This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json) Hash identifier: RD3Ei5II6ZCi5riVPqUAjemLqAE7B6DEg+S5YUv4rmY= Subject key identifier: C6:83:0D:FD:39:25:49:C1:A1:6C:82:53:CC:95:50:38:B3:04:11:8B Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Certificate serial: 019B4E1635A53BF80A716DA15F75090BF569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft Manifest number: 0411 Signing time: Wed 24 Dec 2025 02:00:36 +0000 Manifest this update: Wed 24 Dec 2025 02:00:36 +0000 Manifest next update: Thu 25 Dec 2025 02:00:36 +0000 Files and hashes: 1: CON1qItWtbrKIYXRdV_TEeDuWKQ.roa (hash: krT8XWx87IlYD5e3RTY90vBER8rVmDuOSR/mGg/Tnd4=) 2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: sHCbSppG/eR9AwPXyitiMu52lKk4OOaaUrHzqcCYDkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:35:a5:3b:f8:0a:71:6d:a1:5f:75:09:0b:f5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Validity Not Before: Dec 24 02:00:36 2025 GMT Not After : Dec 25 02:00:36 2025 GMT Subject: CN=c6830dfd392549c1a16c8253cc955038b304118b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:88:25:38:63:97:bd:b7:79:ba:7a:73:49: 7a:46:62:0c:04:1e:cc:27:c4:70:f1:57:3f:b3:8c: 2c:a3:f4:7d:fb:bd:9b:80:bb:9b:52:fd:0c:fc:d7: 4e:e6:a3:c8:08:05:be:e4:09:42:1f:f2:75:b2:a7: fb:4c:03:42:33:b7:c3:52:59:f4:b2:40:e9:72:57: 68:62:24:7f:5a:eb:4e:12:19:c0:77:32:06:4c:5b: dc:07:6c:3e:4a:74:04:2e:eb:a1:c0:e6:3b:a7:1d: f6:75:ef:3d:5d:5f:81:fd:c5:b5:e2:72:46:12:c1: f1:78:6a:db:4f:4a:d5:47:1d:8c:20:84:83:57:c8: ad:08:7c:fa:07:9d:96:3a:f7:3a:7f:a6:ee:ca:aa: 6e:3e:72:76:00:b8:73:4c:80:0b:a9:cb:f3:f3:58: e9:26:c1:b4:80:35:c1:88:0e:33:17:bf:49:68:cc: e2:a6:d9:ec:42:3a:cb:43:bf:23:ef:52:ca:76:90: 22:43:54:64:28:0d:7e:5e:49:93:5f:23:cd:46:f4: 43:f2:6d:1d:07:3f:8f:56:92:50:a4:e5:97:58:ae: b3:d9:65:a3:f4:47:30:f2:51:2d:61:62:09:94:cd: a1:22:11:c9:6f:fa:c7:29:5c:a3:b4:3d:74:5f:ff: ca:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:83:0D:FD:39:25:49:C1:A1:6C:82:53:CC:95:50:38:B3:04:11:8B X509v3 Authority Key Identifier: keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d5:c3:41:e9:0d:9e:25:b3:1d:db:fc:0c:bb:fc:1f:47:d5: 50:af:74:92:9e:6c:56:5b:b4:9d:f1:3c:2d:8e:a2:89:48:72: 86:1e:25:c6:ff:c9:45:c2:76:ec:ad:b5:9a:e3:95:8a:97:11: a3:dc:6b:de:f3:92:58:02:09:dc:48:5d:e5:6b:79:9d:df:c5: 83:df:b9:ca:7b:de:23:36:98:6a:a2:fb:79:e0:4d:63:ce:b5: 2a:74:c6:18:b1:f9:d5:d1:68:7f:b1:97:c0:f5:2e:c7:b8:07: a7:8d:5c:0b:83:b5:c8:30:7f:33:0d:7b:81:e8:be:2d:d1:a0: b7:8f:6a:f8:f7:04:60:26:1d:95:ef:ee:fd:4d:7e:5b:40:dd: 22:b9:3b:71:43:d0:04:d1:0a:e0:ed:c5:94:ed:6d:27:8e:d1: 33:b4:81:da:cb:1c:a7:3a:82:c5:f6:67:97:ae:c9:c8:25:d9: 2b:d1:bc:9c:20:45:b5:48:3e:76:d5:10:25:6a:5b:59:49:d2: c5:9c:13:4b:59:0f:0f:66:6b:26:1a:d6:01:5e:4f:a4:91:f8: 1d:a4:63:0d:92:17:2c:d8:35:3d:12:b9:11:51:87:bf:fb:06: aa:52:db:34:49:fc:a2:a3:ca:b7:88:77:f6:57:74:8a:85:60: c8:8e:7a:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFjWlO/gKcW2hX3UJC/VpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNDY2NDQwNjZjZWFmMzlkM2FmYjBmZDczNWIwMTljZWM5 ZGEzNjQwHhcNMjUxMjI0MDIwMDM2WhcNMjUxMjI1MDIwMDM2WjAzMTEwLwYDVQQD EyhjNjgzMGRmZDM5MjU0OWMxYTE2YzgyNTNjYzk1NTAzOGIzMDQxMThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod2IJThjl723ebp6c0l6RmIMBB7M J8Rw8Vc/s4wso/R9+72bgLubUv0M/NdO5qPICAW+5AlCH/J1sqf7TANCM7fDUln0 skDpcldoYiR/WutOEhnAdzIGTFvcB2w+SnQELuuhwOY7px32de89XV+B/cW14nJG EsHxeGrbT0rVRx2MIISDV8itCHz6B52WOvc6f6buyqpuPnJ2ALhzTIALqcvz81jp JsG0gDXBiA4zF79JaMziptnsQjrLQ78j71LKdpAiQ1RkKA1+XkmTXyPNRvRD8m0d Bz+PVpJQpOWXWK6z2WWj9Ecw8lEtYWIJlM2hIhHJb/rHKVyjtD10X//KFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaDDf05JUnBoWyCU8yVUDizBBGLMB8GA1UdIwQY MBaAFK5GZEBmzq8506+w/XNbAZzsnaNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMt OGQ5ZjExZjkxNmU5LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMtOGQ5ZjExZjkxNmU5 LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9XDQekN niWzHdv8DLv8H0fVUK90kp5sVlu0nfE8LY6iiUhyhh4lxv/JRcJ27K21muOVipcR o9xr3vOSWAIJ3Ehd5Wt5nd/Fg9+5ynveIzaYaqL7eeBNY861KnTGGLH51dFof7GX wPUux7gHp41cC4O1yDB/Mw17gei+LdGgt49q+PcEYCYdle/u/U1+W0DdIrk7cUPQ BNEK4O3FlO1tJ47RM7SB2sscpzqCxfZnl67JyCXZK9G8nCBFtUg+dtUQJWpbWUnS xZwTS1kPD2ZrJhrWAV5PpJH4HaRjDZIXLNg1PRK5EVGHv/sGqlLbNEn8oqPKt4h3 9ld0ioVgyI561g== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:04 2025 by rpki-client