This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json) Hash identifier: DHSaAU+/O7LzSQBWec9/mKGm+TBtKB54YG1oUeiEurA= Subject key identifier: EB:9B:16:02:81:4D:F1:E4:9B:26:D2:A5:F9:58:FE:BE:D3:70:73:05 Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59 Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59 Certificate serial: 019B3EA33A52E8E95EF7C81A71319D420139 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 02:00:43 +0000 Manifest this update: Sun 21 Dec 2025 02:00:43 +0000 Manifest next update: Mon 22 Dec 2025 02:00:43 +0000 Files and hashes: 1: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=) 2: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=) 3: ZgG20-53jQJwsyA9Uj-HDlUNiyA.roa (hash: r4Yw7FV6MragLYSnWbxNhJIL4Bz5tpt7zooYhdKRX2U=) 4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: p35Ua4D9FrusMRzERLf4lzgPABOoQUPQ21wOTd2MD1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3a:52:e8:e9:5e:f7:c8:1a:71:31:9d:42:01:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59 Validity Not Before: Dec 21 02:00:43 2025 GMT Not After : Dec 22 02:00:43 2025 GMT Subject: CN=eb9b1602814df1e49b26d2a5f958febed3707305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:78:ba:75:c2:c0:0b:fa:14:d8:64:f7:ee: a8:41:ba:08:a6:da:d5:d6:40:54:2a:8a:14:66:c8: cd:bc:9b:15:b6:6a:34:9a:9d:b3:8a:24:43:5d:9c: e7:64:db:14:2b:3f:76:b8:c2:c7:b8:8f:64:ca:c6: 9f:20:e8:2f:b9:83:58:39:77:d7:23:1d:3c:17:1c: 85:d8:ce:a6:69:23:c9:19:c7:80:4f:8c:5b:b0:fb: 5c:d8:e2:00:01:8b:e5:8a:03:27:7f:f8:a5:8c:c4: ed:32:7a:84:36:1d:48:f8:e1:94:5f:77:2d:8f:44: 3b:af:06:46:c6:0b:be:6f:79:72:5a:87:f2:55:d5: 4a:4f:c7:7b:44:e0:99:8a:51:7b:bf:4f:6c:71:c3: be:6a:17:44:db:a2:f5:77:f0:f0:75:dd:17:b7:13: 56:cd:0f:3d:8e:f1:7d:23:0d:f5:82:12:46:51:4c: 6a:ed:2e:a4:f2:bb:0b:8a:f0:12:ff:30:44:fb:37: 36:8d:58:04:6a:b5:34:67:7c:67:21:eb:8b:4f:5a: 1d:a8:8a:7b:b9:93:db:f1:f1:d6:68:b1:84:ba:d7: 7b:d0:22:c9:70:87:aa:ae:56:5c:88:2b:06:06:0d: 16:a0:9f:f7:1b:e5:f4:b3:08:01:d9:fa:40:df:dd: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9B:16:02:81:4D:F1:E4:9B:26:D2:A5:F9:58:FE:BE:D3:70:73:05 X509v3 Authority Key Identifier: keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3b:c1:96:05:82:12:c4:5e:67:e2:e0:4d:0e:3e:39:e0:1b: a7:c7:36:c7:a5:2f:d5:64:d5:7b:f1:a6:e4:a0:ca:4a:f7:dd: f1:98:89:c4:d8:0a:9c:57:5b:51:58:7d:1a:a0:ea:b3:1c:82: 2c:bd:b8:b0:ef:e0:0a:b0:bf:b5:e4:b2:f7:5a:c6:53:90:7e: 33:a3:eb:65:a1:74:73:79:ea:55:d9:db:7c:e4:02:e7:a6:cb: 6a:5a:0a:a6:ff:a6:c0:6e:06:63:fb:fc:42:bd:79:ed:ca:bd: cd:d1:96:ff:79:7f:52:af:cd:8c:f4:a5:f5:64:aa:8c:de:25: 5a:74:37:a2:da:cc:31:9d:3f:a1:c6:7b:30:0c:39:fa:a9:c8: 7e:69:14:38:d7:9d:a2:b5:a0:04:da:74:01:33:af:eb:c9:0e: 04:09:b0:21:70:9b:06:c7:33:46:cf:4c:1d:74:c3:2d:b7:9e: b4:ef:11:9e:e1:9d:90:23:87:38:6a:9f:12:08:19:26:72:39: 99:59:c8:d6:e2:39:e8:f3:71:44:61:75:6f:ca:f2:3f:c9:21: d8:a1:48:5c:f9:08:af:cf:a9:50:07:cf:2e:d4:07:f0:f2:b8: 9e:fa:bf:fb:d6:18:d5:b5:8d:8e:71:0c:87:e4:34:53:70:49: 3e:b8:87:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ozpS6Ole98gacTGdQgE5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj ZWVkNTkwHhcNMjUxMjIxMDIwMDQzWhcNMjUxMjIyMDIwMDQzWjAzMTEwLwYDVQQD EyhlYjliMTYwMjgxNGRmMWU0OWIyNmQyYTVmOTU4ZmViZWQzNzA3MzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotB4unXCwAv6FNhk9+6oQboIptrV 1kBUKooUZsjNvJsVtmo0mp2ziiRDXZznZNsUKz92uMLHuI9kysafIOgvuYNYOXfX Ix08FxyF2M6maSPJGceAT4xbsPtc2OIAAYvligMnf/iljMTtMnqENh1I+OGUX3ct j0Q7rwZGxgu+b3lyWofyVdVKT8d7ROCZilF7v09sccO+ahdE26L1d/Dwdd0XtxNW zQ89jvF9Iw31ghJGUUxq7S6k8rsLivAS/zBE+zc2jVgEarU0Z3xnIeuLT1odqIp7 uZPb8fHWaLGEutd70CLJcIeqrlZciCsGBg0WoJ/3G+X0swgB2fpA391HzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOubFgKBTfHkmybSpflY/r7TcHMFMB8GA1UdIwQY MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt MjczOGJjYjQzZDZkLzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzvBlgWC EsReZ+LgTQ4+OeAbp8c2x6Uv1WTVe/Gm5KDKSvfd8ZiJxNgKnFdbUVh9GqDqsxyC LL24sO/gCrC/teSy91rGU5B+M6PrZaF0c3nqVdnbfOQC56bLaloKpv+mwG4GY/v8 Qr157cq9zdGW/3l/Uq/NjPSl9WSqjN4lWnQ3otrMMZ0/ocZ7MAw5+qnIfmkUONed orWgBNp0ATOv68kOBAmwIXCbBsczRs9MHXTDLbeetO8RnuGdkCOHOGqfEggZJnI5 mVnI1uI56PNxRGF1b8ryP8kh2KFIXPkIr8+pUAfPLtQH8PK4nvq/+9YY1bWNjnEM h+Q0U3BJPriHhg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:35 2025 by rpki-client