This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft File: RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json) Hash identifier: qqMDM+z3ZBFJ44ZAgHtxqoO+e/1l0BohHI/gEslNjvk= Subject key identifier: 1B:15:E7:F9:92:E5:41:4C:DD:4F:99:3E:AE:12:1E:24:4C:94:92:90 Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3 Certificate serial: 019B59E37361C24013BDE299465263570243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft Manifest number: 0AB4 Signing time: Fri 26 Dec 2025 09:00:36 +0000 Manifest this update: Fri 26 Dec 2025 09:00:36 +0000 Manifest next update: Sat 27 Dec 2025 09:00:36 +0000 Files and hashes: 1: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: ch4ukwxnrZfrELbCR/ne30rG6ATDF77Tqx/wing364s=) 2: bollIzhNfRvYanh5m9u8c1tqdcM.roa (hash: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=) 3: pVBaNjULwz0aOwWJHCR4FjSV1IM.roa (hash: Q5gwvnLKrWIq0+4hK9BYbVE1a8YkPxKXaiFgI8rPsJo=) 4: tKTKwD-CfqK2XSUkfDX-zb0IMcI.roa (hash: EIGjeb1RHBDJL7jS5BFIXbJ6UQ3SzaYbnmBK1hQUsVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:73:61:c2:40:13:bd:e2:99:46:52:63:57:02:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3 Validity Not Before: Dec 26 09:00:36 2025 GMT Not After : Dec 27 09:00:36 2025 GMT Subject: CN=1b15e7f992e5414cdd4f993eae121e244c949290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:29:2a:b7:d4:c4:bf:94:cc:dd:7e:1f:45: 96:f9:0d:23:9a:55:8e:28:a1:0a:9e:da:6d:c5:35: 19:ce:c6:74:d6:f7:ae:2d:bc:f9:8d:66:a3:60:d8: ac:1e:de:02:61:13:dd:02:77:1c:76:25:50:45:5f: f0:85:ba:86:a6:07:e8:42:2e:43:d1:ea:32:38:df: e0:24:51:8f:d5:ab:c1:fa:5c:cc:d4:d7:d7:e6:11: 45:2d:28:ce:b9:c6:14:cd:1a:fc:13:47:02:29:36: c3:18:da:e9:5e:28:3e:ba:61:d1:c8:f7:9b:d0:2b: 8b:01:ae:ae:11:6e:11:20:34:37:99:46:a3:52:37: 42:2e:61:f1:74:af:2e:e6:88:6e:79:00:08:3e:01: 68:99:32:55:90:95:d3:bd:5b:03:c7:45:86:7b:7c: da:47:61:fc:23:cb:fa:bd:f8:28:18:16:8a:cd:5e: 3e:02:4f:d1:13:20:9f:af:2a:8b:54:59:28:7a:b9: 6a:79:39:6d:82:f0:d1:98:c1:9d:72:35:39:1e:8a: 0e:41:e8:b3:00:00:d0:49:fe:06:93:70:a9:3d:f9: ff:7e:26:35:74:fa:d5:8a:e4:87:61:9f:1f:92:34: 83:17:02:e2:3b:17:8a:98:6c:27:7f:96:57:ef:60: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:E7:F9:92:E5:41:4C:DD:4F:99:3E:AE:12:1E:24:4C:94:92:90 X509v3 Authority Key Identifier: keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b2:f8:27:77:a3:f2:16:5c:3b:70:c2:cc:33:de:45:78:d9: 8a:c4:65:a8:b7:19:f4:48:67:c8:9e:34:7c:6c:6a:31:5a:1c: 52:12:22:5e:48:6e:28:5c:3e:7f:26:d8:0a:48:d0:f0:ea:2a: 07:c1:02:c7:dc:ed:6f:ef:b6:ae:c4:2b:88:ce:0f:03:92:7c: c4:6d:87:6c:80:a9:af:88:9a:c7:91:35:18:7c:d0:ef:26:21: 13:4f:95:d5:63:9d:d1:4c:37:91:66:b6:12:bd:dc:f0:60:d4: 81:86:e9:e0:e6:be:4f:83:76:4d:eb:b3:c3:b5:db:24:ea:fa: 3f:63:de:24:f5:27:ba:c3:f4:81:09:99:d7:a3:0e:ad:4c:62: 58:f3:20:d1:c6:c4:63:5f:4a:0b:60:96:ea:ce:01:b5:3c:82: 51:ae:0a:01:52:55:16:9e:84:90:92:0e:1f:ca:77:37:2f:c0: 77:02:3f:7e:40:58:8e:29:57:17:35:96:c4:5b:59:2b:76:c8: f9:b6:e1:9d:a7:9a:a7:e6:d7:6e:c6:37:c9:56:53:54:64:1c: 4c:e6:56:fb:b0:68:dd:7f:d8:d9:08:16:63:d2:d4:ca:3f:eb: 07:51:62:ab:52:9a:77:14:2f:37:28:be:26:e2:47:e3:13:4d: a2:91:e0:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ43NhwkATveKZRlJjVwJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI2ODE0MTc5NmNhOTVlNGM3MmY0YmZhNjk2YWNlYTUw ODNhZjMwHhcNMjUxMjI2MDkwMDM2WhcNMjUxMjI3MDkwMDM2WjAzMTEwLwYDVQQD EygxYjE1ZTdmOTkyZTU0MTRjZGQ0Zjk5M2VhZTEyMWUyNDRjOTQ5MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEUpKrfUxL+UzN1+H0WW+Q0jmlWO KKEKntptxTUZzsZ01veuLbz5jWajYNisHt4CYRPdAnccdiVQRV/whbqGpgfoQi5D 0eoyON/gJFGP1avB+lzM1NfX5hFFLSjOucYUzRr8E0cCKTbDGNrpXig+umHRyPeb 0CuLAa6uEW4RIDQ3mUajUjdCLmHxdK8u5ohueQAIPgFomTJVkJXTvVsDx0WGe3za R2H8I8v6vfgoGBaKzV4+Ak/REyCfryqLVFkoerlqeTltgvDRmMGdcjU5HooOQeiz AADQSf4Gk3CpPfn/fiY1dPrViuSHYZ8fkjSDFwLiOxeKmGwnf5ZX72DNUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsV5/mS5UFM3U+ZPq4SHiRMlJKQMB8GA1UdIwQY MBaAFEaLaBQXlsqV5McvS/ppas6lCDrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0Zjct NDUyZDZkMzgyNmY3LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0ZjctNDUyZDZkMzgyNmY3 LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLL4J3ej 8hZcO3DCzDPeRXjZisRlqLcZ9EhnyJ40fGxqMVocUhIiXkhuKFw+fybYCkjQ8Ooq B8ECx9ztb++2rsQriM4PA5J8xG2HbICpr4iax5E1GHzQ7yYhE0+V1WOd0Uw3kWa2 Er3c8GDUgYbp4Oa+T4N2Teuzw7XbJOr6P2PeJPUnusP0gQmZ16MOrUxiWPMg0cbE Y19KC2CW6s4BtTyCUa4KAVJVFp6EkJIOH8p3Ny/AdwI/fkBYjilXFzWWxFtZK3bI +bbhnaeap+bXbsY3yVZTVGQcTOZW+7Bo3X/Y2QgWY9LUyj/rB1Fiq1KadxQvNyi+ JuJH4xNNopHgzQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:34 2025 by rpki-client