This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft File: Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json) Hash identifier: 1M5FK47ePLIwyzTIxyqQjwjo3FK/W4NyS1bK3cRbRtA= Subject key identifier: 23:E9:22:A5:1C:1C:BF:DB:6C:D1:5D:C2:FB:53:6E:72:B2:D1:D0:10 Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f Certificate serial: 019B3CB4FEFB9CB6543B10726DBC61BAF38E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft Manifest number: 161A Signing time: Sat 20 Dec 2025 17:00:53 +0000 Manifest this update: Sat 20 Dec 2025 17:00:53 +0000 Manifest next update: Sun 21 Dec 2025 17:00:53 +0000 Files and hashes: 1: Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa (hash: 4N+U7+PRWNjJVqJ2KygRwPrjK1Ien5sO5KXTSIsM0Ro=) 2: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: JvY2Cclc00E3+Ui+UV0lOtkOJsL94+Qeope88NmDz/c=) 3: jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa (hash: Lc1enY7HbrV71Kk7B0ntI6Fug2DvBrGWJwGE9EwyfTM=) 4: mbp15f0zxyh0dCrGSwd4xsonIIo.roa (hash: sfiOy/EdM6txH5f3xqJYHSVySCyvLRH3tGusFyVii6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:fe:fb:9c:b6:54:3b:10:72:6d:bc:61:ba:f3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464dcfa96399716692d245a804887c09da451f8f Validity Not Before: Dec 20 17:00:53 2025 GMT Not After : Dec 21 17:00:53 2025 GMT Subject: CN=23e922a51c1cbfdb6cd15dc2fb536e72b2d1d010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:f5:df:08:3b:cd:e2:0b:f6:40:60:24:91: ba:aa:ba:a9:b7:61:b6:28:46:2e:2d:64:c9:2d:9f: 32:ef:9b:9c:ee:fc:9b:ff:5e:80:fd:d3:06:6a:54: 11:ad:c4:47:53:b7:c1:cc:1a:59:2a:0f:81:9d:f2: f9:59:ae:89:b8:b8:91:f4:ae:89:08:b5:1b:81:c0: 4e:eb:49:10:f4:e5:81:65:38:b0:f6:6b:1d:13:8c: db:43:74:6c:f8:2d:f8:0f:a6:02:cf:a2:2f:0d:5e: 04:66:19:f4:0c:6d:4f:0f:46:be:f4:b7:6e:d0:13: ae:15:27:36:e6:b0:6a:f5:8a:86:57:37:9f:47:1d: 3a:cf:a1:b9:5b:ba:cb:4b:49:a4:f9:d2:72:5a:09: 3e:8e:61:e8:59:e1:49:d6:05:82:21:39:da:05:4e: 61:67:4b:0d:c4:e1:c7:3a:03:94:c9:d9:f2:57:71: 2e:d4:d3:db:7e:98:80:39:78:aa:99:c3:b2:28:e9: 7e:9a:ba:02:c0:95:ee:ac:a4:92:83:f7:2c:6e:a0: d6:d3:12:e2:f0:a0:fd:18:ca:d0:91:a9:5c:52:2b: 02:b5:86:b5:77:5c:90:f8:15:65:7e:09:22:25:d3: ad:22:9b:b6:f4:77:7b:a5:b4:01:42:06:28:d9:00: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E9:22:A5:1C:1C:BF:DB:6C:D1:5D:C2:FB:53:6E:72:B2:D1:D0:10 X509v3 Authority Key Identifier: keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:20:97:2d:2c:14:2f:0f:f3:78:42:6c:20:c9:d5:83:d2:22: 38:93:97:d4:54:d4:9c:a0:c3:48:04:a7:bb:55:92:7b:d5:c1: b5:f4:bf:23:24:3d:89:3c:bf:90:08:5c:ee:7f:2b:67:b8:6f: ae:09:42:e2:d4:62:34:39:82:9f:8a:d0:27:92:e7:1a:fe:3f: d9:45:09:86:f3:61:05:ff:84:f7:94:cf:86:f5:1e:ab:52:f1: 95:17:fa:ad:60:cd:e9:85:63:bd:8f:06:ab:9d:68:68:07:c6: 93:90:08:77:e6:f3:fd:85:ec:ea:18:c1:e2:ee:2b:40:a1:e4: d1:18:4c:77:39:ea:4b:8a:b9:53:50:50:bd:56:bb:2e:9f:9c: 80:21:23:5f:5e:67:f9:9f:6f:af:43:27:a0:39:ca:5c:fb:fb: 8f:65:09:7c:3d:6c:46:33:18:ea:57:05:96:bd:c9:f0:4e:b6: d3:fe:9b:e6:b0:22:85:c0:5f:bd:d2:ba:ca:69:e9:8b:7b:91: 24:3b:a6:39:97:e7:6e:08:fb:60:29:33:e9:15:87:16:5b:c0: 7c:8c:4d:39:c7:31:0a:2b:55:a2:14:ac:95:d7:93:e3:be:7a: 5e:9e:19:af:b6:ac:f6:20:91:77:f2:df:0b:b9:fd:e6:c3:8e: 44:ca:e3:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tP77nLZUOxBybbxhuvOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0 NTFmOGYwHhcNMjUxMjIwMTcwMDUzWhcNMjUxMjIxMTcwMDUzWjAzMTEwLwYDVQQD EygyM2U5MjJhNTFjMWNiZmRiNmNkMTVkYzJmYjUzNmU3MmIyZDFkMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj713wg7zeIL9kBgJJG6qrqpt2G2 KEYuLWTJLZ8y75uc7vyb/16A/dMGalQRrcRHU7fBzBpZKg+BnfL5Wa6JuLiR9K6J CLUbgcBO60kQ9OWBZTiw9msdE4zbQ3Rs+C34D6YCz6IvDV4EZhn0DG1PD0a+9Ldu 0BOuFSc25rBq9YqGVzefRx06z6G5W7rLS0mk+dJyWgk+jmHoWeFJ1gWCITnaBU5h Z0sNxOHHOgOUydnyV3Eu1NPbfpiAOXiqmcOyKOl+mroCwJXurKSSg/csbqDW0xLi 8KD9GMrQkalcUisCtYa1d1yQ+BVlfgkiJdOtIpu29Hd7pbQBQgYo2QAsgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPpIqUcHL/bbNFdwvtTbnKy0dAQMB8GA1UdIwQY MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct YWYxZjM2ODExMDk4LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4 LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICCXLSwU Lw/zeEJsIMnVg9IiOJOX1FTUnKDDSASnu1WSe9XBtfS/IyQ9iTy/kAhc7n8rZ7hv rglC4tRiNDmCn4rQJ5LnGv4/2UUJhvNhBf+E95TPhvUeq1LxlRf6rWDN6YVjvY8G q51oaAfGk5AId+bz/YXs6hjB4u4rQKHk0RhMdznqS4q5U1BQvVa7Lp+cgCEjX15n +Z9vr0MnoDnKXPv7j2UJfD1sRjMY6lcFlr3J8E620/6b5rAihcBfvdK6ymnpi3uR JDumOZfnbgj7YCkz6RWHFlvAfIxNOccxCitVohSsldeT4756Xp4Zr7as9iCRd/Lf C7n95sOORMrjeg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:29:50 2025 by rpki-client