This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json) Hash identifier: 8c3o0dcwRBQMXLca9vk6Tv4ei0FHKnx5aMT1qWVaYYE= Subject key identifier: 78:C0:CC:2E:20:09:07:D5:2B:9D:FE:D3:63:1E:5E:98:23:E2:4E:8F Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57 Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57 Certificate serial: 019B4091F6DF4B93BD2C353F7BF26F54C96E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 11:01:05 +0000 Manifest this update: Sun 21 Dec 2025 11:01:05 +0000 Manifest next update: Mon 22 Dec 2025 11:01:05 +0000 Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=) 2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=) 3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: H1+HT9CReIzzUjq5VPfy1WmvMlw+vGJbXNmpeSut6Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:f6:df:4b:93:bd:2c:35:3f:7b:f2:6f:54:c9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57 Validity Not Before: Dec 21 11:01:05 2025 GMT Not After : Dec 22 11:01:05 2025 GMT Subject: CN=78c0cc2e200907d52b9dfed3631e5e9823e24e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:c2:90:46:5a:5f:aa:4f:91:b8:11:43:36: e2:04:bb:9c:8b:89:64:ef:d6:8f:90:77:4f:8d:13: 20:60:c8:7a:7b:e5:ab:da:8f:f1:3d:07:65:3c:b5: c5:3b:8a:ea:5e:a8:3f:53:2e:29:9c:30:a0:0e:67: ed:4d:e6:35:3a:a4:34:e9:01:82:54:fb:9b:29:ed: b0:59:10:65:61:9b:4f:65:a4:b2:cd:43:4b:df:3c: 5d:94:38:8f:5d:be:62:76:e0:e7:f1:ca:09:80:e0: ec:2a:3e:b4:91:83:e1:92:46:00:a2:95:09:ca:57: 29:d3:2d:b1:9f:ad:0c:d6:3f:d8:6a:86:2d:06:2b: 76:a5:f5:17:d7:ee:b8:85:4a:23:f6:2b:16:4e:88: df:e7:ae:f7:59:d2:d7:a2:ea:80:fc:4b:f6:6c:12: e9:f4:78:f4:09:1d:52:c6:2a:ea:ab:46:8f:aa:b9: ed:4f:ae:82:57:b5:bb:9a:a7:c5:4a:dd:bd:bc:36: e6:09:c0:bf:39:ec:1d:aa:43:31:d3:93:13:57:32: ff:ac:ce:db:a9:39:6f:b1:22:dc:1a:f9:7d:a3:d8: 78:92:fe:3f:8b:c8:a1:ea:52:b2:ad:01:67:0c:ba: e4:1c:a9:c7:5b:66:74:06:3e:e6:51:3a:d2:1a:bf: b7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C0:CC:2E:20:09:07:D5:2B:9D:FE:D3:63:1E:5E:98:23:E2:4E:8F X509v3 Authority Key Identifier: keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c9:9e:8f:6c:f7:e1:5d:2f:00:55:69:c4:83:b4:bd:5e:dc: df:7f:98:0f:dd:b0:5f:05:b5:68:fe:d4:21:d4:79:94:29:df: db:ad:ca:bf:21:6a:0e:05:e6:99:14:00:ae:13:4c:82:ec:57: 9c:11:fa:ad:40:55:4b:ac:87:07:0a:d6:a3:d4:56:f7:f1:86: fe:1f:95:89:4a:c8:81:57:ee:49:16:fd:16:90:fd:9b:ec:c6: df:37:17:69:ad:e0:5f:7b:70:e3:10:0d:82:0a:4d:99:50:3d: 78:e1:85:04:f7:6b:e3:6e:ab:a4:3f:56:7c:4e:d8:ce:c3:6e: c1:2f:49:fc:47:de:7c:7d:db:80:ba:d3:38:c5:44:8b:ec:26: 87:4a:a0:3e:81:5a:ff:c0:d4:ca:c8:32:1e:f7:34:45:3e:86: aa:df:5b:9a:3a:5f:b0:47:f2:a9:33:a2:8d:0e:ad:d2:d4:8e: 0e:b6:b0:14:0b:f1:e5:1f:c6:67:03:08:46:21:85:29:4b:5b: 04:94:63:cc:4e:a1:71:2c:69:a3:20:c7:8d:18:64:26:76:62: 92:e9:6f:58:e4:e0:54:40:e4:ba:19:aa:33:9c:47:cb:fb:39: 8b:69:62:25:17:02:54:ab:15:dd:b2:bc:44:82:78:64:e3:47: 0b:48:d6:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkfbfS5O9LDU/e/JvVMluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl MTlhNTcwHhcNMjUxMjIxMTEwMTA1WhcNMjUxMjIyMTEwMTA1WjAzMTEwLwYDVQQD Eyg3OGMwY2MyZTIwMDkwN2Q1MmI5ZGZlZDM2MzFlNWU5ODIzZTI0ZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlXCkEZaX6pPkbgRQzbiBLuci4lk 79aPkHdPjRMgYMh6e+Wr2o/xPQdlPLXFO4rqXqg/Uy4pnDCgDmftTeY1OqQ06QGC VPubKe2wWRBlYZtPZaSyzUNL3zxdlDiPXb5iduDn8coJgODsKj60kYPhkkYAopUJ ylcp0y2xn60M1j/YaoYtBit2pfUX1+64hUoj9isWTojf5673WdLXouqA/Ev2bBLp 9Hj0CR1Sxirqq0aPqrntT66CV7W7mqfFSt29vDbmCcC/OewdqkMx05MTVzL/rM7b qTlvsSLcGvl9o9h4kv4/i8ih6lKyrQFnDLrkHKnHW2Z0Bj7mUTrSGr+3XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjAzC4gCQfVK53+02MeXpgj4k6PMB8GA1UdIwQY MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt YjljYTc1NTVjMmM1LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1 LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMmej2z3 4V0vAFVpxIO0vV7c33+YD92wXwW1aP7UIdR5lCnf263KvyFqDgXmmRQArhNMguxX nBH6rUBVS6yHBwrWo9RW9/GG/h+ViUrIgVfuSRb9FpD9m+zG3zcXaa3gX3tw4xAN ggpNmVA9eOGFBPdr426rpD9WfE7YzsNuwS9J/EfefH3bgLrTOMVEi+wmh0qgPoFa /8DUysgyHvc0RT6Gqt9bmjpfsEfyqTOijQ6t0tSODrawFAvx5R/GZwMIRiGFKUtb BJRjzE6hcSxpoyDHjRhkJnZikulvWOTgVEDkuhmqM5xHy/s5i2liJRcCVKsV3bK8 RIJ4ZONHC0jWKw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:16 2025 by rpki-client