This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json) Hash identifier: d4RzBsWR0cOOgXyMKRi8N/6GegeoLQJgrHRLfnL/JE4= Subject key identifier: 44:52:A1:0F:6B:A2:3A:6C:30:45:A2:C2:7E:ED:E9:49:5B:CA:2F:43 Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7 Certificate serial: 019B08229E8F24EDC70192E6C292C8184E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft Manifest number: 072F Signing time: Wed 10 Dec 2025 12:00:44 +0000 Manifest this update: Wed 10 Dec 2025 12:00:44 +0000 Manifest next update: Thu 11 Dec 2025 12:00:44 +0000 Files and hashes: 1: 1-LDLwStGzUMrrV5QzmoRCQ8qrEo.roa (hash: cdBNdf7iqKZd9SFWXblKfPWgwOyg7ATIsmgjUz2MrVM=) 2: 7Z41l5GCvkmQM0-AZptE0q-8N2c.roa (hash: W0spFBvn9EFz2Rg+2ALTObth8eVz6Jz8Eki0R5kperk=) 3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: ZcrpUgxRyKi2K/VxmORKiWNGeJrQdq/ZxVwbPmc7+Ic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:22:9e:8f:24:ed:c7:01:92:e6:c2:92:c8:18:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7 Validity Not Before: Dec 10 12:00:44 2025 GMT Not After : Dec 11 12:00:44 2025 GMT Subject: CN=4452a10f6ba23a6c3045a2c27eede9495bca2f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:00:d1:0c:90:f5:3c:ba:81:e7:ae:4b:63: ae:b0:6a:0e:52:25:34:a9:a0:2c:35:2e:5a:bb:3d: 46:14:52:05:75:26:0d:3d:a9:0d:8f:b8:54:a6:6b: 66:30:aa:c5:e6:71:31:3c:b0:49:91:58:7c:80:14: 67:86:a6:ea:e6:02:49:80:9b:ef:c1:ef:4b:a7:99: a2:0e:07:86:3b:68:96:cd:8b:34:79:ad:df:c5:2f: f4:cd:ee:20:6c:46:ad:5d:a8:06:c2:4b:49:66:1d: ba:fe:49:f2:a9:07:7e:e3:6f:14:fe:70:33:a0:06: 7e:1e:1a:02:34:46:a9:22:6f:0c:50:59:18:4a:6a: 30:8a:1c:67:4c:5b:f2:a0:71:8b:4a:be:d4:0e:13: 3b:2d:11:08:0b:c9:f7:92:29:51:c9:5f:e5:ba:bd: 71:f8:e5:02:0d:87:a9:f6:36:fa:a1:61:b4:7d:17: c0:16:78:80:ce:73:ef:73:be:5b:a2:de:8f:e7:00: d6:3a:fc:7e:bb:28:c8:4a:86:6e:04:a6:90:21:89: 4c:71:29:bc:e5:97:40:08:cd:ad:70:17:c5:bd:57: 7b:ca:cd:e0:46:e0:a4:cc:2b:ad:98:28:10:2c:4d: 84:b2:56:0f:4e:e1:be:33:cd:33:e7:05:06:74:48: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:52:A1:0F:6B:A2:3A:6C:30:45:A2:C2:7E:ED:E9:49:5B:CA:2F:43 X509v3 Authority Key Identifier: keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2a:f5:7d:bd:c1:48:88:90:d7:b6:20:69:86:d2:b9:77:75: 17:2c:af:5f:70:8a:c3:68:41:18:4b:d1:bc:03:61:a8:0b:07: 08:d0:71:eb:4a:3e:32:ed:d3:32:65:80:46:40:d3:e0:eb:e0: 64:c8:69:92:6e:cc:f8:4d:2f:42:5f:85:f0:43:41:7e:8a:5f: 53:67:72:38:4c:17:3b:4a:f3:3a:c0:ea:7c:70:9c:a5:22:26: fd:d4:1d:8f:b5:18:07:55:40:0e:95:de:59:cc:ff:b5:8c:82: 30:11:20:18:92:d5:7f:c3:d9:14:d5:46:17:05:37:4c:5c:72: 8e:96:46:d9:49:d7:33:5c:29:cf:85:36:8d:0c:3f:75:d9:90: 98:ed:98:75:2b:40:7d:eb:e6:53:48:91:8c:40:6a:9a:58:bd: 3b:f2:92:42:11:08:b0:4f:45:ab:4f:ee:6d:85:1f:fa:be:25: 5a:08:2d:61:e5:83:a3:a8:71:35:7a:20:ef:5b:c4:a4:e0:74: bb:92:36:79:f0:0c:bc:c1:fc:44:ad:09:20:74:77:48:6d:29: a0:de:bd:8a:72:a0:bb:62:65:42:8c:34:bd:5b:c7:82:dd:dc: a8:2f:92:a3:ca:36:04:5b:6a:d5:d8:65:9d:3b:3b:0a:bc:1b: 8e:b9:d9:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIIp6PJO3HAZLmwpLIGE4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGFkMmQ0YjBiNzMzMGU0YTliNWFmYTExYTYxOThmY2I2 NTFiZjcwHhcNMjUxMjEwMTIwMDQ0WhcNMjUxMjExMTIwMDQ0WjAzMTEwLwYDVQQD Eyg0NDUyYTEwZjZiYTIzYTZjMzA0NWEyYzI3ZWVkZTk0OTViY2EyZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDcA0QyQ9Ty6geeuS2OusGoOUiU0 qaAsNS5auz1GFFIFdSYNPakNj7hUpmtmMKrF5nExPLBJkVh8gBRnhqbq5gJJgJvv we9Lp5miDgeGO2iWzYs0ea3fxS/0ze4gbEatXagGwktJZh26/knyqQd+428U/nAz oAZ+HhoCNEapIm8MUFkYSmowihxnTFvyoHGLSr7UDhM7LREIC8n3kilRyV/lur1x +OUCDYep9jb6oWG0fRfAFniAznPvc75bot6P5wDWOvx+uyjISoZuBKaQIYlMcSm8 5ZdACM2tcBfFvVd7ys3gRuCkzCutmCgQLE2EslYPTuG+M80z5wUGdEjDewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERSoQ9rojpsMEWiwn7t6Ulbyi9DMB8GA1UdIwQY MBaAFK5K0tSwtzMOSpta+hGmGY/LZRv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDct OGE5NjY3ZDc2MmE1LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDctOGE5NjY3ZDc2MmE1 LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFir1fb3B SIiQ17YgaYbSuXd1FyyvX3CKw2hBGEvRvANhqAsHCNBx60o+Mu3TMmWARkDT4Ovg ZMhpkm7M+E0vQl+F8ENBfopfU2dyOEwXO0rzOsDqfHCcpSIm/dQdj7UYB1VADpXe Wcz/tYyCMBEgGJLVf8PZFNVGFwU3TFxyjpZG2UnXM1wpz4U2jQw/ddmQmO2YdStA fevmU0iRjEBqmli9O/KSQhEIsE9Fq0/ubYUf+r4lWggtYeWDo6hxNXog71vEpOB0 u5I2efAMvMH8RK0JIHR3SG0poN69inKgu2JlQow0vVvHgt3cqC+So8o2BFtq1dhl nTs7CrwbjrnZwQ== -----END CERTIFICATE-----Generated at Wed Dec 10 14:17:27 2025 by rpki-client