This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json) Hash identifier: bpyFLHobqYrTal9hTB+qjW5YQLnKW4AOXgnUEoVfzps= Subject key identifier: DC:28:0F:5E:25:63:94:0E:85:0F:2F:46:84:92:47:AD:B6:9B:6C:DE Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96 Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996 Certificate serial: 019AF2094DAF96535D566A68FC1C6F545BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: RO-2xcQ-C0WrDSJ7Eu00WY23rS4.roa (hash: Avrv1nDidaSbZAK1I64G61mkaNMT6r8igSyRsacO8hw=) 2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: 2pyFa16qc8Y5X1PaIXBpz2auLAvWdsLjMcvL++8skRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4d:af:96:53:5d:56:6a:68:fc:1c:6f:54:5b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996 Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=dc280f5e2563940e850f2f46849247adb69b6cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1e:ed:c7:24:3c:fa:7e:63:b8:dd:40:3f:0f: 5a:c8:1f:9b:4a:7c:1f:57:20:2e:dc:44:97:2b:7b: cf:21:29:39:dd:6d:1b:ff:19:1c:74:2b:ef:de:04: 04:80:a0:72:ed:4a:de:6e:2e:1f:17:d4:34:5f:14: fe:02:cb:75:6a:03:a5:5d:0c:c0:91:96:c9:2f:8a: 6b:b1:ed:8a:59:9b:76:d0:b0:27:cc:73:74:c8:36: 21:da:47:ce:f7:af:5a:3a:e1:e1:32:5b:ce:99:a3: c5:af:ee:0a:14:82:6d:e2:30:8a:2e:0c:af:74:78: 72:9b:2f:57:d6:a8:e1:8b:a6:ef:60:5d:81:4a:61: 9b:dd:82:f4:d0:1d:c8:18:90:12:4a:f3:f3:34:14: 4c:4a:72:9c:0b:03:ce:bb:27:59:07:83:a2:66:04: 6e:f1:d4:2c:6c:17:be:78:3a:b5:3c:e8:a8:b7:e0: 33:29:77:a4:39:c5:b8:6d:10:8b:68:ca:cf:d9:3e: 75:1f:77:35:93:92:22:2d:99:0b:a1:a7:cc:fe:ae: 42:07:4d:cb:e7:cf:6a:90:46:c0:a7:f0:45:aa:65: f9:b9:e0:07:e7:a5:f4:29:b8:78:4f:2c:96:f7:6a: 7c:e4:cd:70:d2:9a:50:0f:30:cc:89:12:22:34:67: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:28:0F:5E:25:63:94:0E:85:0F:2F:46:84:92:47:AD:B6:9B:6C:DE X509v3 Authority Key Identifier: keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:59:26:2d:2d:3e:26:8d:bb:cf:a5:09:55:ea:ed:20:02:ab: 05:67:76:e8:c0:b0:30:a1:e3:67:da:97:a1:27:cc:1e:33:ff: af:be:65:a5:48:01:42:53:2c:1e:83:67:9a:d5:51:c1:00:ea: b5:76:ba:3b:a1:13:34:d3:13:25:78:76:1d:96:a8:35:96:42: 90:00:8f:16:72:56:50:26:3c:6c:39:43:e8:20:ca:2c:cd:4f: 65:6d:3b:43:c2:f1:2b:a1:28:a6:04:1a:1c:fb:dc:d4:06:0b: 6d:cf:12:e6:be:05:4e:72:f4:a3:4b:3f:da:5e:05:b2:1d:10: 6d:d5:e9:55:29:44:23:60:ee:ce:5a:aa:39:6a:b2:dc:eb:bc: 67:54:40:e3:40:7f:b3:7e:35:b5:a0:19:87:02:5f:c8:99:e0: fa:c1:0a:7e:46:90:91:44:00:7a:69:ed:ee:55:a5:03:c4:d2: 92:37:fb:19:1e:54:0a:de:82:c5:b8:68:12:1d:9b:e8:ae:76: 1e:28:8e:2d:e6:75:7d:38:95:d3:b9:bb:ba:af:9a:d4:04:a9: 5f:61:1e:70:fb:b2:15:51:c2:81:f2:90:95:f0:af:0a:d0:38: fa:a0:9b:a6:15:8a:39:0a:8a:e8:c0:2f:b8:af:33:4c:0c:42: 2c:96:12:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCU2vllNdVmpo/BxvVFv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDUyOGQ5MDgwYzY2NWRiMDU1MWQ4YWQ4YjBmNzFmN2Ji NzY5OTYwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD EyhkYzI4MGY1ZTI1NjM5NDBlODUwZjJmNDY4NDkyNDdhZGI2OWI2Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x7txyQ8+n5juN1APw9ayB+bSnwf VyAu3ESXK3vPISk53W0b/xkcdCvv3gQEgKBy7Urebi4fF9Q0XxT+Ast1agOlXQzA kZbJL4prse2KWZt20LAnzHN0yDYh2kfO969aOuHhMlvOmaPFr+4KFIJt4jCKLgyv dHhymy9X1qjhi6bvYF2BSmGb3YL00B3IGJASSvPzNBRMSnKcCwPOuydZB4OiZgRu 8dQsbBe+eDq1POiot+AzKXekOcW4bRCLaMrP2T51H3c1k5IiLZkLoafM/q5CB03L 589qkEbAp/BFqmX5ueAH56X0Kbh4TyyW92p85M1w0ppQDzDMiRIiNGcoWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwoD14lY5QOhQ8vRoSSR622m2zeMB8GA1UdIwQY MBaAFEZFKNkIDGZdsFUditiw9x97t2mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtVbzJRZ01abDJ3VlIySzJMRDNIM3UzYVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80NTg1MmYtOGZhZS00NDFkLWIxMGMt MGExYmY1YmYwY2EyLzEvUmtVbzJRZ01abDJ3VlIySzJMRDNIM3UzYVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80NTg1MmYtOGZhZS00NDFkLWIxMGMtMGExYmY1YmYwY2Ey LzEvUmtVbzJRZ01abDJ3VlIySzJMRDNIM3UzYVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFkmLS0+ Jo27z6UJVertIAKrBWd26MCwMKHjZ9qXoSfMHjP/r75lpUgBQlMsHoNnmtVRwQDq tXa6O6ETNNMTJXh2HZaoNZZCkACPFnJWUCY8bDlD6CDKLM1PZW07Q8LxK6EopgQa HPvc1AYLbc8S5r4FTnL0o0s/2l4Fsh0QbdXpVSlEI2DuzlqqOWqy3Ou8Z1RA40B/ s341taAZhwJfyJng+sEKfkaQkUQAemnt7lWlA8TSkjf7GR5UCt6CxbhoEh2b6K52 HiiOLeZ1fTiV07m7uq+a1ASpX2EecPuyFVHCgfKQlfCvCtA4+qCbphWKOQqK6MAv uK8zTAxCLJYSRw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:27 2025 by rpki-client