This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json) Hash identifier: iN4SbyiJZsAghZeC2kDqHRKU4WdT1dzl1Zmfji/89fs= Subject key identifier: 2A:F4:D9:72:39:CF:BC:AB:D1:DE:8D:2E:D5:4E:DD:81:C8:C1:E3:A8 Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be Certificate serial: 019B30E8848FF0EFE3E40E7FB3B4EEE1BB74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft Manifest number: 1792 Signing time: Thu 18 Dec 2025 10:01:43 +0000 Manifest this update: Thu 18 Dec 2025 10:01:43 +0000 Manifest next update: Fri 19 Dec 2025 10:01:43 +0000 Files and hashes: 1: ETv26zxQcsr8JhZ4MeGRkRkjDDY.roa (hash: V/KbOS0vpdDJobu1pDGY/r9sUVjvdSgLOWgc2BMLZzY=) 2: jNjUfwqgx7FxjC22ZM2tNJxUovE.roa (hash: CYjABvddLBiX5OMQlguXfrahjaGdNxRrjgGTFThsYz4=) 3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: pOlema8mx3qYTTSziSfiXOVs0n2QnjoBt8tYA1bO9b0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:84:8f:f0:ef:e3:e4:0e:7f:b3:b4:ee:e1:bb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be Validity Not Before: Dec 18 10:01:43 2025 GMT Not After : Dec 19 10:01:43 2025 GMT Subject: CN=2af4d97239cfbcabd1de8d2ed54edd81c8c1e3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:0b:a4:f6:fe:41:17:91:ea:3e:60:47:c9: f6:e1:49:8c:83:29:69:10:36:ae:ed:35:0f:50:f0: 69:a2:0e:2b:fd:b1:bc:74:09:17:61:fc:69:bd:9f: ae:01:6d:b2:03:14:f9:07:a9:16:c1:ba:fe:59:50: b0:6c:a1:ea:f1:b1:ca:be:7d:5d:07:05:5f:de:83: 6a:3c:f0:38:3b:73:25:c3:28:aa:60:86:1f:13:ee: dc:9b:e1:76:7b:dc:52:5d:e4:27:3c:4c:81:07:f9: 84:3e:27:41:b3:8c:0e:fd:e4:71:59:0d:6d:57:70: 8b:50:93:28:af:27:4e:95:bd:37:23:46:1d:06:61: f7:d8:67:bc:a9:f2:9e:f9:54:c7:12:ce:d9:2a:11: ff:45:5a:01:ec:7f:0f:6d:76:44:36:30:c3:be:3d: 6e:fb:91:db:df:d0:01:3a:0a:ae:0e:cd:90:70:c4: 6d:12:a5:67:77:0f:a0:77:3a:49:6e:ae:46:97:79: 88:91:41:9a:5f:62:5c:19:6b:91:87:ef:2f:f7:bd: 11:0e:ab:f2:20:69:d7:c4:a7:9a:ea:da:64:83:13: 33:7e:f0:ab:1f:a1:65:6b:22:ff:7c:7a:74:84:67: 4c:c6:9b:9f:c5:6a:6d:cb:50:4f:ee:4c:3c:41:b4: 9e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F4:D9:72:39:CF:BC:AB:D1:DE:8D:2E:D5:4E:DD:81:C8:C1:E3:A8 X509v3 Authority Key Identifier: keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fd:29:ea:60:56:b2:89:c6:2b:05:03:1a:01:0a:1f:cf:43: b9:c9:79:12:be:f7:56:96:70:51:55:18:dc:6c:ea:91:2a:12: 3a:8b:00:3e:90:1d:58:3b:66:fc:56:22:ec:ac:f3:41:5f:39: 27:ce:e3:79:67:72:52:4b:6f:f8:6f:16:c3:1c:c6:c2:2c:ad: 32:13:f0:61:1c:37:9a:ae:97:e4:a0:2c:bf:09:10:df:56:d7: b4:e8:d7:30:f5:da:ce:97:e6:23:0d:13:7c:19:c2:d5:ee:79: 25:69:23:f1:29:41:eb:8c:d3:7a:2c:71:06:d8:b1:89:d9:20: f3:19:6b:3d:12:a0:ed:1d:68:ab:01:c1:a6:1a:82:7c:f9:79: b0:7d:5d:24:3c:d0:e5:43:3e:c0:4c:5f:43:5f:3f:e0:99:ea: 36:e3:d9:e4:71:42:60:a3:f7:18:8a:2b:d1:44:95:cc:1e:ea: fe:c9:48:3e:6d:fb:50:89:0b:fc:73:5a:f9:6a:3f:9f:bb:7f: df:25:8a:df:ab:bd:5e:38:fa:6c:81:07:48:a0:c6:bc:f0:68: 34:fd:cd:00:7c:83:fa:d0:20:fc:55:3a:61:42:93:b7:33:0a: a1:34:5f:eb:8c:7b:f2:51:3b:83:ef:74:f3:b9:96:a0:92:be: 6a:74:c3:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6ISP8O/j5A5/s7Tu4bt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzJlNDdkNTY2OTI0OTlhNzI2YmY4MDBlYTgzODAzNjJk ZWI2YmUwHhcNMjUxMjE4MTAwMTQzWhcNMjUxMjE5MTAwMTQzWjAzMTEwLwYDVQQD EygyYWY0ZDk3MjM5Y2ZiY2FiZDFkZThkMmVkNTRlZGQ4MWM4YzFlM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfQLpPb+QReR6j5gR8n24UmMgylp EDau7TUPUPBpog4r/bG8dAkXYfxpvZ+uAW2yAxT5B6kWwbr+WVCwbKHq8bHKvn1d BwVf3oNqPPA4O3MlwyiqYIYfE+7cm+F2e9xSXeQnPEyBB/mEPidBs4wO/eRxWQ1t V3CLUJMorydOlb03I0YdBmH32Ge8qfKe+VTHEs7ZKhH/RVoB7H8PbXZENjDDvj1u +5Hb39ABOgquDs2QcMRtEqVndw+gdzpJbq5Gl3mIkUGaX2JcGWuRh+8v970RDqvy IGnXxKea6tpkgxMzfvCrH6FlayL/fHp0hGdMxpufxWpty1BP7kw8QbSeUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr02XI5z7yr0d6NLtVO3YHIweOoMB8GA1UdIwQY MBaAFK5y5H1WaSSZpya/gA6oOANi3ra+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YmI0NzEtNGEzZS00ODhkLWI4OGMt ZmUxMmM3NWJmNGFiLzEvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82YmI0NzEtNGEzZS00ODhkLWI4OGMtZmUxMmM3NWJmNGFi LzEvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/0p6mBW sonGKwUDGgEKH89Ducl5Er73VpZwUVUY3GzqkSoSOosAPpAdWDtm/FYi7KzzQV85 J87jeWdyUktv+G8WwxzGwiytMhPwYRw3mq6X5KAsvwkQ31bXtOjXMPXazpfmIw0T fBnC1e55JWkj8SlB64zTeixxBtixidkg8xlrPRKg7R1oqwHBphqCfPl5sH1dJDzQ 5UM+wExfQ18/4JnqNuPZ5HFCYKP3GIor0USVzB7q/slIPm37UIkL/HNa+Wo/n7t/ 3yWK36u9Xjj6bIEHSKDGvPBoNP3NAHyD+tAg/FU6YUKTtzMKoTRf64x78lE7g+90 87mWoJK+anTDag== -----END CERTIFICATE-----Generated at Thu Dec 18 14:05:48 2025 by rpki-client