This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json) Hash identifier: fxhsgFH5xJ40jOilAQsEEnbUqrc2iG2fiSyK0N7v074= Subject key identifier: 4B:07:1D:75:2D:67:85:03:54:29:5D:0D:A0:AE:4D:08:EA:0C:39:8A Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296 Certificate serial: 019B44379BCC04D1F0D650ED45FBF4FB7CD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft Manifest number: 1794 Signing time: Mon 22 Dec 2025 04:00:53 +0000 Manifest this update: Mon 22 Dec 2025 04:00:53 +0000 Manifest next update: Tue 23 Dec 2025 04:00:53 +0000 Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=) 2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=) 3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: Vv562LbX2ZZXnJPzA6MPKDw6c0tjmRHWsMmqggD70mU=) 4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:9b:cc:04:d1:f0:d6:50:ed:45:fb:f4:fb:7c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296 Validity Not Before: Dec 22 04:00:53 2025 GMT Not After : Dec 23 04:00:53 2025 GMT Subject: CN=4b071d752d67850354295d0da0ae4d08ea0c398a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fc:95:17:d5:27:28:ce:2a:9e:47:d6:e3:62: 61:c0:9a:7f:7e:34:62:ec:87:f1:95:58:68:6e:2c: 1c:bb:75:9c:b8:94:bd:0e:c4:b1:cc:7b:4d:ff:97: 03:fb:f0:0e:3e:92:c8:69:20:8b:15:10:be:34:b1: 27:cc:e3:cd:0f:2c:0a:17:a9:63:fc:f1:0c:35:37: a2:24:09:69:b3:7d:84:70:33:57:2d:9c:93:d9:ff: 75:a7:5a:50:0e:d4:b4:69:0c:b6:08:9c:72:ed:c4: 20:02:9e:2a:b0:27:98:ff:18:7b:d5:6d:3d:59:c0: f1:00:62:62:d8:55:62:05:6c:2d:4d:dd:6d:45:e5: 78:e6:68:0d:4b:e6:71:00:31:b7:6b:57:a3:11:c0: 7e:41:79:3b:4b:7d:a2:6c:f7:6a:e1:ab:71:a2:0c: e5:06:8a:d8:e8:a6:1f:1a:44:0c:c5:72:73:56:6f: 45:ca:91:16:75:e8:0b:97:87:6f:9c:ea:56:73:25: 91:c3:ca:20:a1:86:6c:69:43:57:13:87:55:e0:02: 35:a3:e3:9d:fe:e5:d0:d2:02:0b:1a:6c:b7:45:34: 3c:76:2f:80:99:72:74:39:64:bf:f7:b3:bb:85:87: 0c:d1:25:a7:0c:5a:fc:6e:91:27:73:19:2e:01:c1: 2a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:07:1D:75:2D:67:85:03:54:29:5D:0D:A0:AE:4D:08:EA:0C:39:8A X509v3 Authority Key Identifier: keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6c:80:0e:b7:9c:59:a0:32:f7:eb:79:93:4c:76:c5:56:29: fe:67:06:63:7b:c4:7b:3d:a2:a7:8e:38:89:18:04:84:7d:fe: c9:b0:d9:00:7b:2d:5c:e4:19:cd:5f:c7:93:7c:a6:e7:79:b9: 51:2c:2b:09:c8:5d:7b:74:85:57:98:44:42:50:75:3d:6f:ae: e9:1a:79:4d:39:ad:92:39:d0:34:5f:24:b5:be:37:cc:eb:a2: 72:39:4d:5c:5a:f2:16:95:b1:ac:00:cf:ea:c4:7d:81:13:78: ec:79:dd:dd:00:02:b9:d2:f1:d1:36:7b:a1:b7:48:65:f4:5a: 79:e6:42:36:ea:69:39:d3:41:8c:4f:44:16:e6:d2:24:67:39: d9:58:a8:3b:ad:17:17:d0:18:59:26:92:06:19:0d:65:3e:7b: ad:dd:ad:f1:85:83:fd:57:74:02:51:b4:9d:c2:4f:d1:d7:2a: 83:1f:d8:f0:5d:87:cb:83:1e:b2:4f:82:ad:46:ec:36:2f:91: 52:c3:59:0f:33:bc:ca:bf:96:c2:d3:53:81:b4:90:59:de:ee: ca:4c:39:21:8d:05:3c:4b:04:db:fa:e9:12:90:a3:6a:88:8a: 55:10:be:9e:a3:8c:b9:01:e1:fd:74:28:36:7a:13:a8:64:0e: d6:16:a9:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN5vMBNHw1lDtRfv0+3zQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw YTUyOTYwHhcNMjUxMjIyMDQwMDUzWhcNMjUxMjIzMDQwMDUzWjAzMTEwLwYDVQQD Eyg0YjA3MWQ3NTJkNjc4NTAzNTQyOTVkMGRhMGFlNGQwOGVhMGMzOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfyVF9UnKM4qnkfW42JhwJp/fjRi 7IfxlVhobiwcu3WcuJS9DsSxzHtN/5cD+/AOPpLIaSCLFRC+NLEnzOPNDywKF6lj /PEMNTeiJAlps32EcDNXLZyT2f91p1pQDtS0aQy2CJxy7cQgAp4qsCeY/xh71W09 WcDxAGJi2FViBWwtTd1tReV45mgNS+ZxADG3a1ejEcB+QXk7S32ibPdq4atxogzl BorY6KYfGkQMxXJzVm9FypEWdegLl4dvnOpWcyWRw8ogoYZsaUNXE4dV4AI1o+Od /uXQ0gILGmy3RTQ8di+AmXJ0OWS/97O7hYcM0SWnDFr8bpEncxkuAcEq5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsHHXUtZ4UDVCldDaCuTQjqDDmKMB8GA1UdIwQY MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt N2Y1ZjRkNjA0NzMxLzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2yADrec WaAy9+t5k0x2xVYp/mcGY3vEez2ip444iRgEhH3+ybDZAHstXOQZzV/Hk3ym53m5 USwrCchde3SFV5hEQlB1PW+u6Rp5TTmtkjnQNF8ktb43zOuicjlNXFryFpWxrADP 6sR9gRN47Hnd3QACudLx0TZ7obdIZfRaeeZCNuppOdNBjE9EFubSJGc52VioO60X F9AYWSaSBhkNZT57rd2t8YWD/Vd0AlG0ncJP0dcqgx/Y8F2Hy4Mesk+CrUbsNi+R UsNZDzO8yr+WwtNTgbSQWd7uykw5IY0FPEsE2/rpEpCjaoiKVRC+nqOMuQHh/XQo NnoTqGQO1hapTQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:30 2025 by rpki-client