This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json) Hash identifier: F5qpgGoz34lAX9HXeruOGymPrfQAKMilBUf3Tn/1+rU= Subject key identifier: E9:D6:88:DF:E8:68:23:5C:C6:03:3C:08:43:D0:D9:A8:6F:6D:D3:AD Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d Certificate serial: 019B3D5A4E4EEB643B458E3EC1113A534892 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft Manifest number: 0795 Signing time: Sat 20 Dec 2025 20:01:27 +0000 Manifest this update: Sat 20 Dec 2025 20:01:27 +0000 Manifest next update: Sun 21 Dec 2025 20:01:27 +0000 Files and hashes: 1: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: aW8tm1ZBxfN/mrBo59g/QIAqWCIKsi8StUrhsxBE9p8=) 2: ynCtEcXqVCBeEil-xI3WvK_dPRE.roa (hash: 0SptmV2vPd6kYrXF10jAqlyhF9V/f+S3u2RzwXs1PmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:4e:4e:eb:64:3b:45:8e:3e:c1:11:3a:53:48:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d Validity Not Before: Dec 20 20:01:27 2025 GMT Not After : Dec 21 20:01:27 2025 GMT Subject: CN=e9d688dfe868235cc6033c0843d0d9a86f6dd3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:8f:75:3e:45:39:df:24:52:b8:da:43:eb: 5c:c6:0d:4c:c6:2c:a0:59:e8:ed:39:7d:7b:4e:06: 30:9e:65:82:01:3c:d8:2f:eb:d9:a0:d8:d2:b6:7f: a7:15:97:42:84:c8:47:44:e4:a3:10:2a:0b:f3:57: 03:a0:ba:17:a9:ee:d0:5d:cb:5c:f3:dc:cf:4e:10: ef:3b:a2:b0:dc:7a:96:e4:08:ca:f5:d8:89:71:fd: e6:38:26:d4:01:da:c7:7a:94:7e:e0:cb:35:c7:ed: 9b:a0:82:fc:bc:9a:17:9b:ec:5b:ed:7a:3f:a3:0b: 1f:5c:40:17:a9:b9:7d:5b:72:63:42:82:d2:01:7f: ad:79:c8:44:98:ed:0a:86:bc:25:e5:a7:7e:bb:75: 3e:97:40:6b:94:21:d8:e8:43:96:80:73:ca:3b:3e: f4:3d:e9:fd:bd:03:c4:01:1d:b3:4f:59:46:5b:c4: f2:b6:ac:87:e1:45:31:1f:08:82:98:59:f1:80:fb: 0d:00:c3:b5:3d:75:a6:e6:69:9c:e4:a0:41:b5:9f: 92:a4:a7:b1:f0:80:1a:bf:40:84:5a:72:99:33:0d: a2:87:cf:f5:f9:1c:bb:84:67:57:0f:b5:5d:32:e2: 05:d3:67:a0:be:81:40:cc:c3:cd:cd:4d:24:6c:ad: 19:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D6:88:DF:E8:68:23:5C:C6:03:3C:08:43:D0:D9:A8:6F:6D:D3:AD X509v3 Authority Key Identifier: keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:25:98:d9:43:fc:01:c6:51:85:9b:74:88:4e:c6:51:92:78: c9:00:33:a8:ae:b3:d4:9e:db:60:56:43:2c:b9:22:17:49:86: 1a:a1:08:7c:e9:1a:e0:15:3c:ec:d0:85:35:0b:43:31:4f:b8: 39:15:8f:29:52:b7:a6:c5:f8:f5:78:dc:22:87:25:14:a8:0a: ea:b2:17:8b:37:f4:fb:d5:c2:77:14:ce:9c:8e:7e:5c:37:16: f6:7a:34:23:2b:27:92:85:d4:b5:75:e2:80:d1:f5:f8:0f:29: 07:f4:3a:ee:a5:41:4d:bc:81:e6:1d:cb:de:d8:cf:8a:03:7d: f2:e4:ca:b6:a5:b7:6a:cf:b7:98:bd:77:e5:69:72:d3:3a:8d: 6c:04:4a:24:d6:7b:af:5d:c8:40:ad:4a:9d:e1:66:12:e0:7f: 41:62:44:3e:e0:ec:b3:be:e7:12:a0:52:ef:7f:a4:98:01:56: 54:c5:91:2b:3e:57:45:f5:f9:46:30:cc:d9:97:b7:d1:5b:ce: fa:4d:e3:eb:50:94:7c:24:80:3d:dd:4f:46:db:bb:39:d7:a4: af:27:82:ec:48:df:a5:5a:de:03:67:f6:dd:0a:da:51:32:1c: 14:bc:8a:e2:f1:66:d6:17:f2:2a:ad:d4:18:1f:f0:f1:e0:0c: 17:ee:ae:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wk5O62Q7RY4+wRE6U0iSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNTU2NDFhMDdiMWU0NTViNzg5MmI5MmQ4MGQ2MDkxMjM5 MWIyMGQwHhcNMjUxMjIwMjAwMTI3WhcNMjUxMjIxMjAwMTI3WjAzMTEwLwYDVQQD EyhlOWQ2ODhkZmU4NjgyMzVjYzYwMzNjMDg0M2QwZDlhODZmNmRkM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaOPdT5FOd8kUrjaQ+tcxg1Mxiyg WejtOX17TgYwnmWCATzYL+vZoNjStn+nFZdChMhHROSjECoL81cDoLoXqe7QXctc 89zPThDvO6Kw3HqW5AjK9diJcf3mOCbUAdrHepR+4Ms1x+2boIL8vJoXm+xb7Xo/ owsfXEAXqbl9W3JjQoLSAX+techEmO0Khrwl5ad+u3U+l0BrlCHY6EOWgHPKOz70 Pen9vQPEAR2zT1lGW8TytqyH4UUxHwiCmFnxgPsNAMO1PXWm5mmc5KBBtZ+SpKex 8IAav0CEWnKZMw2ih8/1+Ry7hGdXD7VdMuIF02egvoFAzMPNzU0kbK0ZHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnWiN/oaCNcxgM8CEPQ2ahvbdOtMB8GA1UdIwQY MBaAFJFVZBoHseRVt4krktgNYJEjkbINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ZWa0dnZXg1RlczaVN1UzJBMWdrU09Sc2cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hYTVkOGItM2VjOS00MTc2LTgzZTEt YmNiZmIyMTdiYzhmLzEva1ZWa0dnZXg1RlczaVN1UzJBMWdrU09Sc2cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9hYTVkOGItM2VjOS00MTc2LTgzZTEtYmNiZmIyMTdiYzhm LzEva1ZWa0dnZXg1RlczaVN1UzJBMWdrU09Sc2cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCWY2UP8 AcZRhZt0iE7GUZJ4yQAzqK6z1J7bYFZDLLkiF0mGGqEIfOka4BU87NCFNQtDMU+4 ORWPKVK3psX49XjcIoclFKgK6rIXizf0+9XCdxTOnI5+XDcW9no0IysnkoXUtXXi gNH1+A8pB/Q67qVBTbyB5h3L3tjPigN98uTKtqW3as+3mL135Wly0zqNbARKJNZ7 r13IQK1KneFmEuB/QWJEPuDss77nEqBS73+kmAFWVMWRKz5XRfX5RjDM2Ze30VvO +k3j61CUfCSAPd1PRtu7OdekryeC7EjfpVreA2f23QraUTIcFLyK4vFm1hfyKq3U GB/w8eAMF+6uaA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:16 2025 by rpki-client