This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json) Hash identifier: /6kPruLSNfDrHEBRLW0muRR05dzZHfWcNRY1q+4nxdI= Subject key identifier: 15:4F:2F:B9:7E:3F:C7:27:AA:5E:12:95:D3:5A:82:B6:66:AF:9C:79 Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Certificate serial: 019AF163F063165DE50094A8392170796039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft Manifest number: 03E1 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: CON1qItWtbrKIYXRdV_TEeDuWKQ.roa (hash: krT8XWx87IlYD5e3RTY90vBER8rVmDuOSR/mGg/Tnd4=) 2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: 8+llR3cegYOKkRXYWfMEx7YTWcL0VI5F0Pj++Lo2LlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f0:63:16:5d:e5:00:94:a8:39:21:70:79:60:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=154f2fb97e3fc727aa5e1295d35a82b666af9c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:e9:c1:70:ed:85:db:6c:7c:5a:dc:fa:07: 18:db:ef:0f:32:d3:2c:ea:61:1d:d1:cb:52:bc:14: f9:5c:25:16:ac:c8:97:71:0e:fa:f9:7d:8d:4b:19: 83:fd:f2:18:5e:cf:bf:c6:25:fb:56:5a:14:89:b1: 63:e7:ed:a4:50:bd:a2:a1:97:1e:f8:92:19:29:50: 72:19:5d:a0:ee:c3:ea:62:b8:fb:84:04:c8:af:6b: 9c:f1:ab:78:97:3a:26:e4:f9:52:c6:d9:63:32:f3: ff:2e:ce:38:8d:f7:00:8d:14:af:0a:32:14:21:da: 70:ed:c9:2a:c3:1b:01:96:2d:f7:30:89:94:b8:09: b1:e4:12:60:f0:f4:61:18:92:06:8e:56:b1:ec:38: 02:29:9f:e4:a7:3b:91:90:e6:c0:dc:2f:97:be:f4: 73:1d:c6:6b:51:3d:7a:8e:b0:4b:78:d2:1d:23:5b: 38:1b:69:ab:61:6f:d7:60:1a:79:6e:1c:cf:7b:c3: d2:31:a3:bc:62:cc:e4:6a:9a:04:29:f0:71:37:ca: ea:26:34:8c:75:cd:97:ef:16:e3:27:7c:4b:a8:39: d1:d6:81:f1:7f:6b:39:ca:df:d4:65:f2:83:86:17: 58:08:56:1b:e5:05:2f:dd:83:fe:3c:0e:6b:76:fc: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4F:2F:B9:7E:3F:C7:27:AA:5E:12:95:D3:5A:82:B6:66:AF:9C:79 X509v3 Authority Key Identifier: keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9c:22:8d:ce:d6:51:39:a3:9d:a1:25:3b:d3:a8:ca:52:89: 4a:b3:13:02:ee:32:10:57:f8:18:ab:5b:b6:32:d0:98:b6:69: 33:fd:6d:48:44:56:a9:cd:c1:06:aa:27:cb:71:49:0e:2d:57: ab:21:bf:81:03:a9:86:0b:fe:f0:d7:d7:cf:29:68:b5:73:05: 1d:41:ab:23:2f:c5:81:f6:0e:1a:41:d2:fe:bf:e0:6b:2b:66: 74:c1:43:7b:6e:3b:9e:16:90:e8:d2:3f:c7:60:57:a2:6f:39: 13:de:4f:a9:8e:6a:fe:89:77:9d:5c:85:6a:1c:b2:67:3b:27: 3d:e3:1b:d4:c2:4f:18:d3:b8:88:e2:00:f3:0e:05:c2:26:f5: 43:e2:4b:24:77:59:cb:a9:b2:20:76:dc:7e:a1:65:02:28:45: f3:dd:61:da:1e:8b:d7:0d:82:7a:63:8d:0c:33:bd:56:c1:e3: ea:e2:e0:0d:9c:70:0b:29:3d:8d:1a:8e:e2:0d:5d:a7:a3:e3: 57:86:e8:c1:3c:c8:97:04:25:4e:7c:ab:cc:01:84:c8:86:86: c6:3d:a2:91:61:25:04:85:51:56:e6:6c:20:ff:d5:fe:7c:62: 9c:d5:e4:76:88:33:f6:22:72:7e:40:52:e4:6a:fa:1b:b2:88: 3f:86:22:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/BjFl3lAJSoOSFweWA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNDY2NDQwNjZjZWFmMzlkM2FmYjBmZDczNWIwMTljZWM5 ZGEzNjQwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EygxNTRmMmZiOTdlM2ZjNzI3YWE1ZTEyOTVkMzVhODJiNjY2YWY5Yzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS7pwXDthdtsfFrc+gcY2+8PMtMs 6mEd0ctSvBT5XCUWrMiXcQ76+X2NSxmD/fIYXs+/xiX7VloUibFj5+2kUL2ioZce +JIZKVByGV2g7sPqYrj7hATIr2uc8at4lzom5PlSxtljMvP/Ls44jfcAjRSvCjIU Idpw7ckqwxsBli33MImUuAmx5BJg8PRhGJIGjlax7DgCKZ/kpzuRkObA3C+XvvRz HcZrUT16jrBLeNIdI1s4G2mrYW/XYBp5bhzPe8PSMaO8YszkapoEKfBxN8rqJjSM dc2X7xbjJ3xLqDnR1oHxf2s5yt/UZfKDhhdYCFYb5QUv3YP+PA5rdvz+OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVPL7l+P8cnql4SldNagrZmr5x5MB8GA1UdIwQY MBaAFK5GZEBmzq8506+w/XNbAZzsnaNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMt OGQ5ZjExZjkxNmU5LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iYzE3OGUtOWRjMC00Njg4LWEyZTMtOGQ5ZjExZjkxNmU5 LzEvcmtaa1FHYk9yem5UcjdEOWMxc0JuT3lkbzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZwijc7W UTmjnaElO9OoylKJSrMTAu4yEFf4GKtbtjLQmLZpM/1tSERWqc3BBqony3FJDi1X qyG/gQOphgv+8NfXzylotXMFHUGrIy/FgfYOGkHS/r/gaytmdMFDe247nhaQ6NI/ x2BXom85E95PqY5q/ol3nVyFahyyZzsnPeMb1MJPGNO4iOIA8w4Fwib1Q+JLJHdZ y6myIHbcfqFlAihF891h2h6L1w2CemONDDO9VsHj6uLgDZxwCyk9jRqO4g1dp6Pj V4bowTzIlwQlTnyrzAGEyIaGxj2ikWElBIVRVuZsIP/V/nxinNXkdogz9iJyfkBS 5Gr6G7KIP4YiGw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:56 2025 by rpki-client