This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json) Hash identifier: s0DcniwClGs8qCSUq0RCsGDe6Lxs7u4EUhE7OVUo3vo= Subject key identifier: E4:5B:92:91:F3:EB:56:21:EE:41:54:57:6B:16:D7:D5:75:40:52:BD Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51 Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351 Certificate serial: 019B3EDA734DAFBDF97B882AF2A931838E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft Manifest number: 0657 Signing time: Sun 21 Dec 2025 03:01:02 +0000 Manifest this update: Sun 21 Dec 2025 03:01:02 +0000 Manifest next update: Mon 22 Dec 2025 03:01:02 +0000 Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=) 2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=) 3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: r4Fvz3cIvr+BOCUChWPR49ZmwtOKmFwxnM1oazeC6oY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:73:4d:af:bd:f9:7b:88:2a:f2:a9:31:83:8e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351 Validity Not Before: Dec 21 03:01:02 2025 GMT Not After : Dec 22 03:01:02 2025 GMT Subject: CN=e45b9291f3eb5621ee4154576b16d7d5754052bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:5a:9c:4a:5e:2c:de:26:2a:b1:88:bc:b7: 0f:a4:4b:7f:bf:6b:89:57:3e:f6:5b:16:7a:cc:bc: 48:41:88:ea:d2:ea:45:20:48:60:f7:7c:db:93:a1: 45:59:d3:c7:07:d7:bf:38:45:f6:dd:16:6d:d1:af: 01:b1:a8:9e:b5:40:de:c2:78:43:eb:5d:b6:ce:ad: 78:f1:e4:91:02:0b:4d:d9:e0:78:dc:1d:ae:56:95: dc:1a:a5:ce:18:87:7d:59:b7:b4:bf:78:d8:75:db: 1f:1f:6d:19:f6:12:99:e0:72:fd:81:a8:b2:d4:db: 8a:76:14:6b:e1:e1:33:3f:c3:56:54:47:35:08:87: 1f:7b:66:30:69:fe:9a:99:20:62:aa:b2:37:26:2c: 02:99:31:04:b3:6b:87:f5:a7:48:e0:7a:8e:6c:8b: 8b:0a:af:61:cf:78:0c:7f:8b:c7:28:13:7c:f4:ac: 87:cf:82:5e:8a:fa:74:49:41:7d:b4:88:46:4b:52: 64:31:a4:de:2b:43:6d:6d:a9:34:c6:2d:07:64:f1: 77:8f:71:1a:9c:80:fb:99:f7:43:c1:de:fe:5a:0e: 4e:0d:42:27:32:3a:de:44:51:8e:09:ab:5b:e7:c9: 82:f7:ad:43:90:f4:0e:c1:ae:5e:6b:63:01:6d:06: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5B:92:91:F3:EB:56:21:EE:41:54:57:6B:16:D7:D5:75:40:52:BD X509v3 Authority Key Identifier: keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c4:72:76:49:89:e3:e1:a9:84:7c:69:47:8f:f5:66:4c:82: d4:00:1b:6c:0d:b3:0c:6b:b3:8a:5a:21:43:6b:c1:63:6a:e1: 6f:82:9b:77:dd:b8:7d:8e:09:ff:ec:97:46:4d:94:9a:34:89: 91:c0:19:07:cf:36:3f:a2:43:55:7a:89:c1:bc:01:4f:49:26: 70:bb:2c:a5:92:36:d4:9b:db:82:44:d9:59:3c:a3:0f:b1:34: d6:86:f8:ec:8c:18:65:70:80:48:83:c9:96:b4:8f:47:76:37: f5:d5:16:35:1c:9c:75:70:e8:d6:5d:b9:eb:e4:0a:69:a8:07: 64:82:13:34:63:be:94:58:d7:01:72:13:ee:8e:99:2e:68:1b: 29:74:66:69:d3:d1:76:29:05:4f:99:8d:12:b7:73:b9:36:1c: 5e:e2:36:fa:8c:ab:2a:51:b6:67:eb:97:5b:eb:d0:12:45:a9: 4f:a2:74:49:05:49:a4:fd:c3:bf:37:c4:fa:b7:61:9d:57:1a: f7:93:cd:b8:6e:60:82:4c:7c:10:25:60:ed:1f:b1:b4:04:67: 96:50:fa:2a:51:9f:37:bc:58:e1:6c:30:7e:2e:93:7d:7a:7e: 36:3c:d1:c9:6c:8d:50:5d:bc:2f:23:07:9f:0e:68:72:27:9c: 48:fd:a6:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2nNNr735e4gq8qkxg44cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi MmYzNTEwHhcNMjUxMjIxMDMwMTAyWhcNMjUxMjIyMDMwMTAyWjAzMTEwLwYDVQQD EyhlNDViOTI5MWYzZWI1NjIxZWU0MTU0NTc2YjE2ZDdkNTc1NDA1MmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBlanEpeLN4mKrGIvLcPpEt/v2uJ Vz72WxZ6zLxIQYjq0upFIEhg93zbk6FFWdPHB9e/OEX23RZt0a8BsaietUDewnhD 6122zq148eSRAgtN2eB43B2uVpXcGqXOGId9Wbe0v3jYddsfH20Z9hKZ4HL9gaiy 1NuKdhRr4eEzP8NWVEc1CIcfe2Ywaf6amSBiqrI3JiwCmTEEs2uH9adI4HqObIuL Cq9hz3gMf4vHKBN89KyHz4Jeivp0SUF9tIhGS1JkMaTeK0Ntbak0xi0HZPF3j3Ea nID7mfdDwd7+Wg5ODUInMjreRFGOCatb58mC961DkPQOwa5ea2MBbQahawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORbkpHz61Yh7kFUV2sW19V1QFK9MB8GA1UdIwQY MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8RydkmJ 4+GphHxpR4/1ZkyC1AAbbA2zDGuzilohQ2vBY2rhb4Kbd924fY4J/+yXRk2UmjSJ kcAZB882P6JDVXqJwbwBT0kmcLsspZI21JvbgkTZWTyjD7E01ob47IwYZXCASIPJ lrSPR3Y39dUWNRycdXDo1l256+QKaagHZIITNGO+lFjXAXIT7o6ZLmgbKXRmadPR dikFT5mNErdzuTYcXuI2+oyrKlG2Z+uXW+vQEkWpT6J0SQVJpP3DvzfE+rdhnVca 95PNuG5ggkx8ECVg7R+xtARnllD6KlGfN7xY4Wwwfi6TfXp+NjzRyWyNUF28LyMH nw5ociecSP2mxQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:32 2025 by rpki-client