This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft File: RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json) Hash identifier: TJr+IPpIsKy1/Clp/VG7bUOZjPWasCGu2EdxX9DRQXI= Subject key identifier: 9F:5D:68:6C:7C:3B:40:94:4C:DA:5C:D0:E8:86:E3:DC:DE:2A:BA:4D Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477 Certificate serial: 019B44DC66D3D1C03110151999CFE155E6E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft Manifest number: 0E73 Signing time: Mon 22 Dec 2025 07:00:53 +0000 Manifest this update: Mon 22 Dec 2025 07:00:53 +0000 Manifest next update: Tue 23 Dec 2025 07:00:53 +0000 Files and hashes: 1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=) 2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: nwkEXNk602GfgOrjOY8Dq6aFsE8xKwX48epojznY2O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:66:d3:d1:c0:31:10:15:19:99:cf:e1:55:e6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477 Validity Not Before: Dec 22 07:00:53 2025 GMT Not After : Dec 23 07:00:53 2025 GMT Subject: CN=9f5d686c7c3b40944cda5cd0e886e3dcde2aba4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:e5:ce:86:7c:8d:1d:20:ab:70:db:e1:6b: be:e2:60:f2:1f:03:eb:a7:9c:e4:5a:65:aa:45:af: e1:6d:f2:b2:60:4a:8f:32:19:ee:c2:48:fd:9f:58: da:73:06:30:9d:33:0a:ef:b3:a0:5e:06:e9:e6:43: d0:31:0b:a0:27:8c:05:3c:ab:a2:af:96:a8:ca:08: a6:10:e4:6b:a5:ae:93:0f:3d:e6:c7:7d:2c:10:69: e4:b9:7f:fd:20:2f:12:34:1b:1a:39:e1:b3:7a:27: c9:b1:3d:4b:b7:68:3c:0f:fa:e6:64:e5:f6:38:41: d4:ab:05:61:34:e4:97:df:83:99:78:a9:08:3b:53: 29:3b:34:7b:90:c3:02:e1:2d:f7:8b:90:34:de:3f: 79:84:b1:f0:35:71:32:d5:2e:22:75:84:1a:51:7f: d5:fd:67:19:cd:64:c5:1b:70:79:f9:ae:f8:70:3a: b4:3b:e6:a4:f4:cd:ec:29:a3:d5:fd:02:c4:a1:b9: a8:da:84:e0:32:00:cd:6b:8c:e7:fb:86:41:04:9e: b6:6a:1d:37:58:ce:f7:aa:ec:80:2e:09:00:ff:fd: d8:71:bc:3b:86:e6:1a:c7:ba:ad:ea:fa:b4:ea:ff: e1:e5:22:b4:f8:22:2e:63:ec:0c:e2:05:cd:0f:f8: ac:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5D:68:6C:7C:3B:40:94:4C:DA:5C:D0:E8:86:E3:DC:DE:2A:BA:4D X509v3 Authority Key Identifier: keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f1:01:1e:d4:60:ca:0a:9c:25:00:1e:bb:9d:0f:10:7a:7c: 24:df:ff:04:91:b6:cb:ae:7a:8b:66:db:e5:ad:b2:28:e2:63: 59:f0:67:db:3e:1f:fd:ca:85:de:ba:73:ec:c6:9a:af:a8:49: 1c:5b:ec:fd:1d:72:76:ec:46:d0:2a:48:82:cf:d1:6b:ee:26: 2a:2f:ed:a3:5e:d6:b1:8b:2d:e7:48:b0:c0:21:49:17:cf:82: 84:bf:ba:57:2d:8a:73:a2:42:32:bf:fa:0a:a7:0d:cb:c1:9e: 57:cc:c3:e8:37:57:31:20:70:f1:ef:91:bb:b9:ef:b4:d8:6f: 1e:c4:7d:1e:ab:1d:fb:65:c2:c1:60:c5:0b:6c:93:f0:72:a7: 67:1d:23:24:6b:af:5f:35:de:b9:e6:e4:97:f0:06:38:49:e1: c7:ec:5a:82:6d:d2:d9:ac:cb:ea:55:c4:e9:6f:68:a2:2a:47: a3:92:d8:c9:d4:49:fc:df:cf:f9:63:ca:4f:be:61:51:06:36: c4:20:c7:b0:c5:6d:5c:99:5c:3e:a5:53:09:2e:dd:f1:a1:76: c4:49:b3:d4:8d:f5:c4:37:80:8e:70:15:4c:98:f0:75:25:5d: 59:d5:13:0c:a0:69:43:b2:71:e4:fa:0f:db:6c:eb:ad:d8:0b: 60:d5:20:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3GbT0cAxEBUZmc/hVebnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDJlNzU3OGFhYzk0ZjQyOTYwYTc4MGQzOTk2ZGE4YmI0 Njk0NzcwHhcNMjUxMjIyMDcwMDUzWhcNMjUxMjIzMDcwMDUzWjAzMTEwLwYDVQQD Eyg5ZjVkNjg2YzdjM2I0MDk0NGNkYTVjZDBlODg2ZTNkY2RlMmFiYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXLlzoZ8jR0gq3Db4Wu+4mDyHwPr p5zkWmWqRa/hbfKyYEqPMhnuwkj9n1jacwYwnTMK77OgXgbp5kPQMQugJ4wFPKui r5aoygimEORrpa6TDz3mx30sEGnkuX/9IC8SNBsaOeGzeifJsT1Lt2g8D/rmZOX2 OEHUqwVhNOSX34OZeKkIO1MpOzR7kMMC4S33i5A03j95hLHwNXEy1S4idYQaUX/V /WcZzWTFG3B5+a74cDq0O+ak9M3sKaPV/QLEobmo2oTgMgDNa4zn+4ZBBJ62ah03 WM73quyALgkA//3Ycbw7huYax7qt6vq06v/h5SK0+CIuY+wM4gXND/is8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9daGx8O0CUTNpc0OiG49zeKrpNMB8GA1UdIwQY MBaAFETS51eKrJT0KWCngNOZbai7RpR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2Qt ZjZmZDZiZDg1N2I4LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2QtZjZmZDZiZDg1N2I4 LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvEBHtRg ygqcJQAeu50PEHp8JN//BJG2y656i2bb5a2yKOJjWfBn2z4f/cqF3rpz7Maar6hJ HFvs/R1yduxG0CpIgs/Ra+4mKi/to17WsYst50iwwCFJF8+ChL+6Vy2Kc6JCMr/6 CqcNy8GeV8zD6DdXMSBw8e+Ru7nvtNhvHsR9Hqsd+2XCwWDFC2yT8HKnZx0jJGuv XzXeuebkl/AGOEnhx+xagm3S2azL6lXE6W9ooipHo5LYydRJ/N/P+WPKT75hUQY2 xCDHsMVtXJlcPqVTCS7d8aF2xEmz1I31xDeAjnAVTJjwdSVdWdUTDKBpQ7Jx5PoP 22zrrdgLYNUgTQ== -----END CERTIFICATE-----Generated at Mon Dec 22 09:42:31 2025 by rpki-client