This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json) Hash identifier: e9sv0Z2fxo+PK4+3dKCTyWoLZMVsLkaVTMcGKQDZazI= Subject key identifier: EE:85:33:47:96:11:A1:B6:5F:72:70:4F:82:42:C4:5C:36:13:7F:2C Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Certificate serial: 019B3BA29EF608392F77B70F989BB4F10DA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft Manifest number: 079F Signing time: Sat 20 Dec 2025 12:01:11 +0000 Manifest this update: Sat 20 Dec 2025 12:01:11 +0000 Manifest next update: Sun 21 Dec 2025 12:01:11 +0000 Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: 8+GmLQ31po2dLWzS7A2+mzfgjqE6G+uUKVwI1OGPfrM=) 2: dulLD0ENjA9tfgPr9DrSQJxWn5k.roa (hash: ecAhh1+SnR4Xv8G0G+2S5KTuId8TsIACx8G94ng9hIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:9e:f6:08:39:2f:77:b7:0f:98:9b:b4:f1:0d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302 Validity Not Before: Dec 20 12:01:11 2025 GMT Not After : Dec 21 12:01:11 2025 GMT Subject: CN=ee8533479611a1b65f72704f8242c45c36137f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:98:a5:24:93:0d:9f:57:4d:2e:9b:b0:49:14: 89:07:7b:c5:93:39:ad:1e:ce:cf:25:0a:fa:30:e2: 1a:47:f7:cc:fc:72:f5:c4:7d:b5:91:92:b3:d4:c0: f8:98:49:8f:cc:5d:1d:05:c7:bd:c7:b6:c3:b2:46: 79:52:24:ba:1a:10:18:4b:5b:8f:c8:30:40:14:e4: a1:5d:71:fe:5c:d2:24:0c:97:35:95:c5:8a:0d:f6: 76:7c:e0:22:88:87:41:91:77:6f:6b:0c:5d:ff:de: a2:ec:80:9a:a2:a5:70:2b:20:51:f9:1a:c2:71:77: 10:28:ab:ac:88:0c:c3:8e:fc:f4:65:15:5a:9c:9e: 52:96:9c:f7:ec:c4:eb:fc:80:d7:be:d8:cd:ab:d3: e5:7b:24:8a:ab:73:e9:10:9c:80:c7:77:c5:a6:ee: 70:4e:e1:49:a9:8a:3e:58:02:60:2b:c5:78:fc:d5: 47:32:9a:57:38:6c:f5:05:f0:ab:6a:1f:30:83:a1: 4d:ec:1d:ac:34:46:e4:7e:38:15:1e:27:08:28:21: 77:dd:f1:71:d2:9c:a6:96:96:37:08:0c:7a:e8:bb: a4:fb:10:6c:bc:5c:73:32:df:95:2c:ea:76:cb:a9: 04:72:13:78:9c:1b:f0:9e:de:6a:16:e7:cc:78:5f: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:85:33:47:96:11:A1:B6:5F:72:70:4F:82:42:C4:5C:36:13:7F:2C X509v3 Authority Key Identifier: keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:66:76:c7:a2:f5:6c:cb:7d:10:bd:06:40:d2:7c:f1:3a:c8: 2c:15:73:7e:c1:a5:de:cf:49:8a:ce:36:70:12:fe:12:ab:78: 3d:d8:a8:56:ab:46:f9:16:fb:8e:2e:7a:81:33:4e:93:b5:63: 06:b0:65:0c:64:93:0e:c3:67:7d:fe:52:b5:a3:8d:f7:c7:b6: b7:c5:62:59:a6:dc:6b:7f:fa:48:3d:12:08:fc:68:85:28:da: 3a:90:2d:1a:a5:a4:80:bb:28:0e:4a:ea:d1:fd:d6:1d:2b:54: 8d:40:d9:02:f9:24:d2:7a:56:76:ee:0c:a6:48:05:03:c2:60: 62:d9:cf:a1:1e:8f:9a:fb:5f:03:d2:e3:b4:d8:b3:92:45:a9: c2:82:7a:da:67:e0:99:66:fa:79:14:e2:ef:0e:18:74:25:20: f9:0b:5b:21:e4:85:f0:4d:eb:42:14:16:03:9d:be:bd:f3:58: 37:ee:0f:dc:e5:d4:d1:d2:1b:a2:21:df:d9:00:9f:d9:21:ab: 21:12:5a:25:4d:2e:a2:01:97:a7:05:15:5c:37:45:88:8c:68: 58:a5:3b:8c:2f:2e:5d:84:d4:65:f1:25:7b:30:f2:12:1e:aa: 4d:87:fb:7c:46:0a:f2:ea:dd:22:d3:f5:d4:59:86:ad:24:ca: 90:61:16:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7op72CDkvd7cPmJu08Q2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWE4MTMxMzljMDZiMWRjZjFiZmU4MzMyYjliODAxYWIz ZWIzMDIwHhcNMjUxMjIwMTIwMTExWhcNMjUxMjIxMTIwMTExWjAzMTEwLwYDVQQD EyhlZTg1MzM0Nzk2MTFhMWI2NWY3MjcwNGY4MjQyYzQ1YzM2MTM3ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJilJJMNn1dNLpuwSRSJB3vFkzmt Hs7PJQr6MOIaR/fM/HL1xH21kZKz1MD4mEmPzF0dBce9x7bDskZ5UiS6GhAYS1uP yDBAFOShXXH+XNIkDJc1lcWKDfZ2fOAiiIdBkXdvawxd/96i7ICaoqVwKyBR+RrC cXcQKKusiAzDjvz0ZRVanJ5Slpz37MTr/IDXvtjNq9PleySKq3PpEJyAx3fFpu5w TuFJqYo+WAJgK8V4/NVHMppXOGz1BfCrah8wg6FN7B2sNEbkfjgVHicIKCF33fFx 0pymlpY3CAx66Luk+xBsvFxzMt+VLOp2y6kEchN4nBvwnt5qFufMeF//hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6FM0eWEaG2X3JwT4JCxFw2E38sMB8GA1UdIwQY MBaAFESqgTE5wGsdzxv+gzK5uAGrPrMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUt NDFkZDdmM2VhN2E0LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUtNDFkZDdmM2VhN2E0 LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGZ2x6L1 bMt9EL0GQNJ88TrILBVzfsGl3s9Jis42cBL+Eqt4PdioVqtG+Rb7ji56gTNOk7Vj BrBlDGSTDsNnff5StaON98e2t8ViWabca3/6SD0SCPxohSjaOpAtGqWkgLsoDkrq 0f3WHStUjUDZAvkk0npWdu4MpkgFA8JgYtnPoR6PmvtfA9LjtNizkkWpwoJ62mfg mWb6eRTi7w4YdCUg+QtbIeSF8E3rQhQWA52+vfNYN+4P3OXU0dIboiHf2QCf2SGr IRJaJU0uogGXpwUVXDdFiIxoWKU7jC8uXYTUZfElezDyEh6qTYf7fEYK8urdItP1 1FmGrSTKkGEWcQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:59:06 2025 by rpki-client