This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json) Hash identifier: 8TU4EbsIR+KudU78RHMpOIeBbcKlMrNK40zEQm+kVCI= Subject key identifier: 52:D3:12:25:51:C5:5F:FC:CA:CE:C7:55:0B:52:7B:8B:CC:88:A5:04 Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48 Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148 Certificate serial: 019AF23FEDA2400260C65A4A10D43E6061E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 06:01:07 +0000 Manifest next update: Sun 07 Dec 2025 06:01:07 +0000 Files and hashes: 1: MsdUQCagTDHd8Si78BPDmp_WpZ8.roa (hash: k0m/eSaWjhvcNX6cbMLf7bH/cSi8h0RiGTdFIrsyBkg=) 2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: N524A1jovv5UsuoZh0u2I6pmo1ib4iotkbTCE/sXGRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ed:a2:40:02:60:c6:5a:4a:10:d4:3e:60:61:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148 Validity Not Before: Dec 6 06:01:07 2025 GMT Not After : Dec 7 06:01:07 2025 GMT Subject: CN=52d3122551c55ffccacec7550b527b8bcc88a504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:32:3f:96:6e:6d:ac:18:ae:3c:72:bd:a8: 6b:00:4b:16:ae:a0:be:4d:bb:97:29:98:c3:58:45: 60:3c:9d:2a:e1:c9:f3:c6:4f:f6:d1:1f:f1:a9:6b: b6:a6:3c:5c:24:28:25:b1:40:9e:cd:b7:da:02:d9: 18:a5:ae:e7:cc:ff:a8:5e:d2:c1:d9:fd:44:a7:70: 44:43:d9:4e:33:14:92:db:3e:0e:6a:74:16:9a:5e: 0e:3a:38:8d:7d:08:47:ee:0c:97:c1:e2:83:5f:74: 69:e3:36:0e:c8:8d:da:df:5e:66:02:bd:a7:1c:57: 88:13:1d:4f:88:d3:f7:9f:65:e0:58:89:de:9c:0a: b3:64:4d:5d:84:cd:5e:94:36:38:f3:e2:e5:a9:1e: 76:58:ca:94:3f:16:53:73:1c:8d:40:72:e0:83:49: ea:b7:db:82:01:47:70:8e:3e:0e:c3:4d:8b:84:72: a3:5d:ae:d0:25:15:b5:49:06:17:fe:7c:d2:c0:7c: ac:98:61:1f:ff:2c:48:09:72:96:ab:9d:ff:8d:c5: 37:d3:55:97:3d:e8:99:1b:5d:73:3e:bb:28:97:07: a5:66:4c:24:03:70:e1:77:82:e3:e4:61:87:04:88: e0:d0:31:46:77:1d:77:9d:6b:12:63:2b:11:4d:32: 64:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D3:12:25:51:C5:5F:FC:CA:CE:C7:55:0B:52:7B:8B:CC:88:A5:04 X509v3 Authority Key Identifier: keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ed:f1:a8:b7:ac:73:50:28:42:55:e5:11:e4:cc:13:2c:6d: 93:e7:5c:25:b7:68:48:c9:b8:5d:af:c8:6b:45:bd:de:ef:21: d6:cf:e9:78:a8:36:c3:7a:d3:a9:d1:41:6a:8f:71:a8:60:bc: fc:df:05:69:06:62:76:ef:88:7f:ea:e9:d3:e6:27:3f:f8:47: 41:a9:f9:86:01:ee:d5:99:38:62:1c:dd:be:f4:28:63:13:d1: c7:44:19:e7:b3:2d:96:04:1d:28:57:9f:de:58:85:83:5d:a8: de:5e:21:ad:23:2f:8c:54:49:6d:67:96:ec:86:84:be:df:b1: cc:1f:a2:78:47:b3:0d:cf:5e:69:9f:06:6a:de:0a:60:80:d4: 42:c3:95:ef:a9:36:eb:f5:62:6e:51:ad:08:69:d3:8c:f0:a9: 18:ea:36:04:c2:70:e4:0d:28:7a:bc:ae:b2:3c:17:d8:e0:8f: 64:0a:68:5b:1d:f6:ef:6a:76:c3:be:8b:cd:cb:04:38:18:4c: 94:f2:f9:36:c1:d6:d3:f4:73:28:c5:c2:94:1a:c4:ec:80:d1: 6f:70:9d:bf:fa:2d:10:21:29:c1:2b:e4:ff:d3:6b:0d:52:52: 64:6f:ae:f7:79:b5:87:b9:0b:65:a2:61:24:85:6e:a1:b4:30: 22:38:a4:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+2iQAJgxlpKENQ+YGHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTNiNDNmNjQ3ZTFlNzcxNGNkMTMwNzY0Y2JiYzQ4MTRl N2ExNDgwHhcNMjUxMjA2MDYwMTA3WhcNMjUxMjA3MDYwMTA3WjAzMTEwLwYDVQQD Eyg1MmQzMTIyNTUxYzU1ZmZjY2FjZWM3NTUwYjUyN2I4YmNjODhhNTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC8yP5ZubawYrjxyvahrAEsWrqC+ TbuXKZjDWEVgPJ0q4cnzxk/20R/xqWu2pjxcJCglsUCezbfaAtkYpa7nzP+oXtLB 2f1Ep3BEQ9lOMxSS2z4OanQWml4OOjiNfQhH7gyXweKDX3Rp4zYOyI3a315mAr2n HFeIEx1PiNP3n2XgWInenAqzZE1dhM1elDY48+LlqR52WMqUPxZTcxyNQHLgg0nq t9uCAUdwjj4Ow02LhHKjXa7QJRW1SQYX/nzSwHysmGEf/yxICXKWq53/jcU301WX PeiZG11zPrsolwelZkwkA3Dhd4Lj5GGHBIjg0DFGdx13nWsSYysRTTJkMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLTEiVRxV/8ys7HVQtSe4vMiKUEMB8GA1UdIwQY MBaAFESjtD9kfh53FM0TB2TLvEgU56FIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgt YTNjNTM5ZjBiNmQyLzEvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgtYTNjNTM5ZjBiNmQy LzEvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+3xqLes c1AoQlXlEeTMEyxtk+dcJbdoSMm4Xa/Ia0W93u8h1s/peKg2w3rTqdFBao9xqGC8 /N8FaQZidu+If+rp0+YnP/hHQan5hgHu1Zk4YhzdvvQoYxPRx0QZ57MtlgQdKFef 3liFg12o3l4hrSMvjFRJbWeW7IaEvt+xzB+ieEezDc9eaZ8Gat4KYIDUQsOV76k2 6/ViblGtCGnTjPCpGOo2BMJw5A0oeryusjwX2OCPZApoWx3272p2w76LzcsEOBhM lPL5NsHW0/RzKMXClBrE7IDRb3Cdv/otECEpwSvk/9NrDVJSZG+u93m1h7kLZaJh JIVuobQwIjikpA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:27 2025 by rpki-client