This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json) Hash identifier: tKnTyL7+m+cAwMoB0EYUiC+FUZ1aREgt+1rnWRC91ZA= Subject key identifier: 7D:E1:8D:8F:79:D5:57:07:BE:04:86:C2:79:1F:EA:B8:44:F9:B6:7C Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Certificate serial: 019B101372EE148746BCF807A989B06D8933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 01:01:08 +0000 Manifest this update: Fri 12 Dec 2025 01:01:08 +0000 Manifest next update: Sat 13 Dec 2025 01:01:08 +0000 Files and hashes: 1: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=) 2: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (hash: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=) 3: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (hash: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=) 4: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: Tu6cTPOzNVy0BqLV3se8OGya7GCI6pdFxH3FuE8qSYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:72:ee:14:87:46:bc:f8:07:a9:89:b0:6d:89:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Validity Not Before: Dec 12 01:01:08 2025 GMT Not After : Dec 13 01:01:08 2025 GMT Subject: CN=7de18d8f79d55707be0486c2791feab844f9b67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:9b:cd:34:c8:3c:8e:cd:fd:3a:09:70:f8: 3b:35:4e:32:8b:f2:d8:be:cf:58:14:56:22:0a:de: 31:6e:37:1b:88:67:5b:6d:c7:c7:b5:e5:36:da:25: 47:28:2a:e3:f7:d6:e8:5e:ba:e6:c4:e0:c7:32:bc: 7d:c8:aa:b5:4d:af:e4:71:dc:7c:34:56:83:36:dd: 6c:cc:c5:61:2c:fa:d2:57:d8:e2:e0:a3:9b:4c:f2: 0c:11:b7:c9:e0:ae:27:43:ef:91:1b:7d:f4:3c:ba: ec:ae:d6:4b:6d:1b:73:25:60:e5:72:a0:6d:eb:c4: 37:a0:61:26:c3:5a:16:bb:11:c6:95:0b:33:02:e2: 0b:24:50:32:16:46:d4:b1:90:80:65:a1:ee:3d:05: fe:94:85:7f:61:ba:67:ac:ef:54:a7:2e:e6:c8:e6: 4b:c2:8a:0a:06:40:c9:52:79:94:4a:e7:d6:46:46: 7f:54:8e:82:67:47:91:66:28:c0:cb:99:b0:0d:a3: 77:8a:79:2d:71:3e:58:92:b6:6a:07:f2:de:77:8a: f6:21:38:67:8f:4a:fa:25:d1:8f:b0:6f:78:92:03: 9c:89:6d:1f:90:22:01:e0:b8:0b:72:a2:19:f8:e5: e2:f6:70:19:81:41:f5:f4:31:d5:df:3f:31:de:5c: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E1:8D:8F:79:D5:57:07:BE:04:86:C2:79:1F:EA:B8:44:F9:B6:7C X509v3 Authority Key Identifier: keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:02:7c:cc:d1:60:a7:49:49:c9:99:a1:84:8c:0c:c6:b7:29: 4a:f6:73:b7:8b:a4:73:1c:b1:45:73:1d:2e:dc:48:b4:b0:7b: 48:55:94:1f:fa:34:bb:77:20:74:6b:80:2f:32:a5:d5:6c:e1: 45:c1:3e:84:76:68:a6:20:3f:7b:0b:41:a8:40:9f:a8:be:2e: fb:b0:9b:c8:86:f4:c2:4b:8c:80:e9:a9:62:d0:a0:8c:3b:6d: df:d9:11:1f:9a:9a:d7:0f:b1:66:f8:2d:0e:cf:6b:5b:fc:0f: a6:37:27:b8:68:45:e6:7a:0d:a0:18:c3:ea:85:67:28:46:3f: c7:39:56:00:a0:61:88:94:fc:31:24:29:1d:e5:27:e2:51:42: 42:6c:8b:04:e9:2d:97:e1:f1:64:3d:00:25:b0:27:9d:5c:3e: c9:9a:11:7e:27:82:3a:68:1e:91:3b:e9:ee:0f:af:4a:1a:7e: 33:cb:a3:b7:ac:99:6f:d1:e8:81:4f:ef:19:41:f9:30:f4:5a: 06:3c:04:6e:b9:87:9b:78:68:6f:b5:a9:40:2b:cb:cd:14:ab: 54:0b:ff:19:cc:ad:16:9b:b2:dc:a5:ac:17:c8:e9:29:49:84: 61:52:e2:77:ab:83:94:cd:c7:14:08:99:c7:d1:a5:4d:05:71: 29:6e:9a:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE3LuFIdGvPgHqYmwbYkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm NmM3M2IwHhcNMjUxMjEyMDEwMTA4WhcNMjUxMjEzMDEwMTA4WjAzMTEwLwYDVQQD Eyg3ZGUxOGQ4Zjc5ZDU1NzA3YmUwNDg2YzI3OTFmZWFiODQ0ZjliNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y6bzTTIPI7N/ToJcPg7NU4yi/LY vs9YFFYiCt4xbjcbiGdbbcfHteU22iVHKCrj99boXrrmxODHMrx9yKq1Ta/kcdx8 NFaDNt1szMVhLPrSV9ji4KObTPIMEbfJ4K4nQ++RG330PLrsrtZLbRtzJWDlcqBt 68Q3oGEmw1oWuxHGlQszAuILJFAyFkbUsZCAZaHuPQX+lIV/YbpnrO9Upy7myOZL wooKBkDJUnmUSufWRkZ/VI6CZ0eRZijAy5mwDaN3inktcT5YkrZqB/Led4r2IThn j0r6JdGPsG94kgOciW0fkCIB4LgLcqIZ+OXi9nAZgUH19DHV3z8x3lwWnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3hjY951VcHvgSGwnkf6rhE+bZ8MB8GA1UdIwQY MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt NWVhOGY1M2FiNDkxLzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQJ8zNFg p0lJyZmhhIwMxrcpSvZzt4ukcxyxRXMdLtxItLB7SFWUH/o0u3cgdGuALzKl1Wzh RcE+hHZopiA/ewtBqECfqL4u+7CbyIb0wkuMgOmpYtCgjDtt39kRH5qa1w+xZvgt Ds9rW/wPpjcnuGhF5noNoBjD6oVnKEY/xzlWAKBhiJT8MSQpHeUn4lFCQmyLBOkt l+HxZD0AJbAnnVw+yZoRfieCOmgekTvp7g+vShp+M8ujt6yZb9HogU/vGUH5MPRa BjwEbrmHm3hob7WpQCvLzRSrVAv/GcytFpuy3KWsF8jpKUmEYVLid6uDlM3HFAiZ x9GlTQVxKW6acg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:58:44 2025 by rpki-client