This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json) Hash identifier: 4dszEdrzK+MW6oG3nuQdMP1DhEJGGH1C02YIC+Uqx28= Subject key identifier: 8D:2F:E3:B8:6E:4A:91:79:FB:18:5A:20:C4:99:63:35:58:5C:71:5B Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52 Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52 Certificate serial: 019AF1D20C80072F8B6B41AFA0FC35CE1AFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft Manifest number: 059B Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: WFEq8mtCtO9jrSVJLf8bCuzLOP6uZx2jFTn3cvC52lc=) 2: mpcpZSVPqHluaz87WJ0uN-9FKN0.roa (hash: 7rifYSX6qCoq1SQ259BqQ0Nwhu4OmIky6bHMjTs3HBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0c:80:07:2f:8b:6b:41:af:a0:fc:35:ce:1a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=8d2fe3b86e4a9179fb185a20c4996335585c715b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:10:ae:ef:ac:ef:01:58:92:a1:3b:89:ac:c9: fb:f3:42:ad:66:b3:92:f7:c2:db:0e:bd:78:f3:06: 0e:87:5c:99:a3:37:0d:e3:a5:be:8a:0e:ff:e2:d4: 08:e6:40:a6:04:5c:11:4c:24:62:60:b1:a3:7e:c1: 31:71:51:9f:cf:d1:df:6b:78:8a:22:51:61:a1:0d: 0f:50:a9:e7:77:2e:a0:76:e2:66:f3:e6:0a:3c:e8: 2f:c0:62:ec:72:de:be:3f:05:5a:b3:2b:22:e0:91: d5:e2:31:1e:e9:a2:40:c1:53:76:2c:9b:35:db:8e: 70:b4:9d:b0:16:da:cd:a4:06:87:f3:3f:8f:6d:79: 22:d3:bf:42:21:c3:58:96:c2:95:13:c5:f4:50:aa: 13:31:23:63:01:dd:7d:fd:bf:99:26:17:b1:a1:f6: fd:c6:8e:1d:f1:f3:b2:5b:c9:40:12:54:2e:99:37: 14:51:83:91:4d:4d:3c:4f:a7:89:c3:c3:59:80:a7: ff:ca:df:da:ca:1e:23:18:10:b6:2a:88:c9:ab:82: 6e:04:44:95:b5:5f:93:e0:87:d1:bc:f3:93:ce:21: 7a:a8:5a:e4:1f:44:8d:58:3b:e0:13:dc:8e:e2:15: eb:4a:fc:c0:34:cf:41:99:7d:7c:ee:48:6d:5f:d1: 95:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2F:E3:B8:6E:4A:91:79:FB:18:5A:20:C4:99:63:35:58:5C:71:5B X509v3 Authority Key Identifier: keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:09:c4:89:bb:30:82:81:a4:5a:24:15:9c:6c:d6:e8:ac:6f: 5e:86:22:1c:46:db:4e:76:0a:79:ca:a7:4a:e2:64:e6:e9:40: 05:f8:78:f8:cd:ff:0a:cd:58:29:81:01:a0:f6:e6:22:ca:fa: 89:41:dc:b0:3e:0a:25:02:02:9c:e8:77:03:18:d2:67:b3:73: f9:63:e9:d4:d8:31:7f:91:4c:6e:47:6c:41:d6:93:9c:4b:94: 1e:2d:22:6f:39:85:93:1c:1f:5c:60:8c:3e:dc:dd:b9:04:ca: 7b:01:4d:b8:86:3b:a8:59:10:ca:b8:33:ad:71:86:80:84:c0: 41:6c:d6:ea:b7:59:c1:2f:28:81:9d:ed:96:85:ee:fe:41:c7: 06:be:c1:cb:1c:d5:ac:8f:ac:9b:8c:41:08:38:11:49:5f:a9: 48:a9:c9:40:d0:a4:d6:b8:11:3f:44:d8:65:25:b8:a2:9d:54: 69:6d:46:f7:9d:ab:33:64:2f:69:50:14:d3:59:f0:70:fb:c3: fe:ff:6f:5a:17:6b:49:e0:42:1b:9d:53:ed:63:65:5d:61:3d: 18:33:ae:bf:d1:98:cb:ee:15:10:e0:f5:7b:d1:2e:b9:5f:87: 37:2a:be:b6:e2:ac:50:c1:4c:76:ee:15:5a:53:6b:8b:5d:d3: f5:95:63:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gyABy+La0GvoPw1zhr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDVjOWM1OGQ1YTQ5OTliNWRjZTllMDcwZDMyZjQ4OGUz MzFmNTIwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD Eyg4ZDJmZTNiODZlNGE5MTc5ZmIxODVhMjBjNDk5NjMzNTU4NWM3MTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxCu76zvAViSoTuJrMn780KtZrOS 98LbDr148wYOh1yZozcN46W+ig7/4tQI5kCmBFwRTCRiYLGjfsExcVGfz9Hfa3iK IlFhoQ0PUKnndy6gduJm8+YKPOgvwGLsct6+PwVasysi4JHV4jEe6aJAwVN2LJs1 245wtJ2wFtrNpAaH8z+PbXki079CIcNYlsKVE8X0UKoTMSNjAd19/b+ZJhexofb9 xo4d8fOyW8lAElQumTcUUYORTU08T6eJw8NZgKf/yt/ayh4jGBC2KojJq4JuBESV tV+T4IfRvPOTziF6qFrkH0SNWDvgE9yO4hXrSvzANM9BmX187khtX9GVfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0v47huSpF5+xhaIMSZYzVYXHFbMB8GA1UdIwQY MBaAFEZFycWNWkmZtdzp4HDTL0iOMx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtYSnhZMWFTWm0xM09uZ2NOTXZTSTR6SDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82YzUzMzEtZGMxYi00ZjhjLTlkM2Qt MjhiZjFkMzNhYTkwLzEvUmtYSnhZMWFTWm0xM09uZ2NOTXZTSTR6SDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82YzUzMzEtZGMxYi00ZjhjLTlkM2QtMjhiZjFkMzNhYTkw LzEvUmtYSnhZMWFTWm0xM09uZ2NOTXZTSTR6SDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwnEibsw goGkWiQVnGzW6KxvXoYiHEbbTnYKecqnSuJk5ulABfh4+M3/Cs1YKYEBoPbmIsr6 iUHcsD4KJQICnOh3AxjSZ7Nz+WPp1Ngxf5FMbkdsQdaTnEuUHi0ibzmFkxwfXGCM PtzduQTKewFNuIY7qFkQyrgzrXGGgITAQWzW6rdZwS8ogZ3tloXu/kHHBr7ByxzV rI+sm4xBCDgRSV+pSKnJQNCk1rgRP0TYZSW4op1UaW1G952rM2QvaVAU01nwcPvD /v9vWhdrSeBCG51T7WNlXWE9GDOuv9GYy+4VEOD1e9EuuV+HNyq+tuKsUMFMdu4V WlNri13T9ZVjoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:07 2025 by rpki-client