This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json) Hash identifier: VMnRUa0dHoyHawnkDF5nFMD3tOvh3/1BqiTgNWmuA/I= Subject key identifier: E6:5B:7C:F0:13:9B:C8:06:14:A7:48:19:B4:1A:C8:CB:BB:11:53:88 Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1 Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1 Certificate serial: 019B3C108F834FC0420E9F96BE30509B3D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft Manifest number: 14CD Signing time: Sat 20 Dec 2025 14:01:16 +0000 Manifest this update: Sat 20 Dec 2025 14:01:16 +0000 Manifest next update: Sun 21 Dec 2025 14:01:16 +0000 Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: L0h1OYZfK4r4Lrbo3v2t+9UlY6kwEGTM4bkMmxPQrnU=) 2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=) 3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:8f:83:4f:c0:42:0e:9f:96:be:30:50:9b:3d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1 Validity Not Before: Dec 20 14:01:16 2025 GMT Not After : Dec 21 14:01:16 2025 GMT Subject: CN=e65b7cf0139bc80614a74819b41ac8cbbb115388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:e3:55:3b:f6:2b:67:12:6b:e4:05:22:06: 95:fb:98:0c:46:0f:34:60:03:22:b8:3a:75:32:d8: 3f:98:2c:c7:6b:b8:bc:40:80:a8:54:d3:7b:de:58: e2:db:86:7b:16:8c:37:ef:95:d2:0d:51:59:c8:40: d7:a0:89:a5:68:b2:82:0a:cd:28:8b:f0:c3:f5:a4: e7:8b:b4:b3:4f:3d:68:d7:65:bd:db:ba:94:a2:37: 1c:d8:2e:00:c9:7b:e4:76:2d:88:6e:b6:91:64:2d: 91:92:26:65:37:33:df:b7:6c:a6:98:1f:59:a6:1d: 1b:0f:2a:b2:bf:95:df:11:36:e8:72:b0:6c:36:b9: 6e:20:db:ee:87:79:04:cf:2f:a9:eb:2b:81:5f:8a: 17:dd:ba:ae:05:b0:ff:52:b8:cd:ec:61:8b:ac:23: 98:da:f5:4b:84:ba:1f:99:c6:a4:0c:87:de:c3:52: 09:6f:f4:31:92:12:dc:79:61:13:d6:6b:6e:f5:5c: 3b:b3:ce:7a:0a:c0:23:2c:c0:98:07:aa:3c:7b:82: 0f:bb:19:91:e6:08:43:8e:28:42:aa:78:53:8e:49: d1:33:a9:a8:0d:d7:1c:18:c3:e2:9a:47:6e:cd:8e: b7:59:39:6e:9b:f8:0f:0e:51:e9:ca:97:11:7c:d6: 57:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5B:7C:F0:13:9B:C8:06:14:A7:48:19:B4:1A:C8:CB:BB:11:53:88 X509v3 Authority Key Identifier: keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0f:7a:b7:1e:39:d0:2a:4c:1c:03:a1:06:02:b9:c8:07:b0: 35:fa:8f:83:ad:ed:89:7b:03:80:9e:b3:2a:0c:f3:a5:4b:1b: dd:3d:09:40:19:b4:d3:28:fd:94:94:ac:2f:0f:ad:01:62:dc: 9f:13:a5:de:92:8b:1b:04:99:cd:56:df:31:b3:fe:41:4e:e0: fa:d6:e3:4b:2e:97:58:eb:17:a5:fb:31:b1:39:78:77:b2:be: 20:64:81:66:1d:ee:78:1a:7f:c8:9f:eb:b6:fb:02:f0:e8:ac: c2:ea:e1:dc:13:ac:57:60:f8:7a:4b:dc:f3:38:e4:11:c3:84: d1:df:01:6c:a1:69:3c:97:17:3f:e3:74:30:57:6e:86:07:43: 88:1b:60:73:c5:49:80:4c:57:da:17:3c:f5:5e:6e:9f:6f:d1: da:59:5e:34:13:3e:39:6d:2e:5c:c4:50:e9:ea:6c:74:02:14: c6:52:e7:6b:ca:14:f5:f0:51:a2:19:85:2e:9d:10:7b:e5:c0: 11:27:94:62:5b:ce:8c:6a:f1:d1:fd:fc:16:36:0a:94:6d:67: 49:de:f3:43:04:59:bd:5a:c5:b0:e7:97:f2:c6:a4:c6:bc:f9: 4a:86:8d:29:f3:c5:14:16:b0:70:3c:18:5e:90:c7:54:ec:e1: 65:52:ea:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EI+DT8BCDp+WvjBQmz0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTkyYWFjNDg5NTIyZDVkYjE4ZmQ2MzkxZTAzNWE5Nzc4 ZWEzYjEwHhcNMjUxMjIwMTQwMTE2WhcNMjUxMjIxMTQwMTE2WjAzMTEwLwYDVQQD EyhlNjViN2NmMDEzOWJjODA2MTRhNzQ4MTliNDFhYzhjYmJiMTE1Mzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtPjVTv2K2cSa+QFIgaV+5gMRg80 YAMiuDp1Mtg/mCzHa7i8QICoVNN73lji24Z7Fow375XSDVFZyEDXoImlaLKCCs0o i/DD9aTni7SzTz1o12W927qUojcc2C4AyXvkdi2IbraRZC2RkiZlNzPft2ymmB9Z ph0bDyqyv5XfETbocrBsNrluINvuh3kEzy+p6yuBX4oX3bquBbD/UrjN7GGLrCOY 2vVLhLofmcakDIfew1IJb/QxkhLceWET1mtu9Vw7s856CsAjLMCYB6o8e4IPuxmR 5ghDjihCqnhTjknRM6moDdccGMPimkduzY63WTlum/gPDlHpypcRfNZXoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZbfPATm8gGFKdIGbQayMu7EVOIMB8GA1UdIwQY MBaAFNNZKqxIlSLV2xj9Y5HgNal3jqOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUt ZTMzYWUxMDZiNTRkLzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUtZTMzYWUxMDZiNTRk LzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfw96tx45 0CpMHAOhBgK5yAewNfqPg63tiXsDgJ6zKgzzpUsb3T0JQBm00yj9lJSsLw+tAWLc nxOl3pKLGwSZzVbfMbP+QU7g+tbjSy6XWOsXpfsxsTl4d7K+IGSBZh3ueBp/yJ/r tvsC8Oiswurh3BOsV2D4ekvc8zjkEcOE0d8BbKFpPJcXP+N0MFduhgdDiBtgc8VJ gExX2hc89V5un2/R2lleNBM+OW0uXMRQ6epsdAIUxlLna8oU9fBRohmFLp0Qe+XA ESeUYlvOjGrx0f38FjYKlG1nSd7zQwRZvVrFsOeX8sakxrz5SoaNKfPFFBawcDwY XpDHVOzhZVLqTw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:41:56 2025 by rpki-client