This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft File: RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json) Hash identifier: kq3RFedQ/k0nnnQqfKX5sKjORmxMXSk84xY5zQ3tGGs= Subject key identifier: 32:53:85:3D:CC:61:8B:12:5D:EE:28:EF:EC:66:99:FA:F7:0D:31:C2 Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3 Certificate serial: 019B2D78921E5DB0E24E41DE7DDE55D453A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft Manifest number: 0A9D Signing time: Wed 17 Dec 2025 18:00:34 +0000 Manifest this update: Wed 17 Dec 2025 18:00:34 +0000 Manifest next update: Thu 18 Dec 2025 18:00:34 +0000 Files and hashes: 1: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: DggX1hmRT9D5oPv+Lg8s4VNfGbTwWb60eSJ/+4nQRzY=) 2: bollIzhNfRvYanh5m9u8c1tqdcM.roa (hash: h9HWb5No43oY67BT/CufDxfVRQJTjdQZn1o0Ans09NY=) 3: pVBaNjULwz0aOwWJHCR4FjSV1IM.roa (hash: Q5gwvnLKrWIq0+4hK9BYbVE1a8YkPxKXaiFgI8rPsJo=) 4: tKTKwD-CfqK2XSUkfDX-zb0IMcI.roa (hash: EIGjeb1RHBDJL7jS5BFIXbJ6UQ3SzaYbnmBK1hQUsVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:92:1e:5d:b0:e2:4e:41:de:7d:de:55:d4:53:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3 Validity Not Before: Dec 17 18:00:34 2025 GMT Not After : Dec 18 18:00:34 2025 GMT Subject: CN=3253853dcc618b125dee28efec6699faf70d31c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:44:2a:11:8b:66:2d:59:57:24:d0:48:90: 57:df:dd:0c:25:5a:85:7f:81:1e:54:a4:11:19:2f: 3e:9f:0f:c0:3a:45:5c:df:2f:17:e9:53:d8:78:c8: 09:b0:f4:f9:a1:4b:8d:b2:d7:77:66:e1:e7:57:5d: 47:d3:56:e1:03:5a:f2:24:7a:fe:d7:59:bd:d9:eb: 0e:f0:7f:61:ab:1b:c1:d2:3e:b5:b3:fb:b0:8a:4d: cb:b8:d9:fd:8e:37:2a:11:c3:9c:7c:c3:08:3a:ad: fa:fb:d5:f0:ae:0a:c2:ce:df:c2:f6:b0:2f:cf:36: 8f:7c:12:74:af:4a:69:39:34:ce:b9:f5:29:e5:28: 1b:e9:41:13:d8:88:8e:00:22:6a:29:3f:66:09:3d: 86:76:d7:6c:e1:a7:b4:6b:f2:2a:e8:02:42:08:b9: 64:37:d3:df:3c:d3:c7:b5:8e:e5:e1:31:5e:dc:88: 91:fc:01:01:62:c8:c2:19:4c:12:22:d7:87:c1:e8: a9:79:46:0b:93:2b:d5:97:36:d1:05:06:8c:df:93: 3c:81:59:d9:f3:c7:57:c6:31:e8:c1:cd:49:01:af: fd:59:8f:c6:f7:92:d2:7a:c7:e0:24:03:1e:6a:97: d4:43:2d:2a:92:11:fe:7a:42:7d:f8:aa:0d:65:a8: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:53:85:3D:CC:61:8B:12:5D:EE:28:EF:EC:66:99:FA:F7:0D:31:C2 X509v3 Authority Key Identifier: keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:05:bb:9d:1f:93:6a:2a:a4:05:fb:4d:9c:06:3e:45:e2:51: c1:32:e8:34:eb:02:59:b4:ca:05:db:ed:1f:38:dd:c4:52:c2: 7e:84:ac:21:88:b1:54:59:75:2a:dd:1c:d4:bb:f1:04:0d:c5: a6:c8:b7:bd:8d:38:72:74:a5:41:4a:08:80:6d:e4:17:14:84: 7c:c7:6a:cf:c3:e8:8b:06:05:76:d6:3b:ff:ea:5b:ff:b6:e7: 76:5a:72:3c:6e:2d:ff:8d:39:4a:47:03:75:c2:02:d4:ac:b5: 54:74:11:40:5b:56:38:47:ef:09:10:b0:93:c7:be:ab:54:eb: 4c:b9:af:61:04:3c:92:a7:45:20:59:41:31:6c:e6:11:03:cc: ca:24:35:4c:c7:a6:d7:f2:af:87:e2:89:e6:a2:30:1a:2d:a1: b6:2c:32:98:b7:81:e9:04:c1:49:ce:20:18:4d:e9:ec:c4:f2: bf:83:db:69:a0:78:cc:ad:e8:82:a9:8e:c2:74:69:1b:f8:27: 44:82:da:5b:ce:57:e8:c4:b3:51:07:b6:68:95:2c:37:b3:66: 9d:fd:fd:86:1e:73:11:c1:72:de:43:56:a2:a0:99:7c:08:16: a4:5f:da:f3:c1:ce:8f:e5:78:1f:bd:00:90:31:1e:78:96:ca: 21:1f:83:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteJIeXbDiTkHefd5V1FOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI2ODE0MTc5NmNhOTVlNGM3MmY0YmZhNjk2YWNlYTUw ODNhZjMwHhcNMjUxMjE3MTgwMDM0WhcNMjUxMjE4MTgwMDM0WjAzMTEwLwYDVQQD EygzMjUzODUzZGNjNjE4YjEyNWRlZTI4ZWZlYzY2OTlmYWY3MGQzMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJZEKhGLZi1ZVyTQSJBX390MJVqF f4EeVKQRGS8+nw/AOkVc3y8X6VPYeMgJsPT5oUuNstd3ZuHnV11H01bhA1ryJHr+ 11m92esO8H9hqxvB0j61s/uwik3LuNn9jjcqEcOcfMMIOq36+9XwrgrCzt/C9rAv zzaPfBJ0r0ppOTTOufUp5Sgb6UET2IiOACJqKT9mCT2Gdtds4ae0a/Iq6AJCCLlk N9PfPNPHtY7l4TFe3IiR/AEBYsjCGUwSIteHweipeUYLkyvVlzbRBQaM35M8gVnZ 88dXxjHowc1JAa/9WY/G95LSesfgJAMeapfUQy0qkhH+ekJ9+KoNZaiaNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJThT3MYYsSXe4o7+xmmfr3DTHCMB8GA1UdIwQY MBaAFEaLaBQXlsqV5McvS/ppas6lCDrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0Zjct NDUyZDZkMzgyNmY3LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0ZjctNDUyZDZkMzgyNmY3 LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwW7nR+T aiqkBftNnAY+ReJRwTLoNOsCWbTKBdvtHzjdxFLCfoSsIYixVFl1Kt0c1LvxBA3F psi3vY04cnSlQUoIgG3kFxSEfMdqz8PoiwYFdtY7/+pb/7bndlpyPG4t/405SkcD dcIC1Ky1VHQRQFtWOEfvCRCwk8e+q1TrTLmvYQQ8kqdFIFlBMWzmEQPMyiQ1TMem 1/Kvh+KJ5qIwGi2htiwymLeB6QTBSc4gGE3p7MTyv4PbaaB4zK3ogqmOwnRpG/gn RILaW85X6MSzUQe2aJUsN7Nmnf39hh5zEcFy3kNWoqCZfAgWpF/a88HOj+V4H70A kDEeeJbKIR+DTQ== -----END CERTIFICATE-----Generated at Wed Dec 17 21:03:59 2025 by rpki-client