This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft File: ROkQGinJOPhPhgRda-XfSz9Re9E.mft (raw, json) Hash identifier: DK5kJVzCm9Q9Ijor1ec095ZW2Ww5SJbw5oyE0XFeec0= Subject key identifier: F5:EA:38:BA:B0:5D:FF:77:10:59:2A:46:6E:46:52:98:DA:03:06:B4 Authority key identifier: 44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1 Certificate issuer: /CN=44e9101a29c938f84f86045d6be5df4b3f517bd1 Certificate serial: 019AF12DB348FAB8475A2C514378ABCD6D9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft Manifest number: 022B Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: 9Rl0BbPzjGtJ5SxKkQlNSxcKRIA.roa (hash: wlrYCSoZjr9jkjpsQGaOjVzZDExzEHE+3MSzP3WRJC0=) 2: ROkQGinJOPhPhgRda-XfSz9Re9E.crl (hash: b8iJVcp/WESxEpiWD8UA1Wpy3fOdgFC04VrW9TYg/uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b3:48:fa:b8:47:5a:2c:51:43:78:ab:cd:6d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e9101a29c938f84f86045d6be5df4b3f517bd1 Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=f5ea38bab05dff7710592a466e465298da0306b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:8a:e2:7e:72:11:04:c1:b6:aa:d9:33:66: 2c:2a:81:69:f5:61:b2:ad:d4:0d:5c:3d:1a:93:56: 19:6a:21:e0:f0:4e:ba:aa:61:70:71:92:37:81:5d: e2:59:4c:4e:2b:94:4a:a5:d7:bf:05:10:3f:0a:6a: a0:d3:1d:15:73:81:90:93:02:20:85:b8:0e:5d:17: e3:e5:df:24:d8:77:c7:a4:79:ce:96:35:d0:ef:44: 31:58:f2:36:e3:97:50:1d:87:e8:9f:69:56:05:0a: ef:65:be:dc:1f:ca:90:1a:21:1b:eb:ef:aa:a0:fd: 04:27:c2:6c:bf:13:fc:cc:e0:c5:47:7e:e5:b6:a0: eb:25:de:d0:18:8c:9e:e7:2f:aa:df:f8:1c:d9:02: 9b:84:38:ec:92:1a:32:8e:27:f4:1a:27:01:57:91: 0a:98:12:ff:86:67:0d:c0:4e:74:a6:99:6a:07:da: 52:85:ac:15:8b:a9:9d:60:1c:ec:0c:c3:69:b9:43: 44:d0:f3:89:d0:38:03:bd:40:2a:30:a8:56:b5:0f: 2d:e1:dd:6f:7e:64:86:c4:dc:5a:a3:c8:b4:18:e0: 23:28:6f:32:ec:e5:29:66:79:5b:e1:2a:b8:b6:e8: 2d:3b:d5:fb:b4:37:67:08:c9:56:01:17:0c:52:4f: 1f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EA:38:BA:B0:5D:FF:77:10:59:2A:46:6E:46:52:98:DA:03:06:B4 X509v3 Authority Key Identifier: keyid:44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c0:61:7b:1e:7e:5e:82:dd:6f:fc:c0:b9:66:f6:0c:0d:01: 66:18:5e:48:a3:97:cd:69:5b:f1:0c:d6:42:cd:34:74:68:3d: 5e:8e:80:ff:95:fb:dc:a5:56:34:04:35:8f:c7:69:2b:2c:bf: 0f:ca:fe:86:6f:34:34:94:06:fa:63:e3:99:d7:0b:70:9e:2f: f5:d9:90:a0:bf:3f:89:1d:0a:3c:4f:95:cd:91:e9:c7:93:b0: a7:b6:2a:b3:35:64:c2:fe:4d:47:c5:9b:e9:6c:d2:97:c9:94: af:1a:9d:25:14:00:ac:d8:d2:95:6d:a4:94:76:e3:41:4f:f4: f3:41:8a:2f:7d:c6:de:77:42:93:b9:ac:ad:3b:8c:63:61:a5: 6a:ae:57:5d:c3:fe:0a:72:04:9c:39:9a:bb:dd:56:f9:69:e2: 83:80:b2:01:dc:be:6d:6b:a4:a0:c2:ae:f0:69:9b:9d:54:e2: c8:dc:cf:3d:5d:5f:55:58:0a:da:14:61:0f:13:6b:40:1f:b9: b3:34:97:bc:7e:f8:ee:4f:31:1b:bf:60:fd:db:fb:e4:be:59: c6:83:3e:21:d6:45:01:7a:a3:ce:df:1c:5d:7a:38:1b:f5:ed: 27:29:21:af:3f:25:2f:8a:00:31:4c:87:19:0a:8c:4e:1e:9a: 96:5f:49:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbNI+rhHWixRQ3irzW2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTkxMDFhMjljOTM4Zjg0Zjg2MDQ1ZDZiZTVkZjRiM2Y1 MTdiZDEwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD EyhmNWVhMzhiYWIwNWRmZjc3MTA1OTJhNDY2ZTQ2NTI5OGRhMDMwNmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraSK4n5yEQTBtqrZM2YsKoFp9WGy rdQNXD0ak1YZaiHg8E66qmFwcZI3gV3iWUxOK5RKpde/BRA/Cmqg0x0Vc4GQkwIg hbgOXRfj5d8k2HfHpHnOljXQ70QxWPI245dQHYfon2lWBQrvZb7cH8qQGiEb6++q oP0EJ8JsvxP8zODFR37ltqDrJd7QGIye5y+q3/gc2QKbhDjskhoyjif0GicBV5EK mBL/hmcNwE50pplqB9pShawVi6mdYBzsDMNpuUNE0POJ0DgDvUAqMKhWtQ8t4d1v fmSGxNxao8i0GOAjKG8y7OUpZnlb4Sq4tugtO9X7tDdnCMlWARcMUk8flwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXqOLqwXf93EFkqRm5GUpjaAwa0MB8GA1UdIwQY MBaAFETpEBopyTj4T4YEXWvl30s/UXvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgt ZGYwMWI0ZWIyNWU5LzEvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgtZGYwMWI0ZWIyNWU5 LzEvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8Bhex5+ XoLdb/zAuWb2DA0BZhheSKOXzWlb8QzWQs00dGg9Xo6A/5X73KVWNAQ1j8dpKyy/ D8r+hm80NJQG+mPjmdcLcJ4v9dmQoL8/iR0KPE+VzZHpx5Owp7YqszVkwv5NR8Wb 6WzSl8mUrxqdJRQArNjSlW2klHbjQU/080GKL33G3ndCk7msrTuMY2Glaq5XXcP+ CnIEnDmau91W+Wnig4CyAdy+bWukoMKu8GmbnVTiyNzPPV1fVVgK2hRhDxNrQB+5 szSXvH747k8xG79g/dv75L5ZxoM+IdZFAXqjzt8cXXo4G/XtJykhrz8lL4oAMUyH GQqMTh6all9JIw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:47 2025 by rpki-client