This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json) Hash identifier: dZW0/0Mbupnf8+4nSK3ttv6F70HPA/MDkG2xYZNynVs= Subject key identifier: E7:5F:EC:D3:10:D8:6E:A2:9B:91:B6:4E:7A:12:97:4D:75:AA:A9:51 Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b Certificate serial: 019AF49C45F3C9C3EF521FAA856E55E67821 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft Manifest number: 0EB5 Signing time: Sat 06 Dec 2025 17:01:13 +0000 Manifest this update: Sat 06 Dec 2025 17:01:13 +0000 Manifest next update: Sun 07 Dec 2025 17:01:13 +0000 Files and hashes: 1: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: sL1yLQvo6bduCOHefmNJkC6hhhf36JQ2h4wbmOkXOXM=) 2: flFkC3rLYTBJuae6k7suUXp0M98.roa (hash: gGcr7qntIVbHpwIxa4HyUbLLKIvBfx5RllQ/0MIi+VA=) 3: oVs5_KZDctgB_SxDxXBc7jFWGSQ.roa (hash: S1aX3TBNextGznYBV2sBZ4ei/brLO4wIVRBwdKjAlXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:45:f3:c9:c3:ef:52:1f:aa:85:6e:55:e6:78:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b Validity Not Before: Dec 6 17:01:13 2025 GMT Not After : Dec 7 17:01:13 2025 GMT Subject: CN=e75fecd310d86ea29b91b64e7a12974d75aaa951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:c3:a3:cf:58:cf:15:c5:d7:a5:1f:e0:b1: 9b:b1:73:7b:9f:b7:45:73:46:f7:3c:40:d5:ac:c0: 0e:d5:f8:ff:44:43:36:b3:b9:3b:0b:35:19:04:9a: 7e:33:a4:1b:67:bd:38:e2:27:de:48:c2:5c:22:7f: 92:de:e6:26:46:38:13:86:ae:31:4e:26:1d:52:41: 95:61:03:6f:7c:31:0c:04:34:0f:d5:d5:a0:7a:ec: 42:94:de:85:2f:5a:01:a8:f4:95:5c:9a:43:48:ee: d1:2d:f0:f6:3b:3e:7d:a3:b5:9c:3a:29:12:44:af: 96:ef:a0:b6:54:3a:df:62:37:52:77:94:da:32:a4: 98:ed:94:36:c5:c8:63:2c:15:45:03:83:b6:8e:2e: 94:b3:1e:03:27:cf:d1:37:a4:c5:83:c1:dc:f6:23: 13:87:85:16:72:b1:c8:0c:20:04:16:c8:d9:56:8f: 92:0d:36:8b:6c:46:b8:b3:3d:6e:45:ab:0d:9f:4f: 4d:ee:05:82:bd:2e:ef:59:24:4a:d0:c9:60:ed:41: 29:26:8f:38:15:6a:8c:fc:03:4e:5e:bc:51:a1:b8: 58:42:93:4b:f7:c1:15:92:d7:1e:13:53:00:c4:45: 96:c7:81:07:bb:c8:09:cd:e0:f1:d4:66:15:db:ed: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5F:EC:D3:10:D8:6E:A2:9B:91:B6:4E:7A:12:97:4D:75:AA:A9:51 X509v3 Authority Key Identifier: keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:bb:c8:0e:23:dd:3c:d6:1a:aa:7d:86:54:49:fa:57:46:97: 9b:ad:25:4c:7d:e0:95:84:af:2f:58:b2:8d:e0:b3:2d:ca:04: 84:c8:49:c2:73:82:27:c5:0b:06:4a:5a:66:b1:9b:8f:ac:37: a1:e0:04:ec:12:92:6c:23:6a:22:4a:7a:69:90:9f:1b:84:7d: f6:1b:d1:84:f6:e3:a3:5e:c9:50:84:0f:4a:01:eb:d4:0c:46: 80:4e:63:d1:6e:4d:89:16:a3:4a:49:fa:fd:43:e5:3a:34:09: 4c:81:f9:1f:d7:82:61:99:1b:de:c3:29:20:c3:98:80:eb:6b: 4d:6d:fa:5f:8c:23:d8:81:e9:f6:19:da:80:99:26:c5:bc:75: b0:b4:ef:47:c1:62:a6:af:9c:ff:9d:ac:d5:f1:ec:5f:0f:8f: 9c:7b:87:bd:66:df:78:d6:0f:67:f6:cc:95:6b:a8:d4:72:95: ef:1e:2c:49:81:20:67:ac:e3:75:3e:74:c4:fa:2a:6e:5f:76: 35:3f:74:f1:62:6b:a2:ef:f5:2b:70:ae:19:0a:95:54:a8:e5: 5d:d0:b5:4b:67:27:d5:dc:0f:21:b1:49:5a:37:19:55:02:a4: a8:a3:45:52:0c:c8:d2:68:1f:2b:8b:da:3d:cf:37:88:8a:92: b8:37:d3:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEXzycPvUh+qhW5V5nghMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTg4NjM3NDk4YjE4OGZjMGJjZWFlMGJiZjA2ODE3NjFh NDlkNGIwHhcNMjUxMjA2MTcwMTEzWhcNMjUxMjA3MTcwMTEzWjAzMTEwLwYDVQQD EyhlNzVmZWNkMzEwZDg2ZWEyOWI5MWI2NGU3YTEyOTc0ZDc1YWFhOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9TDo89YzxXF16Uf4LGbsXN7n7dF c0b3PEDVrMAO1fj/REM2s7k7CzUZBJp+M6QbZ7044ifeSMJcIn+S3uYmRjgThq4x TiYdUkGVYQNvfDEMBDQP1dWgeuxClN6FL1oBqPSVXJpDSO7RLfD2Oz59o7WcOikS RK+W76C2VDrfYjdSd5TaMqSY7ZQ2xchjLBVFA4O2ji6Usx4DJ8/RN6TFg8Hc9iMT h4UWcrHIDCAEFsjZVo+SDTaLbEa4sz1uRasNn09N7gWCvS7vWSRK0Mlg7UEpJo84 FWqM/ANOXrxRobhYQpNL98EVktceE1MAxEWWx4EHu8gJzeDx1GYV2+2iewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdf7NMQ2G6im5G2TnoSl011qqlRMB8GA1UdIwQY MBaAFESohjdJixiPwLzq4LvwaBdhpJ1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2Mt ZGNhMDQyNzBiOWQ1LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2MtZGNhMDQyNzBiOWQ1 LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1LvIDiPd PNYaqn2GVEn6V0aXm60lTH3glYSvL1iyjeCzLcoEhMhJwnOCJ8ULBkpaZrGbj6w3 oeAE7BKSbCNqIkp6aZCfG4R99hvRhPbjo17JUIQPSgHr1AxGgE5j0W5NiRajSkn6 /UPlOjQJTIH5H9eCYZkb3sMpIMOYgOtrTW36X4wj2IHp9hnagJkmxbx1sLTvR8Fi pq+c/52s1fHsXw+PnHuHvWbfeNYPZ/bMlWuo1HKV7x4sSYEgZ6zjdT50xPoqbl92 NT908WJrou/1K3CuGQqVVKjlXdC1S2cn1dwPIbFJWjcZVQKkqKNFUgzI0mgfK4va Pc83iIqSuDfTDg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:44:48 2025 by rpki-client