This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json) Hash identifier: PV7Sj+HfGHTfcj8VDa9GcwyR+r9oYPEKY66cTTMHOMw= Subject key identifier: 40:22:5F:D3:31:F9:9F:AC:C9:E2:33:BA:00:F6:64:DA:29:BF:6A:89 Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1 Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1 Certificate serial: 019AF12D13B0203CD19D9A8A763C2FBE3B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft Manifest number: 12B4 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: RaM_OWQwVXsafD9lAhumGxuaVJ0.roa (hash: 9wqEU77JRh8FONfv1sMAYtuNvig1s1ZaVt3dre8RnDg=) 2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: mJeAtuxODayQcOTBHayg+sOVfcak8VzUVVP2nXRvJ6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:13:b0:20:3c:d1:9d:9a:8a:76:3c:2f:be:3b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1 Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=40225fd331f99facc9e233ba00f664da29bf6a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:08:7d:cc:38:e3:5e:31:8e:f4:0f:1b:05: 36:b0:4e:41:1a:7e:3e:05:9f:b7:9b:64:fe:82:4d: 2e:da:6e:b9:d5:ba:62:68:25:39:0f:a3:47:c9:48: cb:59:7d:1b:9c:e5:63:ea:2a:7c:58:40:6d:a4:cb: b7:ce:57:b7:00:99:a4:d7:77:d2:17:83:d7:68:18: 44:91:48:7c:dc:3e:a5:3e:7c:cf:c6:be:57:a0:47: 03:29:33:cd:27:b1:3e:9e:3b:30:37:a1:23:89:f2: 24:59:68:71:0f:c1:16:3d:fe:ed:71:31:36:5f:c0: 97:f5:6f:14:76:bb:96:a7:6e:c7:25:f1:73:9b:db: 0f:c8:f9:25:e3:e3:ed:15:58:66:92:34:e3:0c:b4: da:fc:cf:d6:bb:f4:48:be:72:4d:92:73:95:0a:40: 1e:2e:5b:77:db:98:92:ce:9a:e9:90:c0:fc:77:4b: be:ec:cd:3a:0b:11:01:0e:77:cb:9a:a0:77:0d:a7: 99:33:41:04:0b:ff:b3:86:05:cb:fc:49:2d:c9:4b: 45:af:f4:8d:24:a3:d8:6b:01:63:03:8e:a4:d2:59: 79:e9:52:2a:19:27:26:28:de:3c:54:cb:59:65:97: 06:25:8f:dd:86:65:97:11:f8:02:45:27:00:19:30: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:5F:D3:31:F9:9F:AC:C9:E2:33:BA:00:F6:64:DA:29:BF:6A:89 X509v3 Authority Key Identifier: keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:86:c7:e1:9c:0e:a9:8d:af:31:2b:9d:bb:e7:03:d2:65:5b: 85:1e:d9:93:89:e0:1f:7e:5d:70:f8:0e:cf:b8:0a:aa:f2:bd: aa:d0:76:76:c9:7a:d1:70:f6:7c:5e:c1:09:c3:40:3c:13:b5: 6b:b8:fa:33:03:02:e2:be:c2:b1:06:13:b8:c8:11:37:16:2b: ec:29:c5:7b:02:aa:0f:7a:bc:49:4d:b1:d7:5b:58:68:1e:f4: fe:02:e5:16:8e:58:16:86:dd:a1:87:71:6c:be:94:25:c0:05: e3:c6:76:dd:78:1b:c7:a5:c6:3b:fb:a4:e0:db:51:dd:77:f6: f0:5d:4f:a9:62:2b:ea:71:16:73:f4:d0:c1:8e:23:d2:d9:47: 03:5b:0c:3d:5c:7a:f7:b1:c2:1e:42:0b:f0:bb:f1:1a:d7:4a: a9:e5:2f:ab:04:a4:67:bf:8f:6e:09:33:28:77:f0:41:f7:83: 03:cb:11:54:48:9e:2c:b1:27:3b:80:ea:75:48:82:18:39:60: ce:bf:1f:7c:30:3f:32:94:78:01:65:96:af:a4:b0:c1:0f:28: 7a:57:fb:97:fb:0b:27:18:04:05:2e:d8:34:a0:12:4f:b0:5d: ca:45:9b:fe:22:e0:e9:69:86:40:55:2f:49:79:7f:13:42:b5: 83:e0:9e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLROwIDzRnZqKdjwvvjtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlODM1NTI5OTM3NDI5NzkzM2QyODFmNTFlYjc0YmE1YzJj OTFjYzEwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD Eyg0MDIyNWZkMzMxZjk5ZmFjYzllMjMzYmEwMGY2NjRkYTI5YmY2YTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwisIfcw4414xjvQPGwU2sE5BGn4+ BZ+3m2T+gk0u2m651bpiaCU5D6NHyUjLWX0bnOVj6ip8WEBtpMu3zle3AJmk13fS F4PXaBhEkUh83D6lPnzPxr5XoEcDKTPNJ7E+njswN6EjifIkWWhxD8EWPf7tcTE2 X8CX9W8UdruWp27HJfFzm9sPyPkl4+PtFVhmkjTjDLTa/M/Wu/RIvnJNknOVCkAe Llt325iSzprpkMD8d0u+7M06CxEBDnfLmqB3DaeZM0EEC/+zhgXL/EktyUtFr/SN JKPYawFjA46k0ll56VIqGScmKN48VMtZZZcGJY/dhmWXEfgCRScAGTD42wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAiX9Mx+Z+syeIzugD2ZNopv2qJMB8GA1UdIwQY MBaAFK6DVSmTdCl5M9KB9R63S6XCyRzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wZjJlYjgtOTgwMC00NjIxLWI2NzQt M2I0ZDAyYTYxZWMyLzEvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8wZjJlYjgtOTgwMC00NjIxLWI2NzQtM2I0ZDAyYTYxZWMy LzEvcm9OVktaTjBLWGt6MG9IMUhyZExwY0xKSE1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYbH4ZwO qY2vMSudu+cD0mVbhR7Zk4ngH35dcPgOz7gKqvK9qtB2dsl60XD2fF7BCcNAPBO1 a7j6MwMC4r7CsQYTuMgRNxYr7CnFewKqD3q8SU2x11tYaB70/gLlFo5YFobdoYdx bL6UJcAF48Z23Xgbx6XGO/uk4NtR3Xf28F1PqWIr6nEWc/TQwY4j0tlHA1sMPVx6 97HCHkIL8LvxGtdKqeUvqwSkZ7+PbgkzKHfwQfeDA8sRVEieLLEnO4DqdUiCGDlg zr8ffDA/MpR4AWWWr6SwwQ8oelf7l/sLJxgEBS7YNKAST7BdykWb/iLg6WmGQFUv SXl/E0K1g+CeSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:18 2025 by rpki-client