This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json) Hash identifier: nvuHpbkC0LAzji5RfMwBzzG0icO5HPce2VTlopxYGmU= Subject key identifier: 4E:EB:D5:03:1A:6F:35:84:EE:93:80:B5:CB:C7:77:4A:0B:31:D0:90 Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50 Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50 Certificate serial: 019B3F7F42F4D362DB3CD540665224A9A4AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 06:01:03 +0000 Manifest this update: Sun 21 Dec 2025 06:01:03 +0000 Manifest next update: Mon 22 Dec 2025 06:01:03 +0000 Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=) 2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=) 3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: 4ojzWPzlf2MA801FOaxzV7G5HWwx9II1vmbqZmHU1fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:42:f4:d3:62:db:3c:d5:40:66:52:24:a9:a4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50 Validity Not Before: Dec 21 06:01:03 2025 GMT Not After : Dec 22 06:01:03 2025 GMT Subject: CN=4eebd5031a6f3584ee9380b5cbc7774a0b31d090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:18:da:dc:62:d3:7b:d5:a1:f4:17:b3:d0: e6:97:31:9a:6e:94:af:5d:ea:0d:22:36:6a:2b:b6: af:40:93:e1:54:12:2f:e3:5d:21:e5:d2:1b:db:98: c7:68:f4:5a:9f:c5:21:ba:57:00:35:78:c7:46:80: 24:c0:f9:a4:31:a4:07:50:87:e0:44:58:52:d6:1a: 6d:9f:7b:7b:88:dc:21:90:7d:ed:87:b2:1e:5f:c6: c8:be:ec:0b:ca:f0:3a:16:bd:ec:c6:5e:95:96:b2: 85:1f:de:54:09:14:c0:f3:6f:67:1c:0d:7c:dc:2b: c8:7a:10:12:74:38:07:62:dd:6b:65:d8:41:d7:a8: bf:38:29:a5:2f:32:e8:32:63:22:32:0a:eb:ed:c5: 38:bb:2d:24:49:6d:30:da:9e:f8:9a:3d:99:ec:f7: 47:f2:2d:5a:ac:53:26:a8:23:cb:27:75:81:f3:bf: 49:0a:54:b9:60:46:5b:6c:4a:0f:07:46:e8:42:72: 00:3d:4e:5e:9d:d8:c6:b5:1e:c0:60:74:fb:4c:e1: a0:09:22:96:2c:03:2c:2e:08:89:86:bd:ef:d0:16: d3:6a:01:b4:a7:69:5a:3d:ac:6b:47:d0:f3:11:db: 9f:b1:86:94:78:ed:ca:45:6e:93:d4:54:eb:99:9c: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EB:D5:03:1A:6F:35:84:EE:93:80:B5:CB:C7:77:4A:0B:31:D0:90 X509v3 Authority Key Identifier: keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c9:e4:72:a3:1c:be:18:7a:08:af:69:88:f8:c0:2b:1b:06: 71:74:bd:c4:7f:1a:34:1c:5c:4d:9f:5a:8d:18:e6:b0:a4:ca: 3c:67:4d:9a:8e:7c:56:e8:e2:33:4a:fc:ea:af:ad:6c:05:73: a3:7f:f4:87:7a:1f:2f:e0:1f:83:98:df:10:87:09:df:e7:aa: f1:ec:40:65:97:f0:b1:54:98:c2:01:29:57:f6:0b:e6:15:3d: 94:3d:50:7f:83:12:17:41:a2:91:40:67:d2:0c:74:23:4f:83: 1d:54:03:4b:e6:8b:3a:b0:f5:86:ce:e9:f1:ea:15:e9:b5:b3: 0a:eb:3b:ef:0a:c7:6a:df:dd:3b:86:03:55:04:2c:61:3b:6a: bc:69:c5:bb:3f:e2:75:66:1b:a0:80:c1:33:d8:c3:6c:7e:41: f9:ef:2e:fa:7a:46:c2:2d:86:62:51:72:c1:1c:64:89:c1:8e: fd:9c:15:c6:55:4e:ff:f4:90:a8:48:d9:41:79:97:74:87:02: e4:64:b3:b1:0c:62:8c:2b:2a:f4:50:99:5e:2f:bb:e3:61:d1: 1a:53:15:5b:77:bc:24:23:65:5d:d8:6f:0d:d1:e7:af:48:d9: 62:bb:ae:47:33:3b:06:00:7d:d3:79:ec:ce:73:8c:0f:18:ea: 3d:3b:12:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f0L002LbPNVAZlIkqaSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwM2VjNGM1MDJhNDJjNWJiZmRiNzBlYTlmNDQwY2ExNTAw YWNjNTAwHhcNMjUxMjIxMDYwMTAzWhcNMjUxMjIyMDYwMTAzWjAzMTEwLwYDVQQD Eyg0ZWViZDUwMzFhNmYzNTg0ZWU5MzgwYjVjYmM3Nzc0YTBiMzFkMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9oY2txi03vVofQXs9DmlzGabpSv XeoNIjZqK7avQJPhVBIv410h5dIb25jHaPRan8UhulcANXjHRoAkwPmkMaQHUIfg RFhS1hptn3t7iNwhkH3th7IeX8bIvuwLyvA6Fr3sxl6VlrKFH95UCRTA829nHA18 3CvIehASdDgHYt1rZdhB16i/OCmlLzLoMmMiMgrr7cU4uy0kSW0w2p74mj2Z7PdH 8i1arFMmqCPLJ3WB879JClS5YEZbbEoPB0boQnIAPU5endjGtR7AYHT7TOGgCSKW LAMsLgiJhr3v0BbTagG0p2laPaxrR9DzEdufsYaUeO3KRW6T1FTrmZz9ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7r1QMabzWE7pOAtcvHd0oLMdCQMB8GA1UdIwQY MBaAFJA+xMUCpCxbv9tw6p9EDKFQCsxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MGM1NDgtNWNjNi00N2MzLTllOGYt YmRkYjI5Zjg1ZmI4LzEva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MGM1NDgtNWNjNi00N2MzLTllOGYtYmRkYjI5Zjg1ZmI4 LzEva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsnkcqMc vhh6CK9piPjAKxsGcXS9xH8aNBxcTZ9ajRjmsKTKPGdNmo58VujiM0r86q+tbAVz o3/0h3ofL+Afg5jfEIcJ3+eq8exAZZfwsVSYwgEpV/YL5hU9lD1Qf4MSF0GikUBn 0gx0I0+DHVQDS+aLOrD1hs7p8eoV6bWzCus77wrHat/dO4YDVQQsYTtqvGnFuz/i dWYboIDBM9jDbH5B+e8u+npGwi2GYlFywRxkicGO/ZwVxlVO//SQqEjZQXmXdIcC 5GSzsQxijCsq9FCZXi+742HRGlMVW3e8JCNlXdhvDdHnr0jZYruuRzM7BgB903ns znOMDxjqPTsSpg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:36 2025 by rpki-client