This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json) Hash identifier: lcYMg0XcG+HKO1IMUHtJ3SzLxGNFyFe5dqdYFyFBCOA= Subject key identifier: F0:24:9F:8E:85:55:9A:FB:AC:C3:03:D9:04:1A:40:07:D8:B4:88:6B Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Certificate serial: 019B38D7F784201E238BB2B43B6CFF9D3A1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft Manifest number: 0406 Signing time: Fri 19 Dec 2025 23:00:36 +0000 Manifest this update: Fri 19 Dec 2025 23:00:36 +0000 Manifest next update: Sat 20 Dec 2025 23:00:36 +0000 Files and hashes: 1: CON1qItWtbrKIYXRdV_TEeDuWKQ.roa (hash: krT8XWx87IlYD5e3RTY90vBER8rVmDuOSR/mGg/Tnd4=) 2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: u1Ghf5Fe37fmZAbzTJQOipmUf2kyOKKBoqE0fH4c4XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:f7:84:20:1e:23:8b:b2:b4:3b:6c:ff:9d:3a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Validity Not Before: Dec 19 23:00:36 2025 GMT Not After : Dec 20 23:00:36 2025 GMT Subject: CN=f0249f8e85559afbacc303d9041a4007d8b4886b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:fe:ea:89:0b:3b:c3:2d:1d:13:fa:b6:e2: a6:ec:67:6d:a1:f5:83:24:5a:75:18:06:ca:3c:55: d8:01:bd:27:22:d8:85:b3:fd:b1:05:5d:d4:15:ef: bd:ae:e2:27:59:42:98:55:db:fb:41:87:d9:43:92: c2:94:31:e0:40:fc:49:1e:16:21:8d:75:14:7e:83: 62:00:a1:6e:b8:95:2f:40:8f:02:f2:38:70:ff:8c: ab:8b:23:ee:b7:7f:6a:20:9c:9f:a0:43:af:f6:11: ed:da:b6:b1:bb:62:62:07:3e:cb:9a:fd:fa:91:bd: 74:7e:f1:0f:c0:d4:62:2e:ee:af:b1:0d:64:95:fc: 5e:d7:65:72:ca:0c:a7:e8:73:ec:7d:09:ea:94:4e: 50:16:07:47:21:2e:92:aa:11:e8:cf:88:e5:74:89: ba:a8:48:e7:01:9b:b5:f1:b7:f9:d7:04:dd:9f:19: 7e:07:2a:4d:0a:5a:87:ab:5a:98:17:cb:c3:27:81: fc:c9:06:7d:cf:9f:bc:68:4b:fb:3e:b2:28:68:2d: 71:d7:5a:05:d1:87:d0:98:3e:2f:05:d9:86:62:3f: ba:80:ab:be:bc:50:59:53:d5:cd:4e:12:bc:9d:fa: 35:f4:71:c4:f3:f5:1c:9b:b0:86:16:58:9a:30:7f: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:24:9F:8E:85:55:9A:FB:AC:C3:03:D9:04:1A:40:07:D8:B4:88:6B X509v3 Authority Key Identifier: keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f8:2f:f1:91:4b:dd:47:aa:9c:84:f2:8f:50:f5:66:fa:f1: 56:42:19:85:72:a4:02:b1:98:89:87:be:23:cc:c0:dc:95:e3: 96:c4:2c:86:1d:17:b6:96:a2:76:2b:71:67:c7:8c:89:7d:ca: a6:04:d7:46:89:58:eb:3e:e2:e6:31:9f:ab:3d:28:64:f1:b2: e5:fc:f3:92:5b:92:90:67:86:92:dc:ff:76:ba:6c:c0:d0:46: 7b:c6:a7:18:56:f4:7c:bf:0a:00:32:fd:3a:09:fb:c0:c9:16: 23:99:8c:ea:73:76:dc:31:05:8d:1f:c9:62:11:5b:47:0d:ba: 11:63:fa:66:a6:f5:5b:8b:8a:90:8e:5c:4a:8f:b6:5b:49:ac: 25:9d:1f:6d:a7:48:1b:fa:2d:99:a7:fa:85:f4:4e:fc:58:22: b3:40:f0:c6:e9:c3:e2:e3:46:2c:14:e7:a5:f3:b4:19:70:f1: 17:7b:ca:80:d3:9b:22:d5:ef:a1:d0:7e:2d:f5:34:99:71:f6: eb:25:46:68:0c:46:89:5a:80:8f:34:94:82:b8:17:f5:92:48: c2:13:47:b6:12:fb:9d:5f:b3:2e:12:b8:58:7e:a4:73:2f:14: 7a:ac:17:1c:90:ba:2b:6d:02:85:16:a6:60:da:14:bc:c8:47: f9:b0:1d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41/eEIB4ji7K0O2z/nTodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNDY2NDQwNjZjZWFmMzlkM2FmYjBmZDczNWIwMTljZWM5 ZGEzNjQwHhcNMjUxMjE5MjMwMDM2WhcNMjUxMjIwMjMwMDM2WjAzMTEwLwYDVQQD EyhmMDI0OWY4ZTg1NTU5YWZiYWNjMzAzZDkwNDFhNDAwN2Q4YjQ4ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MX+6okLO8MtHRP6tuKm7GdtofWD JFp1GAbKPFXYAb0nItiFs/2xBV3UFe+9ruInWUKYVdv7QYfZQ5LClDHgQPxJHhYh jXUUfoNiAKFuuJUvQI8C8jhw/4yriyPut39qIJyfoEOv9hHt2raxu2JiBz7Lmv36 kb10fvEPwNRiLu6vsQ1klfxe12Vyygyn6HPsfQnqlE5QFgdHIS6SqhHoz4jldIm6 qEjnAZu18bf51wTdnxl+BypNClqHq1qYF8vDJ4H8yQZ9z5+8aEv7PrIoaC1x11oF 0YfQmD4vBdmGYj+6gKu+vFBZU9XNThK8nfo19HHE8/Ucm7CGFliaMH8GfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAkn46FVZr7rMMD2QQaQAfYtIhrMB8GA1UdIwQY MBaAFK5GZEBmzq8506+w/XNbAZzsnaNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMt OGQ5ZjExZjkxNmU5LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMtOGQ5ZjExZjkxNmU5 LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPgv8ZFL 3UeqnITyj1D1ZvrxVkIZhXKkArGYiYe+I8zA3JXjlsQshh0XtpaiditxZ8eMiX3K pgTXRolY6z7i5jGfqz0oZPGy5fzzkluSkGeGktz/drpswNBGe8anGFb0fL8KADL9 Ogn7wMkWI5mM6nN23DEFjR/JYhFbRw26EWP6Zqb1W4uKkI5cSo+2W0msJZ0fbadI G/otmaf6hfRO/Fgis0DwxunD4uNGLBTnpfO0GXDxF3vKgNObItXvodB+LfU0mXH2 6yVGaAxGiVqAjzSUgrgX9ZJIwhNHthL7nV+zLhK4WH6kcy8UeqwXHJC6K20ChRam YNoUvMhH+bAdUg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:35:53 2025 by rpki-client