This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json) Hash identifier: Q+rYPcNbEXfJnQkhwsg41Ac7YDMoaInSJS5MJ2Qvd1E= Subject key identifier: 57:7D:8D:D3:0A:91:09:AF:6A:C9:41:34:DC:E8:36:2A:A8:C9:5C:F4 Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48 Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148 Certificate serial: 019B416DDFAF691F5FF791278058771B1082 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 15:01:18 +0000 Manifest this update: Sun 21 Dec 2025 15:01:18 +0000 Manifest next update: Mon 22 Dec 2025 15:01:18 +0000 Files and hashes: 1: MsdUQCagTDHd8Si78BPDmp_WpZ8.roa (hash: k0m/eSaWjhvcNX6cbMLf7bH/cSi8h0RiGTdFIrsyBkg=) 2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: uO81NfpD9azdR3twO3zw0aK/2SF9WWW43QHn0NfZLX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:df:af:69:1f:5f:f7:91:27:80:58:77:1b:10:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148 Validity Not Before: Dec 21 15:01:18 2025 GMT Not After : Dec 22 15:01:18 2025 GMT Subject: CN=577d8dd30a9109af6ac94134dce8362aa8c95cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d6:3d:b5:04:a6:60:8c:64:53:75:c8:b1:c7: 3b:6f:69:12:f3:62:fb:eb:31:40:6d:7b:f0:e0:4c: 37:20:9c:cd:f8:98:5e:c6:85:41:d0:f3:70:c2:02: dc:16:99:cf:a3:03:66:b8:48:90:9a:71:d1:77:3e: 29:88:bd:a6:23:22:b5:32:b2:67:e9:4d:55:1e:d9: 86:08:3a:64:13:b9:bb:6d:8d:b8:f0:84:f6:70:86: 13:62:e4:16:57:05:61:0c:11:23:40:0b:39:6a:20: 64:62:c3:93:f9:4f:b3:3c:5c:31:d0:7b:f6:cf:30: 2d:8e:62:e8:c8:33:4f:8e:70:ac:9a:e4:85:b3:8e: b6:a2:e0:64:cb:21:cb:9f:7e:85:c9:e3:b0:4d:d5: db:be:41:72:b6:c1:82:41:94:ea:bc:ee:8a:e8:29: c1:aa:f4:b0:f5:1d:26:dc:8f:92:67:4e:32:78:29: 01:e6:c2:8a:1b:40:bd:f2:58:bc:9a:a0:13:d2:0f: 2f:32:aa:e9:d0:44:17:2d:f0:89:41:54:14:70:c4: a1:26:d0:d9:ef:8a:68:72:9a:24:a5:ac:49:1f:d1: 6c:b5:bf:f0:bd:02:4b:ce:da:78:f6:e7:c7:ae:c7: 94:bf:f1:c8:6e:a6:1d:99:f7:1f:23:97:8f:b0:29: 9b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7D:8D:D3:0A:91:09:AF:6A:C9:41:34:DC:E8:36:2A:A8:C9:5C:F4 X509v3 Authority Key Identifier: keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8d:4b:0a:24:8e:65:91:19:93:6a:87:63:8a:cb:46:a0:88: cb:55:73:70:bb:9d:45:c9:5f:c0:5f:ad:b7:01:77:74:25:d9: 67:91:39:bf:fc:42:ac:34:73:62:7b:14:b9:c8:df:d6:5a:a5: f3:b6:1c:ae:e6:59:e5:94:7d:a2:a3:99:b3:21:4e:64:65:5c: 4f:c7:27:4d:6c:f3:5c:64:2c:75:14:bd:e5:42:bc:ff:e2:a5: 9b:b6:36:fb:73:97:e6:69:e8:7b:84:d8:43:e2:0c:4e:08:0a: b6:81:df:1e:9d:69:22:d7:67:81:b2:69:d5:c2:57:21:44:5a: 61:19:35:b6:16:30:b5:34:be:8e:1a:11:ec:0c:36:39:63:21: 23:db:4b:fe:06:14:16:4c:35:7a:23:01:c9:00:22:a0:2d:5b: e9:d0:9c:e5:41:66:4f:b2:ee:f3:4e:bf:30:e8:e0:f6:8f:22: bd:fe:34:4b:c9:a7:50:06:b2:d2:25:cc:0f:a7:36:9b:63:6b: a9:6e:67:55:a4:86:39:41:b1:44:1b:81:4c:8e:ea:5a:3b:81: 69:72:1f:87:bd:1c:b8:ae:24:5d:b8:54:bc:45:e1:88:77:72: a1:11:0e:e0:34:b2:9c:a4:16:58:5c:8a:81:c5:a8:be:ac:67: 72:01:a8:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbd+vaR9f95EngFh3GxCCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTNiNDNmNjQ3ZTFlNzcxNGNkMTMwNzY0Y2JiYzQ4MTRl N2ExNDgwHhcNMjUxMjIxMTUwMTE4WhcNMjUxMjIyMTUwMTE4WjAzMTEwLwYDVQQD Eyg1NzdkOGRkMzBhOTEwOWFmNmFjOTQxMzRkY2U4MzYyYWE4Yzk1Y2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Y9tQSmYIxkU3XIscc7b2kS82L7 6zFAbXvw4Ew3IJzN+JhexoVB0PNwwgLcFpnPowNmuEiQmnHRdz4piL2mIyK1MrJn 6U1VHtmGCDpkE7m7bY248IT2cIYTYuQWVwVhDBEjQAs5aiBkYsOT+U+zPFwx0Hv2 zzAtjmLoyDNPjnCsmuSFs462ouBkyyHLn36FyeOwTdXbvkFytsGCQZTqvO6K6CnB qvSw9R0m3I+SZ04yeCkB5sKKG0C98li8mqAT0g8vMqrp0EQXLfCJQVQUcMShJtDZ 74pocpokpaxJH9Fstb/wvQJLztp49ufHrseUv/HIbqYdmfcfI5ePsCmbmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFd9jdMKkQmvaslBNNzoNiqoyVz0MB8GA1UdIwQY MBaAFESjtD9kfh53FM0TB2TLvEgU56FIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgt YTNjNTM5ZjBiNmQyLzEvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgtYTNjNTM5ZjBiNmQy LzEvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeo1LCiSO ZZEZk2qHY4rLRqCIy1VzcLudRclfwF+ttwF3dCXZZ5E5v/xCrDRzYnsUucjf1lql 87YcruZZ5ZR9oqOZsyFOZGVcT8cnTWzzXGQsdRS95UK8/+Klm7Y2+3OX5mnoe4TY Q+IMTggKtoHfHp1pItdngbJp1cJXIURaYRk1thYwtTS+jhoR7Aw2OWMhI9tL/gYU Fkw1eiMByQAioC1b6dCc5UFmT7Lu806/MOjg9o8ivf40S8mnUAay0iXMD6c2m2Nr qW5nVaSGOUGxRBuBTI7qWjuBaXIfh70cuK4kXbhUvEXhiHdyoREO4DSynKQWWFyK gcWovqxncgGokQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:10:02 2025 by rpki-client