This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft File: REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json) Hash identifier: iM583XDZgbiSksjKNRMvITEgcU+xQRcxWTbhJCqGW6Y= Subject key identifier: 6C:82:4F:59:F4:E4:9D:13:8C:B9:F2:C7:EE:41:32:54:32:E0:47:30 Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f Certificate serial: 019B4F28FBAA482C04C185204876D0D7E877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft Manifest number: 0DC5 Signing time: Wed 24 Dec 2025 07:00:44 +0000 Manifest this update: Wed 24 Dec 2025 07:00:44 +0000 Manifest next update: Thu 25 Dec 2025 07:00:44 +0000 Files and hashes: 1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: r7FX94PWC8QneZ3rMPp/o/dEctVmcMkImyk7OW6wjaA=) 2: pkwPVsxSdYAUrwekUiCsSfEtBsc.roa (hash: VAoyCYorOSAEGcSFlO8mKuQLxbXXAWAO6ekhAMd8Fps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:28:fb:aa:48:2c:04:c1:85:20:48:76:d0:d7:e8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f Validity Not Before: Dec 24 07:00:44 2025 GMT Not After : Dec 25 07:00:44 2025 GMT Subject: CN=6c824f59f4e49d138cb9f2c7ee41325432e04730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:19:da:04:1a:e0:3a:11:cf:ee:22:bf:3b: 33:33:0d:fc:fd:28:26:d5:d7:71:00:33:07:f1:23: de:96:25:bd:37:cc:db:da:b3:6a:ff:2b:5f:27:c0: a3:92:52:c4:98:5b:de:f1:82:ae:9a:ea:08:b9:49: d9:16:85:0b:72:b5:0e:7c:89:ea:9c:8a:d1:0c:0b: e9:1f:a0:dc:1a:9e:2a:c3:3b:1f:45:89:84:9f:a4: 68:cd:94:58:be:77:44:86:b3:8f:50:84:0f:ff:4d: 04:43:a8:10:54:b3:63:1d:dd:50:98:14:8a:d9:c7: ff:39:e9:1d:50:f6:b2:f8:d8:fb:bd:35:21:80:c9: 2b:f3:73:6c:c8:04:1a:93:17:3e:46:02:f6:7b:b6: d7:8d:2b:cd:1e:2f:9b:ba:17:66:55:69:0d:69:50: 54:57:65:2c:d0:a0:18:fd:47:37:e9:89:11:d5:e4: 10:62:d8:42:c2:bf:ac:d2:1e:8a:9f:e1:6e:0b:bb: c2:7c:09:9e:45:e1:65:bb:d8:e5:5c:2f:fc:fa:37: df:42:c4:59:65:a1:f7:87:ee:e9:15:2b:7d:f8:07: 63:dc:03:d5:28:0c:2a:fb:76:c6:6b:93:7d:1f:3b: 05:0b:bd:76:6c:37:09:37:0f:65:0c:71:a3:61:da: 26:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:82:4F:59:F4:E4:9D:13:8C:B9:F2:C7:EE:41:32:54:32:E0:47:30 X509v3 Authority Key Identifier: keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3b:7f:41:98:a8:f5:38:7d:29:1a:ff:41:8b:b1:bf:da:75: ce:1d:66:9e:2e:ab:4e:d7:0e:64:af:4a:ad:90:73:f7:c8:46: 18:c7:25:6b:bd:81:14:ce:ec:01:11:f9:2a:43:97:55:cc:ef: ca:f5:cd:28:62:90:0d:a5:2c:b4:c9:ef:bf:7e:55:65:a1:6c: de:cf:0a:bf:04:b4:b6:04:8d:b1:80:b0:3f:a1:9f:46:1b:b1: 8b:47:9c:4e:c9:24:ed:23:b2:c5:99:fd:21:c9:99:bd:93:4f: 04:89:49:ca:d7:21:5e:7e:be:ae:0b:52:58:6f:c7:ca:16:84: 77:1d:ce:31:6c:94:52:13:53:d6:b4:6c:df:79:c3:d9:ae:f5: a0:55:c6:f4:0e:98:26:56:79:a7:e4:e7:9e:08:b5:54:4c:5b: 47:07:5d:29:b3:47:f0:f9:60:fa:80:5c:d5:56:d2:4c:ad:cc: 25:64:8f:85:23:6b:1a:f1:57:9b:59:9d:f6:f5:f3:78:6e:e4: 81:35:ea:70:0b:1d:8c:b2:0a:e9:f5:f2:2d:77:4b:45:43:de: c6:ee:86:d5:00:05:9a:dc:87:18:8d:23:d8:94:b8:34:51:14: 3d:af:88:c2:b7:f5:76:3a:8c:b2:2d:59:de:e5:45:9f:5f:a4: 39:35:2f:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKPuqSCwEwYUgSHbQ1+h3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDIyZWFhM2RhZWRmNmI5MDIxNTllZWRiZTk0Y2E5Yjdk MjI4NGYwHhcNMjUxMjI0MDcwMDQ0WhcNMjUxMjI1MDcwMDQ0WjAzMTEwLwYDVQQD Eyg2YzgyNGY1OWY0ZTQ5ZDEzOGNiOWYyYzdlZTQxMzI1NDMyZTA0NzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjEZ2gQa4DoRz+4ivzszMw38/Sgm 1ddxADMH8SPeliW9N8zb2rNq/ytfJ8CjklLEmFve8YKumuoIuUnZFoULcrUOfInq nIrRDAvpH6DcGp4qwzsfRYmEn6RozZRYvndEhrOPUIQP/00EQ6gQVLNjHd1QmBSK 2cf/OekdUPay+Nj7vTUhgMkr83NsyAQakxc+RgL2e7bXjSvNHi+buhdmVWkNaVBU V2Us0KAY/Uc36YkR1eQQYthCwr+s0h6Kn+FuC7vCfAmeReFlu9jlXC/8+jffQsRZ ZaH3h+7pFSt9+Adj3APVKAwq+3bGa5N9HzsFC712bDcJNw9lDHGjYdom9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyCT1n05J0TjLnyx+5BMlQy4EcwMB8GA1UdIwQY MBaAFERCLqo9rt9rkCFZ7tvpTKm30ihPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9kZDk0NGQtOGZhYS00Y2NlLWFhZmUt YzA1MGY0YzA1ZjI5LzEvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9kZDk0NGQtOGZhYS00Y2NlLWFhZmUtYzA1MGY0YzA1ZjI5 LzEvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTt/QZio 9Th9KRr/QYuxv9p1zh1mni6rTtcOZK9KrZBz98hGGMcla72BFM7sARH5KkOXVczv yvXNKGKQDaUstMnvv35VZaFs3s8KvwS0tgSNsYCwP6GfRhuxi0ecTskk7SOyxZn9 IcmZvZNPBIlJytchXn6+rgtSWG/HyhaEdx3OMWyUUhNT1rRs33nD2a71oFXG9A6Y JlZ5p+Tnngi1VExbRwddKbNH8Plg+oBc1VbSTK3MJWSPhSNrGvFXm1md9vXzeG7k gTXqcAsdjLIK6fXyLXdLRUPexu6G1QAFmtyHGI0j2JS4NFEUPa+Iwrf1djqMsi1Z 3uVFn1+kOTUvXw== -----END CERTIFICATE-----Generated at Wed Dec 24 16:17:20 2025 by rpki-client