This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft File: REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json) Hash identifier: sr28oX8O2QfCs6Dhje/KAALzCMWqO2Fv6OQflUmtW54= Subject key identifier: 28:76:C4:CE:8F:34:E0:FE:27:40:CC:D2:2E:8E:E9:C7:8B:BF:F1:4F Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f Certificate serial: 019B5CADF731CACE20204C8420D9027D66E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft Manifest number: 0DCC Signing time: Fri 26 Dec 2025 22:01:03 +0000 Manifest this update: Fri 26 Dec 2025 22:01:03 +0000 Manifest next update: Sat 27 Dec 2025 22:01:03 +0000 Files and hashes: 1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: a8pN8VRwnxdbqZXxfm/IATRwE9MniavbWQB1t4yOQ1A=) 2: pkwPVsxSdYAUrwekUiCsSfEtBsc.roa (hash: VAoyCYorOSAEGcSFlO8mKuQLxbXXAWAO6ekhAMd8Fps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:f7:31:ca:ce:20:20:4c:84:20:d9:02:7d:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f Validity Not Before: Dec 26 22:01:03 2025 GMT Not After : Dec 27 22:01:03 2025 GMT Subject: CN=2876c4ce8f34e0fe2740ccd22e8ee9c78bbff14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:c7:76:6d:e9:54:2d:59:ed:7f:95:80:85: bf:ae:f8:3d:2d:bf:e2:aa:db:60:1d:7d:35:a2:ab: 20:0c:71:ea:fe:d2:37:05:95:7c:5c:c4:a2:36:bc: bc:25:1d:df:8d:84:2d:6c:53:ae:3c:99:f8:f3:f9: 4e:35:8b:dc:df:d9:e4:44:29:e9:7f:a1:91:c4:1f: dd:e1:78:33:d9:f7:bd:ca:c1:01:e0:35:64:85:46: 29:d3:4d:88:db:45:22:75:8f:ac:c7:b6:7c:30:ec: 35:aa:cc:41:e1:24:4b:86:44:93:63:5a:27:ed:56: 98:26:d2:c7:32:3d:cd:7b:0b:8f:d0:09:e1:09:55: 72:9a:bf:2f:76:5a:e6:12:95:06:fb:43:fb:16:2a: cf:c1:df:af:31:ff:d0:97:2b:6a:96:d1:0c:55:b1: 49:9e:6a:d6:b4:74:bd:42:ba:dd:09:92:fd:92:77: 1e:70:8d:ae:bc:62:b0:ed:c2:73:91:ad:87:12:dc: a5:00:c8:ae:2f:54:f5:c7:85:41:e7:81:85:ac:84: ca:5e:d3:cc:55:fb:c7:06:2c:95:39:3f:23:73:87: 31:ff:22:6d:8c:cb:86:63:95:f5:05:82:7d:5f:af: 73:c1:19:89:0c:fb:12:5f:6c:80:cb:0c:66:fc:13: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:76:C4:CE:8F:34:E0:FE:27:40:CC:D2:2E:8E:E9:C7:8B:BF:F1:4F X509v3 Authority Key Identifier: keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:28:7c:49:ed:ab:10:6a:af:17:9f:a6:04:cb:46:ab:d8:c1: c9:a5:a6:dd:ab:16:a0:02:35:1f:c5:2a:5e:9b:c2:63:0a:69: 2b:21:c8:b3:d7:57:dd:a6:f3:aa:fe:85:a7:f7:b0:f5:bf:f6: e3:17:b2:f8:8f:1d:af:14:97:a8:ad:6c:d3:0a:86:78:40:08: ff:c9:71:39:8e:8b:0b:34:38:eb:53:ff:d5:ca:1f:fb:b1:14: 15:c6:03:d5:95:be:88:02:72:71:0c:60:48:a4:9f:4e:60:fb: 91:20:f4:72:8e:48:06:e5:c6:c4:67:6b:d1:46:81:6a:92:eb: af:44:91:d1:54:bd:d8:d4:17:3d:bb:23:88:19:bd:f7:89:51: ee:a0:76:a6:1c:b1:e0:4e:6e:ee:c8:d3:e3:96:cf:51:54:cf: 2d:29:ec:93:6d:f5:a6:33:5d:f0:f1:fb:61:ca:9d:9a:5e:10: 4f:c0:79:ec:5c:fa:74:a7:19:31:e5:43:03:5a:68:9e:83:bc: 21:3f:eb:21:ae:31:93:94:da:8b:83:8b:66:93:1f:92:4e:32: ed:a9:ca:8b:4e:8b:7d:9d:37:1b:a5:78:af:83:c5:2e:df:cc: 50:5a:6e:fe:d6:1f:a7:0a:8b:d4:86:8c:ac:58:5d:2d:1a:8b: 60:3c:83:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrfcxys4gIEyEINkCfWbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDIyZWFhM2RhZWRmNmI5MDIxNTllZWRiZTk0Y2E5Yjdk MjI4NGYwHhcNMjUxMjI2MjIwMTAzWhcNMjUxMjI3MjIwMTAzWjAzMTEwLwYDVQQD EygyODc2YzRjZThmMzRlMGZlMjc0MGNjZDIyZThlZTljNzhiYmZmMTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yDHdm3pVC1Z7X+VgIW/rvg9Lb/i qttgHX01oqsgDHHq/tI3BZV8XMSiNry8JR3fjYQtbFOuPJn48/lONYvc39nkRCnp f6GRxB/d4Xgz2fe9ysEB4DVkhUYp002I20UidY+sx7Z8MOw1qsxB4SRLhkSTY1on 7VaYJtLHMj3NewuP0AnhCVVymr8vdlrmEpUG+0P7FirPwd+vMf/QlytqltEMVbFJ nmrWtHS9QrrdCZL9kncecI2uvGKw7cJzka2HEtylAMiuL1T1x4VB54GFrITKXtPM VfvHBiyVOT8jc4cx/yJtjMuGY5X1BYJ9X69zwRmJDPsSX2yAywxm/BMlIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh2xM6PNOD+J0DM0i6O6ceLv/FPMB8GA1UdIwQY MBaAFERCLqo9rt9rkCFZ7tvpTKm30ihPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9kZDk0NGQtOGZhYS00Y2NlLWFhZmUt YzA1MGY0YzA1ZjI5LzEvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9kZDk0NGQtOGZhYS00Y2NlLWFhZmUtYzA1MGY0YzA1ZjI5 LzEvUkVJdXFqMnUzMnVRSVZudTItbE1xYmZTS0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASh8Se2r EGqvF5+mBMtGq9jByaWm3asWoAI1H8UqXpvCYwppKyHIs9dX3abzqv6Fp/ew9b/2 4xey+I8drxSXqK1s0wqGeEAI/8lxOY6LCzQ461P/1cof+7EUFcYD1ZW+iAJycQxg SKSfTmD7kSD0co5IBuXGxGdr0UaBapLrr0SR0VS92NQXPbsjiBm994lR7qB2phyx 4E5u7sjT45bPUVTPLSnsk231pjNd8PH7Ycqdml4QT8B57Fz6dKcZMeVDA1ponoO8 IT/rIa4xk5Tai4OLZpMfkk4y7anKi06LfZ03G6V4r4PFLt/MUFpu/tYfpwqL1IaM rFhdLRqLYDyDpQ== -----END CERTIFICATE-----Generated at Sat Dec 27 03:58:11 2025 by rpki-client