This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft File: ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json) Hash identifier: 5VorsWh6pz/AkXRjU6NM8AhWK3BEbcANrx3ByheamYU= Subject key identifier: D1:3A:19:14:F6:BC:FC:62:3F:6F:E7:E1:97:41:C5:61:C5:F2:D9:05 Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D Certificate issuer: /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d Certificate serial: 019B0F6E7BEEA749C8E07746311413A71FBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 22:00:57 +0000 Manifest this update: Thu 11 Dec 2025 22:00:57 +0000 Manifest next update: Fri 12 Dec 2025 22:00:57 +0000 Files and hashes: 1: Da5ukIODRFZkZgl7acW52LzBL34.roa (hash: 2S0h0c/tsGIJ57Pr+A8pwZxQY2/WXek+xC9ZKTvhbzU=) 2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: eaLSc8Aa3CUjJTyXGR6cC/MxF5k0zTGKbfhHHXR+qb4=) 3: Z45rQavEcQTf3vGUVM_AgWAXCn4.roa (hash: q7JvLSO411WbeIPtlyaZvnsbtnUZIYteyAyCawxKvzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:7b:ee:a7:49:c8:e0:77:46:31:14:13:a7:1f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d Validity Not Before: Dec 11 22:00:57 2025 GMT Not After : Dec 12 22:00:57 2025 GMT Subject: CN=d13a1914f6bcfc623f6fe7e19741c561c5f2d905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:30:be:2e:eb:ad:e8:68:ca:19:44:6e:5c: 62:fa:01:b9:bc:af:2f:bb:22:81:f5:c7:b4:be:39: 17:bd:ec:d5:8c:1f:e6:1a:cf:46:05:33:22:a6:31: f9:63:f4:04:af:47:da:96:a8:e7:7d:a6:3a:5d:07: 16:58:1c:7c:e3:43:15:32:f2:55:74:93:a7:54:9b: d5:2d:14:54:f3:1d:2b:29:e7:47:e6:35:20:aa:52: 94:05:d1:23:94:f7:b1:59:55:65:c0:dd:39:a4:8f: 64:3c:1b:c0:33:50:8c:3a:fa:3d:a4:2e:ec:9c:93: d4:58:87:4c:45:c3:e0:ae:95:98:68:a1:8b:8e:f7: e5:5a:25:e5:2e:b6:9f:9d:da:f2:af:34:45:93:42: 1a:fa:4a:c9:91:21:e2:03:02:11:ca:ed:78:90:3a: d1:4c:98:67:82:db:73:d0:1f:cc:5b:69:c9:c9:8a: 96:4f:94:21:ce:6d:5a:c2:fa:4b:12:f8:7b:4d:2b: 9f:ad:d0:3d:ae:3a:04:02:cb:b1:d1:e9:dc:ad:82: 86:5e:a3:2f:1a:83:86:83:ca:91:5f:9b:f0:46:ca: a8:32:05:dc:f5:3d:c5:b1:86:80:37:d5:70:2f:c4: 4f:c4:ca:0d:9c:1d:08:d5:8e:05:13:a2:ce:0e:6e: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3A:19:14:F6:BC:FC:62:3F:6F:E7:E1:97:41:C5:61:C5:F2:D9:05 X509v3 Authority Key Identifier: keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:14:a7:ff:95:b4:c7:a5:ca:6b:bf:16:16:88:f5:74:10:9f: 75:30:ff:60:b8:02:dc:74:b3:e0:68:3c:db:26:39:55:77:04: 2f:d7:0b:0a:e5:01:db:f4:0c:17:ee:86:d3:8d:27:b4:c9:69: 60:f8:45:1a:7f:46:de:27:5c:6f:2a:0a:04:85:99:77:26:01: c7:2b:23:d3:0c:f2:c2:78:dc:87:5e:cf:5a:80:af:d4:e9:51: c6:a3:5c:f8:1c:ec:6e:95:38:0a:f2:c8:52:20:eb:e9:c1:70: 9b:5a:6a:d4:d0:04:36:22:ca:66:d8:c3:26:32:36:61:a5:74: af:93:92:4a:92:31:95:72:61:a8:f2:56:48:56:9f:2a:e3:9f: 67:5b:b5:a5:fa:65:55:ac:6b:57:76:08:c7:a5:21:ab:ca:6a: ae:46:87:3c:c8:9c:46:29:f6:e0:f8:1b:36:80:88:04:94:2b: 42:f6:e0:25:72:0e:1c:f3:6e:ae:ed:10:7a:f7:fa:94:c7:33: ca:55:86:3a:b1:c2:9a:94:53:5d:27:8f:ed:89:ac:ac:2f:f7: d3:12:00:12:b0:7f:06:e0:48:42:37:e9:3e:68:17:ce:c2:2c: 49:2a:f8:9c:d1:42:2a:c6:1e:4b:57:24:da:15:1a:90:1e:20: c8:2b:92:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbnvup0nI4HdGMRQTpx+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZTJhOWZiNzc3MDEwMjk2ZjliOGUyMTVlZTBkYjQ0Njcx NzRkMmQwHhcNMjUxMjExMjIwMDU3WhcNMjUxMjEyMjIwMDU3WjAzMTEwLwYDVQQD EyhkMTNhMTkxNGY2YmNmYzYyM2Y2ZmU3ZTE5NzQxYzU2MWM1ZjJkOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCcwvi7rrehoyhlEblxi+gG5vK8v uyKB9ce0vjkXvezVjB/mGs9GBTMipjH5Y/QEr0falqjnfaY6XQcWWBx840MVMvJV dJOnVJvVLRRU8x0rKedH5jUgqlKUBdEjlPexWVVlwN05pI9kPBvAM1CMOvo9pC7s nJPUWIdMRcPgrpWYaKGLjvflWiXlLrafndryrzRFk0Ia+krJkSHiAwIRyu14kDrR TJhngttz0B/MW2nJyYqWT5Qhzm1awvpLEvh7TSufrdA9rjoEAsux0encrYKGXqMv GoOGg8qRX5vwRsqoMgXc9T3FsYaAN9VwL8RPxMoNnB0I1Y4FE6LODm6LTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE6GRT2vPxiP2/n4ZdBxWHF8tkFMB8GA1UdIwQY MBaAFEXiqft3cBApb5uOIV7g20RnF00tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGIt ZWJkMzE0NTQyMmVhLzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kYmYxMDQtMWUyYy00MmU4LWIyOGItZWJkMzE0NTQyMmVh LzEvUmVLcC0zZHdFQ2x2bTQ0aFh1RGJSR2NYVFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhSn/5W0 x6XKa78WFoj1dBCfdTD/YLgC3HSz4Gg82yY5VXcEL9cLCuUB2/QMF+6G040ntMlp YPhFGn9G3idcbyoKBIWZdyYBxysj0wzywnjch17PWoCv1OlRxqNc+BzsbpU4CvLI UiDr6cFwm1pq1NAENiLKZtjDJjI2YaV0r5OSSpIxlXJhqPJWSFafKuOfZ1u1pfpl VaxrV3YIx6Uhq8pqrkaHPMicRin24PgbNoCIBJQrQvbgJXIOHPNuru0Qevf6lMcz ylWGOrHCmpRTXSeP7YmsrC/30xIAErB/BuBIQjfpPmgXzsIsSSr4nNFCKsYeS1ck 2hUakB4gyCuSmA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:22:54 2025 by rpki-client