH1N uKpATheoRQk9g/mfwpupHun2rH4RCpNlOT5mOHQFz3RN3vKxa1Py2GDYHdQQ4kgE cEszyIJp0VZbPw== -----END CERTIFICATE-----Generated at Fri Dec 26 09:25:18 2025 by rpki-client