This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json) Hash identifier: NraJdDQyW/HOuR32ljrYG6n5QoSoVGBiUl8ivWn0xzE= Subject key identifier: BB:2D:04:24:54:24:33:44:79:C2:08:D0:DB:91:12:54:92:1D:88:CF Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4 Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4 Certificate serial: 019B300C22E1D5EE9E70A624E0D9E698D844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft Manifest number: 16E9 Signing time: Thu 18 Dec 2025 06:01:00 +0000 Manifest this update: Thu 18 Dec 2025 06:01:00 +0000 Manifest next update: Fri 19 Dec 2025 06:01:00 +0000 Files and hashes: 1: i0znYyDIsk78QzCDDCTg60lK9ig.roa (hash: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=) 2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: 9MiBg6Ph0B58ELdqt4FbbqX8hzGFpjHTAhjNTOfUSN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:22:e1:d5:ee:9e:70:a6:24:e0:d9:e6:98:d8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4 Validity Not Before: Dec 18 06:01:00 2025 GMT Not After : Dec 19 06:01:00 2025 GMT Subject: CN=bb2d04245424334479c208d0db911254921d88cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:c7:b0:ec:67:64:39:3a:2d:e5:ad:25:0b: a9:87:d2:a5:fa:12:28:68:76:5e:da:94:28:f3:4e: 91:90:c3:1e:cf:9c:4b:8a:07:5b:98:37:5c:92:bc: 48:42:ec:43:10:ac:e2:a9:d2:6a:31:cb:9e:55:49: ab:6c:d1:bd:a0:1e:59:40:93:50:1a:f8:a3:41:c0: e0:75:76:1a:32:f1:8b:d5:b5:88:72:be:0a:fd:81: 50:81:fe:d6:26:4e:3d:74:3a:f6:6e:a0:36:5c:da: f9:ed:42:59:e8:c6:0e:19:1b:2d:27:7f:51:85:42: b4:3e:17:b1:e4:2a:81:25:73:7a:b0:65:a8:de:e7: f6:d4:2a:9d:2c:a2:10:ae:62:e3:17:c8:2c:bb:31: ee:2f:fd:f9:b7:b2:31:e2:cc:d9:a3:55:80:a4:4e: 4e:41:5e:69:df:ea:6e:4b:95:4c:22:39:2d:2c:71: e3:38:48:46:39:cb:ca:87:35:7f:13:c2:31:5f:6e: 6c:c7:b9:9e:e5:00:78:d2:df:66:4d:96:39:0e:be: 94:28:e6:63:2d:f1:0a:bb:1e:06:5e:92:a0:be:c0: a9:e7:28:31:07:1e:a1:fe:dd:70:44:16:2b:39:65: 1c:6d:ff:d3:1f:c5:51:f9:e1:5b:01:ac:e2:4b:c8: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2D:04:24:54:24:33:44:79:C2:08:D0:DB:91:12:54:92:1D:88:CF X509v3 Authority Key Identifier: keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d3:96:f1:bf:7f:aa:86:0f:11:a2:80:84:e1:e0:42:52:c8: 8d:b8:84:eb:7d:2e:d5:84:c5:16:cf:48:d6:4c:3b:d0:14:23: bf:53:ad:0d:8f:83:20:a3:e7:a4:4e:3b:86:79:e4:f5:95:11: 69:7e:f4:af:44:a1:84:b1:29:0c:d8:f9:53:3a:40:ed:f3:5d: 64:88:e1:09:98:01:79:08:2e:42:d2:db:ff:3b:03:67:ee:38: b2:96:aa:31:c4:43:e3:4a:ba:d3:df:09:22:4c:d4:f7:e9:4b: 1f:f0:ed:c0:65:05:1f:cd:5b:e2:96:7f:f9:03:02:4d:3d:94: 4a:db:a0:0c:4e:4e:74:03:4e:0e:09:41:0d:3f:b7:ef:5e:b8: 6a:6e:8a:b3:f8:58:e6:d7:bb:03:97:4e:55:68:bb:d9:27:2a: 6a:ae:cf:4c:60:1e:24:45:0d:5a:d8:8e:06:5a:58:7c:4a:99: 93:91:40:ab:3d:d3:b3:b0:48:42:b5:e0:ac:d2:7c:d8:be:e6: 51:d5:9a:3c:e0:85:3a:88:0d:82:bd:fd:48:74:b7:c4:8a:3f: e0:24:8a:f2:ce:c2:eb:57:63:2d:ab:00:db:75:27:1b:25:54: c0:5c:cd:44:83:10:6b:67:a4:c5:6b:f5:f0:cf:9d:0b:1f:60: 0c:5a:79:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDCLh1e6ecKYk4NnmmNhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzgzNjg1OWM2Y2UxODY5MzQwZWRmMWYyNzM3MDliODA5 NGQ5ZDQwHhcNMjUxMjE4MDYwMTAwWhcNMjUxMjE5MDYwMTAwWjAzMTEwLwYDVQQD EyhiYjJkMDQyNDU0MjQzMzQ0NzljMjA4ZDBkYjkxMTI1NDkyMWQ4OGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ArHsOxnZDk6LeWtJQuph9Kl+hIo aHZe2pQo806RkMMez5xLigdbmDdckrxIQuxDEKziqdJqMcueVUmrbNG9oB5ZQJNQ GvijQcDgdXYaMvGL1bWIcr4K/YFQgf7WJk49dDr2bqA2XNr57UJZ6MYOGRstJ39R hUK0Phex5CqBJXN6sGWo3uf21CqdLKIQrmLjF8gsuzHuL/35t7Ix4szZo1WApE5O QV5p3+puS5VMIjktLHHjOEhGOcvKhzV/E8IxX25sx7me5QB40t9mTZY5Dr6UKOZj LfEKux4GXpKgvsCp5ygxBx6h/t1wRBYrOWUcbf/TH8VR+eFbAaziS8hLxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLstBCRUJDNEecII0NuRElSSHYjPMB8GA1UdIwQY MBaAFJE4NoWcbOGGk0Dt8fJzcJuAlNnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lOGYzNDQtZWRiMi00NDAwLWIzY2Et NTI3YWM1NGMyMzU3LzEva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lOGYzNDQtZWRiMi00NDAwLWIzY2EtNTI3YWM1NGMyMzU3 LzEva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNOW8b9/ qoYPEaKAhOHgQlLIjbiE630u1YTFFs9I1kw70BQjv1OtDY+DIKPnpE47hnnk9ZUR aX70r0ShhLEpDNj5UzpA7fNdZIjhCZgBeQguQtLb/zsDZ+44spaqMcRD40q6098J IkzU9+lLH/DtwGUFH81b4pZ/+QMCTT2UStugDE5OdANODglBDT+37164am6Ks/hY 5te7A5dOVWi72Scqaq7PTGAeJEUNWtiOBlpYfEqZk5FAqz3Ts7BIQrXgrNJ82L7m UdWaPOCFOogNgr39SHS3xIo/4CSK8s7C61djLasA23UnGyVUwFzNRIMQa2ekxWv1 8M+dCx9gDFp58A== -----END CERTIFICATE-----Generated at Thu Dec 18 15:32:09 2025 by rpki-client