This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: rC/748nhgftVlYgZB2hPsdbbN5gLM4Jn85S+CDF/67w= Subject key identifier: A1:31:53:8A:C0:DF:48:74:83:38:F9:94:A2:05:9D:D5:7B:C8:40:F4 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B42491BC9BFC74490750AADFCD21FE7B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0B39 Signing time: Sun 21 Dec 2025 19:00:45 +0000 Manifest this update: Sun 21 Dec 2025 19:00:45 +0000 Manifest next update: Mon 22 Dec 2025 19:00:45 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 3: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 4: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 5: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: sExTNWoGgQlfcdlX/rqfgynn21ABssrNk1lXmdkOetg=) 6: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 7: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 8: bsJ2xZlOkw1plvuA7l4e3XmHypY.roa (hash: 1vESi505hq9zZ4EhI/OkoYePF4oay9Y9KHYuJ7nDjEk=) 9: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 10: d06v_z5AzGawWdpAyBM32uqoY8s.roa (hash: pSQvaS1eopRaEZbRC3t4/wI1inV/dQioI0GQiFJQkg8=) 11: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 12: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 13: nkXKQXQZfWoB_SRu8UGi2gudjoE.roa (hash: yyTA0n4064ykc+ZOi6FPjYYdwqHRzajU9OCljE+08GA=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) 15: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:1b:c9:bf:c7:44:90:75:0a:ad:fc:d2:1f:e7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Dec 21 19:00:45 2025 GMT Not After : Dec 22 19:00:45 2025 GMT Subject: CN=a131538ac0df48748338f994a2059dd57bc840f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:61:b8:a6:b0:72:62:b0:f0:7e:83:1a:d6: 40:4e:f6:d0:cf:b3:23:1d:b9:bc:ad:68:7d:e0:13: d3:83:14:d7:c4:a9:13:d1:a2:cd:bb:0d:3d:d2:4a: 17:cf:85:2b:3c:b1:bf:13:61:02:90:4b:fa:52:55: a3:c4:45:bc:96:d9:0c:c5:9b:c3:c6:1c:69:c8:a6: 95:fe:10:9c:fc:f6:ae:00:94:65:11:7a:47:49:55: 02:df:f5:eb:62:d2:5f:59:35:4e:df:8b:87:0c:33: 40:78:b4:44:81:69:1c:ed:60:a1:07:22:85:8b:73: ca:fe:f3:6e:dc:22:a0:63:fe:ea:df:ff:d8:ac:09: 46:55:71:64:e7:17:07:a9:13:af:68:e5:e4:7c:c1: d3:35:3b:1e:3e:3b:3b:ee:af:a1:bf:8c:cc:f5:cd: de:55:59:44:e7:de:97:e4:f4:6c:25:e2:54:ee:82: ec:f8:0c:5b:65:e8:b2:af:8f:f2:20:09:84:dd:6a: 2e:05:76:9b:19:65:14:dd:b5:e9:8e:89:56:ea:97: 2c:21:70:64:a0:19:6d:00:5d:ea:01:bb:8f:63:68: 38:82:e3:9d:e4:7b:2c:4c:e7:39:4f:68:18:c3:50: 9f:e9:a2:2b:4c:c3:b1:48:3f:17:69:12:92:c2:98: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:31:53:8A:C0:DF:48:74:83:38:F9:94:A2:05:9D:D5:7B:C8:40:F4 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:09:1c:40:95:f5:19:e4:58:b2:e5:98:aa:b4:ea:71:39:d7: e0:76:a6:87:ac:33:21:92:c3:13:ca:3a:0b:28:56:66:18:01: 07:73:28:64:78:5b:58:a2:30:06:a6:b3:61:be:14:49:14:2b: 42:02:db:bf:29:06:0e:85:7e:6a:40:73:73:38:96:f5:92:fd: 09:56:f3:c5:7c:cc:92:be:87:b6:a0:09:49:1a:e7:c8:4f:5b: 46:03:69:9d:a2:e1:5e:f6:fa:80:4e:0a:5b:3f:0e:6b:7c:88: 74:82:21:82:8c:e7:bf:ff:86:3f:44:86:4e:0c:8b:8c:32:28: a2:e6:df:f3:63:98:b4:9e:a7:08:0c:12:31:df:cf:f5:20:dd: fe:25:17:22:b7:74:06:f2:27:c5:8d:06:a0:2a:c9:ba:cc:0d: ce:9e:bb:b6:45:84:15:fb:20:81:0f:3f:b3:03:39:78:48:18: 06:56:99:d4:f1:f6:ed:98:6b:e9:3b:e9:c3:48:dd:ce:0b:df: 12:16:ba:71:57:83:18:b5:6c:e0:5f:ce:89:1b:23:21:d1:6a: 87:54:74:25:27:46:9b:52:50:6e:29:1d:1f:7b:f9:25:6e:b9: 58:2a:9b:fd:7f:bc:8f:4f:78:a5:2c:14:4e:39:1f:1a:72:2f: bd:55:d1:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSRvJv8dEkHUKrfzSH+e2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUxMjIxMTkwMDQ1WhcNMjUxMjIyMTkwMDQ1WjAzMTEwLwYDVQQD EyhhMTMxNTM4YWMwZGY0ODc0ODMzOGY5OTRhMjA1OWRkNTdiYzg0MGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYNhuKawcmKw8H6DGtZATvbQz7Mj Hbm8rWh94BPTgxTXxKkT0aLNuw090koXz4UrPLG/E2ECkEv6UlWjxEW8ltkMxZvD xhxpyKaV/hCc/PauAJRlEXpHSVUC3/XrYtJfWTVO34uHDDNAeLREgWkc7WChByKF i3PK/vNu3CKgY/7q3//YrAlGVXFk5xcHqROvaOXkfMHTNTsePjs77q+hv4zM9c3e VVlE596X5PRsJeJU7oLs+AxbZeiyr4/yIAmE3WouBXabGWUU3bXpjolW6pcsIXBk oBltAF3qAbuPY2g4guOd5HssTOc5T2gYw1Cf6aIrTMOxSD8XaRKSwpj6LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKExU4rA30h0gzj5lKIFndV7yED0MB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwkcQJX1 GeRYsuWYqrTqcTnX4Hamh6wzIZLDE8o6CyhWZhgBB3MoZHhbWKIwBqazYb4USRQr QgLbvykGDoV+akBzcziW9ZL9CVbzxXzMkr6HtqAJSRrnyE9bRgNpnaLhXvb6gE4K Wz8Oa3yIdIIhgoznv/+GP0SGTgyLjDIooubf82OYtJ6nCAwSMd/P9SDd/iUXIrd0 BvInxY0GoCrJuswNzp67tkWEFfsggQ8/swM5eEgYBlaZ1PH27Zhr6Tvpw0jdzgvf Eha6cVeDGLVs4F/OiRsjIdFqh1R0JSdGm1JQbikdH3v5JW65WCqb/X+8j094pSwU TjkfGnIvvVXRFQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:45 2025 by rpki-client