This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft File: R0kcIjvm4aqla_7G2g2pDEqFKq8.mft (raw, json) Hash identifier: oE6jv/uzxohsD2qHXX8fgJpJrcm3xmqpLa0Uvs7bZhM= Subject key identifier: 9A:CA:48:6E:7C:46:67:9F:51:30:C9:B3:B2:D6:EF:34:50:90:69:D4 Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf Certificate serial: 019B5B65AA8F39FC66D5378CA6D19AAA8C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft Manifest number: 04FF Signing time: Fri 26 Dec 2025 16:02:28 +0000 Manifest this update: Fri 26 Dec 2025 16:02:28 +0000 Manifest next update: Sat 27 Dec 2025 16:02:28 +0000 Files and hashes: 1: R0kcIjvm4aqla_7G2g2pDEqFKq8.crl (hash: HR46eoQFcQCZVxX43oRsBzMeZPLN40AEbuWZNPaU0NU=) 2: rVporlTC0KO2iHCmNkPkBQ1rLtA.roa (hash: QNFtzFtuUhiRexRD3zRBFnGt2eHAdDUybJR5bbQe4xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:aa:8f:39:fc:66:d5:37:8c:a6:d1:9a:aa:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf Validity Not Before: Dec 26 16:02:28 2025 GMT Not After : Dec 27 16:02:28 2025 GMT Subject: CN=9aca486e7c46679f5130c9b3b2d6ef34509069d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:eb:6f:3f:79:40:11:8c:3b:65:92:92:fd: fe:a3:b5:e1:0c:a9:6f:eb:9f:d2:bc:8c:2b:2c:c1: 85:04:57:a1:80:8c:13:5b:a9:b4:27:a9:11:44:f8: 05:d0:1d:d0:fd:1f:11:a2:5f:27:27:06:af:9d:b2: 1e:aa:15:e7:a5:45:19:33:a1:c3:72:d1:80:29:b5: d1:be:19:f8:63:cd:bd:9c:1e:0e:5f:92:1f:63:86: 60:27:0d:3a:c6:a0:d5:0e:40:8b:46:5f:62:f1:5f: 15:97:06:c5:39:63:78:1d:c3:53:fb:9b:cd:71:63: 5c:a0:81:ca:ac:71:00:77:a1:76:7c:63:eb:8d:12: ae:e0:b2:06:2e:b8:13:74:38:c6:bb:a4:da:09:52: c5:46:3a:2e:c9:db:18:d6:32:34:9f:a0:1c:73:72: 12:67:ba:a9:ad:9e:01:6d:a1:6a:98:02:d6:98:ba: 5e:b5:f7:9a:d4:60:ae:35:d4:7e:26:96:66:a8:14: 3b:a9:22:11:85:40:b0:aa:06:a5:22:f8:0c:7f:ab: a2:19:02:97:58:ef:48:8f:50:02:ca:d6:ba:00:ab: 60:2c:14:13:86:c9:b3:fb:fb:b1:d0:64:a5:f6:d7: 73:28:12:51:d0:04:15:0b:4f:1f:2b:70:71:eb:cf: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CA:48:6E:7C:46:67:9F:51:30:C9:B3:B2:D6:EF:34:50:90:69:D4 X509v3 Authority Key Identifier: keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:25:96:21:7a:1b:4e:a8:b4:d4:f7:f4:e6:f4:74:79:7c:2a: 17:a2:01:6c:dc:83:35:72:07:2f:c4:c4:c0:64:05:9c:42:81: 31:21:6b:d4:a0:d6:9a:af:41:e2:e0:0a:03:8c:5a:04:f1:7e: 1a:ea:10:fd:f7:6b:ab:a1:84:88:ed:6f:69:d3:b8:7d:6d:d6: 98:77:18:2b:59:92:43:1b:02:dc:e8:11:da:e2:de:a2:b3:d7: 27:71:f1:a6:6d:1b:a6:16:a0:37:de:93:50:81:92:f5:bc:e2: 71:16:c5:39:99:8f:4a:36:9d:64:31:43:a1:ac:7a:6d:fe:dc: 36:01:5a:9a:05:5c:b1:f6:28:c9:31:7d:d9:a0:c2:c4:bf:8e: 44:0b:fc:48:05:0a:30:18:db:14:98:d4:58:89:cb:e6:6c:a2: 94:48:1b:c8:fd:98:d6:2d:56:fe:f4:f6:74:79:96:80:b8:4c: e2:5c:a5:a7:ee:97:da:ad:5f:02:9a:98:15:58:7b:cd:53:21: 0c:5f:8d:ae:41:e6:41:7a:31:fd:33:a5:a1:2f:6c:69:65:f0: 64:4a:f5:df:69:ad:cb:fe:0e:d8:7b:4d:6d:cb:30:34:4f:25: c3:d5:77:72:73:b8:b9:09:98:e7:ee:58:78:c3:ad:b6:ac:88: af:2b:c8:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZaqPOfxm1TeMptGaqoxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NDkxYzIyM2JlNmUxYWFhNTZiZmVjNmRhMGRhOTBjNGE4 NTJhYWYwHhcNMjUxMjI2MTYwMjI4WhcNMjUxMjI3MTYwMjI4WjAzMTEwLwYDVQQD Eyg5YWNhNDg2ZTdjNDY2NzlmNTEzMGM5YjNiMmQ2ZWYzNDUwOTA2OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQjrbz95QBGMO2WSkv3+o7XhDKlv 65/SvIwrLMGFBFehgIwTW6m0J6kRRPgF0B3Q/R8Rol8nJwavnbIeqhXnpUUZM6HD ctGAKbXRvhn4Y829nB4OX5IfY4ZgJw06xqDVDkCLRl9i8V8VlwbFOWN4HcNT+5vN cWNcoIHKrHEAd6F2fGPrjRKu4LIGLrgTdDjGu6TaCVLFRjouydsY1jI0n6Acc3IS Z7qprZ4BbaFqmALWmLpetfea1GCuNdR+JpZmqBQ7qSIRhUCwqgalIvgMf6uiGQKX WO9Ij1ACyta6AKtgLBQThsmz+/ux0GSl9tdzKBJR0AQVC08fK3Bx68+IcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrKSG58RmefUTDJs7LW7zRQkGnUMB8GA1UdIwQY MBaAFEdJHCI75uGqpWv+xtoNqQxKhSqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgt OGFjZGY5NmM5OGEwLzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgtOGFjZGY5NmM5OGEw LzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCWWIXob Tqi01Pf05vR0eXwqF6IBbNyDNXIHL8TEwGQFnEKBMSFr1KDWmq9B4uAKA4xaBPF+ GuoQ/fdrq6GEiO1vadO4fW3WmHcYK1mSQxsC3OgR2uLeorPXJ3Hxpm0bphagN96T UIGS9bzicRbFOZmPSjadZDFDoax6bf7cNgFamgVcsfYoyTF92aDCxL+ORAv8SAUK MBjbFJjUWInL5myilEgbyP2Y1i1W/vT2dHmWgLhM4lylp+6X2q1fApqYFVh7zVMh DF+NrkHmQXox/TOloS9saWXwZEr132mty/4O2HtNbcswNE8lw9V3cnO4uQmY5+5Y eMOttqyIryvIEw== -----END CERTIFICATE-----Generated at Fri Dec 26 22:46:51 2025 by rpki-client