This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft File: RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json) Hash identifier: MKj9u2fiEFcizXsP1vMLPSeCXtt4KLPV9fE1UVqt6+U= Subject key identifier: AA:7F:65:8E:B5:09:00:8D:DD:01:22:0A:7B:9E:C2:00:6B:56:05:FE Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Certificate serial: 019B17CE9202CCF18C5BBC76DB686E7A7BD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft Manifest number: 1781 Signing time: Sat 13 Dec 2025 13:02:52 +0000 Manifest this update: Sat 13 Dec 2025 13:02:52 +0000 Manifest next update: Sun 14 Dec 2025 13:02:52 +0000 Files and hashes: 1: 9NPwe5Cch9DKsApne4lBck33dDg.roa (hash: n5rsnUrmOjZIQ9fY3e7CPhPSBY9CrA1hfcg23aULjnI=) 2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: tFlSOZa+XsdMl6Q4v9J25jQFydM+w93Onh39AnTHcmI=) 3: ZbtF1y6qqiNNF9Kn4_owkJXh8bU.roa (hash: d2ka5QhSCEg5WGvXSWc7XTeM7dxOHFNwQmEQHDweYuE=) 4: gJceF3d-nooj-HNFWfJ7DjrX2tM.roa (hash: UdFUlFj+wie5ycXMTsd/YSKdJbHKvpKDw6EwjwqI0NE=) 5: o5WCBd7B_bdBqX3qKx8Y0fm2X9U.roa (hash: aIK9wfTTcwYlswanyt/B91y3FSF50A1oyK2VXl08Ak8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:ce:92:02:cc:f1:8c:5b:bc:76:db:68:6e:7a:7b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8 Validity Not Before: Dec 13 13:02:52 2025 GMT Not After : Dec 14 13:02:52 2025 GMT Subject: CN=aa7f658eb509008ddd01220a7b9ec2006b5605fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:ba:ee:fa:15:cf:04:9b:09:c0:cc:15:ba: 6c:4a:67:da:41:29:47:25:1d:c0:14:e5:83:92:34: 4b:da:eb:7e:25:20:7e:c0:69:5d:f1:40:53:d3:68: 5b:15:2a:b2:c3:49:63:15:77:2c:bc:04:11:c0:cd: 85:20:af:5b:d4:2c:77:d2:43:ba:5d:05:11:26:c7: 80:ba:9f:77:0a:4a:e3:81:82:b9:a3:88:44:93:1f: 3c:fe:91:37:95:55:ad:9f:9a:25:d7:c7:14:9d:cd: 51:25:13:3b:65:d5:fc:e8:e6:3d:a0:dd:7b:29:5a: 15:35:c8:36:92:38:aa:eb:d3:d0:2f:59:75:13:8e: d7:c2:4b:fd:f1:fd:28:e9:07:b6:4a:e1:f5:6c:01: bf:ae:a7:1a:c1:4e:ee:8b:4c:b0:f5:b4:de:4e:7a: 8d:90:30:8c:dc:06:90:18:e9:9d:dd:95:e3:85:de: 29:36:d0:dc:4e:1d:00:81:05:6c:93:9c:d4:fe:a5: 05:fc:9e:c6:19:56:55:0f:58:bd:bf:9e:36:8b:e0: 04:65:e4:b6:45:21:1b:92:23:95:76:bf:a3:f6:67: 27:1c:30:b5:2a:03:8a:4c:4a:a3:9b:f9:20:5d:40: 7a:a7:ba:9a:2d:09:f7:4e:92:cf:b7:f9:65:62:c2: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7F:65:8E:B5:09:00:8D:DD:01:22:0A:7B:9E:C2:00:6B:56:05:FE X509v3 Authority Key Identifier: keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0b:49:3c:61:79:ec:99:4a:15:bc:eb:46:ce:65:2a:49:9c: 48:99:f1:b7:c3:43:9d:88:33:d7:c2:33:40:5f:68:9d:18:d5: b8:e1:22:b0:67:48:38:9a:00:d6:51:91:08:be:4e:8b:64:55: 3a:f0:3d:c9:cd:b0:b4:46:b5:35:3c:6f:18:4c:b6:36:00:b2: 8f:b7:6e:c0:f6:13:1d:12:9d:7e:4e:81:f5:38:a5:76:64:a4: 91:d8:13:0d:8c:92:46:2e:b6:79:79:cb:2c:83:7a:8c:4c:f3: 39:7b:ce:f2:8b:35:3b:df:ba:79:77:c1:cc:cf:58:1f:76:c2: ff:9c:9e:77:d0:17:52:d1:e9:e6:15:cd:87:8c:ed:c4:d2:8d: a8:79:a4:da:a0:e7:00:b0:cb:19:8f:9c:b7:6b:bb:4c:24:f2: 56:0b:b3:69:40:54:af:28:ea:09:ec:b5:23:46:f7:04:ff:9b: 59:dd:1d:4b:e1:8f:2a:a9:0c:a5:73:18:4c:1f:a3:ac:ae:08: 83:45:1a:1e:c3:b2:53:6e:56:25:f4:96:99:71:5a:e7:e0:43: 1d:32:19:af:eb:d4:a7:4a:de:5b:5d:e3:8f:0c:14:b2:41:48: f3:31:3e:57:2d:fb:b0:47:4b:cb:69:e5:9d:78:f2:6e:38:a6: e6:18:28:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXzpICzPGMW7x222huenvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh NWQ0ZjgwHhcNMjUxMjEzMTMwMjUyWhcNMjUxMjE0MTMwMjUyWjAzMTEwLwYDVQQD EyhhYTdmNjU4ZWI1MDkwMDhkZGQwMTIyMGE3YjllYzIwMDZiNTYwNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9O67voVzwSbCcDMFbpsSmfaQSlH JR3AFOWDkjRL2ut+JSB+wGld8UBT02hbFSqyw0ljFXcsvAQRwM2FIK9b1Cx30kO6 XQURJseAup93CkrjgYK5o4hEkx88/pE3lVWtn5ol18cUnc1RJRM7ZdX86OY9oN17 KVoVNcg2kjiq69PQL1l1E47Xwkv98f0o6Qe2SuH1bAG/rqcawU7ui0yw9bTeTnqN kDCM3AaQGOmd3ZXjhd4pNtDcTh0AgQVsk5zU/qUF/J7GGVZVD1i9v542i+AEZeS2 RSEbkiOVdr+j9mcnHDC1KgOKTEqjm/kgXUB6p7qaLQn3TpLPt/llYsLgTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp/ZY61CQCN3QEiCnuewgBrVgX+MB8GA1UdIwQY MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt MjFjZjU2Y2JjZTEyLzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAtJPGF5 7JlKFbzrRs5lKkmcSJnxt8NDnYgz18IzQF9onRjVuOEisGdIOJoA1lGRCL5Oi2RV OvA9yc2wtEa1NTxvGEy2NgCyj7duwPYTHRKdfk6B9TildmSkkdgTDYySRi62eXnL LIN6jEzzOXvO8os1O9+6eXfBzM9YH3bC/5yed9AXUtHp5hXNh4ztxNKNqHmk2qDn ALDLGY+ct2u7TCTyVguzaUBUryjqCey1I0b3BP+bWd0dS+GPKqkMpXMYTB+jrK4I g0UaHsOyU25WJfSWmXFa5+BDHTIZr+vUp0reW13jjwwUskFI8zE+Vy37sEdLy2nl nXjybjim5hgoUw== -----END CERTIFICATE-----Generated at Sat Dec 13 15:40:50 2025 by rpki-client