This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft File: RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json) Hash identifier: iPvMD86HeYzs+H4nyzi79YpxadZ0zZlprG4cw1bKNtA= Subject key identifier: C4:8A:63:4B:AB:5D:B7:17:7E:BF:D3:76:68:45:04:63:71:B2:B3:49 Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477 Certificate serial: 019B1A5FA705C38CEE897BC0F3571BB9DD2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft Manifest number: 0E5D Signing time: Sun 14 Dec 2025 01:00:34 +0000 Manifest this update: Sun 14 Dec 2025 01:00:34 +0000 Manifest next update: Mon 15 Dec 2025 01:00:34 +0000 Files and hashes: 1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=) 2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: kbNRA2mEkJcBOnPJptPGuEcSLYg4g4f1LbBQbDcxBlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:a7:05:c3:8c:ee:89:7b:c0:f3:57:1b:b9:dd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477 Validity Not Before: Dec 14 01:00:34 2025 GMT Not After : Dec 15 01:00:34 2025 GMT Subject: CN=c48a634bab5db7177ebfd3766845046371b2b349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:d3:ec:51:e7:8c:62:56:d3:b6:e7:08:44: 8e:43:c8:40:43:3f:fc:4c:e5:ec:60:03:43:ab:87: 67:b1:37:b0:b1:5c:66:93:47:84:43:a8:24:89:98: bd:46:9f:4f:5f:ac:15:b8:1e:e9:ea:92:86:23:16: 5f:52:13:55:5a:91:1e:70:66:9f:5e:e8:1e:83:e5: 6c:97:11:4d:e1:49:2a:8e:0d:4f:82:d8:0e:31:e2: 4f:36:8f:3f:3e:f3:5f:e6:fc:23:d7:45:d6:ae:45: 7b:88:ab:53:e1:96:bd:df:68:94:ac:1f:31:37:64: f8:b2:f7:6f:d1:72:b4:cd:0c:56:ea:2b:41:94:24: 81:09:fb:9f:94:3c:1c:49:ed:ba:e1:75:1e:eb:2e: b7:06:e1:08:0a:b0:3d:b3:62:ba:f8:e2:0a:d8:19: 5f:44:cf:e8:67:9e:cc:dd:6a:ba:4b:b6:59:02:8b: 1b:28:f0:80:d2:bf:eb:9c:30:68:91:1b:10:cc:d2: 99:fa:18:8b:77:7a:c5:a6:63:5f:93:f9:80:a5:50: b8:e0:4c:8e:41:f0:17:a2:5e:33:93:68:c1:cf:9d: 24:91:dd:9e:af:30:3d:29:b9:9e:45:a6:0d:d7:b9: 46:78:e0:c0:28:32:35:cc:c0:81:f6:16:1b:52:21: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8A:63:4B:AB:5D:B7:17:7E:BF:D3:76:68:45:04:63:71:B2:B3:49 X509v3 Authority Key Identifier: keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f5:af:2f:48:ea:f1:29:f1:66:f9:54:20:13:90:13:a8:2c: fc:46:3b:4e:ee:cd:ac:45:3a:7f:77:f9:aa:88:69:d2:69:4a: ca:f8:96:f5:b8:20:16:13:d8:6b:91:a5:c4:9a:81:5b:c8:fb: c2:d1:73:49:8f:a6:15:30:62:14:22:8c:dd:70:da:a4:fb:aa: 19:c6:91:54:b8:ed:81:ed:bb:10:ed:9f:f4:39:08:cd:d7:b1: 8e:78:1d:62:c0:30:89:f4:02:4e:a2:e5:49:cc:df:dd:6f:a4: 0e:2b:47:62:a9:fc:3e:5f:9f:8e:1e:f4:73:48:b1:b2:89:9d: bc:51:13:87:3f:30:bc:4a:4c:c5:93:0f:b9:5d:1a:b2:e5:59: 40:3a:35:bc:b5:0b:3a:d1:96:53:37:8a:af:13:20:4f:7e:2f: c6:46:d4:e8:b2:c8:84:a9:81:43:fb:9e:d3:82:c1:a1:b7:80: 80:ce:f7:cb:1d:44:09:de:2b:46:12:5e:3e:60:ef:47:53:7d: be:7a:06:d5:8f:57:c8:67:be:ca:c8:6b:01:3f:7e:57:c4:96: 25:b9:ab:07:51:58:30:12:3d:22:be:c6:0b:b8:04:0f:5e:79: 71:fb:0e:a7:c3:bc:4f:ae:87:89:cc:df:2b:0e:61:8a:6e:92: 98:ad:fe:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX6cFw4zuiXvA81cbud0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDJlNzU3OGFhYzk0ZjQyOTYwYTc4MGQzOTk2ZGE4YmI0 Njk0NzcwHhcNMjUxMjE0MDEwMDM0WhcNMjUxMjE1MDEwMDM0WjAzMTEwLwYDVQQD EyhjNDhhNjM0YmFiNWRiNzE3N2ViZmQzNzY2ODQ1MDQ2MzcxYjJiMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVvT7FHnjGJW07bnCESOQ8hAQz/8 TOXsYANDq4dnsTewsVxmk0eEQ6gkiZi9Rp9PX6wVuB7p6pKGIxZfUhNVWpEecGaf Xugeg+VslxFN4Ukqjg1PgtgOMeJPNo8/PvNf5vwj10XWrkV7iKtT4Za932iUrB8x N2T4svdv0XK0zQxW6itBlCSBCfuflDwcSe264XUe6y63BuEICrA9s2K6+OIK2Blf RM/oZ57M3Wq6S7ZZAosbKPCA0r/rnDBokRsQzNKZ+hiLd3rFpmNfk/mApVC44EyO QfAXol4zk2jBz50kkd2erzA9KbmeRaYN17lGeODAKDI1zMCB9hYbUiFdowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSKY0urXbcXfr/TdmhFBGNxsrNJMB8GA1UdIwQY MBaAFETS51eKrJT0KWCngNOZbai7RpR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2Qt ZjZmZDZiZDg1N2I4LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2QtZjZmZDZiZDg1N2I4 LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovWvL0jq 8SnxZvlUIBOQE6gs/EY7Tu7NrEU6f3f5qohp0mlKyviW9bggFhPYa5GlxJqBW8j7 wtFzSY+mFTBiFCKM3XDapPuqGcaRVLjtge27EO2f9DkIzdexjngdYsAwifQCTqLl Sczf3W+kDitHYqn8Pl+fjh70c0ixsomdvFEThz8wvEpMxZMPuV0asuVZQDo1vLUL OtGWUzeKrxMgT34vxkbU6LLIhKmBQ/ue04LBobeAgM73yx1ECd4rRhJePmDvR1N9 vnoG1Y9XyGe+yshrAT9+V8SWJbmrB1FYMBI9Ir7GC7gED155cfsOp8O8T66Hiczf Kw5him6SmK3+xg== -----END CERTIFICATE-----Generated at Sun Dec 14 06:07:11 2025 by rpki-client