This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: 975SWmw7v4ITJOqK1XjOeMWwYiSQ7W5VQxYE+tuX9RI= Subject key identifier: 9F:AD:48:5A:F8:E8:72:48:04:AE:55:0E:B9:64:11:E4:A0:D8:C9:25 Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019B410048A76B05D9449BC6E271309A4755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 17A0 Signing time: Sun 21 Dec 2025 13:01:36 +0000 Manifest this update: Sun 21 Dec 2025 13:01:36 +0000 Manifest next update: Mon 22 Dec 2025 13:01:36 +0000 Files and hashes: 1: 2yys3LU7mts-Gl7bPeFVNGNeuMo.roa (hash: Yt+g7nPKVN9s0l9R0GhUZc17Zle6twg1T3pZzSdURFs=) 2: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=) 3: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=) 4: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=) 5: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=) 6: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=) 7: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=) 8: d5-pkB3Ay6XEnASQ842eqa4zFQk.roa (hash: L45Bt9lWf+G6vwKrnrElP/rJXXbR6PzfYe43SPRGryg=) 9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: 4DsTl+w8ApDkg+h8G4rR/3KDicIcmIWgb5T4CddUW0U=) 10: zlsE5y8ISkml9LwmthjQE4JtzdI.roa (hash: P7L80Xo0dmoEjCHpVucHdGzStrd3j71piAYh2Bx9HXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:48:a7:6b:05:d9:44:9b:c6:e2:71:30:9a:47:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Dec 21 13:01:36 2025 GMT Not After : Dec 22 13:01:36 2025 GMT Subject: CN=9fad485af8e8724804ae550eb96411e4a0d8c925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:fe:8b:37:c5:1c:3a:e0:98:80:9d:8f:73: f8:df:9a:08:3a:cb:d1:2c:30:a5:8e:55:b4:af:06: 52:7d:7f:ed:7f:3e:91:a6:74:0a:d1:fb:d5:e2:f1: 14:69:5c:1f:2f:29:df:30:e1:72:1b:0f:14:2c:c5: ac:5a:6f:a5:c5:aa:76:9d:a4:d5:76:35:b0:40:70: 11:98:4c:01:c6:9e:37:b7:83:50:4e:98:cc:70:f1: 91:ed:6a:d1:6a:1a:27:e8:62:92:c2:76:b8:66:ad: dc:e5:03:c1:3c:be:be:17:83:71:48:33:56:15:f4: 7d:ad:21:f8:fb:77:bf:70:4d:8f:1b:59:c2:e0:0b: d2:bf:d1:b7:0f:ad:f0:bd:d9:77:ac:48:d2:a1:5d: 16:b8:37:c6:a6:e5:fd:bc:c4:61:cb:39:0b:10:51: 7c:32:f6:93:db:af:89:ae:27:8c:e3:3b:f7:89:29: 3b:56:10:a2:16:af:90:ad:07:80:9b:9c:fb:ba:08: 1e:fa:14:e0:3d:27:b8:92:9d:b5:8a:54:53:f2:1c: 12:df:41:69:66:51:b2:cf:11:aa:2f:6d:ff:01:35: 67:66:d4:5d:8e:44:8f:cc:93:a7:d8:6e:2d:cc:2e: 5f:07:70:d0:76:ef:c5:ab:ae:32:36:54:c2:f6:0f: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AD:48:5A:F8:E8:72:48:04:AE:55:0E:B9:64:11:E4:A0:D8:C9:25 X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d2:38:69:dc:4d:a2:e7:b8:55:96:45:7c:3d:7e:88:e5:3c: 1e:26:e9:17:18:3b:49:97:31:c3:23:c1:f0:7a:0f:52:ce:c4: 27:a6:75:f7:43:3a:fe:1d:82:0f:01:6f:bd:b9:bf:ef:76:80: 35:63:ce:ab:53:25:a1:ca:e0:a6:53:9f:2e:89:8e:fc:b8:58: 44:76:fb:7a:35:5e:c6:fb:72:5e:64:3f:c1:55:2f:9e:81:b6: 29:2e:d6:9f:ff:75:b4:e7:38:75:00:44:42:21:cd:f7:f9:18: f8:c2:ed:ed:44:1b:db:83:f8:76:5a:75:75:d0:4d:d1:48:41: 67:38:88:8f:c2:3a:6c:88:cb:9d:31:ab:e6:6b:f3:9b:11:98: c8:9c:25:1f:80:b0:c1:87:3b:39:a3:c5:a8:fc:18:c6:1a:59: 8d:64:14:ef:33:0b:b2:30:d3:55:8c:2f:df:99:8d:17:b1:56: 8a:e6:d5:fe:92:52:88:4e:ba:07:72:c3:05:c5:da:4a:c3:1a: 92:50:d8:bd:95:13:a7:b2:b1:2d:fc:c3:eb:c0:6c:94:59:3c: 31:f7:e3:08:89:1d:bb:37:c3:9c:b0:69:df:a8:72:13:14:c4: e3:c1:a2:bb:6b:b7:63:96:67:f2:a7:e3:f8:43:fc:14:67:f1: e4:34:2a:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAEinawXZRJvG4nEwmkdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjUxMjIxMTMwMTM2WhcNMjUxMjIyMTMwMTM2WjAzMTEwLwYDVQQD Eyg5ZmFkNDg1YWY4ZTg3MjQ4MDRhZTU1MGViOTY0MTFlNGEwZDhjOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBz+izfFHDrgmICdj3P435oIOsvR LDCljlW0rwZSfX/tfz6RpnQK0fvV4vEUaVwfLynfMOFyGw8ULMWsWm+lxap2naTV djWwQHARmEwBxp43t4NQTpjMcPGR7WrRahon6GKSwna4Zq3c5QPBPL6+F4NxSDNW FfR9rSH4+3e/cE2PG1nC4AvSv9G3D63wvdl3rEjSoV0WuDfGpuX9vMRhyzkLEFF8 MvaT26+JrieM4zv3iSk7VhCiFq+QrQeAm5z7ugge+hTgPSe4kp21ilRT8hwS30Fp ZlGyzxGqL23/ATVnZtRdjkSPzJOn2G4tzC5fB3DQdu/Fq64yNlTC9g+3RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+tSFr46HJIBK5VDrlkEeSg2MklMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtI4adxN oue4VZZFfD1+iOU8HibpFxg7SZcxwyPB8HoPUs7EJ6Z190M6/h2CDwFvvbm/73aA NWPOq1MlocrgplOfLomO/LhYRHb7ejVexvtyXmQ/wVUvnoG2KS7Wn/91tOc4dQBE QiHN9/kY+MLt7UQb24P4dlp1ddBN0UhBZziIj8I6bIjLnTGr5mvzmxGYyJwlH4Cw wYc7OaPFqPwYxhpZjWQU7zMLsjDTVYwv35mNF7FWiubV/pJSiE66B3LDBcXaSsMa klDYvZUTp7KxLfzD68BslFk8MffjCIkduzfDnLBp36hyExTE48Giu2u3Y5Zn8qfj +EP8FGfx5DQqLw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:45 2025 by rpki-client