This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json) Hash identifier: v36i20B4fUEJ8K+PPUdcGK2a/0lT8+BAphjEmiLSdc8= Subject key identifier: 68:73:B0:56:F7:93:57:FC:CB:E0:13:E8:A0:41:C7:19:59:29:40:6A Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be Certificate serial: 019B1013A2DB223C5D7D6AB3CC02CD8FE808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft Manifest number: 1781 Signing time: Fri 12 Dec 2025 01:01:20 +0000 Manifest this update: Fri 12 Dec 2025 01:01:20 +0000 Manifest next update: Sat 13 Dec 2025 01:01:20 +0000 Files and hashes: 1: ETv26zxQcsr8JhZ4MeGRkRkjDDY.roa (hash: V/KbOS0vpdDJobu1pDGY/r9sUVjvdSgLOWgc2BMLZzY=) 2: jNjUfwqgx7FxjC22ZM2tNJxUovE.roa (hash: CYjABvddLBiX5OMQlguXfrahjaGdNxRrjgGTFThsYz4=) 3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: IL8J0fqoafGmLcZFzt7xn/TV5cHuT/W56MndmC56Hn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:a2:db:22:3c:5d:7d:6a:b3:cc:02:cd:8f:e8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be Validity Not Before: Dec 12 01:01:20 2025 GMT Not After : Dec 13 01:01:20 2025 GMT Subject: CN=6873b056f79357fccbe013e8a041c7195929406a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:62:7c:38:cb:0b:6d:95:05:b4:3b:a9:35:bf: 4d:fc:fd:f0:c1:5e:fd:eb:60:bb:07:54:9d:72:37: 26:d8:41:a9:85:8b:28:77:cd:b0:dc:59:aa:9c:30: 9b:bf:53:7d:7a:10:f9:43:49:ce:3b:da:64:26:5c: 8e:14:95:f1:4a:b3:f7:be:80:d9:ac:08:ab:7c:50: ef:ca:1d:70:25:52:75:55:34:90:77:4d:ba:cf:4c: 0f:61:f3:c7:78:02:f2:71:9b:2f:e1:7b:35:f3:0c: 97:5d:87:74:80:45:43:e6:af:98:eb:34:33:7b:22: 34:d9:8e:7f:91:f1:62:f8:d0:f5:cd:27:cb:0b:78: be:1f:a4:ec:fa:07:a4:d7:a8:50:1d:11:5f:c1:6e: 00:cb:89:b3:d4:cb:20:97:09:8a:d8:9f:60:fb:59: c8:d4:a6:08:e7:d4:46:38:b2:56:51:b2:71:b5:cc: 9b:84:18:c9:9b:8b:2a:dc:2c:8d:50:8a:c5:6a:15: b7:cd:be:d9:f4:28:e1:0c:51:e5:ee:fa:f2:fc:fa: 9f:5b:b3:9f:01:0e:74:a4:ff:08:fa:81:d5:5f:e7: 49:93:d6:5a:b1:c8:6c:11:0c:7d:6a:59:67:60:33: c2:1a:8a:8c:9e:50:b1:a7:a5:ea:4a:ae:4b:b7:03: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:73:B0:56:F7:93:57:FC:CB:E0:13:E8:A0:41:C7:19:59:29:40:6A X509v3 Authority Key Identifier: keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:52:44:ac:01:b3:89:59:bd:b5:85:9a:49:5e:3d:3d:b3:7b: 7b:5c:95:f2:0e:dc:cf:ea:09:81:8a:66:e4:a2:94:73:ff:38: 49:53:1d:9a:4d:a6:2d:7e:66:c4:94:92:15:5b:f7:34:44:ce: d1:6a:f7:4e:13:e3:8e:1c:3a:80:ad:3e:02:3d:e0:c1:7a:c4: 77:45:60:c0:da:62:0b:4e:48:40:ee:53:40:1f:d1:70:79:79: 6d:4b:18:4b:d6:a7:66:6c:a6:c2:1c:74:6d:4d:41:0f:ff:74: 5f:1c:7b:d7:8e:35:1d:66:ff:d4:59:62:4d:26:56:6a:5d:42: 65:c4:f8:26:eb:5d:19:2b:ff:a7:60:a9:34:3a:dd:13:ba:5e: 89:f9:e0:f2:33:75:b1:06:8c:9f:03:e1:20:4f:44:18:e4:9b: f7:56:b7:10:2e:78:b7:94:e2:27:bd:2c:92:ed:01:59:ec:71: d1:f5:d7:a5:06:8e:f8:c1:a9:07:1a:48:96:1f:34:05:7b:0c: b9:93:91:34:25:02:b8:41:a2:23:c5:04:5d:50:26:24:36:2b: 89:1a:b5:0c:ea:0e:66:55:70:d1:dd:49:b6:6e:e0:73:e3:0d: 06:b7:54:ab:d0:23:dc:44:59:50:0a:67:73:79:c7:c4:2e:88: ab:c1:cd:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE6LbIjxdfWqzzALNj+gIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzJlNDdkNTY2OTI0OTlhNzI2YmY4MDBlYTgzODAzNjJk ZWI2YmUwHhcNMjUxMjEyMDEwMTIwWhcNMjUxMjEzMDEwMTIwWjAzMTEwLwYDVQQD Eyg2ODczYjA1NmY3OTM1N2ZjY2JlMDEzZThhMDQxYzcxOTU5Mjk0MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WJ8OMsLbZUFtDupNb9N/P3wwV79 62C7B1Sdcjcm2EGphYsod82w3FmqnDCbv1N9ehD5Q0nOO9pkJlyOFJXxSrP3voDZ rAirfFDvyh1wJVJ1VTSQd026z0wPYfPHeALycZsv4Xs18wyXXYd0gEVD5q+Y6zQz eyI02Y5/kfFi+ND1zSfLC3i+H6Ts+gek16hQHRFfwW4Ay4mz1MsglwmK2J9g+1nI 1KYI59RGOLJWUbJxtcybhBjJm4sq3CyNUIrFahW3zb7Z9CjhDFHl7vry/PqfW7Of AQ50pP8I+oHVX+dJk9ZaschsEQx9allnYDPCGoqMnlCxp6XqSq5LtwNRSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhzsFb3k1f8y+AT6KBBxxlZKUBqMB8GA1UdIwQY MBaAFK5y5H1WaSSZpya/gA6oOANi3ra+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YmI0NzEtNGEzZS00ODhkLWI4OGMt ZmUxMmM3NWJmNGFiLzEvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82YmI0NzEtNGEzZS00ODhkLWI4OGMtZmUxMmM3NWJmNGFi LzEvcm5Ma2ZWWnBKSm1uSnItQURxZzRBMkxldHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1JErAGz iVm9tYWaSV49PbN7e1yV8g7cz+oJgYpm5KKUc/84SVMdmk2mLX5mxJSSFVv3NETO 0Wr3ThPjjhw6gK0+Aj3gwXrEd0VgwNpiC05IQO5TQB/RcHl5bUsYS9anZmymwhx0 bU1BD/90Xxx71441HWb/1FliTSZWal1CZcT4JutdGSv/p2CpNDrdE7peifng8jN1 sQaMnwPhIE9EGOSb91a3EC54t5TiJ70sku0BWexx0fXXpQaO+MGpBxpIlh80BXsM uZORNCUCuEGiI8UEXVAmJDYriRq1DOoOZlVw0d1Jtm7gc+MNBrdUq9Aj3ERZUApn c3nHxC6Iq8HNCA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:25:59 2025 by rpki-client