This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json) Hash identifier: tJI20bRrstyRTYIoimyGYBJpAHG6r1xgGGGxswYgbj0= Subject key identifier: E1:42:8D:3E:1C:13:E9:8E:1E:51:07:FA:C5:A1:DA:99:B0:EE:F2:2E Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12 Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712 Certificate serial: 019B2B1D05C26C228BC94EBE056A2A3AF8A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 07:01:20 +0000 Manifest this update: Wed 17 Dec 2025 07:01:20 +0000 Manifest next update: Thu 18 Dec 2025 07:01:20 +0000 Files and hashes: 1: 8qr5TNtGc99EM-QMiEzlHX-eukY.roa (hash: dcTHPs/n6VDmLIgcktF37rlPg3cwpYptx2bPoNDPRlM=) 2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: jmWI2/hqbWY/PTiKuZNAtdTCrfI238mVX8+HNQjBtIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:05:c2:6c:22:8b:c9:4e:be:05:6a:2a:3a:f8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712 Validity Not Before: Dec 17 07:01:20 2025 GMT Not After : Dec 18 07:01:20 2025 GMT Subject: CN=e1428d3e1c13e98e1e5107fac5a1da99b0eef22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:47:9b:e6:44:cf:0d:57:14:87:4f:b4:2a: 7b:39:0d:7b:16:01:8c:0c:d0:e5:df:9f:0f:30:a2: b7:34:ea:5f:60:ed:a5:a4:bd:e1:6a:3b:6a:ab:ac: ff:d0:21:e1:57:55:99:96:35:62:c5:c4:f0:c9:e3: be:38:8e:7c:07:43:5e:c3:70:ff:ca:13:b2:d1:30: 8f:a2:0a:1c:50:e6:83:af:08:86:45:f1:3b:1d:db: ec:d3:ee:9e:bc:30:74:15:7b:ff:0a:e7:af:67:8f: bb:36:b7:96:26:c2:0b:73:ef:07:0f:e5:55:d7:25: b4:0e:11:9b:96:ee:8e:6a:9a:42:a2:03:f1:18:24: 66:96:bf:a1:40:87:45:52:2b:7c:8e:a5:20:bd:b1: fa:a1:8b:b2:aa:f8:93:5d:ed:71:fa:31:20:97:a2: ae:20:71:af:52:d3:fd:73:55:00:fe:4e:f2:bf:23: 4e:d4:9d:6b:eb:37:70:ca:aa:80:1a:9a:cd:f0:08: 01:3d:3a:d3:1e:32:e7:b9:ea:06:31:44:a2:09:cc: c0:8a:24:4a:1c:ba:f4:4c:15:e8:29:2f:bf:1d:88: e4:13:19:ca:6d:3f:7c:3d:c7:f2:78:01:24:95:00: 85:5f:38:db:f7:84:0d:6d:71:6c:a3:4a:df:18:ca: a8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:42:8D:3E:1C:13:E9:8E:1E:51:07:FA:C5:A1:DA:99:B0:EE:F2:2E X509v3 Authority Key Identifier: keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:71:b8:66:5a:e2:a1:d7:ae:44:ad:49:ad:69:a9:d7:16:0e: 81:ec:b7:de:8e:4e:e2:95:46:50:3d:f9:19:2c:73:f8:a6:d6: 17:ef:77:92:6f:ff:d6:f3:50:d0:c5:f8:87:87:34:26:94:ce: 39:2d:75:83:98:d8:f4:91:ac:a9:18:67:a9:29:4c:de:b2:bd: 14:57:c0:f9:a7:b2:a1:44:39:37:2d:49:6c:99:88:b9:d0:af: ba:e1:06:fa:e5:53:8e:8d:20:73:ff:4d:84:63:68:cf:a1:cc: 4e:19:df:39:39:b4:bf:2b:a9:99:64:dd:ef:99:c5:07:86:c9: ac:00:df:84:32:72:77:a5:92:6e:bc:b1:e1:e8:8d:bb:98:88: 05:8c:10:3c:27:5f:94:48:13:bb:b2:be:55:cc:bb:3f:74:bd: b4:03:2a:ef:f1:51:8d:c4:ea:cf:c9:a7:25:d3:d0:5c:8e:27: 9c:95:86:c8:b7:b7:7c:11:e6:30:d2:8c:31:c1:57:ab:ff:dd: c2:1a:da:70:8f:4d:4a:03:03:18:16:b5:1d:ea:61:e3:2f:5e: 6d:ce:29:22:d7:35:26:4e:6e:2a:56:96:fe:d4:ce:0a:27:fc: 03:c4:8b:ff:a9:7c:9b:b2:20:e9:be:ee:82:b7:b2:82:c1:de: c6:36:e3:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHQXCbCKLyU6+BWoqOvinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZDNlNTM3MWI2NGFiOTQyZDZkY2JhMDRhZGZmMmFlN2Fi N2M3MTIwHhcNMjUxMjE3MDcwMTIwWhcNMjUxMjE4MDcwMTIwWjAzMTEwLwYDVQQD EyhlMTQyOGQzZTFjMTNlOThlMWU1MTA3ZmFjNWExZGE5OWIwZWVmMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD1Hm+ZEzw1XFIdPtCp7OQ17FgGM DNDl358PMKK3NOpfYO2lpL3hajtqq6z/0CHhV1WZljVixcTwyeO+OI58B0New3D/ yhOy0TCPogocUOaDrwiGRfE7Hdvs0+6evDB0FXv/CuevZ4+7NreWJsILc+8HD+VV 1yW0DhGblu6OappCogPxGCRmlr+hQIdFUit8jqUgvbH6oYuyqviTXe1x+jEgl6Ku IHGvUtP9c1UA/k7yvyNO1J1r6zdwyqqAGprN8AgBPTrTHjLnueoGMUSiCczAiiRK HLr0TBXoKS+/HYjkExnKbT98PcfyeAEklQCFXzjb94QNbXFso0rfGMqofwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFCjT4cE+mOHlEH+sWh2pmw7vIuMB8GA1UdIwQY MBaAFJDT5TcbZKuULW3LoErf8q56t8cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva05QbE54dGtxNVF0YmN1Z1N0X3lybnEzeHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMTM5YTQtNmRhMi00MzI5LWFhZTIt YTE3ODgyYjkyNmEwLzEva05QbE54dGtxNVF0YmN1Z1N0X3lybnEzeHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jMTM5YTQtNmRhMi00MzI5LWFhZTItYTE3ODgyYjkyNmEw LzEva05QbE54dGtxNVF0YmN1Z1N0X3lybnEzeHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnG4Zlri odeuRK1JrWmp1xYOgey33o5O4pVGUD35GSxz+KbWF+93km//1vNQ0MX4h4c0JpTO OS11g5jY9JGsqRhnqSlM3rK9FFfA+aeyoUQ5Ny1JbJmIudCvuuEG+uVTjo0gc/9N hGNoz6HMThnfOTm0vyupmWTd75nFB4bJrADfhDJyd6WSbryx4eiNu5iIBYwQPCdf lEgTu7K+Vcy7P3S9tAMq7/FRjcTqz8mnJdPQXI4nnJWGyLe3fBHmMNKMMcFXq//d whracI9NSgMDGBa1Heph4y9ebc4pItc1Jk5uKlaW/tTOCif8A8SL/6l8m7Ig6b7u greygsHexjbjZg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:28:52 2025 by rpki-client