This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json) Hash identifier: qNI7VRB1LlVHhnc12ylv/4FBVlTbwgGl5t8szcbRcZk= Subject key identifier: CD:B3:EC:6E:CB:DD:23:70:10:45:9C:8B:F7:ED:DD:71:5C:35:D2:9B Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7 Certificate serial: 019AF2E43EDBEBCA4940F017DD58AC607CBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft Manifest number: 0724 Signing time: Sat 06 Dec 2025 09:00:35 +0000 Manifest this update: Sat 06 Dec 2025 09:00:35 +0000 Manifest next update: Sun 07 Dec 2025 09:00:35 +0000 Files and hashes: 1: 1-LDLwStGzUMrrV5QzmoRCQ8qrEo.roa (hash: cdBNdf7iqKZd9SFWXblKfPWgwOyg7ATIsmgjUz2MrVM=) 2: 7Z41l5GCvkmQM0-AZptE0q-8N2c.roa (hash: W0spFBvn9EFz2Rg+2ALTObth8eVz6Jz8Eki0R5kperk=) 3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: 8YEiWTrjRnUc3skfhXDDM5iH2gcJPtJPxeB1TQzu+Sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:3e:db:eb:ca:49:40:f0:17:dd:58:ac:60:7c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7 Validity Not Before: Dec 6 09:00:35 2025 GMT Not After : Dec 7 09:00:35 2025 GMT Subject: CN=cdb3ec6ecbdd237010459c8bf7eddd715c35d29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:5d:fa:37:4a:f8:82:62:ea:90:56:5c:14: 17:89:be:e6:e1:d4:15:c7:25:01:6f:cd:81:90:2d: 5d:65:89:25:49:be:e3:aa:3b:5f:a2:20:2c:2e:18: 43:93:95:b5:8b:88:80:95:b2:c3:3a:93:49:09:bf: 0a:67:27:5e:f2:08:d0:3a:e6:80:64:d9:97:e8:33: b8:9f:56:79:9b:19:ea:8c:60:cb:b2:51:82:ff:a7: 21:6a:83:ca:40:89:43:db:3c:93:e1:1f:15:39:84: 3f:a7:a0:54:cd:63:2a:a6:1d:8f:75:d2:8a:c4:6d: 3e:d9:32:75:ec:12:95:69:80:7b:31:b0:b5:87:60: 34:a1:cb:e2:32:82:93:5f:1b:b6:e4:fb:e6:59:d7: 6f:99:1f:3d:96:25:1b:74:80:ce:6d:5a:e8:14:a3: e3:75:a7:ac:6d:f8:90:b5:93:57:17:cf:3e:e8:19: 6a:40:33:bd:d5:59:e1:bc:b3:cf:e6:5c:f1:84:39: 6d:5e:27:29:ea:2b:57:6e:6b:6d:24:47:26:45:5b: 3d:1c:4c:28:3c:7d:4e:95:65:ca:42:9d:8f:61:3a: 28:71:3c:fb:c3:51:c8:58:8b:91:ca:70:3e:e9:14: 3b:e5:29:13:90:2d:c9:51:04:82:90:73:07:f5:a7: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B3:EC:6E:CB:DD:23:70:10:45:9C:8B:F7:ED:DD:71:5C:35:D2:9B X509v3 Authority Key Identifier: keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:35:92:c9:6c:cb:e5:0b:f2:88:8f:ce:35:1b:20:d1:2a:dc: 20:54:51:2b:ed:8b:67:7f:49:45:cb:3e:92:0a:96:f8:ba:9d: 14:55:9d:90:21:27:45:90:9d:b4:c9:f8:5c:73:04:e6:6d:13: 6e:79:b2:19:fb:26:06:4a:b3:1b:50:48:43:5b:7d:50:b6:5b: e8:53:33:b2:63:06:2d:3e:d8:29:e6:a4:3a:2a:0d:55:3c:1a: 59:f5:ee:c5:5e:87:81:82:fb:df:cb:f5:e4:99:da:25:21:ae: e7:35:49:a1:63:71:67:a2:e4:e9:c5:5a:71:90:74:c4:ea:fc: b7:ec:1f:23:55:97:1c:e1:5d:5e:ed:b4:37:10:92:c2:36:99: 8c:78:79:4e:4c:c9:fe:10:bd:ed:9b:20:ec:8f:c3:cb:b7:51: f6:d7:4d:3f:3d:05:d4:8f:f7:ac:76:1a:eb:72:aa:b0:a8:b2: 17:d0:55:03:3b:ff:09:1b:e0:c8:cc:d1:26:a4:92:54:71:4b: 97:0d:8f:c6:fe:9b:1a:54:1d:48:05:2f:44:38:34:4a:d3:06: d3:30:a4:92:0e:61:68:53:6b:d7:64:f9:3d:f5:01:72:3c:c5: 90:55:0d:20:90:45:b4:40:3d:1f:28:69:f6:d3:45:cb:c2:ba: 91:65:81:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5D7b68pJQPAX3VisYHy9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGFkMmQ0YjBiNzMzMGU0YTliNWFmYTExYTYxOThmY2I2 NTFiZjcwHhcNMjUxMjA2MDkwMDM1WhcNMjUxMjA3MDkwMDM1WjAzMTEwLwYDVQQD EyhjZGIzZWM2ZWNiZGQyMzcwMTA0NTljOGJmN2VkZGQ3MTVjMzVkMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoedd+jdK+IJi6pBWXBQXib7m4dQV xyUBb82BkC1dZYklSb7jqjtfoiAsLhhDk5W1i4iAlbLDOpNJCb8KZyde8gjQOuaA ZNmX6DO4n1Z5mxnqjGDLslGC/6chaoPKQIlD2zyT4R8VOYQ/p6BUzWMqph2PddKK xG0+2TJ17BKVaYB7MbC1h2A0ocviMoKTXxu25PvmWddvmR89liUbdIDObVroFKPj daesbfiQtZNXF88+6BlqQDO91VnhvLPP5lzxhDltXicp6itXbmttJEcmRVs9HEwo PH1OlWXKQp2PYToocTz7w1HIWIuRynA+6RQ75SkTkC3JUQSCkHMH9ac4EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2z7G7L3SNwEEWci/ft3XFcNdKbMB8GA1UdIwQY MBaAFK5K0tSwtzMOSpta+hGmGY/LZRv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDct OGE5NjY3ZDc2MmE1LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDctOGE5NjY3ZDc2MmE1 LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzWSyWzL 5QvyiI/ONRsg0SrcIFRRK+2LZ39JRcs+kgqW+LqdFFWdkCEnRZCdtMn4XHME5m0T bnmyGfsmBkqzG1BIQ1t9ULZb6FMzsmMGLT7YKeakOioNVTwaWfXuxV6HgYL738v1 5JnaJSGu5zVJoWNxZ6Lk6cVacZB0xOr8t+wfI1WXHOFdXu20NxCSwjaZjHh5TkzJ /hC97Zsg7I/Dy7dR9tdNPz0F1I/3rHYa63KqsKiyF9BVAzv/CRvgyMzRJqSSVHFL lw2Pxv6bGlQdSAUvRDg0StMG0zCkkg5haFNr12T5PfUBcjzFkFUNIJBFtEA9Hyhp 9tNFy8K6kWWB/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:57 2025 by rpki-client