This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json) Hash identifier: jMqlLRLtDB7ioOYz0BM2WKwGPf2nQ4yLUQo2KmriaIA= Subject key identifier: 64:4B:2F:DA:1B:90:ED:B2:39:36:89:46:11:5D:2A:11:49:F6:AD:C5 Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0 Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0 Certificate serial: 019B3BD99EC23367280EDB207C402A0E4FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft Manifest number: 13F5 Signing time: Sat 20 Dec 2025 13:01:16 +0000 Manifest this update: Sat 20 Dec 2025 13:01:16 +0000 Manifest next update: Sun 21 Dec 2025 13:01:16 +0000 Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=) 2: ZKs_PtzOl6JXrfZ_pu8ccHotJPY.roa (hash: 2dIpFoPyA8jItE82jeKy7Ii+7GgLwrgqHDUnlv82DBU=) 3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: 7laSoGYUpeua6vdCtU6VTr/1qmUYdWyMN6H/P/q22oY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:9e:c2:33:67:28:0e:db:20:7c:40:2a:0e:4f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0 Validity Not Before: Dec 20 13:01:16 2025 GMT Not After : Dec 21 13:01:16 2025 GMT Subject: CN=644b2fda1b90edb239368946115d2a1149f6adc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:a7:92:4b:7d:dc:ac:1d:66:93:f4:89:c6: d0:58:e8:38:97:25:89:07:fa:62:ae:5a:cd:cb:f3: 45:28:51:7c:da:c4:d9:ab:ea:3b:ba:0e:c8:e2:6a: b1:0c:77:42:aa:8d:31:84:fe:3e:1e:44:42:1c:7c: 99:4b:81:f7:91:42:25:68:fe:ad:3d:b5:b8:7d:26: 52:89:1a:db:8c:b5:85:06:03:b8:2c:d3:f7:ef:08: 1a:ba:59:5a:8d:8e:d5:a4:91:b8:af:c7:8a:2a:87: 6b:ea:3d:8d:5a:23:95:27:a3:76:0d:68:3a:84:06: aa:cd:9c:c9:30:83:07:b0:8d:91:66:14:fc:08:0c: 5e:37:d9:48:97:96:38:a7:14:9b:12:d4:6f:39:0a: aa:bd:74:62:79:65:c0:2f:17:6a:97:ca:9c:35:60: 0b:a9:94:39:3c:db:06:83:92:c0:1e:f5:5e:a4:9d: 55:c2:57:47:65:56:5e:79:1d:48:2f:ac:42:94:b0: bf:33:ae:f8:75:59:aa:a9:14:a2:c0:9a:67:d3:34: 03:b1:d5:f9:32:62:ef:28:54:76:be:33:7f:c0:fc: 26:7b:7b:9f:10:85:e9:b9:58:d3:2b:c5:5a:79:76: 2e:74:f0:38:83:41:4a:69:2a:80:6a:8d:f5:df:9a: e2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4B:2F:DA:1B:90:ED:B2:39:36:89:46:11:5D:2A:11:49:F6:AD:C5 X509v3 Authority Key Identifier: keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b2:5a:39:58:6f:69:2a:53:01:b7:c8:3b:18:f9:72:bb:d4: fc:d5:ad:a6:57:7e:dc:81:fe:55:2c:95:ee:c9:cb:66:4a:89: ab:dc:12:48:b0:e0:35:27:3c:61:9a:5c:e0:46:17:34:6d:43: eb:21:12:8f:37:33:e9:a0:44:e2:97:46:de:27:f8:d5:24:39: bd:f6:b9:1b:01:c0:d2:73:e5:c0:d6:db:60:df:09:65:74:43: 64:07:c9:09:ee:61:5b:96:d8:28:4e:da:ed:c3:f7:04:f3:0a: 1c:8b:94:6b:43:67:5b:bf:e0:89:7c:bc:b7:97:31:d3:f9:e0: a3:8c:94:0f:47:5a:49:64:2c:34:8b:97:cf:f2:82:a1:1a:25: dc:d1:3a:e9:8c:39:79:03:d1:2e:98:f9:d8:6b:0d:22:ae:88: 23:55:87:0a:53:8e:9c:20:0c:18:e7:4c:80:54:b2:eb:db:f6: 37:3c:fc:00:c9:2b:72:02:5b:89:7a:5d:cd:45:6d:27:f8:31: 1c:bd:c2:74:cb:22:af:26:30:1d:b0:bc:bb:5a:24:5e:bd:3e: 97:cf:24:78:2c:7c:c4:de:3e:7f:a7:a6:6b:71:fa:18:2d:0b: c4:3e:82:45:1c:74:5d:4f:d3:9d:a2:42:56:3e:97:4e:e1:af: 23:05:f4:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Z7CM2coDtsgfEAqDk/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZmQ4YWFlMWI2ZTE1OWEyZmE4ZjAzZDdhMzE4OGExZTE4 MDcyYTAwHhcNMjUxMjIwMTMwMTE2WhcNMjUxMjIxMTMwMTE2WjAzMTEwLwYDVQQD Eyg2NDRiMmZkYTFiOTBlZGIyMzkzNjg5NDYxMTVkMmExMTQ5ZjZhZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTWnkkt93KwdZpP0icbQWOg4lyWJ B/pirlrNy/NFKFF82sTZq+o7ug7I4mqxDHdCqo0xhP4+HkRCHHyZS4H3kUIlaP6t PbW4fSZSiRrbjLWFBgO4LNP37wgaullajY7VpJG4r8eKKodr6j2NWiOVJ6N2DWg6 hAaqzZzJMIMHsI2RZhT8CAxeN9lIl5Y4pxSbEtRvOQqqvXRieWXALxdql8qcNWAL qZQ5PNsGg5LAHvVepJ1VwldHZVZeeR1IL6xClLC/M674dVmqqRSiwJpn0zQDsdX5 MmLvKFR2vjN/wPwme3ufEIXpuVjTK8VaeXYudPA4g0FKaSqAao3135ri+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRLL9obkO2yOTaJRhFdKhFJ9q3FMB8GA1UdIwQY MBaAFJD9iq4bbhWaL6jwPXoxiKHhgHKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDct Nzk5MzU5MTExM2U0LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDctNzk5MzU5MTExM2U0 LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrJaOVhv aSpTAbfIOxj5crvU/NWtpld+3IH+VSyV7snLZkqJq9wSSLDgNSc8YZpc4EYXNG1D 6yESjzcz6aBE4pdG3if41SQ5vfa5GwHA0nPlwNbbYN8JZXRDZAfJCe5hW5bYKE7a 7cP3BPMKHIuUa0NnW7/giXy8t5cx0/ngo4yUD0daSWQsNIuXz/KCoRol3NE66Yw5 eQPRLpj52GsNIq6II1WHClOOnCAMGOdMgFSy69v2Nzz8AMkrcgJbiXpdzUVtJ/gx HL3CdMsiryYwHbC8u1okXr0+l88keCx8xN4+f6ema3H6GC0LxD6CRRx0XU/TnaJC Vj6XTuGvIwX0tw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:04 2025 by rpki-client