This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json) Hash identifier: Lc67vcuejLohB3D1hEpqtjhbyig+pjPw8ChfLV7BPpo= Subject key identifier: 7B:A9:CD:00:D0:B1:AF:3F:0B:19:E2:4C:C1:60:41:09:F6:DC:BE:17 Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04 Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104 Certificate serial: 019B4091C50311929D9AC386429C20F31E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft Manifest number: 14DC Signing time: Sun 21 Dec 2025 11:00:53 +0000 Manifest this update: Sun 21 Dec 2025 11:00:53 +0000 Manifest next update: Mon 22 Dec 2025 11:00:53 +0000 Files and hashes: 1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: 6fy9LqXrOyoC+AXDpBBGDgbX+Ql6evxpU6P09AZ9y3o=) 2: yawZ00_1T1Sp8kgBpRr9kJDLMKE.roa (hash: a+4sT7IhaHQCrsjdIym/2JOKSsvSh3sX6W3E1vUrWYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:c5:03:11:92:9d:9a:c3:86:42:9c:20:f3:1e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104 Validity Not Before: Dec 21 11:00:53 2025 GMT Not After : Dec 22 11:00:53 2025 GMT Subject: CN=7ba9cd00d0b1af3f0b19e24cc1604109f6dcbe17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:28:63:a4:29:5f:f4:d0:39:b1:e0:a6:82: 49:bb:04:a5:e5:aa:5f:91:41:d3:85:b9:de:0d:e0: 46:5e:1f:71:75:fb:f5:5a:bc:3b:0c:26:9c:c5:11: 01:b0:ec:8a:d5:a1:b8:cf:c1:28:65:01:57:e7:e0: 9b:c6:eb:40:b9:eb:a6:92:d3:ba:19:3b:e1:a2:dc: 53:91:b8:a3:c4:97:4b:09:44:9c:b5:1e:28:dc:ec: 56:d6:07:a7:cd:15:32:b3:60:2f:72:be:09:2d:e6: ee:d6:52:42:96:97:03:cd:c2:f2:b2:8b:31:19:f6: 38:a0:a9:40:f7:51:c3:db:55:ae:ac:70:ab:8e:43: 95:2e:80:db:53:8e:39:0e:cf:dc:05:68:8f:21:98: 21:5e:8f:ba:e8:f5:f7:24:25:81:cf:6b:58:1d:ed: 73:a7:90:11:5a:c7:ea:5d:2f:51:11:aa:66:4d:90: c8:37:38:8c:29:e6:5f:49:23:d0:ad:53:cc:06:07: db:c9:d6:b2:3d:31:63:6b:14:91:0d:27:d5:57:71: 07:87:95:56:7b:1d:4e:47:ff:05:a0:70:b6:35:83: 3e:13:b5:89:e9:df:d5:58:59:8d:48:e9:80:03:9a: 8e:48:c2:35:3e:9b:a9:9f:14:ca:0c:96:12:ad:59: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A9:CD:00:D0:B1:AF:3F:0B:19:E2:4C:C1:60:41:09:F6:DC:BE:17 X509v3 Authority Key Identifier: keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a5:56:0e:e6:fb:78:2b:52:fe:60:11:0f:31:57:3e:c1:0d: 98:d8:dd:ce:92:9d:61:45:22:f7:92:38:04:21:87:ab:5d:9a: 79:97:ef:cd:d1:fa:50:20:99:b3:aa:82:e1:7a:d5:82:de:58: 79:a3:1d:2d:47:3d:bf:24:7b:3b:ac:8e:c9:00:c5:53:e9:10: e8:af:0b:0f:88:1b:9b:a2:a4:22:53:89:4e:95:02:d4:ea:f5: 51:54:c9:eb:97:29:2d:b7:2a:63:71:33:7d:9c:e6:af:50:ea: 60:2b:6f:1d:f8:04:82:06:99:8f:22:8c:f5:da:f5:a1:b8:1a: eb:9c:1b:f1:eb:f6:35:16:ad:ab:33:7f:43:67:cf:82:de:3d: 42:e2:c3:b8:cc:7a:d4:65:b8:9c:22:c6:7d:c6:de:d2:9c:a8: 27:a8:ba:a0:b6:2f:05:40:08:40:f1:2f:34:75:42:78:5e:5f: ec:c4:c9:d5:7e:4c:e8:62:c9:86:c5:77:c2:fa:c7:e2:49:1b: cc:1e:00:d3:cc:ed:ea:c1:90:35:07:2e:00:de:50:94:d5:46: 06:41:3d:c0:07:43:4d:3e:8e:fb:89:90:1a:71:ec:5f:ff:8f: 2e:1a:9a:33:60:3c:18:bb:60:7a:88:fc:a1:71:d6:fe:a8:b7: 5a:c3:d5:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkcUDEZKdmsOGQpwg8x4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTAzYjY4Zjg3ZGE3MWMyNzFjOWNmNWM4MmU5NTVkYmM2 NWMxMDQwHhcNMjUxMjIxMTEwMDUzWhcNMjUxMjIyMTEwMDUzWjAzMTEwLwYDVQQD Eyg3YmE5Y2QwMGQwYjFhZjNmMGIxOWUyNGNjMTYwNDEwOWY2ZGNiZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppYoY6QpX/TQObHgpoJJuwSl5apf kUHThbneDeBGXh9xdfv1Wrw7DCacxREBsOyK1aG4z8EoZQFX5+CbxutAueumktO6 GTvhotxTkbijxJdLCUSctR4o3OxW1genzRUys2Avcr4JLebu1lJClpcDzcLysosx GfY4oKlA91HD21WurHCrjkOVLoDbU445Ds/cBWiPIZghXo+66PX3JCWBz2tYHe1z p5ARWsfqXS9REapmTZDINziMKeZfSSPQrVPMBgfbydayPTFjaxSRDSfVV3EHh5VW ex1OR/8FoHC2NYM+E7WJ6d/VWFmNSOmAA5qOSMI1PpupnxTKDJYSrVk4nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHupzQDQsa8/CxniTMFgQQn23L4XMB8GA1UdIwQY MBaAFJCgO2j4faccJxyc9cgulV28ZcEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YWZjMzctMDkwOS00ZDU0LWJjZWYt YmQzNGUwYTk1YTFlLzEva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YWZjMzctMDkwOS00ZDU0LWJjZWYtYmQzNGUwYTk1YTFl LzEva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaVWDub7 eCtS/mARDzFXPsENmNjdzpKdYUUi95I4BCGHq12aeZfvzdH6UCCZs6qC4XrVgt5Y eaMdLUc9vyR7O6yOyQDFU+kQ6K8LD4gbm6KkIlOJTpUC1Or1UVTJ65cpLbcqY3Ez fZzmr1DqYCtvHfgEggaZjyKM9dr1obga65wb8ev2NRatqzN/Q2fPgt49QuLDuMx6 1GW4nCLGfcbe0pyoJ6i6oLYvBUAIQPEvNHVCeF5f7MTJ1X5M6GLJhsV3wvrH4kkb zB4A08zt6sGQNQcuAN5QlNVGBkE9wAdDTT6O+4mQGnHsX/+PLhqaM2A8GLtgeoj8 oXHW/qi3WsPVoA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:38:51 2025 by rpki-client