This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json) Hash identifier: Mxp9+gVYDP7Adphsinuensr+5Vd9K16CiVsZZz7PSOY= Subject key identifier: 05:10:29:E9:67:3C:8B:71:D6:4E:E5:95:22:04:D5:C3:76:80:31:37 Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62 Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62 Certificate serial: 019AF12CC3CA46E3D19EE84FCCAE9EF53EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: wT3IZs5f0Y17VyG51gOpjll3GvBxGj7N/+g56jV/3rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c3:ca:46:e3:d1:9e:e8:4f:cc:ae:9e:f5:3e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=051029e9673c8b71d64ee5952204d5c376803137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:aa:d8:0f:5e:b4:ac:f5:f3:9c:07:02:60: 8c:42:73:56:6f:7a:b8:e6:a7:1f:c9:1d:86:fe:36: c5:e3:1c:0c:a6:31:36:9f:dc:a1:04:47:a6:4f:f9: ac:3a:15:b8:d9:80:5e:6c:53:56:fa:3d:71:66:78: 92:fe:73:56:75:f7:59:d1:51:c1:81:bf:e3:99:89: f8:ea:2c:81:d7:a4:cb:4f:73:10:86:02:99:e2:c4: 07:7a:84:18:b3:ab:d7:fa:0c:a4:bb:4d:b3:b1:f3: da:fa:30:93:a1:d8:27:f9:7d:98:01:c6:9a:e4:7c: 6f:4d:00:e4:b2:4d:74:2c:2d:d6:21:b4:a2:9a:ed: 14:52:9f:fc:15:cc:88:db:ba:4a:88:da:bd:59:0d: 66:d9:ee:dc:b1:5d:31:2f:b6:85:a1:b7:10:da:17: 9d:8e:95:9b:7a:e8:73:40:94:07:54:4a:9b:f3:e8: c5:b4:6f:34:92:c7:6c:0a:8f:5b:5b:7e:77:04:7e: f7:1f:a7:19:64:0b:60:cc:14:68:bb:96:da:5d:b3: d2:94:ac:9a:ec:d5:f8:db:88:f2:e8:ed:01:75:37: 64:17:e1:4a:ff:0a:72:98:0f:25:3f:c0:87:3e:b7: 8f:30:0b:d9:51:f4:9a:51:a6:42:ed:d7:47:5b:17: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:10:29:E9:67:3C:8B:71:D6:4E:E5:95:22:04:D5:C3:76:80:31:37 X509v3 Authority Key Identifier: keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fd:ac:50:92:fe:92:62:3d:88:b5:72:a2:c4:c6:07:5a:f7: d8:7b:c3:db:4b:4d:25:1c:9b:2a:a8:5a:ff:57:0b:c5:c8:1d: 85:75:9b:98:31:51:40:d1:cd:32:28:24:1c:4d:b8:27:5f:f6: 5a:a3:d0:02:62:8f:aa:62:31:6a:7d:ca:76:24:5a:86:63:21: 44:98:49:1a:16:bb:b6:47:8f:df:06:a8:24:c1:9d:85:e0:81: fc:55:a1:c9:ab:72:59:4a:3f:22:85:48:25:d4:5e:a9:68:e1: 46:10:91:4c:fb:de:5a:3a:90:8d:6d:af:37:82:da:a2:f7:84: 2a:8f:5d:ea:a2:c1:1e:37:dd:92:e1:4c:ef:fa:2a:7d:f1:3a: b4:09:a5:ba:43:42:a7:b6:3b:a4:60:e5:df:eb:7b:65:f0:ad: 42:e9:c9:44:4b:dd:2c:58:8e:ab:c8:ab:37:1d:90:c0:bd:1f: e2:c0:e8:fb:8c:5e:8e:4b:6b:be:c0:ec:8c:81:c2:17:09:5c: fa:73:65:97:c0:ff:01:d0:22:9f:6a:d7:f5:96:2e:37:83:53: a9:26:22:74:47:ea:c8:c9:6b:62:95:1b:bb:82:22:ec:2e:3c: 63:67:b0:0a:6f:d5:d0:8e:8f:a9:7c:40:d5:f5:26:6d:c9:ce: 1a:52:56:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMPKRuPRnuhPzK6e9T6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWRkZWI2ZWExMzk1ZjY5OGY0MmU3NTQxYWVmNDkyNDI2 MjVmNjIwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD EygwNTEwMjllOTY3M2M4YjcxZDY0ZWU1OTUyMjA0ZDVjMzc2ODAzMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSqq2A9etKz185wHAmCMQnNWb3q4 5qcfyR2G/jbF4xwMpjE2n9yhBEemT/msOhW42YBebFNW+j1xZniS/nNWdfdZ0VHB gb/jmYn46iyB16TLT3MQhgKZ4sQHeoQYs6vX+gyku02zsfPa+jCTodgn+X2YAcaa 5HxvTQDksk10LC3WIbSimu0UUp/8FcyI27pKiNq9WQ1m2e7csV0xL7aFobcQ2hed jpWbeuhzQJQHVEqb8+jFtG80ksdsCo9bW353BH73H6cZZAtgzBRou5baXbPSlKya 7NX424jy6O0BdTdkF+FK/wpymA8lP8CHPrePMAvZUfSaUaZC7ddHWxfJaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUQKelnPItx1k7llSIE1cN2gDE3MB8GA1UdIwQY MBaAFESt3rbqE5X2mPQudUGu9JJCYl9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80YTZlZjEtYjRlZS00YTE0LTkzODQt NDcxNGY5NzFiNzhiLzEvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80YTZlZjEtYjRlZS00YTE0LTkzODQtNDcxNGY5NzFiNzhi LzEvUkszZXR1b1RsZmFZOUM1MVFhNzBra0ppWDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQP2sUJL+ kmI9iLVyosTGB1r32HvD20tNJRybKqha/1cLxcgdhXWbmDFRQNHNMigkHE24J1/2 WqPQAmKPqmIxan3KdiRahmMhRJhJGha7tkeP3waoJMGdheCB/FWhyatyWUo/IoVI JdReqWjhRhCRTPveWjqQjW2vN4LaoveEKo9d6qLBHjfdkuFM7/oqffE6tAmlukNC p7Y7pGDl3+t7ZfCtQunJREvdLFiOq8irNx2QwL0f4sDo+4xejktrvsDsjIHCFwlc +nNll8D/AdAin2rX9ZYuN4NTqSYidEfqyMlrYpUbu4Ii7C48Y2ewCm/V0I6PqXxA 1fUmbcnOGlJWGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:06 2025 by rpki-client