This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json) Hash identifier: C/tTCK6hWk7liROC1EqXl5Px6urV+nEZuPbkpUGnQiM= Subject key identifier: 4B:51:B2:F1:2E:8F:12:3B:60:34:3E:C2:4B:4B:6B:B8:0B:C2:47:33 Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5 Certificate serial: 019B24764B9C3A3A084BF3B4D38C6909FEA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft Manifest number: 1783 Signing time: Tue 16 Dec 2025 00:01:30 +0000 Manifest this update: Tue 16 Dec 2025 00:01:30 +0000 Manifest next update: Wed 17 Dec 2025 00:01:30 +0000 Files and hashes: 1: _Q5q23PPHO-mRvT-qL8ygRyZcq8.roa (hash: MlSwzzd2g428PzEfHlimkQJSWkAp7XxXXCW+AJUIUOw=) 2: jyrC-t0H_GkAg2c88y9tSfnyeDQ.roa (hash: QuK2j2bldMS2fMD4ill15moXvawQIfM3BSjaK9rkpUw=) 3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: DNt9hM1pkskapn6k+0qLAIQvZPPVkX3xghRBI3kYx8Q=) 4: rZAA3Y495kRkRNDpWyGUUlyfTzU.roa (hash: Fgv+FkEtI7c1vlophMoAf5XyRQp0aEoHwM68DDPsUbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:4b:9c:3a:3a:08:4b:f3:b4:d3:8c:69:09:fe:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5 Validity Not Before: Dec 16 00:01:30 2025 GMT Not After : Dec 17 00:01:30 2025 GMT Subject: CN=4b51b2f12e8f123b60343ec24b4b6bb80bc24733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:18:05:af:25:64:de:e3:b9:1d:06:a6:d9: 02:30:4f:ca:e2:25:02:8e:9d:6a:5b:b6:83:fe:ce: 3d:cc:db:27:90:a3:5e:0a:04:a0:36:e7:d5:44:a9: fa:27:af:13:d6:43:a9:8f:b0:66:a8:5d:e6:9c:88: e6:8a:ce:66:bf:4b:6c:34:95:c7:a5:5d:2a:58:13: 74:0c:2c:7d:89:e0:00:54:b8:da:33:06:f3:50:54: 4b:c7:90:54:d5:6a:52:a5:94:f5:1f:29:dc:5c:03: 0d:e8:b9:1d:73:d1:b9:bd:7e:6f:ae:2d:8c:e2:19: ca:46:9e:f8:17:7a:8e:a5:3a:bc:9c:4f:9d:b7:6a: 0b:48:4e:68:74:49:2b:8c:a1:4d:3b:fb:35:30:2c: 66:4b:93:59:36:a5:ab:e3:e5:18:71:80:9e:72:32: fe:87:f7:b7:5b:48:03:eb:43:5f:2f:df:18:5f:01: 1b:55:84:32:ed:a4:0c:56:27:df:88:f9:3f:0a:ef: b7:b3:8a:14:fd:db:91:38:cd:3f:16:4d:4b:a9:3c: 12:fa:dc:54:f3:d3:0f:15:a7:ab:5f:64:23:89:be: 06:ad:0b:aa:21:23:29:57:5b:a8:c1:ad:73:11:1d: 31:1e:ef:b1:4e:82:3c:90:94:e6:ee:11:62:93:e6: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:51:B2:F1:2E:8F:12:3B:60:34:3E:C2:4B:4B:6B:B8:0B:C2:47:33 X509v3 Authority Key Identifier: keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ef:fb:0b:4b:9d:a0:eb:7a:09:8e:ca:c3:b7:b3:04:ef:48: de:78:94:3e:25:fa:e7:a5:5f:42:29:97:1b:f4:4f:65:e3:ce: cf:e4:2a:8e:15:5e:19:cd:b7:43:24:93:ee:7f:3c:f0:68:00: f4:84:d2:83:96:b1:d5:66:6f:b8:31:04:31:45:cb:88:1f:39: d4:2c:9e:88:fd:b5:42:be:f5:00:76:d4:a5:ce:78:63:1f:2c: ab:62:8a:a5:9b:9c:0f:ff:05:34:6d:3c:45:b4:93:78:49:07: 1d:16:95:ab:3a:a2:2f:e6:ad:fb:21:6b:ea:15:74:e4:8a:e8: 34:c6:0f:a7:47:b0:c3:54:94:88:e6:4d:f2:c1:19:8e:c2:d2: 9e:d0:95:85:3d:d6:65:ff:b5:e0:3d:c4:70:fa:74:a6:20:29: 00:85:c2:f2:a3:47:a7:bd:d2:ff:8f:c5:44:63:9f:15:1c:62: 6b:6a:58:f2:99:8f:51:67:f5:22:ab:f6:26:20:79:79:a5:bd: 2d:14:64:80:7b:12:5d:49:b6:14:a0:c2:c7:b9:a4:29:66:55: f1:88:aa:ed:86:f6:f6:98:f7:bb:ba:b1:4d:de:93:0a:f5:b0: fe:3b:4a:77:ae:c6:59:c9:ce:3b:f4:b7:61:0f:6e:9e:44:12: 94:2d:07:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdkucOjoIS/O004xpCf6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTc3YzcwOGFmMGJhMWY4MTU0OWM5Zjg3MDg5NTU5Mzkw MTY3YTUwHhcNMjUxMjE2MDAwMTMwWhcNMjUxMjE3MDAwMTMwWjAzMTEwLwYDVQQD Eyg0YjUxYjJmMTJlOGYxMjNiNjAzNDNlYzI0YjRiNmJiODBiYzI0NzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWUYBa8lZN7juR0GptkCME/K4iUC jp1qW7aD/s49zNsnkKNeCgSgNufVRKn6J68T1kOpj7BmqF3mnIjmis5mv0tsNJXH pV0qWBN0DCx9ieAAVLjaMwbzUFRLx5BU1WpSpZT1HyncXAMN6Lkdc9G5vX5vri2M 4hnKRp74F3qOpTq8nE+dt2oLSE5odEkrjKFNO/s1MCxmS5NZNqWr4+UYcYCecjL+ h/e3W0gD60NfL98YXwEbVYQy7aQMViffiPk/Cu+3s4oU/duROM0/Fk1LqTwS+txU 89MPFaerX2Qjib4GrQuqISMpV1uowa1zER0xHu+xToI8kJTm7hFik+b5VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtRsvEujxI7YDQ+wktLa7gLwkczMB8GA1UdIwQY MBaAFKynfHCK8LofgVScn4cIlVk5AWelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYt MjhiMTllM2ZkNGE2LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYtMjhiMTllM2ZkNGE2 LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQe/7C0ud oOt6CY7Kw7ezBO9I3niUPiX656VfQimXG/RPZePOz+QqjhVeGc23QyST7n888GgA 9ITSg5ax1WZvuDEEMUXLiB851CyeiP21Qr71AHbUpc54Yx8sq2KKpZucD/8FNG08 RbSTeEkHHRaVqzqiL+at+yFr6hV05IroNMYPp0eww1SUiOZN8sEZjsLSntCVhT3W Zf+14D3EcPp0piApAIXC8qNHp73S/4/FRGOfFRxia2pY8pmPUWf1Iqv2JiB5eaW9 LRRkgHsSXUm2FKDCx7mkKWZV8Yiq7Yb29pj3u7qxTd6TCvWw/jtKd67GWcnOO/S3 YQ9unkQSlC0HFg== -----END CERTIFICATE-----Generated at Tue Dec 16 09:44:25 2025 by rpki-client