This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: Hj0A8KOa5/pOgdF7O8/nzyPMmXT/n23cAojctBGOUnY= Subject key identifier: 0C:B7:58:5F:5B:85:02:A9:EB:8D:F4:6A:7A:F2:2A:FF:FC:D8:EC:92 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B3C7F05E3012D288C271BF67A7894C9EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0B36 Signing time: Sat 20 Dec 2025 16:01:56 +0000 Manifest this update: Sat 20 Dec 2025 16:01:56 +0000 Manifest next update: Sun 21 Dec 2025 16:01:56 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 4: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 5: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: JAn1U6NVS5SpKuGyeZGeo7lATtXAJbU35LKeFjrZNhA=) 6: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 7: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 8: bsJ2xZlOkw1plvuA7l4e3XmHypY.roa (hash: 1vESi505hq9zZ4EhI/OkoYePF4oay9Y9KHYuJ7nDjEk=) 9: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 10: d06v_z5AzGawWdpAyBM32uqoY8s.roa (hash: pSQvaS1eopRaEZbRC3t4/wI1inV/dQioI0GQiFJQkg8=) 11: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 12: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 13: nkXKQXQZfWoB_SRu8UGi2gudjoE.roa (hash: yyTA0n4064ykc+ZOi6FPjYYdwqHRzajU9OCljE+08GA=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:05:e3:01:2d:28:8c:27:1b:f6:7a:78:94:c9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Dec 20 16:01:56 2025 GMT Not After : Dec 21 16:01:56 2025 GMT Subject: CN=0cb7585f5b8502a9eb8df46a7af22afffcd8ec92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:42:da:fe:7b:8d:65:6f:29:a8:60:28:27: 3c:f5:21:09:f8:aa:9d:0b:9b:45:c6:be:e6:5c:27: cf:16:6b:5d:be:86:bb:c6:ac:18:48:41:ad:73:65: ac:d3:8b:d3:22:6b:23:6b:7d:93:f6:a7:87:c3:de: 79:36:8a:b3:2a:3a:1a:67:f0:c3:a1:f1:ff:ef:06: 00:42:89:7c:11:68:a6:c2:3b:c3:80:00:5c:3e:66: 40:9a:9e:01:4f:f4:90:16:ee:68:1a:9f:34:5b:83: ea:d9:f5:2a:1d:bb:25:93:c6:a9:26:00:55:84:46: dc:8e:28:1c:4e:0e:f9:c9:ac:23:c2:c3:51:b9:0e: 70:4d:c0:0e:71:93:4d:66:f9:ea:0e:89:21:35:8c: 8e:0a:2b:a4:ca:fd:de:d3:eb:21:98:76:2d:15:a8: 13:a1:a2:85:75:df:43:e5:e5:00:37:f8:11:ed:4e: 88:3d:ba:b2:37:ac:f0:b4:a5:5f:d4:14:dd:11:eb: e4:e1:e2:26:eb:84:f7:15:95:99:a1:e7:7e:b0:37: f1:00:b1:26:8e:85:e0:3e:9f:4a:72:88:78:1d:aa: 23:f8:80:f9:76:88:a2:1a:b1:fe:6f:c7:29:db:21: b3:9d:96:c7:f0:d8:c3:33:e5:b1:c9:c3:a6:fa:88: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B7:58:5F:5B:85:02:A9:EB:8D:F4:6A:7A:F2:2A:FF:FC:D8:EC:92 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:33:6c:16:92:77:e0:0d:f2:b3:dc:6b:a3:e9:0b:80:3a:63: 49:a1:2f:30:b6:0a:ba:69:2f:e5:8f:72:6e:82:b7:54:66:54: 4f:dd:0d:c5:e3:1c:4a:0c:fe:7f:45:ef:6b:97:7a:4a:dc:c1: 00:76:75:e0:8b:bd:2d:1e:39:c0:b7:fd:7f:2d:37:e8:82:66: 54:96:f7:35:13:ec:ec:27:5f:8e:f3:73:92:45:64:24:e6:b3: 9a:5a:20:8b:78:49:fc:35:15:f1:ad:08:14:7a:38:a5:3e:d8: 5d:a5:6e:05:f5:dd:43:65:7a:95:de:c4:68:27:03:10:3b:0f: b1:cb:3c:1b:1c:6f:b7:57:72:c9:b9:0b:65:3a:50:f8:d1:1b: 89:0f:47:f0:ba:53:ea:4c:3a:a6:2e:6e:02:d7:2e:65:65:b8: 26:90:73:dd:43:6c:e6:a6:76:da:c6:40:df:ad:9d:55:6f:b5: aa:f6:26:b2:86:b6:34:87:7c:08:b6:e6:95:0d:14:06:d5:51: 1b:d0:61:14:bf:c1:cb:35:30:fa:c2:2c:be:25:d6:aa:7c:8f: c4:20:ed:7b:a0:07:f7:05:48:0e:15:08:78:f2:f0:f6:bf:9d: 71:63:85:0b:bd:fe:dc:0a:43:39:ac:68:40:fa:b4:cf:9a:34: 15:2c:1c:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwXjAS0ojCcb9np4lMnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUxMjIwMTYwMTU2WhcNMjUxMjIxMTYwMTU2WjAzMTEwLwYDVQQD EygwY2I3NTg1ZjViODUwMmE5ZWI4ZGY0NmE3YWYyMmFmZmZjZDhlYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTtC2v57jWVvKahgKCc89SEJ+Kqd C5tFxr7mXCfPFmtdvoa7xqwYSEGtc2Ws04vTImsja32T9qeHw955NoqzKjoaZ/DD ofH/7wYAQol8EWimwjvDgABcPmZAmp4BT/SQFu5oGp80W4Pq2fUqHbslk8apJgBV hEbcjigcTg75yawjwsNRuQ5wTcAOcZNNZvnqDokhNYyOCiukyv3e0+shmHYtFagT oaKFdd9D5eUAN/gR7U6IPbqyN6zwtKVf1BTdEevk4eIm64T3FZWZoed+sDfxALEm joXgPp9Kcoh4Haoj+ID5doiiGrH+b8cp2yGznZbH8NjDM+WxycOm+ojmWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy3WF9bhQKp6430anryKv/82OySMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODNsFpJ3 4A3ys9xro+kLgDpjSaEvMLYKumkv5Y9yboK3VGZUT90NxeMcSgz+f0Xva5d6StzB AHZ14Iu9LR45wLf9fy036IJmVJb3NRPs7CdfjvNzkkVkJOazmlogi3hJ/DUV8a0I FHo4pT7YXaVuBfXdQ2V6ld7EaCcDEDsPscs8Gxxvt1dyybkLZTpQ+NEbiQ9H8LpT 6kw6pi5uAtcuZWW4JpBz3UNs5qZ22sZA362dVW+1qvYmsoa2NId8CLbmlQ0UBtVR G9BhFL/ByzUw+sIsviXWqnyPxCDte6AH9wVIDhUIePLw9r+dcWOFC73+3ApDOaxo QPq0z5o0FSwctg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:17:01 2025 by rpki-client