This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft File: Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json) Hash identifier: QGfHzvMUpa+pCDTOmPDV2dJe9+EMsxTNHZ7GpeMTXdk= Subject key identifier: 20:A9:A2:20:21:AD:BC:CD:46:F7:5D:BA:53:A9:DA:D4:61:DA:D0:B0 Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f Certificate serial: 019B104A6A0DAC87C6E710DC83742C7F0A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft Manifest number: 1603 Signing time: Fri 12 Dec 2025 02:01:10 +0000 Manifest this update: Fri 12 Dec 2025 02:01:10 +0000 Manifest next update: Sat 13 Dec 2025 02:01:10 +0000 Files and hashes: 1: Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa (hash: 4N+U7+PRWNjJVqJ2KygRwPrjK1Ien5sO5KXTSIsM0Ro=) 2: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: TATzlzUcVT1K5e6fZoz6UUtX/32lrTLI+uCUEcq8o5Y=) 3: jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa (hash: Lc1enY7HbrV71Kk7B0ntI6Fug2DvBrGWJwGE9EwyfTM=) 4: mbp15f0zxyh0dCrGSwd4xsonIIo.roa (hash: sfiOy/EdM6txH5f3xqJYHSVySCyvLRH3tGusFyVii6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:6a:0d:ac:87:c6:e7:10:dc:83:74:2c:7f:0a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464dcfa96399716692d245a804887c09da451f8f Validity Not Before: Dec 12 02:01:10 2025 GMT Not After : Dec 13 02:01:10 2025 GMT Subject: CN=20a9a22021adbccd46f75dba53a9dad461dad0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:1f:d2:5e:6b:c1:42:94:32:37:2c:d3:a3: 2e:8f:00:e4:33:5e:43:eb:9c:69:35:82:de:46:2a: cd:69:ea:79:4b:78:f6:85:8a:a1:53:83:32:af:4d: 80:4c:f0:4c:ea:f2:0e:98:20:67:4c:e6:c1:36:63: f8:aa:11:46:28:27:ff:b1:0e:d8:81:48:50:23:18: 46:fe:d0:8a:28:2b:d8:c3:ec:d2:24:b5:e2:2a:8b: 2c:65:18:1d:58:c5:7f:ae:02:0a:dd:7c:f3:7d:b6: 01:0b:95:e9:43:b5:f5:b5:eb:6f:ab:eb:72:c5:1a: e1:ab:6d:e5:41:4b:ec:3a:6a:8a:07:c3:93:f5:ae: 85:95:d9:3d:23:94:c3:73:41:c8:21:b0:54:a1:f9: 13:6c:3e:3f:a1:61:bc:39:e5:7c:cf:11:8f:31:18: 4d:83:a7:53:73:06:ec:66:c3:d4:f7:d6:a5:61:96: 61:5d:85:5d:84:0f:b8:a9:b3:68:a7:5c:76:28:e1: db:63:51:2a:aa:6f:79:43:b2:de:45:a5:43:da:a4: 39:43:e0:29:7a:f9:be:1a:c0:43:00:b2:72:03:b4: 00:81:ad:6b:58:8f:cc:32:99:73:35:05:31:93:2e: 26:5f:ac:82:c5:54:07:4d:d0:f2:7d:4e:29:77:01: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A9:A2:20:21:AD:BC:CD:46:F7:5D:BA:53:A9:DA:D4:61:DA:D0:B0 X509v3 Authority Key Identifier: keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:bf:69:5d:51:cb:3d:92:6e:a1:e2:72:d2:6e:f7:d8:92:4a: b0:34:2b:f7:fb:b0:19:46:78:b9:78:92:0c:6b:f6:f7:c2:f3: 74:61:05:76:6a:52:7f:25:53:e0:5d:a9:c1:01:d5:cd:1c:05: b2:76:60:e5:e0:da:1e:ee:9a:3b:36:33:9d:39:ac:87:99:c5: d1:fa:71:df:28:69:bc:22:33:2b:3c:38:54:5f:04:0b:a0:66: 2b:4f:d1:84:b1:ab:44:61:49:dd:54:92:29:40:ba:f5:4e:c5: b7:73:08:4a:fc:57:02:5a:c8:49:c8:39:d2:d7:b8:e0:1b:3c: 72:d7:e6:98:70:f7:0b:65:e2:b0:80:bd:5b:27:31:7f:0d:03: 98:44:17:78:c5:4e:ce:b3:1d:34:ce:d8:54:06:3b:d2:94:98: 6b:fb:65:f6:b0:99:34:2c:02:0e:46:b7:07:d6:10:ee:b8:0f: 8d:32:8f:99:ae:82:c7:f2:04:93:77:44:e6:b2:3e:48:ba:d5: dd:ee:e6:2e:7b:7f:43:47:17:61:45:e2:c1:51:3d:fe:04:4b: 29:70:71:80:70:8b:23:64:3f:e5:cb:63:15:8c:1a:71:fe:df: a0:9c:3b:f0:52:42:d5:23:a1:cb:cf:68:08:42:ac:34:3d:31: d3:07:68:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSmoNrIfG5xDcg3QsfwoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0 NTFmOGYwHhcNMjUxMjEyMDIwMTEwWhcNMjUxMjEzMDIwMTEwWjAzMTEwLwYDVQQD EygyMGE5YTIyMDIxYWRiY2NkNDZmNzVkYmE1M2E5ZGFkNDYxZGFkMGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Uf0l5rwUKUMjcs06MujwDkM15D 65xpNYLeRirNaep5S3j2hYqhU4Myr02ATPBM6vIOmCBnTObBNmP4qhFGKCf/sQ7Y gUhQIxhG/tCKKCvYw+zSJLXiKossZRgdWMV/rgIK3XzzfbYBC5XpQ7X1tetvq+ty xRrhq23lQUvsOmqKB8OT9a6Fldk9I5TDc0HIIbBUofkTbD4/oWG8OeV8zxGPMRhN g6dTcwbsZsPU99alYZZhXYVdhA+4qbNop1x2KOHbY1Eqqm95Q7LeRaVD2qQ5Q+Ap evm+GsBDALJyA7QAga1rWI/MMplzNQUxky4mX6yCxVQHTdDyfU4pdwGijQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCpoiAhrbzNRvddulOp2tRh2tCwMB8GA1UdIwQY MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct YWYxZjM2ODExMDk4LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4 LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMb9pXVHL PZJuoeJy0m732JJKsDQr9/uwGUZ4uXiSDGv298LzdGEFdmpSfyVT4F2pwQHVzRwF snZg5eDaHu6aOzYznTmsh5nF0fpx3yhpvCIzKzw4VF8EC6BmK0/RhLGrRGFJ3VSS KUC69U7Ft3MISvxXAlrIScg50te44Bs8ctfmmHD3C2XisIC9Wycxfw0DmEQXeMVO zrMdNM7YVAY70pSYa/tl9rCZNCwCDka3B9YQ7rgPjTKPma6Cx/IEk3dE5rI+SLrV 3e7mLnt/Q0cXYUXiwVE9/gRLKXBxgHCLI2Q/5ctjFYwacf7foJw78FJC1SOhy89o CEKsND0x0wdoIA== -----END CERTIFICATE-----Generated at Fri Dec 12 07:59:01 2025 by rpki-client