This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft File: Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json) Hash identifier: 6pwihICsOR4ogfbRgaKInvTBYXVQN0Exgbih3ygZXic= Subject key identifier: D5:34:F8:CF:94:3F:DD:63:F6:69:C9:1C:B5:36:3F:16:A6:3C:DF:E9 Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312 Certificate serial: 019AF352B5CC731DDD1E247570BF257F502B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft Manifest number: 0204 Signing time: Sat 06 Dec 2025 11:01:15 +0000 Manifest this update: Sat 06 Dec 2025 11:01:15 +0000 Manifest next update: Sun 07 Dec 2025 11:01:15 +0000 Files and hashes: 1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: e7UsTxMJt6WUk+QACRy7CkqY3HZqMXUvajRHTttoIm8=) 2: kJ_ZNbK3slQcy_TN55gyoHn1G0k.roa (hash: wZeyZOyIkRQ2u4cIoDaxSKEDydGOPToWwbH3yN/22T0=) 3: kQkp36SbEQB7MU7q6cnQaUoCZaM.roa (hash: n6V1Zj2QKNcqa6JYQoxZObwJco51jIWrlQ6TKDXJI7w=) 4: sYQpCYcn-q9N_eYuDGQ4-P6yDtQ.roa (hash: iZDBjHvTi8UzC06Eug4ypR0vGR21QkFz4J3Uc1Ac+5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b5:cc:73:1d:dd:1e:24:75:70:bf:25:7f:50:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464d733de81fbd486d442358e0c15370520f9312 Validity Not Before: Dec 6 11:01:15 2025 GMT Not After : Dec 7 11:01:15 2025 GMT Subject: CN=d534f8cf943fdd63f669c91cb5363f16a63cdfe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:0f:24:22:3c:f9:d1:c4:3f:6c:72:0d:a0: 1d:fd:30:5d:06:11:14:5e:4e:29:e0:4b:91:4d:11: 1d:af:8c:fc:19:05:1f:22:16:de:8c:34:4f:a8:13: 2d:76:b7:12:0e:0d:72:a5:aa:e9:9f:26:e8:d8:a9: 28:ed:e6:f2:4b:8a:bb:e1:3e:41:b9:99:e4:37:d4: 7c:e2:82:85:22:75:37:95:98:e6:10:0d:1a:73:37: 4b:a5:61:5b:ef:2e:0f:c4:6d:77:cf:06:18:ad:20: e5:48:34:df:28:0b:bd:5b:f4:d1:2d:a7:bf:3e:c5: 60:52:9c:45:2a:45:05:f0:10:d1:a0:a9:f2:cc:2f: d7:d0:cf:4d:2a:3e:93:00:52:23:be:b0:fd:e8:cb: 49:02:ef:a3:2e:22:fd:2b:04:95:b0:b1:2f:b1:37: f3:c5:a6:c2:7c:38:61:e3:46:ac:38:91:31:89:82: 39:d7:10:40:20:f3:32:30:6a:e3:62:55:bb:bb:49: 65:3a:81:56:fd:de:d7:95:0a:10:6b:d2:6c:23:e1: da:65:fd:de:ce:64:3e:93:e8:75:2a:35:ec:c8:18: b8:82:0d:93:d4:bf:37:3a:f6:e9:58:4d:46:a6:e0: 1c:61:a4:1f:43:84:e9:19:71:5a:54:39:5d:e1:4e: 78:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:34:F8:CF:94:3F:DD:63:F6:69:C9:1C:B5:36:3F:16:A6:3C:DF:E9 X509v3 Authority Key Identifier: keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:61:c5:31:7c:a4:0f:85:47:1f:14:df:a2:16:3d:af:4a:38: 21:24:2e:89:06:3b:8c:ae:a4:9f:e3:a2:e6:ad:40:00:ad:18: 5b:36:da:b8:d0:52:4d:f7:a3:b8:ea:28:f1:a8:bb:dd:07:dc: b7:eb:9a:0b:fb:fb:13:8d:de:22:65:ec:25:cb:fd:77:1d:da: 3f:97:e7:23:9a:f5:4d:3e:12:98:19:20:76:6d:fe:ca:24:6a: 5a:5f:22:26:f0:a2:5c:71:bc:3a:aa:a7:97:e7:78:bb:38:5a: 69:b1:22:14:d6:70:6f:ab:fe:56:a5:3e:71:f7:55:73:4f:72: a2:1c:18:53:64:f1:99:5b:b7:2c:e5:9c:92:e8:d1:bb:a7:8d: 95:ba:5b:97:ad:67:35:8f:08:29:e7:04:1b:9c:f5:43:d0:8a: 70:b6:97:b0:b5:c0:c5:46:cd:df:3d:ce:90:08:e6:10:37:1b: 78:3f:ab:2d:09:8a:5b:6b:3a:29:64:6c:45:04:52:83:5e:32: e4:85:c8:6f:1b:e9:22:b8:76:2b:09:11:db:59:18:d6:00:10: 76:5a:c4:ae:13:16:34:3c:bd:fc:3e:d4:1d:ec:35:90:88:db: 91:c6:6e:a1:a6:49:23:f0:7e:3d:89:a2:fa:8a:ed:0b:03:2e: 34:48:29:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrXMcx3dHiR1cL8lf1ArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGQ3MzNkZTgxZmJkNDg2ZDQ0MjM1OGUwYzE1MzcwNTIw ZjkzMTIwHhcNMjUxMjA2MTEwMTE1WhcNMjUxMjA3MTEwMTE1WjAzMTEwLwYDVQQD EyhkNTM0ZjhjZjk0M2ZkZDYzZjY2OWM5MWNiNTM2M2YxNmE2M2NkZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSgPJCI8+dHEP2xyDaAd/TBdBhEU Xk4p4EuRTREdr4z8GQUfIhbejDRPqBMtdrcSDg1yparpnybo2Kko7ebyS4q74T5B uZnkN9R84oKFInU3lZjmEA0aczdLpWFb7y4PxG13zwYYrSDlSDTfKAu9W/TRLae/ PsVgUpxFKkUF8BDRoKnyzC/X0M9NKj6TAFIjvrD96MtJAu+jLiL9KwSVsLEvsTfz xabCfDhh40asOJExiYI51xBAIPMyMGrjYlW7u0llOoFW/d7XlQoQa9JsI+HaZf3e zmQ+k+h1KjXsyBi4gg2T1L83OvbpWE1GpuAcYaQfQ4TpGXFaVDld4U545wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNU0+M+UP91j9mnJHLU2PxamPN/pMB8GA1UdIwQY MBaAFEZNcz3oH71IbUQjWODBU3BSD5MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYt YTQ5ZDFhMDA2ZGM5LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYtYTQ5ZDFhMDA2ZGM5 LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemHFMXyk D4VHHxTfohY9r0o4ISQuiQY7jK6kn+Oi5q1AAK0YWzbauNBSTfejuOoo8ai73Qfc t+uaC/v7E43eImXsJcv9dx3aP5fnI5r1TT4SmBkgdm3+yiRqWl8iJvCiXHG8Oqqn l+d4uzhaabEiFNZwb6v+VqU+cfdVc09yohwYU2TxmVu3LOWckujRu6eNlbpbl61n NY8IKecEG5z1Q9CKcLaXsLXAxUbN3z3OkAjmEDcbeD+rLQmKW2s6KWRsRQRSg14y 5IXIbxvpIrh2KwkR21kY1gAQdlrErhMWNDy9/D7UHew1kIjbkcZuoaZJI/B+PYmi +ortCwMuNEgpOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:39 2025 by rpki-client