This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft File: Rqyv5hND1xDfYM2R3giQH9u6b48.mft (raw, json) Hash identifier: Fk7BK0xGBBh3ZpBw64WoW88tggTCxl0bUS0HoREP+vY= Subject key identifier: 69:A0:F9:AD:BF:99:40:39:CD:18:EC:4F:98:ED:36:37:86:8F:D7:23 Authority key identifier: 46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F Certificate issuer: /CN=46acafe61343d710df60cd91de08901fdbba6f8f Certificate serial: 019B44DCED2234F497B906C1E42847B0B61E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft Manifest number: 07CC Signing time: Mon 22 Dec 2025 07:01:27 +0000 Manifest this update: Mon 22 Dec 2025 07:01:27 +0000 Manifest next update: Tue 23 Dec 2025 07:01:27 +0000 Files and hashes: 1: Rqyv5hND1xDfYM2R3giQH9u6b48.crl (hash: /rWfURetJobUSUPTOeBhQ71DDKq+KfBx/SJVGPAD1C0=) 2: SL6led1HI-RxeSBiRf_KwOsdWMw.roa (hash: bUSyhumyZsuI3117QZlb6u67xKqgT+wxfjDPtnVzMSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:ed:22:34:f4:97:b9:06:c1:e4:28:47:b0:b6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46acafe61343d710df60cd91de08901fdbba6f8f Validity Not Before: Dec 22 07:01:27 2025 GMT Not After : Dec 23 07:01:27 2025 GMT Subject: CN=69a0f9adbf994039cd18ec4f98ed3637868fd723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:4d:73:48:d7:a4:81:ec:66:16:76:12:1e: 3d:dd:4a:a4:8a:c9:2f:e3:b0:a6:e3:72:9d:01:c2: e6:61:db:99:6a:cb:90:d4:9d:4c:fd:61:9f:93:ff: 1a:51:f9:8b:7e:f5:cd:50:0c:2b:1b:6d:73:09:b9: 3d:d3:2a:89:2e:88:b3:71:77:97:ac:ae:c0:49:29: 1b:3f:a0:c8:a0:4c:5f:15:a9:dd:3c:73:36:be:99: ed:27:40:ea:37:a1:c7:37:99:7d:1f:02:0f:30:18: f8:37:70:24:5e:7c:d0:60:eb:ad:eb:d0:da:28:be: 21:6b:16:2e:0e:33:53:09:43:d7:10:fe:f7:15:75: 9b:2a:90:db:b3:95:c6:2d:04:ca:5d:f6:62:66:7f: 44:df:d0:9e:75:16:d3:d2:57:fd:52:c5:4f:8a:48: 35:23:a9:2e:6a:02:a2:ae:7a:11:5c:d6:85:31:19: 6f:33:cc:fc:4c:ba:72:7e:bd:0e:f0:4c:bf:e4:5b: b7:f2:16:52:b2:df:74:c1:1c:86:ae:5b:96:1d:23: b7:d4:6c:75:8c:bc:ef:18:d5:d1:4f:c1:a5:1f:86: f9:38:a8:dd:ff:19:59:13:db:52:e9:46:5a:5b:a6: 4e:10:ab:b1:0a:3a:17:96:04:42:36:af:ca:2d:55: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A0:F9:AD:BF:99:40:39:CD:18:EC:4F:98:ED:36:37:86:8F:D7:23 X509v3 Authority Key Identifier: keyid:46:AC:AF:E6:13:43:D7:10:DF:60:CD:91:DE:08:90:1F:DB:BA:6F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqyv5hND1xDfYM2R3giQH9u6b48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b887da-44b9-4be2-866f-d3a85a71b029/1/Rqyv5hND1xDfYM2R3giQH9u6b48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0a:82:f8:8f:a3:25:ba:84:76:78:90:63:fe:c3:4d:f9:a6: e9:6d:68:84:80:2e:5a:ad:91:31:bc:b7:5b:4a:e1:ad:d0:c9: 3b:29:81:93:80:d0:6a:e0:de:97:a8:b4:ba:46:aa:ba:2d:7e: 58:ae:68:44:05:e4:15:2a:10:2e:69:61:11:bc:09:71:b4:4d: 89:b2:28:cb:af:31:15:d6:8e:b8:a5:c7:24:1b:bb:12:6a:6b: a2:17:76:c2:5f:65:83:8c:5c:59:e9:48:52:2e:29:e3:75:a7: a8:b5:80:30:91:a3:32:1d:28:69:be:a1:61:12:2c:1f:7c:d8: d0:0d:d4:53:c6:b8:17:ea:af:af:e6:5f:b0:a6:5a:cb:9c:8d: 4f:68:9c:39:47:c7:e8:dd:53:3e:fa:bd:ab:88:6a:72:d3:5c: ee:c7:fa:b9:c0:e0:8e:b4:8f:7e:db:27:ec:ca:5e:39:7e:75: fc:65:4a:69:61:4d:f1:26:f5:5e:48:18:d0:c2:c4:63:2f:38: cc:f6:da:ac:de:b9:2c:e5:c0:9e:be:bf:9d:b0:80:05:50:f6: 84:aa:a3:23:fa:c5:da:4c:46:66:92:37:b6:39:9a:9b:63:f2: 0e:07:8e:6c:60:3c:23:93:c6:cf:d2:77:af:bd:e6:f6:3f:97: 22:08:50:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3O0iNPSXuQbB5ChHsLYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWNhZmU2MTM0M2Q3MTBkZjYwY2Q5MWRlMDg5MDFmZGJi YTZmOGYwHhcNMjUxMjIyMDcwMTI3WhcNMjUxMjIzMDcwMTI3WjAzMTEwLwYDVQQD Eyg2OWEwZjlhZGJmOTk0MDM5Y2QxOGVjNGY5OGVkMzYzNzg2OGZkNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMFNc0jXpIHsZhZ2Eh493Uqkiskv 47Cm43KdAcLmYduZasuQ1J1M/WGfk/8aUfmLfvXNUAwrG21zCbk90yqJLoizcXeX rK7ASSkbP6DIoExfFandPHM2vpntJ0DqN6HHN5l9HwIPMBj4N3AkXnzQYOut69Da KL4haxYuDjNTCUPXEP73FXWbKpDbs5XGLQTKXfZiZn9E39CedRbT0lf9UsVPikg1 I6kuagKirnoRXNaFMRlvM8z8TLpyfr0O8Ey/5Fu38hZSst90wRyGrluWHSO31Gx1 jLzvGNXRT8GlH4b5OKjd/xlZE9tS6UZaW6ZOEKuxCjoXlgRCNq/KLVXL3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmg+a2/mUA5zRjsT5jtNjeGj9cjMB8GA1UdIwQY MBaAFEasr+YTQ9cQ32DNkd4IkB/bum+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iODg3ZGEtNDRiOS00YmUyLTg2NmYt ZDNhODVhNzFiMDI5LzEvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iODg3ZGEtNDRiOS00YmUyLTg2NmYtZDNhODVhNzFiMDI5 LzEvUnF5djVoTkQxeERmWU0yUjNnaVFIOXU2YjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAqC+I+j JbqEdniQY/7DTfmm6W1ohIAuWq2RMby3W0rhrdDJOymBk4DQauDel6i0ukaqui1+ WK5oRAXkFSoQLmlhEbwJcbRNibIoy68xFdaOuKXHJBu7Emprohd2wl9lg4xcWelI Ui4p43WnqLWAMJGjMh0oab6hYRIsH3zY0A3UU8a4F+qvr+ZfsKZay5yNT2icOUfH 6N1TPvq9q4hqctNc7sf6ucDgjrSPftsn7MpeOX51/GVKaWFN8Sb1XkgY0MLEYy84 zPbarN65LOXAnr6/nbCABVD2hKqjI/rF2kxGZpI3tjmam2PyDgeObGA8I5PGz9J3 r73m9j+XIghQ+Q== -----END CERTIFICATE-----Generated at Mon Dec 22 12:12:48 2025 by rpki-client