This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json) Hash identifier: PvIfe8NZ6ihhNdpZSqp4oYetpY+vivcrpTBKKsViOfk= Subject key identifier: C5:5B:AA:92:F6:66:D5:A5:86:6F:D7:13:E3:4C:6E:3C:08:B4:32:AA Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Certificate serial: 019B3F485B414117C4E13AA432B536F71AB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 05:01:05 +0000 Manifest this update: Sun 21 Dec 2025 05:01:05 +0000 Manifest next update: Mon 22 Dec 2025 05:01:05 +0000 Files and hashes: 1: EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa (hash: 1y3tSjFaZERbPwiKrhlP5/eJ5GlotVuhhvMAWtoaIrk=) 2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: DWGflC4rnslLtNn93sEswHiEIak7hCoI0bq85hitA5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:5b:41:41:17:c4:e1:3a:a4:32:b5:36:f7:1a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Validity Not Before: Dec 21 05:01:05 2025 GMT Not After : Dec 22 05:01:05 2025 GMT Subject: CN=c55baa92f666d5a5866fd713e34c6e3c08b432aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:70:8f:b6:f5:5e:c2:12:3e:06:11:ee:2a: 85:47:99:88:9a:6e:ef:ac:8c:55:90:01:a0:f2:0f: ae:a9:12:0a:05:a1:64:37:3e:77:96:14:f2:e4:d6: 3b:89:c4:c6:46:63:f8:fc:15:0e:90:1d:12:10:91: 57:e7:74:26:3c:20:c2:cb:9b:34:ff:db:66:23:33: b6:d9:9a:60:3a:58:8d:2b:2e:73:69:30:e5:df:91: 98:97:e6:07:02:24:f8:c7:72:eb:42:6a:ca:c2:a5: a0:2d:b0:3f:54:6e:38:62:e7:c3:b1:9d:04:d1:a3: 8a:7d:d0:a5:df:2e:41:9d:3b:95:75:10:87:93:b2: c3:ef:21:7b:8a:06:43:43:6d:bc:95:e0:c4:fc:0f: 2f:a2:f5:cc:ac:d9:8a:2b:7e:f4:5c:0d:41:93:44: 10:13:9c:82:8c:b8:5c:37:88:bf:25:f3:6e:9c:00: cf:92:1d:d7:06:7f:9f:43:e6:5c:b8:5b:8a:2f:bb: b4:08:eb:9c:cf:18:ac:28:e6:6b:5e:13:e3:92:71: b1:bd:22:70:f2:6f:e8:06:50:20:c0:76:49:a8:6c: 32:9d:df:f3:8d:71:8e:43:9d:3a:80:7f:f9:3c:7b: 49:92:6a:cd:fc:1f:bb:a0:9d:b1:1c:4a:5c:99:a9: a2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5B:AA:92:F6:66:D5:A5:86:6F:D7:13:E3:4C:6E:3C:08:B4:32:AA X509v3 Authority Key Identifier: keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e6:a6:6f:b4:48:25:18:f3:c3:dd:71:0a:a9:b0:f6:10:00: 21:e3:18:ee:30:42:16:d7:eb:e6:e5:66:95:2f:22:59:f5:87: 68:73:06:11:73:f2:cf:a5:3c:19:83:59:1e:69:f3:37:fb:f7: 75:31:46:00:48:44:c4:0a:f2:0d:c2:d6:5b:e4:fe:6f:59:23: b1:31:23:a1:79:c1:35:fe:70:af:b0:3f:7e:c3:9e:35:3f:2b: 9e:f2:a7:78:f3:5a:33:40:46:ce:35:6a:3c:ed:95:54:cd:3a: 9f:40:01:64:54:37:a1:ba:f5:11:b7:0e:b3:31:b9:59:50:cb: dd:3f:42:27:db:63:90:72:bd:1c:2a:2f:b8:78:fc:53:38:59: 9c:a6:fc:30:dd:ba:37:6d:19:9a:12:8a:95:af:e9:ff:69:52: f5:17:fc:dd:00:cc:d1:72:ae:bf:eb:22:ae:1a:d5:ea:05:4d: dc:58:ba:84:f1:67:8a:c5:1e:04:2f:fc:38:ab:8d:85:71:fb: ff:92:3c:08:39:63:5a:68:36:0c:9f:68:84:4d:3b:1c:70:66: 9c:65:96:31:6a:2e:05:34:c8:5b:ee:c9:de:b0:73:ee:de:72: 54:53:cc:ea:61:50:ad:f7:f2:8e:76:7d:77:8a:a6:d6:17:b5: 1a:76:da:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SFtBQRfE4TqkMrU29xq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMWRhMGM3YTk5NDA1YzQ2YmFhZDg0Y2I5ZDkzZTgzNDU5 OWM4ZTEwHhcNMjUxMjIxMDUwMTA1WhcNMjUxMjIyMDUwMTA1WjAzMTEwLwYDVQQD EyhjNTViYWE5MmY2NjZkNWE1ODY2ZmQ3MTNlMzRjNmUzYzA4YjQzMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4pwj7b1XsISPgYR7iqFR5mImm7v rIxVkAGg8g+uqRIKBaFkNz53lhTy5NY7icTGRmP4/BUOkB0SEJFX53QmPCDCy5s0 /9tmIzO22ZpgOliNKy5zaTDl35GYl+YHAiT4x3LrQmrKwqWgLbA/VG44YufDsZ0E 0aOKfdCl3y5BnTuVdRCHk7LD7yF7igZDQ228leDE/A8vovXMrNmKK370XA1Bk0QQ E5yCjLhcN4i/JfNunADPkh3XBn+fQ+ZcuFuKL7u0COuczxisKOZrXhPjknGxvSJw 8m/oBlAgwHZJqGwynd/zjXGOQ506gH/5PHtJkmrN/B+7oJ2xHEpcmamiwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVbqpL2ZtWlhm/XE+NMbjwItDKqMB8GA1UdIwQY MBaAFJEdoMeplAXEa6rYTLnZPoNFmcjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQt NDcyZjAyNDUwZWMzLzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQtNDcyZjAyNDUwZWMz LzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeamb7RI JRjzw91xCqmw9hAAIeMY7jBCFtfr5uVmlS8iWfWHaHMGEXPyz6U8GYNZHmnzN/v3 dTFGAEhExAryDcLWW+T+b1kjsTEjoXnBNf5wr7A/fsOeNT8rnvKnePNaM0BGzjVq PO2VVM06n0ABZFQ3obr1EbcOszG5WVDL3T9CJ9tjkHK9HCovuHj8UzhZnKb8MN26 N20ZmhKKla/p/2lS9Rf83QDM0XKuv+sirhrV6gVN3Fi6hPFnisUeBC/8OKuNhXH7 /5I8CDljWmg2DJ9ohE07HHBmnGWWMWouBTTIW+7J3rBz7t5yVFPM6mFQrffyjnZ9 d4qm1he1GnbayA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:18 2025 by rpki-client