This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json) Hash identifier: zObEyoTu0d2cqG01/FCpzzZkmpSRh+P+6mpCXjlRC9I= Subject key identifier: 4B:35:CB:11:12:1F:A1:96:24:1A:1B:D3:A4:32:1C:29:66:A8:66:52 Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14 Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114 Certificate serial: 019B32D657629E8FD113A33CB6D84D50526C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft Manifest number: 0ACF Signing time: Thu 18 Dec 2025 19:01:06 +0000 Manifest this update: Thu 18 Dec 2025 19:01:06 +0000 Manifest next update: Fri 19 Dec 2025 19:01:06 +0000 Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: OWb8LJsl8Cr4pkRN1E7HG/DqBLlcjGuHwggWP3YNflE=) 2: Zg1oQlfTlRGn4mPizarntNQVifQ.roa (hash: VCNyDIITF1vB0XbRmzjr12dFWbtUbWzSK0fvTI9GVWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:57:62:9e:8f:d1:13:a3:3c:b6:d8:4d:50:52:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114 Validity Not Before: Dec 18 19:01:06 2025 GMT Not After : Dec 19 19:01:06 2025 GMT Subject: CN=4b35cb11121fa196241a1bd3a4321c2966a86652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:48:95:86:08:b9:0d:e8:d3:e6:64:36:fa:5d: 27:9b:10:3d:7e:24:c5:e8:c6:41:03:c7:b8:c1:fd: e6:57:fe:ec:23:92:89:12:40:f3:c7:47:74:b3:6a: 3d:b2:2c:2b:24:42:b8:52:00:95:ad:c8:10:e0:55: 24:eb:cb:29:63:32:6e:d9:df:6d:a8:37:3e:34:6b: 49:11:80:41:22:04:2f:9c:36:9b:07:d1:0f:a4:76: 5a:f8:f1:c5:0f:75:dc:fd:7a:90:14:19:b4:5a:27: e7:ca:0c:b1:17:3c:db:37:c1:85:24:9a:fb:b1:4d: 46:86:6e:6e:f9:16:a4:4d:06:ae:88:7e:35:0d:9e: e4:7a:f9:77:df:23:ee:78:61:94:75:96:5e:de:82: 13:e8:2a:0f:b4:0e:62:86:23:4f:9c:01:41:2d:0f: 3d:43:c9:d0:13:ef:3c:28:f3:7e:6c:93:16:25:ed: 04:0b:08:c3:9e:96:2d:50:29:20:7e:18:58:c7:a9: 71:4f:e5:fa:18:c9:97:32:71:7c:b6:b8:fe:e0:48: 73:1a:c8:d3:ec:b5:d3:3f:d1:ea:75:32:a4:c2:83: 14:20:b4:8e:ee:46:cf:0e:64:41:5c:9f:5f:91:ef: db:83:27:b5:52:5a:37:9f:b6:f6:4f:6c:02:43:27: d4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:35:CB:11:12:1F:A1:96:24:1A:1B:D3:A4:32:1C:29:66:A8:66:52 X509v3 Authority Key Identifier: keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e2:17:a3:f7:f7:68:f8:7e:c3:90:cb:b7:3c:10:28:27:51: a4:d2:77:8e:fb:6e:d9:7a:82:c0:ea:f6:81:75:df:e4:d9:4a: ec:c4:26:93:b5:0d:65:4b:70:be:4e:6f:a6:f6:e5:b3:62:9e: 5a:9f:68:34:43:dd:62:87:73:40:a3:a7:cd:0f:b3:93:07:d4: c6:53:fe:02:7d:32:f8:b7:f6:a3:80:11:f7:90:ee:d1:6d:f2: 4f:70:78:8a:ba:fd:27:3f:51:0d:9b:95:7a:3f:c0:cb:01:4f: f7:8b:ca:18:f3:43:0f:91:be:82:91:f4:be:f2:d0:f8:bd:9b: 09:07:ca:4b:5c:e5:c0:ba:96:6a:ae:65:44:cc:26:59:bc:26: a0:34:c2:bf:b5:25:f3:56:8b:c3:bd:6e:8f:2d:28:51:de:aa: 54:47:e8:74:c3:0f:16:53:d6:f3:4a:b8:1e:15:34:b0:90:ff: d0:07:34:e1:9f:dc:7c:a9:86:71:3c:25:3d:db:68:00:32:cd: 08:b5:11:e8:3f:fe:bd:7e:0e:36:07:4a:58:4f:64:5d:94:85: 28:c7:85:78:f0:bb:b6:8a:c6:5f:cf:a6:f9:04:9e:25:43:0d: fc:91:19:43:9e:5d:cd:30:8a:8a:10:d8:9f:62:7a:0c:89:a9: 70:34:98:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1ldino/RE6M8tthNUFJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODQ2NTU3YjllNDI5NTUxNjNlNTE2YjAyZGM4ZTNlZTM4 MjgxMTQwHhcNMjUxMjE4MTkwMTA2WhcNMjUxMjE5MTkwMTA2WjAzMTEwLwYDVQQD Eyg0YjM1Y2IxMTEyMWZhMTk2MjQxYTFiZDNhNDMyMWMyOTY2YTg2NjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EiVhgi5DejT5mQ2+l0nmxA9fiTF 6MZBA8e4wf3mV/7sI5KJEkDzx0d0s2o9siwrJEK4UgCVrcgQ4FUk68spYzJu2d9t qDc+NGtJEYBBIgQvnDabB9EPpHZa+PHFD3Xc/XqQFBm0WifnygyxFzzbN8GFJJr7 sU1Ghm5u+RakTQauiH41DZ7kevl33yPueGGUdZZe3oIT6CoPtA5ihiNPnAFBLQ89 Q8nQE+88KPN+bJMWJe0ECwjDnpYtUCkgfhhYx6lxT+X6GMmXMnF8trj+4EhzGsjT 7LXTP9HqdTKkwoMUILSO7kbPDmRBXJ9fke/bgye1Ulo3n7b2T2wCQyfUaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEs1yxESH6GWJBob06QyHClmqGZSMB8GA1UdIwQY MBaAFEaEZVe55ClVFj5RawLcjj7jgoEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODdjNGUtNzg5Yi00YzI2LThjZTUt YWJiMjIyNTA3ZjE3LzEvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC85ODdjNGUtNzg5Yi00YzI2LThjZTUtYWJiMjIyNTA3ZjE3 LzEvUm9SbFY3bmtLVlVXUGxGckF0eU9QdU9DZ1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeIXo/f3 aPh+w5DLtzwQKCdRpNJ3jvtu2XqCwOr2gXXf5NlK7MQmk7UNZUtwvk5vpvbls2Ke Wp9oNEPdYodzQKOnzQ+zkwfUxlP+An0y+Lf2o4AR95Du0W3yT3B4irr9Jz9RDZuV ej/AywFP94vKGPNDD5G+gpH0vvLQ+L2bCQfKS1zlwLqWaq5lRMwmWbwmoDTCv7Ul 81aLw71ujy0oUd6qVEfodMMPFlPW80q4HhU0sJD/0Ac04Z/cfKmGcTwlPdtoADLN CLUR6D/+vX4ONgdKWE9kXZSFKMeFePC7torGX8+m+QSeJUMN/JEZQ55dzTCKihDY n2J6DImpcDSYvQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:51:15 2025 by rpki-client