This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft File: RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json) Hash identifier: h+JNE62aOFpvQWAeo3sT9DMFiw8aM9ZJau6yFQF5CXQ= Subject key identifier: 2E:44:23:C0:6A:DC:78:55:0B:9E:CF:1A:D5:EA:85:10:9D:7C:BB:14 Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3 Certificate serial: 019B3CEBB9416ED461EF5CFEB992D34A949F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft Manifest number: 0AA5 Signing time: Sat 20 Dec 2025 18:00:39 +0000 Manifest this update: Sat 20 Dec 2025 18:00:39 +0000 Manifest next update: Sun 21 Dec 2025 18:00:39 +0000 Files and hashes: 1: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: aPUtlRl6G7rPJyHZqsoZ1eiFUist+9mb3uPNtiU+224=) 2: bollIzhNfRvYanh5m9u8c1tqdcM.roa (hash: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=) 3: pVBaNjULwz0aOwWJHCR4FjSV1IM.roa (hash: Q5gwvnLKrWIq0+4hK9BYbVE1a8YkPxKXaiFgI8rPsJo=) 4: tKTKwD-CfqK2XSUkfDX-zb0IMcI.roa (hash: EIGjeb1RHBDJL7jS5BFIXbJ6UQ3SzaYbnmBK1hQUsVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b9:41:6e:d4:61:ef:5c:fe:b9:92:d3:4a:94:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3 Validity Not Before: Dec 20 18:00:39 2025 GMT Not After : Dec 21 18:00:39 2025 GMT Subject: CN=2e4423c06adc78550b9ecf1ad5ea85109d7cbb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:6e:5d:e9:7b:ff:71:b1:d6:bd:b3:58:98: c0:64:61:18:0f:da:3a:65:99:c0:6b:4e:61:99:09: 36:fe:e6:1a:25:8f:e2:c0:ab:ae:f5:b4:9b:55:56: 23:48:d4:56:38:ee:78:a5:cd:fe:1f:59:64:0e:e6: 76:92:a2:4b:39:43:85:d1:11:4d:fa:9a:aa:71:9a: 31:8a:90:5d:31:51:03:53:58:85:a4:42:a9:77:9b: 3e:fd:be:f9:33:25:4a:a3:1d:30:8f:56:21:04:d6: 77:49:82:3c:c1:50:d5:7f:cf:07:6a:71:66:e1:b3: 2f:0c:7d:df:bc:c2:d4:49:59:9e:e9:97:9d:8b:de: 74:b4:c4:18:64:ec:50:d1:a4:d0:9e:9f:10:65:a3: 67:44:6c:d4:eb:d0:51:b8:d3:7d:3e:c0:aa:7e:b0: 9e:b0:92:97:4d:fc:a8:59:d0:b9:26:c2:6d:22:61: cf:a2:d7:04:43:a3:75:60:a5:15:1f:2d:3d:a9:77: 44:9d:91:11:4b:e5:b2:1f:ce:34:d2:cb:0c:1e:0a: 0d:91:a7:76:37:fa:94:e6:94:00:a7:f7:89:18:db: 04:a5:33:a0:6a:d2:d4:20:8b:13:54:f6:09:6d:b5: 39:1f:1f:26:74:e8:dd:95:c9:7d:15:f0:7b:31:b5: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:23:C0:6A:DC:78:55:0B:9E:CF:1A:D5:EA:85:10:9D:7C:BB:14 X509v3 Authority Key Identifier: keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:fe:fc:1e:15:fd:d9:bb:33:10:96:44:55:ea:4a:ee:6c:e1: a5:83:44:74:41:d0:dd:2d:72:49:05:c3:e5:da:3a:45:db:58: 69:86:86:10:c7:23:3e:0d:33:fb:73:fc:05:5e:ac:09:30:9f: 85:09:45:01:9b:27:e4:93:89:50:77:51:ad:b9:5a:14:59:51: cc:ea:bc:a4:e6:8f:4a:fc:6e:29:70:e4:5f:cb:54:f1:4a:f9: b1:0a:c6:2a:6a:85:7e:58:a1:c8:34:71:c3:42:59:5a:9b:2b: d0:9d:d8:7d:7f:4a:56:3b:56:5c:b9:05:41:59:66:90:f8:13: e0:2b:b9:45:65:30:03:5e:e4:1a:2b:a0:c8:84:1c:49:cd:78: 1d:3b:55:30:65:de:86:bb:71:5d:7b:31:6d:83:1e:30:ac:42: de:a2:6c:46:c5:d8:2e:71:75:55:b3:eb:2c:3b:b6:9a:95:00: 11:93:08:03:08:15:82:be:61:79:cc:45:9c:52:89:8b:68:92: f9:fc:4e:bb:3e:8f:8c:f2:c1:c6:99:21:e1:51:2b:1d:37:f6: 00:10:b9:1d:95:43:8c:1f:4b:bd:80:ef:f3:a8:d5:bf:35:3f: 2d:62:61:bc:15:c0:48:63:33:bf:99:39:31:47:5d:cf:17:e2: 85:e7:90:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867lBbtRh71z+uZLTSpSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI2ODE0MTc5NmNhOTVlNGM3MmY0YmZhNjk2YWNlYTUw ODNhZjMwHhcNMjUxMjIwMTgwMDM5WhcNMjUxMjIxMTgwMDM5WjAzMTEwLwYDVQQD EygyZTQ0MjNjMDZhZGM3ODU1MGI5ZWNmMWFkNWVhODUxMDlkN2NiYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU9uXel7/3Gx1r2zWJjAZGEYD9o6 ZZnAa05hmQk2/uYaJY/iwKuu9bSbVVYjSNRWOO54pc3+H1lkDuZ2kqJLOUOF0RFN +pqqcZoxipBdMVEDU1iFpEKpd5s+/b75MyVKox0wj1YhBNZ3SYI8wVDVf88HanFm 4bMvDH3fvMLUSVme6Zedi950tMQYZOxQ0aTQnp8QZaNnRGzU69BRuNN9PsCqfrCe sJKXTfyoWdC5JsJtImHPotcEQ6N1YKUVHy09qXdEnZERS+WyH8400ssMHgoNkad2 N/qU5pQAp/eJGNsEpTOgatLUIIsTVPYJbbU5Hx8mdOjdlcl9FfB7MbUYyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5EI8Bq3HhVC57PGtXqhRCdfLsUMB8GA1UdIwQY MBaAFEaLaBQXlsqV5McvS/ppas6lCDrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0Zjct NDUyZDZkMzgyNmY3LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0ZjctNDUyZDZkMzgyNmY3 LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPP78HhX9 2bszEJZEVepK7mzhpYNEdEHQ3S1ySQXD5do6RdtYaYaGEMcjPg0z+3P8BV6sCTCf hQlFAZsn5JOJUHdRrblaFFlRzOq8pOaPSvxuKXDkX8tU8Ur5sQrGKmqFflihyDRx w0JZWpsr0J3YfX9KVjtWXLkFQVlmkPgT4Cu5RWUwA17kGiugyIQcSc14HTtVMGXe hrtxXXsxbYMeMKxC3qJsRsXYLnF1VbPrLDu2mpUAEZMIAwgVgr5hecxFnFKJi2iS +fxOuz6PjPLBxpkh4VErHTf2ABC5HZVDjB9LvYDv86jVvzU/LWJhvBXASGMzv5k5 MUddzxfiheeQVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:45:29 2025 by rpki-client