This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json) Hash identifier: wC1mSs74doZaNqDtUZUFIby/OZYr+GR3KCDqao7TBnI= Subject key identifier: C2:6F:7E:DD:DC:5E:A1:9B:E2:97:39:B7:19:59:18:03:8E:00:0A:2C Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Certificate serial: 019B69FBA59F1D7B4C8BAFAB55A72196D1F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft Manifest number: 07B7 Signing time: Mon 29 Dec 2025 12:00:58 +0000 Manifest this update: Mon 29 Dec 2025 12:00:58 +0000 Manifest next update: Tue 30 Dec 2025 12:00:58 +0000 Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: 5wO4si14Gtowp13Cd1xLK/8dmWfkU2kSk12b116XYE0=) 2: dulLD0ENjA9tfgPr9DrSQJxWn5k.roa (hash: ecAhh1+SnR4Xv8G0G+2S5KTuId8TsIACx8G94ng9hIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:a5:9f:1d:7b:4c:8b:af:ab:55:a7:21:96:d1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Validity Not Before: Dec 29 12:00:58 2025 GMT Not After : Dec 30 12:00:58 2025 GMT Subject: CN=c26f7edddc5ea19be29739b7195918038e000a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:be:83:bd:fe:ed:14:e0:a0:e2:9e:57:23: 01:f8:d9:b5:d6:3e:63:e3:d3:f6:3f:72:d3:32:6a: 1a:de:cc:71:e7:97:46:ac:26:13:c1:86:b2:f4:de: 92:d0:c2:be:25:68:5d:c2:0c:8f:2b:08:ec:94:5f: 0b:a3:c0:76:fb:05:3b:fc:50:17:0e:8f:24:df:5e: 28:d8:8c:f5:b6:d0:03:b9:e7:bb:86:0e:81:b1:85: 2d:d4:01:f5:d3:f7:9e:b1:c7:dc:84:2b:87:3c:8c: 15:1b:0e:cf:ac:66:48:63:68:d7:0f:b4:e7:bf:f5: 1b:32:ed:1a:9b:d0:a1:d9:b9:73:8a:fc:c6:d2:1b: 79:d2:91:30:81:9a:28:f2:f4:16:af:00:c7:62:c9: 4f:0f:65:e5:9f:76:89:79:e9:41:2f:7a:a4:84:46: 4c:dc:9b:0c:e4:30:0a:a7:9e:c3:4b:ca:50:19:d2: 74:9f:5f:e7:61:a2:b7:d1:0c:d4:f1:40:95:ff:f8: f2:70:ff:1e:f3:9d:95:16:24:69:d2:18:3a:81:8c: cc:f1:b6:61:ed:58:c1:d9:dd:2d:c7:58:b2:03:df: 17:fd:03:fc:e2:2a:88:54:a9:26:3a:e8:2c:df:5d: b3:a1:02:29:5a:d0:b5:22:ce:62:4a:b3:c2:a8:6e: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6F:7E:DD:DC:5E:A1:9B:E2:97:39:B7:19:59:18:03:8E:00:0A:2C X509v3 Authority Key Identifier: keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:87:c5:d5:46:1b:ac:fe:2b:89:77:81:46:87:48:52:47:fb: c9:f5:1d:18:91:a6:8a:7f:46:ba:6f:9f:54:2f:db:0d:0b:ab: ed:ff:75:a9:a3:0e:e5:9c:75:11:f7:e4:b5:71:13:e8:20:a3: 6c:b5:a2:a7:32:fe:ef:b7:bd:2f:c7:4c:71:38:8a:f5:b9:d7: 87:14:3f:e0:98:ff:51:29:48:c4:34:b2:ec:d2:40:cb:77:e8: d7:9f:8f:9f:5b:6d:96:ab:d9:03:f2:ba:ad:ac:63:84:99:51: 56:c7:10:83:a0:de:50:01:a8:04:2d:af:87:e3:92:a9:cd:da: 2a:a8:44:b1:43:05:8d:81:5e:6a:13:61:fa:07:03:cd:ea:26: 21:ce:8c:22:04:de:73:cc:0b:f3:d8:8f:50:3a:a0:47:6d:78: 09:31:ba:3b:f0:31:49:41:28:31:d9:f5:f5:ac:14:f5:f0:78: ee:a3:74:18:5a:62:6b:e2:76:95:16:ab:ac:b6:39:5b:a5:1e: e7:a5:79:52:94:b0:4d:bf:89:c2:6f:6c:54:39:0f:69:da:9f: ac:71:0b:7a:d6:96:f9:be:18:e5:74:60:10:f9:64:31:3b:db: 6e:f9:dc:38:b1:9f:01:19:44:15:d1:67:8f:8a:a6:28:92:a8: fd:d3:92:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+6WfHXtMi6+rVachltHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWE4MTMxMzljMDZiMWRjZjFiZmU4MzMyYjliODAxYWIz ZWIzMDIwHhcNMjUxMjI5MTIwMDU4WhcNMjUxMjMwMTIwMDU4WjAzMTEwLwYDVQQD EyhjMjZmN2VkZGRjNWVhMTliZTI5NzM5YjcxOTU5MTgwMzhlMDAwYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9y+g73+7RTgoOKeVyMB+Nm11j5j 49P2P3LTMmoa3sxx55dGrCYTwYay9N6S0MK+JWhdwgyPKwjslF8Lo8B2+wU7/FAX Do8k314o2Iz1ttADuee7hg6BsYUt1AH10/eescfchCuHPIwVGw7PrGZIY2jXD7Tn v/UbMu0am9Ch2blzivzG0ht50pEwgZoo8vQWrwDHYslPD2Xln3aJeelBL3qkhEZM 3JsM5DAKp57DS8pQGdJ0n1/nYaK30QzU8UCV//jycP8e852VFiRp0hg6gYzM8bZh 7VjB2d0tx1iyA98X/QP84iqIVKkmOugs312zoQIpWtC1Is5iSrPCqG40UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJvft3cXqGb4pc5txlZGAOOAAosMB8GA1UdIwQY MBaAFESqgTE5wGsdzxv+gzK5uAGrPrMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUt NDFkZDdmM2VhN2E0LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUtNDFkZDdmM2VhN2E0 LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4fF1UYb rP4riXeBRodIUkf7yfUdGJGmin9Gum+fVC/bDQur7f91qaMO5Zx1EffktXET6CCj bLWipzL+77e9L8dMcTiK9bnXhxQ/4Jj/USlIxDSy7NJAy3fo15+Pn1ttlqvZA/K6 raxjhJlRVscQg6DeUAGoBC2vh+OSqc3aKqhEsUMFjYFeahNh+gcDzeomIc6MIgTe c8wL89iPUDqgR214CTG6O/AxSUEoMdn19awU9fB47qN0GFpia+J2lRarrLY5W6Ue 56V5UpSwTb+Jwm9sVDkPadqfrHELetaW+b4Y5XRgEPlkMTvbbvncOLGfARlEFdFn j4qmKJKo/dOSwA== -----END CERTIFICATE-----Generated at Mon Dec 29 14:39:49 2025 by rpki-client