This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft File: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft (raw, json) Hash identifier: 1tcGKRSpajCPy3UkTyiKhKFEOX1+XOe8F6cEdbTRjko= Subject key identifier: A5:B8:40:39:5B:0E:96:F1:36:47:ED:9A:20:2E:72:E5:93:85:71:5C Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1 Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1 Certificate serial: 019B4BF2088E6ADB4E3F426760ECF1147EE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft Manifest number: 07E7 Signing time: Tue 23 Dec 2025 16:01:51 +0000 Manifest this update: Tue 23 Dec 2025 16:01:51 +0000 Manifest next update: Wed 24 Dec 2025 16:01:51 +0000 Files and hashes: 1: 0uXZsIzOuGlbguIFz3Zkl5De9lU.roa (hash: YNeeVSttuQ98olLv+5aLbTyXkKQvSMcGX+VvVs9cMAQ=) 2: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl (hash: o8N6VIbdPIw7Bs7S4Yf5MI5mWN8EVud2q1yZpYR9mZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:08:8e:6a:db:4e:3f:42:67:60:ec:f1:14:7e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1 Validity Not Before: Dec 23 16:01:51 2025 GMT Not After : Dec 24 16:01:51 2025 GMT Subject: CN=a5b840395b0e96f13647ed9a202e72e59385715c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:96:58:5f:fe:89:da:ee:59:19:0c:46:1d: 99:e7:b6:31:cb:cf:08:19:04:34:4f:79:da:21:6c: 63:95:58:a2:d1:2e:8e:83:6b:f3:16:11:e4:d1:fa: 75:77:ff:0f:60:c6:78:10:c6:ca:db:15:cf:43:fa: c0:0f:25:af:af:51:9c:59:87:50:1c:60:07:8d:af: 52:17:07:52:f1:68:35:db:4b:f3:5a:36:ce:db:94: 1b:69:f6:50:b0:0a:a3:ca:52:13:c1:3d:e7:00:13: 3c:5c:d6:d6:29:03:5b:dd:c0:5a:eb:bf:6b:f0:97: f3:54:bd:05:13:9d:d6:5e:e4:36:cb:4c:be:30:b1: f7:4c:ed:86:42:53:e1:26:8a:4d:72:10:5a:ef:91: 27:1c:d0:23:e9:8f:57:e8:58:2c:9f:ba:52:16:53: 70:22:1c:7f:30:87:93:06:7d:d4:5c:f3:98:b5:e2: 93:92:3b:cb:52:ed:56:82:30:c3:5e:3e:1b:b8:09: c6:8e:fc:8b:61:bc:01:31:47:15:39:c9:2d:75:e8: 5b:be:f8:05:16:97:a7:4a:c1:9e:ed:be:4e:9d:98: 8e:ae:04:c9:1b:8a:0b:d7:f5:00:6f:5c:3a:62:d8: 23:1b:d2:0d:80:43:4a:e3:95:7f:9c:a9:99:4e:8d: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B8:40:39:5B:0E:96:F1:36:47:ED:9A:20:2E:72:E5:93:85:71:5C X509v3 Authority Key Identifier: keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:8e:d8:9e:68:29:85:78:af:bc:e6:88:34:a9:95:4c:8e:58: 84:ed:4c:f9:2e:91:7a:a9:31:44:be:f5:ac:a7:6e:b5:e5:68: 6d:c0:36:a4:99:59:28:1a:13:56:8c:ef:2a:93:08:eb:85:a0: a1:68:39:46:22:a7:40:6e:a3:a6:42:a5:a7:b8:c6:bd:a6:2d: 25:30:34:53:6e:9d:55:6c:77:19:b8:3c:90:d1:f4:e5:5f:03: 30:79:d1:71:8c:ec:0b:56:77:a8:e8:31:c3:e2:d6:4a:f5:15: c9:6a:03:8b:cf:15:c9:bb:f0:89:71:48:75:94:eb:12:5f:46: 82:6a:e0:63:2a:98:4f:f6:b9:1c:e7:77:0e:3e:a2:e7:78:80: c2:b8:ba:1d:18:ac:21:1f:22:ab:ca:28:41:bf:a6:cf:4c:0f: fe:a8:a1:5a:bd:30:83:26:a4:49:d3:ea:90:cd:06:0c:d6:f6: e0:18:8a:cd:7c:08:d6:2e:02:bc:ed:4e:24:99:79:1c:d1:1e: b6:c0:cf:c7:da:c5:e9:41:9e:cb:cd:3c:19:a7:a2:c3:2b:6f: d7:a7:34:52:71:5c:d2:b7:8b:78:0b:f0:99:4c:df:ef:71:b4: f2:c9:81:40:d8:f4:b6:93:74:36:71:a2:29:fa:d6:53:61:00: 4e:ac:2f:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8giOattOP0JnYOzxFH7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYzNjYWU4NjU1NTY4NzMyNDMxOWQxMjI2OTM4YzcwM2Vl NGVkYzEwHhcNMjUxMjIzMTYwMTUxWhcNMjUxMjI0MTYwMTUxWjAzMTEwLwYDVQQD EyhhNWI4NDAzOTViMGU5NmYxMzY0N2VkOWEyMDJlNzJlNTkzODU3MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1qWWF/+idruWRkMRh2Z57Yxy88I GQQ0T3naIWxjlVii0S6Og2vzFhHk0fp1d/8PYMZ4EMbK2xXPQ/rADyWvr1GcWYdQ HGAHja9SFwdS8Wg120vzWjbO25QbafZQsAqjylITwT3nABM8XNbWKQNb3cBa679r 8JfzVL0FE53WXuQ2y0y+MLH3TO2GQlPhJopNchBa75EnHNAj6Y9X6Fgsn7pSFlNw Ihx/MIeTBn3UXPOYteKTkjvLUu1WgjDDXj4buAnGjvyLYbwBMUcVOcktdehbvvgF FpenSsGe7b5OnZiOrgTJG4oL1/UAb1w6YtgjG9INgENK45V/nKmZTo1FvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKW4QDlbDpbxNkftmiAucuWThXFcMB8GA1UdIwQY MBaAFJDDyuhlVWhzJDGdEiaTjHA+5O3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva01QSzZHVlZhSE1rTVowU0pwT01jRDdrN2NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC82NGRiMjQtYmMzNi00Y2ExLWFiMDIt YjEzOWIyYTNmZTQ5LzEva01QSzZHVlZhSE1rTVowU0pwT01jRDdrN2NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC82NGRiMjQtYmMzNi00Y2ExLWFiMDItYjEzOWIyYTNmZTQ5 LzEva01QSzZHVlZhSE1rTVowU0pwT01jRDdrN2NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3o7Ynmgp hXivvOaINKmVTI5YhO1M+S6ReqkxRL71rKduteVobcA2pJlZKBoTVozvKpMI64Wg oWg5RiKnQG6jpkKlp7jGvaYtJTA0U26dVWx3Gbg8kNH05V8DMHnRcYzsC1Z3qOgx w+LWSvUVyWoDi88VybvwiXFIdZTrEl9GgmrgYyqYT/a5HOd3Dj6i53iAwri6HRis IR8iq8ooQb+mz0wP/qihWr0wgyakSdPqkM0GDNb24BiKzXwI1i4CvO1OJJl5HNEe tsDPx9rF6UGey808Gaeiwytv16c0UnFc0reLeAvwmUzf73G08smBQNj0tpN0NnGi KfrWU2EATqwvrQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:53:07 2025 by rpki-client