This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft File: RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json) Hash identifier: CKdlG3ZnVJvi57l1aOG4Yr7p+5sXGIkbcUA/AjjFEiY= Subject key identifier: C5:27:B7:69:E2:96:8A:DB:C8:7D:E0:77:D1:47:D9:B4:BE:4D:87:F3 Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Certificate serial: 019B424AFA12C4718D5CEE0497B2445879BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft Manifest number: 1797 Signing time: Sun 21 Dec 2025 19:02:48 +0000 Manifest this update: Sun 21 Dec 2025 19:02:48 +0000 Manifest next update: Mon 22 Dec 2025 19:02:48 +0000 Files and hashes: 1: 9NPwe5Cch9DKsApne4lBck33dDg.roa (hash: n5rsnUrmOjZIQ9fY3e7CPhPSBY9CrA1hfcg23aULjnI=) 2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: +6Zj98IEV/s7oT24LQx77cpqENk9aqhyCRXeuW70t5c=) 3: ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa (hash: d2ka5QhSCEg5WGvXSWc7XTeM7dxOHFNwQmEQHDweYuE=) 4: gJceF3d-nooj-HNFWfJ7DjrX2tM.roa (hash: UdFUlFj+wie5ycXMTsd/YSKdJbHKvpKDw6EwjwqI0NE=) 5: o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa (hash: aIK9wfTTcwYlswanyt/B91y3FSF50A1oyK2VXl08Ak8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:fa:12:c4:71:8d:5c:ee:04:97:b2:44:58:79:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Validity Not Before: Dec 21 19:02:48 2025 GMT Not After : Dec 22 19:02:48 2025 GMT Subject: CN=c527b769e2968adbc87de077d147d9b4be4d87f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:a8:d7:0e:e2:fc:2a:5e:ac:9a:cb:87:5d: b3:d3:43:5a:d0:f0:dc:31:91:36:d4:2b:37:d0:be: de:14:73:11:4d:10:5e:75:c2:90:a0:dd:d0:aa:ab: 61:bf:a9:94:26:b1:7f:88:b6:16:11:62:ef:02:b0: 27:f3:66:5b:dc:b1:9e:a6:13:e5:2a:19:a7:22:e9: 27:be:1d:e1:8a:1a:a1:9a:81:52:5c:5e:1d:ad:37: 11:3f:98:fb:c0:cb:15:29:7e:73:fa:b1:eb:a6:b5: 9a:41:67:43:c9:10:b0:e9:5c:01:37:58:96:64:2c: 09:89:54:5e:53:e0:c9:da:2b:50:7b:19:40:0e:8a: 61:14:77:e3:36:b6:20:3d:26:b1:2e:40:41:f6:97: 77:82:46:47:6d:3e:07:2e:cb:ac:2d:92:9f:ad:88: 51:7e:66:6a:48:da:c8:9c:20:ac:f2:ba:f2:8d:30: 86:5a:71:93:aa:d9:89:f7:d6:1b:15:e1:2b:d3:c7: 99:0a:f9:03:dc:91:dc:7e:45:43:d2:45:10:0b:f5: 75:75:cb:ec:ac:d2:ca:e9:46:18:3c:2d:12:6f:a5: c4:96:67:d6:88:4b:ea:2a:ec:bb:bd:6a:bf:4f:e4: 5e:5d:00:3c:59:d3:48:a1:ef:39:b3:78:12:ad:27: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:27:B7:69:E2:96:8A:DB:C8:7D:E0:77:D1:47:D9:B4:BE:4D:87:F3 X509v3 Authority Key Identifier: keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:97:cf:00:f9:a7:4d:ba:75:e1:11:4c:a0:a1:13:0e:91:d6: b4:3c:a2:82:da:c3:8e:ee:26:26:ec:12:b1:d8:d8:ff:7b:31: f8:cb:8e:56:bc:27:2b:b4:77:6c:0f:b0:53:0e:be:82:95:72: 05:ed:3b:79:db:a9:a0:cf:2e:49:e6:b5:73:8a:8f:35:ac:58: 44:b9:f1:9f:90:54:ae:09:bf:5c:9e:78:1c:d3:b2:e1:05:1d: 8b:c0:92:58:a9:4e:7f:31:50:4a:bc:e6:3d:f3:24:af:4e:ae: b7:64:a0:be:2b:23:ce:46:ab:fb:b4:2d:3a:5b:e1:f9:d4:ee: 32:f7:a6:08:7f:69:5b:cb:db:8d:68:f7:84:17:f3:03:44:99: 42:38:4d:b1:3a:89:90:c7:c4:55:78:57:eb:6d:f3:de:92:a4: c1:7b:b0:15:dd:13:35:8a:88:9c:ae:6f:b5:74:48:69:e7:ec: 2e:ad:07:be:4b:13:74:74:00:fc:45:e6:47:da:35:a9:ab:ad: f7:6a:b8:99:61:6d:1a:27:8e:f4:0e:33:f7:cf:23:1b:3c:d1: 62:63:ae:ac:ed:c6:52:e1:41:c8:9f:30:1d:a7:02:78:1d:0a: 94:ac:66:94:21:0e:75:3c:69:ef:23:f3:62:0c:08:22:4c:68: d8:cc:f1:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSvoSxHGNXO4El7JEWHm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh NWQ0ZjgwHhcNMjUxMjIxMTkwMjQ4WhcNMjUxMjIyMTkwMjQ4WjAzMTEwLwYDVQQD EyhjNTI3Yjc2OWUyOTY4YWRiYzg3ZGUwNzdkMTQ3ZDliNGJlNGQ4N2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAyo1w7i/CperJrLh12z00Na0PDc MZE21Cs30L7eFHMRTRBedcKQoN3Qqqthv6mUJrF/iLYWEWLvArAn82Zb3LGephPl KhmnIuknvh3hihqhmoFSXF4drTcRP5j7wMsVKX5z+rHrprWaQWdDyRCw6VwBN1iW ZCwJiVReU+DJ2itQexlADophFHfjNrYgPSaxLkBB9pd3gkZHbT4HLsusLZKfrYhR fmZqSNrInCCs8rryjTCGWnGTqtmJ99YbFeEr08eZCvkD3JHcfkVD0kUQC/V1dcvs rNLK6UYYPC0Sb6XElmfWiEvqKuy7vWq/T+ReXQA8WdNIoe85s3gSrSdY9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUnt2nilorbyH3gd9FH2bS+TYfzMB8GA1UdIwQY MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt MjFjZjU2Y2JjZTEyLzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpfPAPmn Tbp14RFMoKETDpHWtDyigtrDju4mJuwSsdjY/3sx+MuOVrwnK7R3bA+wUw6+gpVy Be07edupoM8uSea1c4qPNaxYRLnxn5BUrgm/XJ54HNOy4QUdi8CSWKlOfzFQSrzm PfMkr06ut2Sgvisjzkar+7QtOlvh+dTuMvemCH9pW8vbjWj3hBfzA0SZQjhNsTqJ kMfEVXhX623z3pKkwXuwFd0TNYqInK5vtXRIaefsLq0HvksTdHQA/EXmR9o1qaut 92q4mWFtGieO9A4z988jGzzRYmOurO3GUuFByJ8wHacCeB0KlKxmlCEOdTxp7yPz YgwIIkxo2Mzxcw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:55:25 2025 by rpki-client