This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft File: Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json) Hash identifier: p3wHLGnWFQtBR49EFKf/+0ap/tluvjHyZoIib8hpRGU= Subject key identifier: 80:FF:94:CD:ED:26:23:54:FB:BE:96:AD:14:91:90:1C:1E:28:F5:43 Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312 Certificate serial: 019B3EA3B3291C2102925BEB2C547A8223FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft Manifest number: 022B Signing time: Sun 21 Dec 2025 02:01:14 +0000 Manifest this update: Sun 21 Dec 2025 02:01:14 +0000 Manifest next update: Mon 22 Dec 2025 02:01:14 +0000 Files and hashes: 1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: 2Cuv7Hzl/i9mdiK7y3PpFnJs81c/3oXEb/2VCp7GhZE=) 2: kJ_ZNbK3slQcy_TN55gyoHn1G0k.roa (hash: wZeyZOyIkRQ2u4cIoDaxSKEDydGOPToWwbH3yN/22T0=) 3: kQkp36SbEQB7MU7q6cnQaUoCZaM.roa (hash: n6V1Zj2QKNcqa6JYQoxZObwJco51jIWrlQ6TKDXJI7w=) 4: sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa (hash: iZDBjHvTi8UzC06Eug4ypR0vGR21QkFz4J3Uc1Ac+5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:b3:29:1c:21:02:92:5b:eb:2c:54:7a:82:23:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464d733de81fbd486d442358e0c15370520f9312 Validity Not Before: Dec 21 02:01:14 2025 GMT Not After : Dec 22 02:01:14 2025 GMT Subject: CN=80ff94cded262354fbbe96ad1491901c1e28f543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:8a:44:88:41:30:a5:4f:5c:50:63:e2:93: 78:82:69:36:6e:18:66:87:9c:b0:89:cb:82:64:14: 63:43:fe:20:8b:60:56:0f:a1:20:26:b0:74:e5:98: 86:6d:11:76:c1:68:58:75:c4:f2:65:5a:06:19:d1: c6:ed:4b:8e:c1:a8:99:eb:4f:6b:6d:50:1b:ec:c7: 05:eb:2d:f0:a6:9e:44:35:a9:26:eb:75:9e:9b:82: 1d:95:0d:56:d5:64:f6:3b:3f:21:7d:f1:e6:03:f7: 15:c1:35:eb:57:4e:d9:ba:fc:82:2c:f8:82:92:e8: 9f:87:92:b2:d8:a1:be:a1:2c:58:a8:ac:fc:7f:d0: 18:af:ec:7a:60:d2:2c:8b:bc:4a:ed:e5:db:5e:22: 67:98:b5:07:46:bf:86:be:04:74:7c:57:ee:cb:17: 44:04:c3:0d:1c:46:5b:8d:55:0d:62:b0:27:8b:5b: 45:49:20:c6:01:ee:49:4b:1d:ef:ca:b7:14:b7:99: 06:81:15:34:ea:b7:3e:a6:f3:7d:67:2b:b3:7b:ab: d9:d7:de:76:4b:b1:93:5b:d4:eb:ca:a8:85:a4:07: a0:49:d7:97:df:54:5c:b4:2c:83:01:e7:26:78:e4: 15:0e:c8:ce:59:ea:df:f8:d7:fc:1a:0a:b0:b7:89: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FF:94:CD:ED:26:23:54:FB:BE:96:AD:14:91:90:1C:1E:28:F5:43 X509v3 Authority Key Identifier: keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a0:05:4a:d6:38:59:99:18:f0:5a:c5:da:f6:5f:39:6e:20: 52:07:e3:9c:a9:e1:57:c3:c9:ca:f0:5b:bb:7d:d0:c1:8e:6e: fa:53:33:5b:21:62:72:33:e7:d6:e9:86:0e:67:de:71:ee:b9: ee:5c:dd:13:c5:c2:3e:d1:8a:a6:9c:4f:a3:3d:c9:94:94:5c: 51:dd:d9:61:39:1d:b2:ae:b4:1b:c5:15:89:6d:4d:c5:16:b1: 42:3c:b7:69:79:cc:18:6d:3c:4c:d8:8f:b6:0f:99:d0:e7:b9: c7:6f:a2:00:c9:56:60:27:6e:0a:30:77:fc:3c:a9:3a:9a:ba: 1c:cf:5d:57:06:a7:4c:f2:e4:88:d5:75:6f:26:9e:4e:91:ea: 36:27:b6:a6:1f:cd:d3:74:ae:dc:9c:47:e4:ed:e2:87:78:b4: 4b:51:6a:ff:68:b9:f9:02:e0:4e:98:08:c9:ac:3a:6f:87:50: c2:95:25:8a:ea:41:6b:07:76:f2:83:02:13:b3:ea:ab:29:1d: 70:90:66:da:69:17:df:b3:65:7d:24:ab:30:28:44:03:1c:ae: 90:22:fc:63:f1:50:d6:9c:be:27:e1:b0:0f:80:f0:d2:db:04: c9:df:df:da:9a:8f:b6:c9:aa:bf:8e:b3:5e:19:3f:28:0f:5f: 7d:3b:5a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o7MpHCECklvrLFR6giP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGQ3MzNkZTgxZmJkNDg2ZDQ0MjM1OGUwYzE1MzcwNTIw ZjkzMTIwHhcNMjUxMjIxMDIwMTE0WhcNMjUxMjIyMDIwMTE0WjAzMTEwLwYDVQQD Eyg4MGZmOTRjZGVkMjYyMzU0ZmJiZTk2YWQxNDkxOTAxYzFlMjhmNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPuKRIhBMKVPXFBj4pN4gmk2bhhm h5ywicuCZBRjQ/4gi2BWD6EgJrB05ZiGbRF2wWhYdcTyZVoGGdHG7UuOwaiZ609r bVAb7McF6y3wpp5ENakm63Wem4IdlQ1W1WT2Oz8hffHmA/cVwTXrV07ZuvyCLPiC kuifh5Ky2KG+oSxYqKz8f9AYr+x6YNIsi7xK7eXbXiJnmLUHRr+GvgR0fFfuyxdE BMMNHEZbjVUNYrAni1tFSSDGAe5JSx3vyrcUt5kGgRU06rc+pvN9Zyuze6vZ1952 S7GTW9TryqiFpAegSdeX31RctCyDAecmeOQVDsjOWerf+Nf8Ggqwt4lDKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID/lM3tJiNU+76WrRSRkBweKPVDMB8GA1UdIwQY MBaAFEZNcz3oH71IbUQjWODBU3BSD5MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYt YTQ5ZDFhMDA2ZGM5LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYtYTQ5ZDFhMDA2ZGM5 LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqAFStY4 WZkY8FrF2vZfOW4gUgfjnKnhV8PJyvBbu33QwY5u+lMzWyFicjPn1umGDmfece65 7lzdE8XCPtGKppxPoz3JlJRcUd3ZYTkdsq60G8UViW1NxRaxQjy3aXnMGG08TNiP tg+Z0Oe5x2+iAMlWYCduCjB3/DypOpq6HM9dVwanTPLkiNV1byaeTpHqNie2ph/N 03Su3JxH5O3ih3i0S1Fq/2i5+QLgTpgIyaw6b4dQwpUliupBawd28oMCE7Pqqykd cJBm2mkX37NlfSSrMChEAxyukCL8Y/FQ1py+J+GwD4Dw0tsEyd/f2pqPtsmqv46z Xhk/KA9ffTtaHA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:30 2025 by rpki-client