This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json) Hash identifier: kuxccBjK8hRUSxV1jPWmYtRnTcZ/evhQ44RCxTo7iBo= Subject key identifier: 89:EA:71:D0:1F:3E:C8:46:E7:03:82:D5:DF:26:05:41:0C:27:5F:0E Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1 Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1 Certificate serial: 019AF0BF45FFC5AB36CC88F603FA46717266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft Manifest number: 14A6 Signing time: Fri 05 Dec 2025 23:00:58 +0000 Manifest this update: Fri 05 Dec 2025 23:00:58 +0000 Manifest next update: Sat 06 Dec 2025 23:00:58 +0000 Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: jjexWHJSDsZ2rY8hvLUBZOxocfxGgCksVavsVjzdLQQ=) 2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=) 3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:45:ff:c5:ab:36:cc:88:f6:03:fa:46:71:72:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1 Validity Not Before: Dec 5 23:00:58 2025 GMT Not After : Dec 6 23:00:58 2025 GMT Subject: CN=89ea71d01f3ec846e70382d5df2605410c275f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:5c:7a:55:6c:55:a6:e1:d1:8e:f4:3a:9f: 98:43:2d:58:22:09:9d:3b:b7:03:20:22:a7:48:f6: e4:5a:70:88:d6:27:aa:6c:bd:f5:8e:27:3c:2c:72: b5:3e:1a:d3:0a:4d:f9:33:8c:05:f7:f6:90:23:6a: c0:22:d6:ad:9d:51:05:5c:0b:96:03:57:ce:8e:35: b2:ae:03:c1:4d:33:3a:08:f2:63:ac:d4:ef:db:a4: 56:4c:f3:2c:3b:2d:d5:f8:c5:6c:34:ff:51:8a:13: 29:30:a3:b7:92:3b:84:8c:10:5e:6c:41:05:91:54: f7:c1:32:af:e0:32:45:34:3c:81:e4:ef:a2:3d:1c: 18:db:50:78:82:f1:72:43:f8:d8:a8:19:54:72:ba: c4:78:fe:a6:68:e3:a6:ed:c3:b9:e1:95:13:6d:08: e5:12:4f:e6:ca:a5:8d:a6:74:1e:c8:a7:d3:9f:3b: 54:09:6e:3e:a2:68:f6:64:75:6d:a2:81:46:d8:2a: 9a:f2:cc:3e:80:42:56:cc:bf:04:05:22:a1:95:01: 9a:5c:55:31:4a:a7:29:9a:6f:09:6e:23:d4:f6:8f: 6c:66:e2:64:fe:75:8e:55:02:f4:c3:7a:cf:72:cb: c3:a5:38:3f:74:c7:b4:05:48:4e:38:7c:0a:ab:93: e4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EA:71:D0:1F:3E:C8:46:E7:03:82:D5:DF:26:05:41:0C:27:5F:0E X509v3 Authority Key Identifier: keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f4:0c:b3:fe:16:57:d6:b2:45:b9:b1:ad:81:31:b1:08:c0: c0:a7:97:85:cd:b8:63:6f:0f:eb:e2:ec:2c:88:a4:49:21:18: c7:e3:be:53:02:4c:55:fb:30:03:dd:cf:bd:0b:fc:f0:80:c5: d0:7b:a5:b5:cf:11:29:c1:bc:7a:6e:fa:6d:68:a2:a5:8a:c8: 20:2a:3e:b8:a0:b1:d3:50:e4:b1:87:c7:dc:ea:26:ee:77:83: bd:80:b5:74:a8:8e:04:b2:af:64:b9:b2:08:67:79:02:ec:b3: a8:a4:b3:6a:ee:ba:fa:6b:97:15:dc:6a:df:45:29:3f:0b:7e: 1d:32:51:09:71:eb:26:e0:cf:1a:2c:79:bf:0e:7e:dc:c7:78: d3:43:79:5d:bf:88:be:e2:bd:04:30:c3:39:0c:73:23:a6:7b: cf:25:72:65:8b:64:43:b4:fe:25:97:18:93:b6:25:69:7a:6d: 24:44:2b:08:51:42:93:93:4e:b5:f6:66:c3:22:ad:f8:20:72: 28:1d:2b:54:de:25:b4:2c:0e:78:70:b2:f2:0f:8b:44:6d:22: 6d:fb:28:a3:88:6a:e9:83:54:11:c1:76:df:ae:ab:b2:5c:a4: dc:09:b7:7f:1a:c8:29:3a:7c:47:5d:c9:b2:96:d3:99:f7:f6: 61:7f:02:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0X/xas2zIj2A/pGcXJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTkyYWFjNDg5NTIyZDVkYjE4ZmQ2MzkxZTAzNWE5Nzc4 ZWEzYjEwHhcNMjUxMjA1MjMwMDU4WhcNMjUxMjA2MjMwMDU4WjAzMTEwLwYDVQQD Eyg4OWVhNzFkMDFmM2VjODQ2ZTcwMzgyZDVkZjI2MDU0MTBjMjc1ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/tcelVsVabh0Y70Op+YQy1YIgmd O7cDICKnSPbkWnCI1ieqbL31jic8LHK1PhrTCk35M4wF9/aQI2rAItatnVEFXAuW A1fOjjWyrgPBTTM6CPJjrNTv26RWTPMsOy3V+MVsNP9RihMpMKO3kjuEjBBebEEF kVT3wTKv4DJFNDyB5O+iPRwY21B4gvFyQ/jYqBlUcrrEeP6maOOm7cO54ZUTbQjl Ek/myqWNpnQeyKfTnztUCW4+omj2ZHVtooFG2Cqa8sw+gEJWzL8EBSKhlQGaXFUx Sqcpmm8JbiPU9o9sZuJk/nWOVQL0w3rPcsvDpTg/dMe0BUhOOHwKq5PkuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInqcdAfPshG5wOC1d8mBUEMJ18OMB8GA1UdIwQY MBaAFNNZKqxIlSLV2xj9Y5HgNal3jqOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUt ZTMzYWUxMDZiNTRkLzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUtZTMzYWUxMDZiNTRk LzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPQMs/4W V9ayRbmxrYExsQjAwKeXhc24Y28P6+LsLIikSSEYx+O+UwJMVfswA93PvQv88IDF 0Hultc8RKcG8em76bWiipYrIICo+uKCx01DksYfH3Oom7neDvYC1dKiOBLKvZLmy CGd5AuyzqKSzau66+muXFdxq30UpPwt+HTJRCXHrJuDPGix5vw5+3Md400N5Xb+I vuK9BDDDOQxzI6Z7zyVyZYtkQ7T+JZcYk7YlaXptJEQrCFFCk5NOtfZmwyKt+CBy KB0rVN4ltCwOeHCy8g+LRG0ibfsoo4hq6YNUEcF2366rslyk3Am3fxrIKTp8R13J spbTmff2YX8Csw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:02 2025 by rpki-client