This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json) Hash identifier: ZX+fGgesf/6uSqVY0yEXJSunQold41T7Op6tHv8+1zg= Subject key identifier: 74:57:4C:2A:61:1B:BC:B3:CE:EA:F8:41:64:50:EA:34:3E:93:4D:3E Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02 Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02 Certificate serial: 019B552B716F9E0DC052AE9BB47EE6F80F55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft Manifest number: 0EF8 Signing time: Thu 25 Dec 2025 11:01:08 +0000 Manifest this update: Thu 25 Dec 2025 11:01:08 +0000 Manifest next update: Fri 26 Dec 2025 11:01:08 +0000 Files and hashes: 1: LyKlqkZe1vL0FqTF3iiSvFK7hTQ.roa (hash: 2Vj99SsHB7IFNM1FIg40rxpKy12rqtdylkU9a0vtpMc=) 2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: ca5g6tkGCV8/OiNj8bv7Hb+7RqXXOueeTMPdbpTo6YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:71:6f:9e:0d:c0:52:ae:9b:b4:7e:e6:f8:0f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02 Validity Not Before: Dec 25 11:01:08 2025 GMT Not After : Dec 26 11:01:08 2025 GMT Subject: CN=74574c2a611bbcb3ceeaf8416450ea343e934d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:e5:9d:5f:68:9a:8e:8c:a8:8f:61:9a:73: 8a:37:39:cd:57:69:73:48:4d:3e:ab:83:fa:88:5a: 47:9f:f5:c4:28:34:c9:21:a2:e2:50:15:9d:1f:9e: 15:6f:4c:82:99:5f:5c:9c:07:7e:61:c1:6f:9c:7f: 12:5e:8f:11:e0:bf:79:06:b8:d7:6c:e3:a4:00:39: 03:21:ac:49:ab:26:f5:b5:82:f3:3f:ab:01:52:54: d5:11:9e:4b:8e:8f:39:bf:31:5b:2f:6e:b8:df:ee: 6c:2f:f4:7f:e0:16:df:4e:62:77:9f:8a:29:a7:22: 20:d8:c8:eb:dd:be:38:5a:7c:36:4e:49:6a:ac:9e: 5b:bf:65:68:1d:0f:f9:0b:2c:0e:bd:c8:35:5f:91: 96:ed:98:29:8d:9c:6f:b8:77:32:ce:44:bd:7a:09: 0d:0e:c1:ea:63:cc:08:d2:1f:1e:05:7b:c8:47:40: ba:e0:43:93:16:5b:2d:74:00:48:5e:c5:40:64:59: 38:6d:cd:90:fe:20:0e:d7:e3:38:0d:58:23:51:d9: 61:69:77:85:2b:a7:bf:d3:1b:85:4f:32:0e:28:f2: ab:8a:57:0a:b4:1f:da:3f:4a:eb:71:b2:d7:87:b2: 45:a1:d2:63:35:53:b4:5b:96:b7:02:0d:7c:0b:ab: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:57:4C:2A:61:1B:BC:B3:CE:EA:F8:41:64:50:EA:34:3E:93:4D:3E X509v3 Authority Key Identifier: keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:dc:ba:c5:11:b8:c7:36:cc:8c:d5:6a:3e:af:ef:dd:37:9b: 57:44:81:09:f4:cc:64:3b:e5:5f:9b:9f:9c:58:c5:09:81:76: 1e:b1:36:9f:5c:8d:ae:10:ff:7a:9e:36:1f:92:f3:51:21:3c: 3d:16:d2:91:21:0d:a3:4f:c7:78:11:4e:c0:c5:72:68:bc:a1: 74:fa:5a:f5:29:8f:0a:6a:7c:bb:61:e4:db:35:d5:1c:82:5f: a9:6a:be:d8:a4:47:bc:73:33:be:36:32:26:65:bf:0b:f2:93: 2b:d0:50:80:19:64:7a:89:ac:cb:8f:da:04:7a:9c:a9:71:dd: b8:d6:ed:d3:02:23:c0:51:e8:ec:56:bc:8e:27:e5:70:93:2b: ed:e0:6b:d6:14:69:c2:7e:9f:94:32:3e:82:9a:89:84:f6:c9: d0:25:46:ae:2e:66:bc:58:96:b6:2b:4f:ad:2c:c4:63:60:d6: bb:81:ad:59:3d:44:76:32:d4:4f:bc:a8:c7:e7:61:1a:9f:52: 8d:06:6a:bd:1e:e3:fb:49:7f:8c:ac:3b:63:00:ee:bb:54:a3: ec:ac:53:1d:a8:fa:bc:27:79:f2:3c:a4:2f:8a:8c:36:3a:dd: ef:e4:25:21:60:67:60:9d:b8:02:53:06:08:31:b4:f0:df:1b: a8:f3:9e:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK3Fvng3AUq6btH7m+A9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTAzYWFmMTI2YWY3Y2QwMzFjYWMzY2UxZTM5OGMxNzRi ODJlMDIwHhcNMjUxMjI1MTEwMTA4WhcNMjUxMjI2MTEwMTA4WjAzMTEwLwYDVQQD Eyg3NDU3NGMyYTYxMWJiY2IzY2VlYWY4NDE2NDUwZWEzNDNlOTM0ZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVXlnV9omo6MqI9hmnOKNznNV2lz SE0+q4P6iFpHn/XEKDTJIaLiUBWdH54Vb0yCmV9cnAd+YcFvnH8SXo8R4L95BrjX bOOkADkDIaxJqyb1tYLzP6sBUlTVEZ5Ljo85vzFbL2643+5sL/R/4BbfTmJ3n4op pyIg2Mjr3b44Wnw2TklqrJ5bv2VoHQ/5CywOvcg1X5GW7ZgpjZxvuHcyzkS9egkN DsHqY8wI0h8eBXvIR0C64EOTFlstdABIXsVAZFk4bc2Q/iAO1+M4DVgjUdlhaXeF K6e/0xuFTzIOKPKrilcKtB/aP0rrcbLXh7JFodJjNVO0W5a3Ag18C6tdYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRXTCphG7yzzur4QWRQ6jQ+k00+MB8GA1UdIwQY MBaAFJJQOq8SavfNAxysPOHjmMF0uC4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3Njgt YWZkMTI2OGZkYmZkLzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3NjgtYWZkMTI2OGZkYmZk LzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9y6xRG4 xzbMjNVqPq/v3TebV0SBCfTMZDvlX5ufnFjFCYF2HrE2n1yNrhD/ep42H5LzUSE8 PRbSkSENo0/HeBFOwMVyaLyhdPpa9SmPCmp8u2Hk2zXVHIJfqWq+2KRHvHMzvjYy JmW/C/KTK9BQgBlkeomsy4/aBHqcqXHduNbt0wIjwFHo7Fa8jiflcJMr7eBr1hRp wn6flDI+gpqJhPbJ0CVGri5mvFiWtitPrSzEY2DWu4GtWT1EdjLUT7yox+dhGp9S jQZqvR7j+0l/jKw7YwDuu1Sj7KxTHaj6vCd58jykL4qMNjrd7+QlIWBnYJ24AlMG CDG08N8bqPOecQ== -----END CERTIFICATE-----Generated at Thu Dec 25 16:02:05 2025 by rpki-client