This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft File: RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json) Hash identifier: w9kPTqi2qiYedP4uVc/BBvQafhLYrtpl0hgm5ZvQWQw= Subject key identifier: 70:60:05:A6:8D:8A:FA:72:24:2A:95:F4:E8:25:E6:E9:1B:C5:62:6D Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477 Certificate serial: 019AF5AE5C9C826EC523D6078501A69BD9B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft Manifest number: 0E4A Signing time: Sat 06 Dec 2025 22:00:36 +0000 Manifest this update: Sat 06 Dec 2025 22:00:36 +0000 Manifest next update: Sun 07 Dec 2025 22:00:36 +0000 Files and hashes: 1: Mls2HM8_FY_IKXa_7YokWR8k2as.roa (hash: CiqhaGVIRMfnCHendb0wwlGmTiUs+e665f1gVqsw+T0=) 2: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: dLhauMSoS6ydM9ZZK8dRAUnSpbfkdiM0ZSx2zaNmeZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:5c:9c:82:6e:c5:23:d6:07:85:01:a6:9b:d9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477 Validity Not Before: Dec 6 22:00:36 2025 GMT Not After : Dec 7 22:00:36 2025 GMT Subject: CN=706005a68d8afa72242a95f4e825e6e91bc5626d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:06:e8:8b:c8:38:da:0f:9f:c5:ac:26:63: 4f:c9:49:d9:c6:ba:38:47:56:26:30:54:b6:5b:36: b1:a7:0b:9b:de:c4:d7:c0:10:4e:45:82:c0:cb:cb: bd:90:b8:4c:26:66:36:f6:2c:65:04:80:c1:85:25: fb:79:4d:cc:0a:f9:b6:75:23:3d:09:24:27:57:cb: c9:e7:b7:4f:1e:6a:06:d3:54:68:6f:a7:b3:62:f9: 1e:75:f1:e2:38:40:d3:b9:46:11:86:2c:39:82:2f: 66:b2:1d:bf:d7:1f:1c:e8:32:81:32:0d:03:17:ef: 1c:57:b2:a8:2e:ab:c7:49:6a:79:ef:ca:ce:53:bb: 34:1b:1d:33:a0:f6:e8:51:b0:1a:20:8e:f6:92:4a: 35:47:50:c9:d9:a6:69:52:cb:39:c3:10:26:d7:87: e0:8b:87:85:a8:43:ce:2b:06:0c:66:22:98:8a:b5: 0b:71:14:07:db:5e:45:36:eb:bb:f8:74:be:fd:7e: 45:e1:f1:21:23:02:a4:72:db:b1:f2:a0:22:85:78: 97:50:ce:df:72:da:13:37:f2:50:75:a4:21:f5:1a: bb:56:b1:e4:3a:42:0c:48:d6:38:dc:88:24:5e:51: 60:e8:b5:f2:99:6c:4b:f2:df:db:0e:aa:27:68:d5: b9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:60:05:A6:8D:8A:FA:72:24:2A:95:F4:E8:25:E6:E9:1B:C5:62:6D X509v3 Authority Key Identifier: keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:dc:b1:34:cc:e3:68:c9:a8:01:fc:db:62:53:15:0a:0a:5a: 28:14:02:8d:2e:c5:5a:48:36:aa:6c:3b:62:a2:5f:a9:e6:de: 63:92:d0:8d:cf:61:19:df:71:fb:cf:57:13:34:0a:4c:16:1a: 47:7b:1d:81:ef:42:5b:81:20:6f:b8:d8:a2:b3:66:00:dc:99: 74:aa:14:da:30:e1:51:85:5c:e8:b4:7f:b1:9f:6b:83:d6:e4: 9e:7b:fd:6e:40:ac:2f:a0:4a:be:71:2f:db:c2:90:8f:e0:2b: a3:8c:0d:12:54:fc:ea:4f:0b:44:63:0a:ad:2e:10:37:dc:95: 82:68:dd:da:a7:9b:0e:1a:c7:d0:0f:2a:dd:80:c1:6e:dc:78: 07:c4:19:fb:70:9e:5c:7f:2b:2d:da:23:0f:a4:43:23:ad:ad: 10:fa:84:6c:26:cd:a2:24:6b:73:10:39:8b:37:f4:85:77:c4: 02:12:89:e6:66:b7:e9:8a:b5:a6:4b:07:75:f1:27:44:9c:37: ec:68:2d:d6:e4:bc:6c:38:c2:04:b5:38:78:23:04:fb:ba:61: de:59:14:73:2b:ca:80:f7:c5:fe:6f:88:30:f3:1a:a1:9c:22: 3d:49:e3:1c:9e:58:d2:46:d4:ef:b4:5e:48:8d:8f:25:ae:4a: 38:f0:9a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rlycgm7FI9YHhQGmm9m4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDJlNzU3OGFhYzk0ZjQyOTYwYTc4MGQzOTk2ZGE4YmI0 Njk0NzcwHhcNMjUxMjA2MjIwMDM2WhcNMjUxMjA3MjIwMDM2WjAzMTEwLwYDVQQD Eyg3MDYwMDVhNjhkOGFmYTcyMjQyYTk1ZjRlODI1ZTZlOTFiYzU2MjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+MG6IvIONoPn8WsJmNPyUnZxro4 R1YmMFS2Wzaxpwub3sTXwBBORYLAy8u9kLhMJmY29ixlBIDBhSX7eU3MCvm2dSM9 CSQnV8vJ57dPHmoG01Rob6ezYvkedfHiOEDTuUYRhiw5gi9msh2/1x8c6DKBMg0D F+8cV7KoLqvHSWp578rOU7s0Gx0zoPboUbAaII72kko1R1DJ2aZpUss5wxAm14fg i4eFqEPOKwYMZiKYirULcRQH215FNuu7+HS+/X5F4fEhIwKkctux8qAihXiXUM7f ctoTN/JQdaQh9Rq7VrHkOkIMSNY43IgkXlFg6LXymWxL8t/bDqonaNW5aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBgBaaNivpyJCqV9Ogl5ukbxWJtMB8GA1UdIwQY MBaAFETS51eKrJT0KWCngNOZbai7RpR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2Qt ZjZmZDZiZDg1N2I4LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2QtZjZmZDZiZDg1N2I4 LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNyxNMzj aMmoAfzbYlMVCgpaKBQCjS7FWkg2qmw7YqJfqebeY5LQjc9hGd9x+89XEzQKTBYa R3sdge9CW4Egb7jYorNmANyZdKoU2jDhUYVc6LR/sZ9rg9bknnv9bkCsL6BKvnEv 28KQj+Aro4wNElT86k8LRGMKrS4QN9yVgmjd2qebDhrH0A8q3YDBbtx4B8QZ+3Ce XH8rLdojD6RDI62tEPqEbCbNoiRrcxA5izf0hXfEAhKJ5ma36Yq1pksHdfEnRJw3 7Ggt1uS8bDjCBLU4eCME+7ph3lkUcyvKgPfF/m+IMPMaoZwiPUnjHJ5Y0kbU77Re SI2PJa5KOPCaZw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:31 2025 by rpki-client