This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json) Hash identifier: RwoTmSTmMUoBQq4obrUGdzTxTVeL9xYW59OSgDTrCXw= Subject key identifier: 6E:4C:AB:62:9D:5D:20:C2:ED:E1:0E:B2:0B:52:FD:5F:AF:58:5E:8A Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24 Certificate serial: 019B0F003C3293CDB79B452DA0AA7EBBA403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft Manifest number: 1782 Signing time: Thu 11 Dec 2025 20:00:32 +0000 Manifest this update: Thu 11 Dec 2025 20:00:32 +0000 Manifest next update: Fri 12 Dec 2025 20:00:32 +0000 Files and hashes: 1: 45YgABqwBFtsKoNWzGWjzGlQmXY.roa (hash: 69CrJ34LHz68GqkpdbfhPTn+j85A3e/17oJ0+upnAuw=) 2: F8W0QKbleYbmz2EN1Tis7Vds59A.roa (hash: GzkXVUL6jOXjlFMqb78IJPo96A7wfBUt8lug7KgSDew=) 3: N8PiG76ntwKAGaSP3YzYnQGkLVI.roa (hash: nUQC/UxGj4cDa5TMObsdW9+d18vToeDUb/QlHw0eCHA=) 4: V_r_ROOdvw6x3g5Jz-742T3rIbU.roa (hash: S0q7P5LnXINS1vQh7LQXUQWUqtUOHV0qMrb+2gHbmYs=) 5: VsMfaSNU6El8JPxhBpkXhVwnLJA.roa (hash: IR2/IgYNGn6z1kJFqLwwyQdlxJTc6K5zoOikMt2zGgM=) 6: n4Mf2ZoxRDO4Gbl-YZdYsqIz4OI.roa (hash: aS1o0h1e6vPqOWTx/X2krBGlRAa3LkoHQcee6mx6EEg=) 7: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: PFlazn/BaUsycz2Ho9cHIsgeDSueAqGBgzv46lzk/ZY=) 8: tli9a4MFilhc6bhiwfcm0_eUZQk.roa (hash: idJeUEpDv8hc3pPAuSjLkqMBrYsymPccKUeBDJM0BiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:3c:32:93:cd:b7:9b:45:2d:a0:aa:7e:bb:a4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24 Validity Not Before: Dec 11 20:00:32 2025 GMT Not After : Dec 12 20:00:32 2025 GMT Subject: CN=6e4cab629d5d20c2ede10eb20b52fd5faf585e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:72:a9:76:da:55:76:7a:b8:87:6a:41:a6: be:57:db:ee:84:21:e8:3f:85:b1:92:46:7c:31:41: 96:03:e9:3f:cf:84:5b:92:b8:df:83:f7:34:9f:66: db:e0:94:f6:00:e0:f7:da:92:94:dc:c6:c2:b2:8b: 4e:ae:35:42:77:70:79:32:11:5c:e2:b2:fd:ae:0e: fb:8c:70:32:ec:83:97:40:5d:6e:de:4b:9e:2f:6c: e8:15:fd:92:d2:4c:48:fb:ea:c6:3e:96:c6:d3:18: 49:ad:a4:31:d7:49:91:9f:d4:30:8d:9e:b3:69:10: 89:03:52:f9:02:81:80:32:68:e5:a4:42:8d:ed:b8: f6:64:6f:96:e4:f9:01:dc:ca:cd:9a:70:3f:b8:26: 74:2e:33:e6:40:1d:85:8e:72:ad:6d:a5:18:88:a3: 1d:b7:14:a0:21:a3:ab:57:d7:0d:f5:93:8b:76:13: 4c:21:c3:46:2c:e7:d5:46:d9:8e:76:8b:20:ff:4e: 92:8e:ca:c7:f2:02:65:24:73:47:cc:ed:3d:3a:7a: cb:69:98:db:ca:e2:2f:a8:ad:5f:8b:dd:e8:a3:b2: 5d:37:10:3b:ed:02:b9:f2:46:d6:f9:b1:9f:6d:70: 51:1c:fc:ed:7d:77:5d:4a:e1:4b:2c:5f:03:38:e4: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4C:AB:62:9D:5D:20:C2:ED:E1:0E:B2:0B:52:FD:5F:AF:58:5E:8A X509v3 Authority Key Identifier: keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:05:02:67:cf:f2:dc:ee:e7:22:e8:e7:9d:48:b1:eb:9a:aa: d4:61:c0:04:44:f9:af:33:fb:b7:2c:26:fb:60:2a:18:3e:10: 5f:e6:e1:bf:30:92:67:8b:b6:f8:0c:78:57:ac:5d:81:86:ac: 41:80:19:3b:c6:bb:01:f1:31:02:db:42:1c:e4:19:f6:c5:01: 32:01:ad:24:c2:da:66:ae:69:b9:6e:5c:48:43:4a:44:25:26: 97:87:7e:b9:d6:8f:ef:4c:57:fa:e9:71:d0:12:ca:75:8b:42: d8:49:90:d9:94:17:f8:52:2a:83:a3:cf:35:6c:2f:ab:6d:0f: 84:91:32:6c:9e:1d:7d:d3:98:98:68:25:bd:9c:33:09:27:fd: 19:2a:e1:30:63:65:4b:3a:73:e8:e8:56:c1:9c:08:de:7a:47: 2c:da:bc:5b:2a:ef:b6:da:11:7d:4f:db:ad:f8:d2:db:1f:81: 22:f3:9c:69:74:e9:53:66:d4:2b:07:a0:ee:6c:2e:75:46:51: 2c:1f:1b:77:7d:fa:18:e2:8c:cf:45:4e:51:f0:6a:0a:dc:8a: a9:b1:6c:7b:8a:8b:dd:fc:23:50:29:6e:04:c2:8d:d0:ee:cb: 3b:1a:98:0b:a2:41:1a:d9:06:0e:62:a2:7f:d2:98:c0:b1:1e: 8b:21:d9:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPADwyk823m0UtoKp+u6QDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTFmNDcxMzAyNDgwNGM0NDU0MDNhZjYzZmE2NDRiMmE5 MzVkMjQwHhcNMjUxMjExMjAwMDMyWhcNMjUxMjEyMjAwMDMyWjAzMTEwLwYDVQQD Eyg2ZTRjYWI2MjlkNWQyMGMyZWRlMTBlYjIwYjUyZmQ1ZmFmNTg1ZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOFyqXbaVXZ6uIdqQaa+V9vuhCHo P4WxkkZ8MUGWA+k/z4Rbkrjfg/c0n2bb4JT2AOD32pKU3MbCsotOrjVCd3B5MhFc 4rL9rg77jHAy7IOXQF1u3kueL2zoFf2S0kxI++rGPpbG0xhJraQx10mRn9QwjZ6z aRCJA1L5AoGAMmjlpEKN7bj2ZG+W5PkB3MrNmnA/uCZ0LjPmQB2FjnKtbaUYiKMd txSgIaOrV9cN9ZOLdhNMIcNGLOfVRtmOdosg/06SjsrH8gJlJHNHzO09OnrLaZjb yuIvqK1fi93oo7JdNxA77QK58kbW+bGfbXBRHPztfXddSuFLLF8DOOR27wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5Mq2KdXSDC7eEOsgtS/V+vWF6KMB8GA1UdIwQY MBaAFKyh9HEwJIBMRFQDr2P6ZEsqk10kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgt NWNhMDE2YTEwMDU0LzEvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9jNmQ2YmUtYmY0YS00M2U1LWE5MDgtNWNhMDE2YTEwMDU0 LzEvcktIMGNUQWtnRXhFVkFPdllfcGtTeXFUWFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQUCZ8/y 3O7nIujnnUix65qq1GHABET5rzP7tywm+2AqGD4QX+bhvzCSZ4u2+Ax4V6xdgYas QYAZO8a7AfExAttCHOQZ9sUBMgGtJMLaZq5puW5cSENKRCUml4d+udaP70xX+ulx 0BLKdYtC2EmQ2ZQX+FIqg6PPNWwvq20PhJEybJ4dfdOYmGglvZwzCSf9GSrhMGNl Szpz6OhWwZwI3npHLNq8WyrvttoRfU/brfjS2x+BIvOcaXTpU2bUKweg7mwudUZR LB8bd336GOKMz0VOUfBqCtyKqbFse4qL3fwjUCluBMKN0O7LOxqYC6JBGtkGDmKi f9KYwLEeiyHZYA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:44:25 2025 by rpki-client