This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json) Hash identifier: A39TbzMAMmXoSzVHK/JBXuYUgNMrLTaRWJc6AgkGBlo= Subject key identifier: 9D:5C:07:19:8A:41:B4:64:9B:89:AD:2A:D2:F5:42:FC:F4:6A:4B:8D Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Certificate serial: 019B4EBB6F304D61E236F04B3E4672A2F109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 05:01:04 +0000 Manifest this update: Wed 24 Dec 2025 05:01:04 +0000 Manifest next update: Thu 25 Dec 2025 05:01:04 +0000 Files and hashes: 1: EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa (hash: 1y3tSjFaZERbPwiKrhlP5/eJ5GlotVuhhvMAWtoaIrk=) 2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: przEs/O96eqd5SCPo1pw6vZMlcVi2ILI43tGUNpJfK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:6f:30:4d:61:e2:36:f0:4b:3e:46:72:a2:f1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Validity Not Before: Dec 24 05:01:04 2025 GMT Not After : Dec 25 05:01:04 2025 GMT Subject: CN=9d5c07198a41b4649b89ad2ad2f542fcf46a4b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:b9:26:e5:56:3f:3b:d7:c3:89:e3:87:b7: e4:30:91:d5:b5:28:5b:0c:63:c2:bf:20:5f:19:7a: ab:99:a7:5f:84:ea:9f:d5:06:ee:fa:67:ec:fc:1e: 3e:c2:18:99:da:1d:71:7e:e3:b7:e1:50:3a:8d:d3: 5d:2e:5c:5b:28:1d:d0:2a:1a:cd:7a:21:1e:71:ed: 95:e0:b4:c8:62:c3:ea:ad:78:da:10:4b:5d:65:c0: 5b:9a:13:5c:0e:47:25:01:5a:5b:07:af:06:53:93: cb:fb:a0:29:1e:b2:b0:ad:5a:32:3c:cc:b4:92:77: 4d:13:4f:c3:c3:1e:7f:5c:9f:39:15:24:81:18:41: 72:f0:8a:5d:14:88:4a:7a:77:70:03:29:69:1c:80: 12:7c:58:f1:6a:e7:d3:76:4d:0a:eb:50:3d:b9:6d: 76:19:2f:84:65:ae:16:3e:53:3b:6d:ef:9c:3a:f3: 09:1a:74:77:8b:e8:17:ed:75:b2:ac:29:11:d6:2c: d8:04:d1:a4:c6:a6:b1:7b:30:6b:a8:e1:93:04:66: b7:cd:5b:7d:10:c7:f5:a9:f0:c2:2c:3d:68:ff:56: b8:0d:42:58:cb:a1:88:45:0a:a1:48:b7:7c:7b:b9: a4:04:bf:6b:cf:6c:b9:ab:0b:e6:e2:8d:8f:80:12: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5C:07:19:8A:41:B4:64:9B:89:AD:2A:D2:F5:42:FC:F4:6A:4B:8D X509v3 Authority Key Identifier: keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:39:c9:d7:cb:af:d5:2d:41:9e:47:c5:26:dd:bd:47:4f:b0: 98:08:8a:d4:6c:28:cb:62:56:7f:b1:b9:76:fd:e8:e6:9c:92: 9b:02:bb:23:a6:47:50:d8:6b:49:a0:67:dd:c4:5e:3c:a4:b4: 13:a5:b5:6b:10:ff:98:7b:da:22:ec:bc:44:1c:9a:e4:9d:51: 09:f9:c7:7b:b0:ba:90:38:59:a3:ac:38:01:e1:76:2b:2b:78: 2b:a9:35:c0:9c:22:c0:4d:5b:12:b8:0d:0d:ed:3e:17:9f:e9: 11:94:32:75:e0:0e:e1:2d:a3:d2:d7:31:05:1f:d4:1a:11:b0: fd:3b:44:1f:d5:71:c8:ad:2d:50:99:ea:4c:5b:a8:b7:b1:f3: 84:55:d0:f1:86:9b:01:3f:41:f9:a2:bf:93:b1:22:79:70:98: 78:3e:4e:0f:8d:e7:fe:6a:3f:a5:69:e1:30:cf:5f:7e:87:7f: b8:0a:41:45:d4:2d:19:cc:29:ce:28:eb:74:f9:25:6f:d7:48: bd:70:ba:f9:10:38:f7:71:ca:e6:96:c2:15:2a:10:53:41:7f: 9c:d7:71:d6:70:c1:68:ab:45:58:65:bb:73:22:7f:11:78:a5: f1:94:09:1f:55:d0:e7:d6:11:4d:6a:e9:2d:4b:fc:df:c3:04: f0:68:34:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu28wTWHiNvBLPkZyovEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMWRhMGM3YTk5NDA1YzQ2YmFhZDg0Y2I5ZDkzZTgzNDU5 OWM4ZTEwHhcNMjUxMjI0MDUwMTA0WhcNMjUxMjI1MDUwMTA0WjAzMTEwLwYDVQQD Eyg5ZDVjMDcxOThhNDFiNDY0OWI4OWFkMmFkMmY1NDJmY2Y0NmE0YjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ25JuVWPzvXw4njh7fkMJHVtShb DGPCvyBfGXqrmadfhOqf1Qbu+mfs/B4+whiZ2h1xfuO34VA6jdNdLlxbKB3QKhrN eiEece2V4LTIYsPqrXjaEEtdZcBbmhNcDkclAVpbB68GU5PL+6ApHrKwrVoyPMy0 kndNE0/Dwx5/XJ85FSSBGEFy8IpdFIhKendwAylpHIASfFjxaufTdk0K61A9uW12 GS+EZa4WPlM7be+cOvMJGnR3i+gX7XWyrCkR1izYBNGkxqaxezBrqOGTBGa3zVt9 EMf1qfDCLD1o/1a4DUJYy6GIRQqhSLd8e7mkBL9rz2y5qwvm4o2PgBJwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1cBxmKQbRkm4mtKtL1Qvz0akuNMB8GA1UdIwQY MBaAFJEdoMeplAXEa6rYTLnZPoNFmcjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQt NDcyZjAyNDUwZWMzLzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQtNDcyZjAyNDUwZWMz LzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjnJ18uv 1S1BnkfFJt29R0+wmAiK1Gwoy2JWf7G5dv3o5pySmwK7I6ZHUNhrSaBn3cRePKS0 E6W1axD/mHvaIuy8RBya5J1RCfnHe7C6kDhZo6w4AeF2Kyt4K6k1wJwiwE1bErgN De0+F5/pEZQydeAO4S2j0tcxBR/UGhGw/TtEH9VxyK0tUJnqTFuot7HzhFXQ8Yab AT9B+aK/k7EieXCYeD5OD43n/mo/pWnhMM9ffod/uApBRdQtGcwpzijrdPklb9dI vXC6+RA493HK5pbCFSoQU0F/nNdx1nDBaKtFWGW7cyJ/EXil8ZQJH1XQ59YRTWrp LUv838ME8Gg0Pg== -----END CERTIFICATE-----Generated at Wed Dec 24 13:37:31 2025 by rpki-client