This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft File: kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft (raw, json) Hash identifier: RDkNDNNl2kqIdxcyFI9+jx25F6qjsuMOYFb8IY+D5bg= Subject key identifier: 77:4D:4D:14:EE:B6:A1:32:BC:DE:1A:98:AD:60:8C:2A:E0:BD:77:F1 Authority key identifier: 91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD Certificate issuer: /CN=917830d941ee090a8e32348f97b8308fd1ce09fd Certificate serial: 019B5FAEA1A6CECC3460435CF3F3165F1174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft Manifest number: 0E16 Signing time: Sat 27 Dec 2025 12:00:38 +0000 Manifest this update: Sat 27 Dec 2025 12:00:38 +0000 Manifest next update: Sun 28 Dec 2025 12:00:38 +0000 Files and hashes: 1: kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl (hash: +fjXPAUTfpenUGZFEK3p+23SAdlvXSbNCT7D/xFXmKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:ae:a1:a6:ce:cc:34:60:43:5c:f3:f3:16:5f:11:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917830d941ee090a8e32348f97b8308fd1ce09fd Validity Not Before: Dec 27 12:00:38 2025 GMT Not After : Dec 28 12:00:38 2025 GMT Subject: CN=774d4d14eeb6a132bcde1a98ad608c2ae0bd77f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:ba:e4:9c:a6:9f:6a:4c:62:19:c4:6d:87: ac:60:08:a0:8f:d7:96:dc:38:e0:59:e9:b3:a3:6d: 27:45:a1:64:00:d3:8b:4a:c9:71:54:f0:c4:6b:67: 21:73:a7:29:11:5b:09:68:f9:71:f8:62:fe:89:9b: 79:7a:46:a2:00:fd:c9:4a:32:14:c1:93:01:f8:4d: 38:0b:a8:b6:35:26:0e:b2:4c:97:98:ec:d0:4d:c1: 77:a2:a3:de:f2:00:a5:80:e1:cf:17:d6:3e:21:33: a7:1a:ac:93:b6:1f:9c:f4:44:7c:8d:1e:81:a9:7e: c1:91:db:19:b5:05:13:ea:e6:e0:b9:ca:93:a5:e8: a9:e8:f3:f8:07:de:0c:c9:d9:dd:e5:6e:d4:a7:61: 94:02:90:d4:b6:ca:a7:10:d7:d9:1a:0d:69:85:69: cc:04:f1:e3:3f:ce:8d:d0:7c:41:4f:ff:88:65:cc: 8a:16:2d:7e:1a:db:4a:fe:d1:05:ff:98:88:de:00: 86:92:f0:b5:7e:01:ea:d8:d6:eb:f1:4d:b9:1d:a4: c1:67:fa:15:7e:85:a7:99:ff:2a:ec:97:fb:a4:cc: 35:63:85:23:39:8b:89:86:79:0a:4a:c1:6e:ef:8a: fa:c4:9e:c7:41:59:5b:98:a3:1b:18:59:fa:b3:ab: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4D:4D:14:EE:B6:A1:32:BC:DE:1A:98:AD:60:8C:2A:E0:BD:77:F1 X509v3 Authority Key Identifier: keyid:91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:51:c2:ef:a1:c9:7b:cf:d1:8d:01:6a:ab:13:3f:1c:89:c4: 1d:00:58:41:55:f5:22:26:16:48:e5:ff:13:34:5d:95:af:ee: 77:a6:07:14:c7:b5:b3:b7:9c:0b:83:06:2a:db:b0:0d:d5:ce: 40:d3:58:3f:6e:24:f3:9d:97:fd:86:5f:f6:d2:91:c9:76:a2: 67:cf:0f:99:85:a3:b7:13:97:29:f1:a2:d7:c6:42:e6:f8:a9: 7e:7f:1e:16:05:2a:e9:49:64:14:23:0a:49:2d:ab:b9:ae:38: 98:96:19:7e:e2:4f:10:53:b9:d5:0f:37:aa:5f:d7:96:0c:f1: e6:c3:4e:fd:91:f6:ac:c4:ea:6f:84:af:65:9f:fe:45:1a:98: a0:b6:ce:15:c2:7c:b1:1a:2e:4d:a2:a8:25:27:ae:e4:74:9c: ff:ce:fa:1f:c5:a5:0e:b9:bf:c4:15:7e:0b:cf:19:e2:9a:66: dd:4f:95:e9:c1:9f:93:10:a2:a8:03:75:3f:44:bd:45:99:24: a4:51:cd:55:4c:c7:84:b1:b8:21:bf:f7:72:b0:fc:b9:33:84: 89:ca:1b:01:b0:28:de:de:e6:11:74:4f:ef:13:61:43:9d:5d: 95:17:ee:b4:21:bf:bb:3f:d3:9c:41:65:41:c6:66:10:b6:bd: b2:0a:5d:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfrqGmzsw0YENc8/MWXxF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNzgzMGQ5NDFlZTA5MGE4ZTMyMzQ4Zjk3YjgzMDhmZDFj ZTA5ZmQwHhcNMjUxMjI3MTIwMDM4WhcNMjUxMjI4MTIwMDM4WjAzMTEwLwYDVQQD Eyg3NzRkNGQxNGVlYjZhMTMyYmNkZTFhOThhZDYwOGMyYWUwYmQ3N2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4e65Jymn2pMYhnEbYesYAigj9eW 3DjgWemzo20nRaFkANOLSslxVPDEa2chc6cpEVsJaPlx+GL+iZt5ekaiAP3JSjIU wZMB+E04C6i2NSYOskyXmOzQTcF3oqPe8gClgOHPF9Y+ITOnGqyTth+c9ER8jR6B qX7BkdsZtQUT6ubgucqTpeip6PP4B94Mydnd5W7Up2GUApDUtsqnENfZGg1phWnM BPHjP86N0HxBT/+IZcyKFi1+GttK/tEF/5iI3gCGkvC1fgHq2Nbr8U25HaTBZ/oV foWnmf8q7Jf7pMw1Y4UjOYuJhnkKSsFu74r6xJ7HQVlbmKMbGFn6s6vOkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdNTRTutqEyvN4amK1gjCrgvXfxMB8GA1UdIwQY MBaAFJF4MNlB7gkKjjI0j5e4MI/Rzgn9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1hndzJVSHVDUXFPTWpTUGw3Z3dqOUhPQ2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mZjJmZDAtNjI0ZC00N2Y4LWJlOWYt ZDFmMTgwM2IxODEyLzEva1hndzJVSHVDUXFPTWpTUGw3Z3dqOUhPQ2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9mZjJmZDAtNjI0ZC00N2Y4LWJlOWYtZDFmMTgwM2IxODEy LzEva1hndzJVSHVDUXFPTWpTUGw3Z3dqOUhPQ2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVHC76HJ e8/RjQFqqxM/HInEHQBYQVX1IiYWSOX/EzRdla/ud6YHFMe1s7ecC4MGKtuwDdXO QNNYP24k852X/YZf9tKRyXaiZ88PmYWjtxOXKfGi18ZC5vipfn8eFgUq6UlkFCMK SS2rua44mJYZfuJPEFO51Q83ql/Xlgzx5sNO/ZH2rMTqb4SvZZ/+RRqYoLbOFcJ8 sRouTaKoJSeu5HSc/876H8WlDrm/xBV+C88Z4ppm3U+V6cGfkxCiqAN1P0S9RZkk pFHNVUzHhLG4Ib/3crD8uTOEicobAbAo3t7mEXRP7xNhQ51dlRfutCG/uz/TnEFl QcZmELa9sgpdhQ== -----END CERTIFICATE-----Generated at Sat Dec 27 17:37:43 2025 by rpki-client