This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft File: Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json) Hash identifier: 3DAvczp6n4mAezZtMkHkA89bhy/4DI6EwcCardOIc2w= Subject key identifier: 7B:FC:3A:38:1C:3D:9E:7C:C4:A5:EF:37:7F:36:15:D6:C7:A1:C9:E0 Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312 Certificate serial: 019B38D885BB81FEB8FBFCFD5F2ACFEE23A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft Manifest number: 0228 Signing time: Fri 19 Dec 2025 23:01:12 +0000 Manifest this update: Fri 19 Dec 2025 23:01:12 +0000 Manifest next update: Sat 20 Dec 2025 23:01:12 +0000 Files and hashes: 1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: bDwmZ51E8wDPSSL513ADgNMpsU+uTulfQKeY/46SeEM=) 2: kJ_ZNbK3slQcy_TN55gyoHn1G0k.roa (hash: wZeyZOyIkRQ2u4cIoDaxSKEDydGOPToWwbH3yN/22T0=) 3: kQkp36SbEQB7MU7q6cnQaUoCZaM.roa (hash: n6V1Zj2QKNcqa6JYQoxZObwJco51jIWrlQ6TKDXJI7w=) 4: sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa (hash: iZDBjHvTi8UzC06Eug4ypR0vGR21QkFz4J3Uc1Ac+5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:85:bb:81:fe:b8:fb:fc:fd:5f:2a:cf:ee:23:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464d733de81fbd486d442358e0c15370520f9312 Validity Not Before: Dec 19 23:01:12 2025 GMT Not After : Dec 20 23:01:12 2025 GMT Subject: CN=7bfc3a381c3d9e7cc4a5ef377f3615d6c7a1c9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:c2:8b:a9:f2:1e:f0:f9:a3:03:df:bc:c3: 93:da:79:50:4d:1c:99:d7:7b:a9:ea:f9:0e:cf:ba: 0f:96:6c:ff:36:55:40:c6:aa:22:4e:ec:eb:19:15: ca:4e:54:b4:8a:61:6d:86:c0:07:07:4a:0c:98:75: e1:2e:f2:43:31:c3:dc:92:8f:49:38:d4:2b:8a:27: d3:19:db:f2:f0:ed:a5:a5:73:79:40:55:da:b8:00: c9:50:6a:49:37:3e:b6:6e:9b:14:06:70:3a:41:c9: d7:60:66:ac:cc:ca:1d:e6:9f:df:a4:4f:5d:b1:bc: c9:d2:b5:96:b0:cb:0f:19:bf:ab:34:86:50:98:bb: e7:b1:b2:96:14:96:a8:0d:b0:37:8b:e5:de:0b:25: 54:3c:f8:c0:81:9b:e6:9e:a2:61:be:ef:37:8e:72: c1:97:26:dc:5f:f3:a8:df:e5:2d:15:7f:89:6d:d8: de:ad:51:1e:4f:2a:a4:5d:42:72:bb:5c:6b:4c:bd: cf:20:97:e7:75:c8:61:ac:40:87:0d:aa:db:ce:8a: da:f1:09:3b:2b:1d:a8:45:86:4f:73:b3:c2:10:0d: 6e:cc:98:98:54:7c:9f:c9:3e:f1:29:74:06:ac:89: 89:08:26:3a:74:d1:18:90:09:25:d8:44:0c:6c:49: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FC:3A:38:1C:3D:9E:7C:C4:A5:EF:37:7F:36:15:D6:C7:A1:C9:E0 X509v3 Authority Key Identifier: keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7b:48:99:cf:38:68:57:c9:c6:76:b5:df:30:b2:09:a8:c7: 16:ec:c2:f7:c6:10:c1:30:9e:53:3e:0d:43:9a:d7:a4:ac:52: f9:92:9f:4e:88:fb:af:fa:e2:4b:0a:26:21:0a:58:c4:bb:79: 5f:55:fa:8c:85:b1:9f:12:a8:f4:96:52:9b:d4:25:ad:3e:f2: 22:c9:1c:28:11:06:84:e3:7c:a2:ed:2e:cb:4e:3d:1e:d4:4b: ab:c3:e8:d7:d5:99:98:bc:e2:66:82:09:d0:e3:f2:2d:74:a0: 60:ac:80:9c:41:c0:63:c5:82:09:67:b9:5f:06:8a:5b:65:0f: 50:ad:38:fb:0c:0b:8a:f1:63:a3:b4:29:07:8b:0a:77:73:e9: bf:ea:10:ae:6b:d0:49:8e:4b:17:a4:b4:11:b9:d7:ec:a1:7d: 28:f0:02:c2:08:47:97:e7:c4:9e:0d:2a:f7:c3:bc:af:47:12: 6f:c1:f9:b8:14:85:c2:b6:9d:89:91:e4:96:a0:bf:a4:25:ad: e0:06:35:45:49:9a:93:eb:97:c8:d6:4a:b6:9c:5f:84:46:12: a7:a6:1f:ab:e2:e0:37:da:d1:21:4d:28:87:00:50:c7:ff:05: be:e0:82:d2:7c:9f:a1:80:15:92:b5:99:b2:fe:c0:c4:b2:a9: 8b:90:54:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42IW7gf64+/z9XyrP7iOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGQ3MzNkZTgxZmJkNDg2ZDQ0MjM1OGUwYzE1MzcwNTIw ZjkzMTIwHhcNMjUxMjE5MjMwMTEyWhcNMjUxMjIwMjMwMTEyWjAzMTEwLwYDVQQD Eyg3YmZjM2EzODFjM2Q5ZTdjYzRhNWVmMzc3ZjM2MTVkNmM3YTFjOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllPCi6nyHvD5owPfvMOT2nlQTRyZ 13up6vkOz7oPlmz/NlVAxqoiTuzrGRXKTlS0imFthsAHB0oMmHXhLvJDMcPcko9J ONQriifTGdvy8O2lpXN5QFXauADJUGpJNz62bpsUBnA6QcnXYGaszMod5p/fpE9d sbzJ0rWWsMsPGb+rNIZQmLvnsbKWFJaoDbA3i+XeCyVUPPjAgZvmnqJhvu83jnLB lybcX/Oo3+UtFX+JbdjerVEeTyqkXUJyu1xrTL3PIJfndchhrECHDarbzora8Qk7 Kx2oRYZPc7PCEA1uzJiYVHyfyT7xKXQGrImJCCY6dNEYkAkl2EQMbElfhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHv8OjgcPZ58xKXvN382FdbHocngMB8GA1UdIwQY MBaAFEZNcz3oH71IbUQjWODBU3BSD5MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYt YTQ5ZDFhMDA2ZGM5LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYtYTQ5ZDFhMDA2ZGM5 LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXtImc84 aFfJxna13zCyCajHFuzC98YQwTCeUz4NQ5rXpKxS+ZKfToj7r/riSwomIQpYxLt5 X1X6jIWxnxKo9JZSm9QlrT7yIskcKBEGhON8ou0uy049HtRLq8Po19WZmLziZoIJ 0OPyLXSgYKyAnEHAY8WCCWe5XwaKW2UPUK04+wwLivFjo7QpB4sKd3Ppv+oQrmvQ SY5LF6S0EbnX7KF9KPACwghHl+fEng0q98O8r0cSb8H5uBSFwradiZHklqC/pCWt 4AY1RUmak+uXyNZKtpxfhEYSp6Yfq+LgN9rRIU0ohwBQx/8FvuCC0nyfoYAVkrWZ sv7AxLKpi5BUUA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:30:08 2025 by rpki-client