This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json) Hash identifier: B6IhKgIFpNtNLHWPXAkYkvXcElN6mrB47/QtTcquI3I= Subject key identifier: 52:5C:6A:77:C9:27:B8:F2:1C:7F:6E:DA:91:C2:54:BA:BE:4C:50:8E Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B42B7131CBA1B6524A55E3361FCCD0BE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft Manifest number: 17DE Signing time: Sun 21 Dec 2025 21:00:52 +0000 Manifest this update: Sun 21 Dec 2025 21:00:52 +0000 Manifest next update: Mon 22 Dec 2025 21:00:52 +0000 Files and hashes: 1: 5VA96XxOdurSo7WQjAVzmluh-RE.roa (hash: ENjWRws9JScAxQKlvyNZ2q/dH7OpFkNw9JoXC6WNRGE=) 2: FGXlA6UVg4gAwt0-6eXZrReUgS8.roa (hash: 0eUHM++ZY3T8J++w0MzORMUGNOUzM3SPmGXZ94wcHik=) 3: L1WB6fFL06KLR8h5wroGyolEGSE.roa (hash: EsmzyCISaRA+RTEpnMz8/CA04jKc2ysyeMO0Ptwc6t8=) 4: NXi6BiEUeLmLx0EnK11CHUUboHU.roa (hash: S/TsUoCXZkfTfOOKvUTF8Zz4Fuiobz4qRMGvcIUvZaQ=) 5: NlAZNsTG336vINTx1xxj4SUzqts.roa (hash: T0P9jDnfR0yqX7Hc3gPwsAdKsAiwxQjOGPkEUjHiuWo=) 6: eIuwLUi_tUH9axX7ffljFKWX964.roa (hash: vKLCpdvF8QvRc1psT7A0tODI7Pnut7s9GiVgwdIB8wc=) 7: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: uVMDjH375YMB35ObMKRgnHBOpEtIUEG/V2wqLqYAH88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:13:1c:ba:1b:65:24:a5:5e:33:61:fc:cd:0b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Dec 21 21:00:52 2025 GMT Not After : Dec 22 21:00:52 2025 GMT Subject: CN=525c6a77c927b8f21c7f6eda91c254babe4c508e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:23:2d:55:3e:a0:02:fa:80:f1:e5:5f:8e: a7:cd:22:55:71:d8:3b:06:c6:b8:bc:15:53:6b:b9: 6f:dc:57:54:3d:49:00:80:a2:95:f2:ca:d8:d0:ce: 7a:e5:bf:b7:06:e3:d5:a8:51:0d:ac:85:26:be:0c: 67:a9:5d:64:ab:4f:d2:a3:32:53:a1:f4:dc:85:2e: 59:ce:71:21:e2:38:1a:1c:87:6e:71:5e:b4:79:96: fa:80:6c:94:ce:f6:d3:a1:be:1b:94:91:f6:f1:69: ab:df:9d:74:62:e3:03:dd:57:ba:e5:e6:b6:9e:f6: 8c:11:6c:83:81:b0:17:84:a2:0d:2c:7f:96:c1:73: a3:cd:70:d3:03:d6:2f:11:28:f6:9b:30:07:7e:3f: 5d:41:95:a2:2f:8a:eb:04:f0:00:fd:4b:b7:e1:e9: 97:5a:a0:6c:d2:ae:74:09:9e:37:e8:4a:8f:04:95: 70:ca:39:00:e8:b8:47:2a:ae:fa:9f:95:38:98:5d: 5c:82:ab:8e:bc:7f:a7:e0:11:bd:8d:5e:43:78:5f: 65:65:3b:53:75:b0:ce:d7:24:31:d3:c8:44:7d:f9: a6:d6:95:46:89:15:1f:2d:72:2a:7a:00:d8:bd:11: e9:29:4b:2a:34:2e:05:b3:28:da:b0:31:7a:ac:c8: 7f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5C:6A:77:C9:27:B8:F2:1C:7F:6E:DA:91:C2:54:BA:BE:4C:50:8E X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ee:d1:9a:25:ed:1e:f6:39:f5:af:d7:1b:a1:6a:7b:92:24: 4f:ff:45:fd:0c:51:d7:05:b8:2d:e5:78:3b:7a:50:9d:9d:1d: 42:ba:48:b2:b3:5f:0d:b1:df:46:69:95:11:6e:69:d2:12:cb: c7:26:e2:f3:f7:3d:76:a6:36:18:9c:de:53:42:39:c1:bb:3e: 30:3f:5e:1e:ab:1a:2d:35:8d:dc:40:4d:09:b8:36:3b:9e:7e: a7:bd:d7:12:f8:16:9f:d9:90:ba:d5:8d:45:39:7d:59:b9:ff: 00:f8:c9:11:99:90:72:b5:c4:c6:aa:a5:b3:af:d3:7d:f8:8f: 9a:84:5b:0c:7f:2f:97:e5:ae:2c:cf:a3:4f:6e:8d:94:78:cd: 69:83:44:f3:a6:07:25:3f:88:95:e2:4b:e5:f6:c9:af:2c:6e: d9:93:ac:53:7c:23:77:81:f9:a6:56:fc:df:2b:32:85:a3:58: 0b:22:5b:ff:bd:5d:5a:c3:12:b8:40:69:9e:01:37:cb:57:6e: fa:63:4a:4d:af:ee:50:04:e9:20:f7:22:e6:38:b1:24:78:0e: 66:06:8f:9f:04:fd:50:7f:e4:15:cb:b4:ad:0c:a4:23:16:c3: 3b:02:57:70:46:fe:87:13:73:e9:69:d9:be:6f:e0:77:ca:fc: 97:9e:67:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtxMcuhtlJKVeM2H8zQvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjUxMjIxMjEwMDUyWhcNMjUxMjIyMjEwMDUyWjAzMTEwLwYDVQQD Eyg1MjVjNmE3N2M5MjdiOGYyMWM3ZjZlZGE5MWMyNTRiYWJlNGM1MDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J8jLVU+oAL6gPHlX46nzSJVcdg7 Bsa4vBVTa7lv3FdUPUkAgKKV8srY0M565b+3BuPVqFENrIUmvgxnqV1kq0/SozJT ofTchS5ZznEh4jgaHIducV60eZb6gGyUzvbTob4blJH28Wmr3510YuMD3Ve65ea2 nvaMEWyDgbAXhKINLH+WwXOjzXDTA9YvESj2mzAHfj9dQZWiL4rrBPAA/Uu34emX WqBs0q50CZ436EqPBJVwyjkA6LhHKq76n5U4mF1cgquOvH+n4BG9jV5DeF9lZTtT dbDO1yQx08hEffmm1pVGiRUfLXIqegDYvRHpKUsqNC4FsyjasDF6rMh/tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJcanfJJ7jyHH9u2pHCVLq+TFCOMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASO7RmiXt HvY59a/XG6Fqe5IkT/9F/QxR1wW4LeV4O3pQnZ0dQrpIsrNfDbHfRmmVEW5p0hLL xybi8/c9dqY2GJzeU0I5wbs+MD9eHqsaLTWN3EBNCbg2O55+p73XEvgWn9mQutWN RTl9Wbn/APjJEZmQcrXExqqls6/TffiPmoRbDH8vl+WuLM+jT26NlHjNaYNE86YH JT+IleJL5fbJryxu2ZOsU3wjd4H5plb83ysyhaNYCyJb/71dWsMSuEBpngE3y1du +mNKTa/uUATpIPci5jixJHgOZgaPnwT9UH/kFcu0rQykIxbDOwJXcEb+hxNz6WnZ vm/gd8r8l55nyw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:20:11 2025 by rpki-client