This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json) Hash identifier: mlcqpmtwUN99+uiEUA+FK04xYoyB/Ee66KSU2ES9gmg= Subject key identifier: BE:C1:8F:57:04:1C:38:FD:1E:2C:DE:65:45:2E:01:79:F8:99:26:41 Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14 Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114 Certificate serial: 019B53AB27DDBC77BEE0E35E87E628426C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft Manifest number: 0AE0 Signing time: Thu 25 Dec 2025 04:01:24 +0000 Manifest this update: Thu 25 Dec 2025 04:01:24 +0000 Manifest next update: Fri 26 Dec 2025 04:01:24 +0000 Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: c7F4pyiYFasUVu6uCe4X5T/6jZKKtITdYf8x+5DaU5c=) 2: Zg1oQlfTlRGn4mPizarntNQVifQ.roa (hash: VCNyDIITF1vB0XbRmzjr12dFWbtUbWzSK0fvTI9GVWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:27:dd:bc:77:be:e0:e3:5e:87:e6:28:42:6c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114 Validity Not Before: Dec 25 04:01:24 2025 GMT Not After : Dec 26 04:01:24 2025 GMT Subject: CN=bec18f57041c38fd1e2cde65452e0179f8992641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:29:d9:13:6e:d6:66:2c:a9:0c:b3:03:29:1b: db:f6:a1:bb:c1:58:99:77:44:78:5d:d3:5b:aa:76: 35:62:fc:37:a9:09:e3:50:ed:18:ea:aa:20:fd:95: ec:95:b3:11:59:70:8a:6d:89:e5:12:cc:86:88:90: 6d:9a:f5:52:b1:6d:6e:f5:f2:89:e7:7e:a3:f8:e4: c3:33:1a:5f:91:67:69:07:ba:2c:43:4f:25:98:c5: df:47:a2:85:e5:e4:18:8f:cc:5f:8b:f4:51:93:6a: 8c:e7:9a:7f:aa:6d:fc:12:5b:64:a6:4c:35:6e:92: 5e:79:c5:c2:9d:b9:5d:82:d8:f7:ee:60:0f:31:80: 10:df:b4:ef:5f:bc:51:c0:27:fc:d1:65:23:21:dd: ab:b0:03:cd:2b:d5:55:ba:2e:3a:90:83:a4:50:84: 31:11:c5:7d:d5:93:0e:ef:55:12:18:31:9d:79:70: 46:28:c4:88:f9:61:d9:20:3b:62:70:8c:d8:5a:ed: 09:28:8a:51:92:cd:2e:2a:c6:f4:cc:2b:8e:9b:d9: ef:15:79:6e:c5:b2:fb:75:cb:f0:54:46:35:03:85: 83:78:9c:1f:ae:fe:39:d9:90:8d:1b:87:d2:d2:d1: 9a:eb:52:30:3d:09:af:ad:59:99:60:05:fb:ce:c0: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:8F:57:04:1C:38:FD:1E:2C:DE:65:45:2E:01:79:F8:99:26:41 X509v3 Authority Key Identifier: keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2e:d2:62:55:d3:88:bc:9d:59:1e:be:94:14:37:2d:f4:7f: ad:28:ce:e1:e7:67:6a:9f:22:cf:1b:d8:4a:2f:62:f0:0a:a5: fe:c5:09:67:2c:d0:2e:92:19:1d:4f:fc:34:b6:a3:e6:f0:25: 3d:d1:0e:62:fd:73:2e:39:66:64:36:c3:e1:0d:18:65:80:97: 80:fd:ee:a7:d6:38:b1:c7:23:25:e6:03:a2:b0:80:f9:56:1f: 73:2d:6d:79:f1:5d:3d:53:82:6a:c5:f4:0b:a0:db:e5:bd:63: d9:c2:60:32:c2:c7:25:36:83:6b:c6:fd:0b:52:f0:7f:59:53: 7e:e6:9b:a8:6d:20:a9:a0:40:c3:36:fb:f9:4b:09:5b:cd:c3: 20:06:21:8b:7a:74:df:5a:8c:e9:23:77:ee:15:55:b0:c2:89: 5e:28:e9:ce:0c:9d:fd:3e:dc:57:ad:0d:1b:4f:05:20:88:33: 92:1b:cf:30:9c:39:27:cb:d0:0c:f8:99:44:26:d9:f0:e7:a9: 07:e4:97:85:4f:18:e6:a0:ec:8a:38:8f:e1:76:2d:f1:5a:21: fb:f0:c4:86:7d:42:4a:fb:c2:36:a0:37:da:57:97:32:21:00: d2:b6:9f:0d:9a:3e:22:2b:b1:4f:36:36:91:31:d8:66:85:11: 48:c2:26:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqyfdvHe+4ONeh+YoQmyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODQ2NTU3YjllNDI5NTUxNjNlNTE2YjAyZGM4ZTNlZTM4 MjgxMTQwHhcNMjUxMjI1MDQwMTI0WhcNMjUxMjI2MDQwMTI0WjAzMTEwLwYDVQQD EyhiZWMxOGY1NzA0MWMzOGZkMWUyY2RlNjU0NTJlMDE3OWY4OTkyNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmynZE27WZiypDLMDKRvb9qG7wViZ d0R4XdNbqnY1Yvw3qQnjUO0Y6qog/ZXslbMRWXCKbYnlEsyGiJBtmvVSsW1u9fKJ 536j+OTDMxpfkWdpB7osQ08lmMXfR6KF5eQYj8xfi/RRk2qM55p/qm38Eltkpkw1 bpJeecXCnbldgtj37mAPMYAQ37TvX7xRwCf80WUjId2rsAPNK9VVui46kIOkUIQx EcV91ZMO71USGDGdeXBGKMSI+WHZIDticIzYWu0JKIpRks0uKsb0zCuOm9nvFXlu xbL7dcvwVEY1A4WDeJwfrv452ZCNG4fS0tGa61IwPQmvrVmZYAX7zsBtrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7Bj1cEHDj9HizeZUUuAXn4mSZBMB8GA1UdIwQY MBaAFEaEZVe55ClVFj5RawLcjj7jgoEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODdjNGUtNzg5Yi00YzI2LThjZTUt YWJiMjIyNTA3ZjE3LzEvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC85ODdjNGUtNzg5Yi00YzI2LThjZTUtYWJiMjIyNTA3ZjE3 LzEvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS7SYlXT iLydWR6+lBQ3LfR/rSjO4ednap8izxvYSi9i8Aql/sUJZyzQLpIZHU/8NLaj5vAl PdEOYv1zLjlmZDbD4Q0YZYCXgP3up9Y4sccjJeYDorCA+VYfcy1tefFdPVOCasX0 C6Db5b1j2cJgMsLHJTaDa8b9C1Lwf1lTfuabqG0gqaBAwzb7+UsJW83DIAYhi3p0 31qM6SN37hVVsMKJXijpzgyd/T7cV60NG08FIIgzkhvPMJw5J8vQDPiZRCbZ8Oep B+SXhU8Y5qDsijiP4XYt8Voh+/DEhn1CSvvCNqA32leXMiEA0rafDZo+IiuxTzY2 kTHYZoURSMImcQ== -----END CERTIFICATE-----Generated at Thu Dec 25 12:47:55 2025 by rpki-client