This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json) Hash identifier: FDpgd3eF+Mc8MblkhGW1Ntf8O7ldyEOTZPgvq758/Wk= Subject key identifier: 64:C3:EC:09:05:AC:68:5F:AA:DD:0E:11:B4:21:F5:C5:E6:F7:72:DE Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52 Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52 Certificate serial: 019B2F9E8990E3D7B8C1D795E1EF20E633FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft Manifest number: 05BB Signing time: Thu 18 Dec 2025 04:01:17 +0000 Manifest this update: Thu 18 Dec 2025 04:01:17 +0000 Manifest next update: Fri 19 Dec 2025 04:01:17 +0000 Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: pPVg7CUvawLzHOlv/huAGTjwI/MB9KQoICYRRztp/7o=) 2: mpcpZSVPqHluaz87WJ0uN-9FKN0.roa (hash: 7rifYSX6qCoq1SQ259BqQ0Nwhu4OmIky6bHMjTs3HBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:89:90:e3:d7:b8:c1:d7:95:e1:ef:20:e6:33:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52 Validity Not Before: Dec 18 04:01:17 2025 GMT Not After : Dec 19 04:01:17 2025 GMT Subject: CN=64c3ec0905ac685faadd0e11b421f5c5e6f772de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:b9:67:be:a3:1d:ab:35:90:b0:8b:41:57: c8:fd:d9:8a:85:12:26:ce:4b:9b:51:2f:86:53:ad: 13:d1:25:6e:6e:0d:bd:5a:84:b5:5e:31:45:0a:da: 57:46:94:1c:45:63:68:a0:18:d5:08:55:64:76:87: e7:fb:33:a1:53:40:b6:57:6d:3e:c8:d4:54:89:40: cc:51:4e:9b:96:63:a4:7a:7e:e1:a4:7d:9b:8a:f8: 39:fe:6b:ae:74:8c:6d:4b:4a:b5:bf:0e:92:3b:10: 76:cb:4a:98:fb:cc:6a:01:3f:82:31:a6:d9:f7:d7: 23:b6:52:ba:a7:f7:92:1c:f1:61:55:c0:ab:37:72: b5:86:33:b6:95:5b:c2:12:5d:07:e4:c6:c0:b0:5b: 1a:bd:0b:73:6c:16:bb:b4:00:82:52:34:b3:27:4c: b9:24:91:81:94:49:1d:60:bb:83:99:0c:b3:86:bd: eb:e5:74:bb:ed:15:5f:51:76:1b:93:c7:2d:05:fe: 6d:6b:0a:88:0b:c3:21:7d:08:5c:50:d8:55:33:f6: 1c:c0:cb:a2:aa:96:dd:88:ca:a8:c1:bd:d8:ea:5a: c9:d0:6e:b2:29:8e:d0:45:20:87:70:84:00:46:49: 60:bf:e6:a3:a2:7d:b0:6c:c7:c5:96:73:32:a6:91: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C3:EC:09:05:AC:68:5F:AA:DD:0E:11:B4:21:F5:C5:E6:F7:72:DE X509v3 Authority Key Identifier: keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e3:ec:48:05:8e:39:e2:fc:5d:bc:98:47:bf:4e:e0:9f:e6: 1d:f4:ea:08:a5:95:cd:3c:aa:a3:c7:6b:8e:01:b0:4b:fb:eb: 28:9f:55:2d:96:9f:22:14:f9:68:45:fa:c6:43:d8:2c:b3:86: 07:90:52:fc:b2:f3:0e:bb:ab:4a:aa:23:37:4f:ea:1e:fd:c6: b9:79:8c:46:c8:f8:13:0c:7f:26:77:3e:7e:52:04:d5:de:27: 6f:2b:10:4b:c5:30:f2:a6:49:f1:53:6d:4b:c6:3a:b7:c0:b5: cd:cb:04:17:b1:c8:fb:23:97:4e:f3:35:9b:cc:45:22:bc:ec: 8f:79:82:70:77:3a:bd:c4:2c:10:76:68:40:53:30:29:40:a4: c5:45:b1:47:62:66:2d:34:20:89:80:e5:f4:4d:ef:db:48:e8: 6f:d3:43:fa:d9:28:52:2b:6e:4f:eb:02:2f:0e:2b:a7:1d:5c: b6:66:73:63:8b:83:2e:75:67:66:0a:3e:6a:d3:1e:ab:d0:3a: ef:b6:c0:5b:f0:df:28:88:c6:fa:5e:09:9a:ce:ac:a0:d3:bf: 50:22:65:71:78:75:e1:91:57:53:1f:13:bb:b3:60:fd:eb:b3: cb:0f:c2:0c:86:56:a9:d1:d1:28:95:0c:74:75:a6:81:7a:ba: 85:9c:b4:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnomQ49e4wdeV4e8g5jP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDVjOWM1OGQ1YTQ5OTliNWRjZTllMDcwZDMyZjQ4OGUz MzFmNTIwHhcNMjUxMjE4MDQwMTE3WhcNMjUxMjE5MDQwMTE3WjAzMTEwLwYDVQQD Eyg2NGMzZWMwOTA1YWM2ODVmYWFkZDBlMTFiNDIxZjVjNWU2Zjc3MmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V65Z76jHas1kLCLQVfI/dmKhRIm zkubUS+GU60T0SVubg29WoS1XjFFCtpXRpQcRWNooBjVCFVkdofn+zOhU0C2V20+ yNRUiUDMUU6blmOken7hpH2bivg5/muudIxtS0q1vw6SOxB2y0qY+8xqAT+CMabZ 99cjtlK6p/eSHPFhVcCrN3K1hjO2lVvCEl0H5MbAsFsavQtzbBa7tACCUjSzJ0y5 JJGBlEkdYLuDmQyzhr3r5XS77RVfUXYbk8ctBf5tawqIC8MhfQhcUNhVM/YcwMui qpbdiMqowb3Y6lrJ0G6yKY7QRSCHcIQARklgv+ajon2wbMfFlnMyppESgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTD7AkFrGhfqt0OEbQh9cXm93LeMB8GA1UdIwQY MBaAFEZFycWNWkmZtdzp4HDTL0iOMx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtYSnhZMWFTWm0xM09uZ2NOTXZTSTR6SDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82YzUzMzEtZGMxYi00ZjhjLTlkM2Qt MjhiZjFkMzNhYTkwLzEvUmtYSnhZMWFTWm0xM09uZ2NOTXZTSTR6SDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82YzUzMzEtZGMxYi00ZjhjLTlkM2QtMjhiZjFkMzNhYTkw LzEvUmtYSnhZMWFTWm0xM09uZ2NOTXZTSTR6SDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOPsSAWO OeL8XbyYR79O4J/mHfTqCKWVzTyqo8drjgGwS/vrKJ9VLZafIhT5aEX6xkPYLLOG B5BS/LLzDrurSqojN0/qHv3GuXmMRsj4Ewx/Jnc+flIE1d4nbysQS8Uw8qZJ8VNt S8Y6t8C1zcsEF7HI+yOXTvM1m8xFIrzsj3mCcHc6vcQsEHZoQFMwKUCkxUWxR2Jm LTQgiYDl9E3v20job9ND+tkoUituT+sCLw4rpx1ctmZzY4uDLnVnZgo+atMeq9A6 77bAW/DfKIjG+l4Jms6soNO/UCJlcXh14ZFXUx8Tu7Ng/euzyw/CDIZWqdHRKJUM dHWmgXq6hZy0ug== -----END CERTIFICATE-----Generated at Thu Dec 18 06:49:15 2025 by rpki-client