This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json) Hash identifier: IjJzpQKGujOPaXdZG0PPmfF4ZceJaR6TI7gxqRERCBQ= Subject key identifier: F4:5D:5F:98:37:BF:D9:39:F4:69:27:B1:79:61:45:54:E6:29:3E:AB Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701 Certificate serial: 019B5072F91061099A5973FE49C86E1EE206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft Manifest number: 17A8 Signing time: Wed 24 Dec 2025 13:01:10 +0000 Manifest this update: Wed 24 Dec 2025 13:01:10 +0000 Manifest next update: Thu 25 Dec 2025 13:01:10 +0000 Files and hashes: 1: 2yys3LU7mts-Gl7bPeFVNGNeuMo.roa (hash: Yt+g7nPKVN9s0l9R0GhUZc17Zle6twg1T3pZzSdURFs=) 2: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=) 3: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=) 4: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=) 5: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=) 6: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=) 7: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=) 8: d5-pkB3Ay6XEnASQ842eqa4zFQk.roa (hash: L45Bt9lWf+G6vwKrnrElP/rJXXbR6PzfYe43SPRGryg=) 9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: O6gBpU9vFg2htufIuWBia5J4BJPYchpBqwk5MSA3x7I=) 10: zlsE5y8ISkml9LwmthjQE4JtzdI.roa (hash: P7L80Xo0dmoEjCHpVucHdGzStrd3j71piAYh2Bx9HXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:f9:10:61:09:9a:59:73:fe:49:c8:6e:1e:e2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f25e6a6893f466d2695e90670c047443643701 Validity Not Before: Dec 24 13:01:10 2025 GMT Not After : Dec 25 13:01:10 2025 GMT Subject: CN=f45d5f9837bfd939f46927b179614554e6293eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:ec:05:85:45:b0:44:27:dd:7c:dc:2e:43: ff:83:eb:26:40:03:ae:13:e3:6d:fb:a3:95:6b:42: 52:25:c1:6b:e0:11:21:3b:8e:1e:5a:d3:55:fc:36: fc:46:70:97:e3:36:01:5b:0c:d9:d2:f8:b6:ad:ad: 87:24:77:18:02:79:2f:c8:ce:20:3b:c1:bf:9a:92: 0b:45:bc:cb:e8:35:0a:01:9d:5c:da:ed:fb:a5:ae: 54:ed:7f:49:f2:0e:8d:d2:f3:60:c1:a8:15:44:bc: bd:a6:4a:4b:06:1c:e6:61:d3:1b:6e:d4:55:f4:8d: b4:69:95:27:f1:f7:84:7a:3f:32:e1:21:3a:55:ee: 10:42:bd:be:f9:c4:4d:53:31:34:96:dd:1e:a0:3a: 87:dc:03:1a:49:83:47:37:83:aa:02:70:f6:d7:bc: 69:fa:fd:13:5e:ad:da:45:b9:1b:09:af:e6:eb:1d: 81:9b:2f:ac:8e:7a:3f:1c:9a:f1:7d:61:28:c1:da: 24:30:87:30:98:02:86:ce:27:8d:eb:76:3f:cb:03: db:4d:94:83:5d:2a:eb:82:6a:50:a1:fc:64:fc:aa: 6f:fb:14:91:20:13:72:70:00:40:95:2c:3c:7f:d0: f6:3a:62:b1:31:30:f6:d6:ab:7d:c5:db:8e:72:c2: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5D:5F:98:37:BF:D9:39:F4:69:27:B1:79:61:45:54:E6:29:3E:AB X509v3 Authority Key Identifier: keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3b:c5:41:89:ee:1a:19:d6:60:d7:26:dd:12:d9:fd:cf:7d: 5d:ba:13:45:a1:f8:01:f1:ea:44:dc:b3:87:b4:91:3d:26:25: c7:28:3d:b2:03:b4:fe:d7:fb:68:ee:9f:f6:f8:5e:91:26:cd: 49:49:79:df:e8:1d:bd:b3:18:f7:96:12:e5:e7:36:da:e2:ec: 42:b9:e9:16:3c:a0:23:4f:a9:15:f4:92:93:41:6a:91:08:fa: e8:94:eb:3e:d1:6c:a2:54:5d:b1:3b:e7:0d:50:85:42:6b:fe: 77:b5:9c:06:47:43:77:6d:d3:bb:d9:e9:e0:5e:cb:6e:26:1e: 0d:e0:7f:e1:58:c8:17:8d:c1:9e:bb:53:b7:12:ce:b0:51:ad: 9d:41:64:68:36:20:6e:58:f0:0b:36:f6:45:85:77:2c:2e:d3: e6:88:fe:8f:4f:b4:fc:b8:f7:ef:1a:81:a5:d2:0f:91:c9:eb: 3b:0c:35:8f:27:16:cf:24:57:bc:dd:b4:da:07:76:ce:d2:11: bb:ea:cc:25:bb:28:1f:d3:0b:78:67:cb:1d:89:99:ba:d8:3a: 35:c3:5e:e2:19:e2:ab:0a:20:b8:47:0b:77:e9:62:11:67:77: 53:ca:a2:96:a2:c8:d6:dc:0b:d9:2e:13:66:39:a3:33:cf:37: d8:45:f2:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcvkQYQmaWXP+SchuHuIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2 NDM3MDEwHhcNMjUxMjI0MTMwMTEwWhcNMjUxMjI1MTMwMTEwWjAzMTEwLwYDVQQD EyhmNDVkNWY5ODM3YmZkOTM5ZjQ2OTI3YjE3OTYxNDU1NGU2MjkzZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvejsBYVFsEQn3XzcLkP/g+smQAOu E+Nt+6OVa0JSJcFr4BEhO44eWtNV/Db8RnCX4zYBWwzZ0vi2ra2HJHcYAnkvyM4g O8G/mpILRbzL6DUKAZ1c2u37pa5U7X9J8g6N0vNgwagVRLy9pkpLBhzmYdMbbtRV 9I20aZUn8feEej8y4SE6Ve4QQr2++cRNUzE0lt0eoDqH3AMaSYNHN4OqAnD217xp +v0TXq3aRbkbCa/m6x2Bmy+sjno/HJrxfWEowdokMIcwmAKGzieN63Y/ywPbTZSD XSrrgmpQofxk/Kpv+xSRIBNycABAlSw8f9D2OmKxMTD21qt9xduOcsIqgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRdX5g3v9k59GknsXlhRVTmKT6rMB8GA1UdIwQY MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETvFQYnu GhnWYNcm3RLZ/c99XboTRaH4AfHqRNyzh7SRPSYlxyg9sgO0/tf7aO6f9vhekSbN SUl53+gdvbMY95YS5ec22uLsQrnpFjygI0+pFfSSk0FqkQj66JTrPtFsolRdsTvn DVCFQmv+d7WcBkdDd23Tu9np4F7LbiYeDeB/4VjIF43BnrtTtxLOsFGtnUFkaDYg bljwCzb2RYV3LC7T5oj+j0+0/Lj37xqBpdIPkcnrOww1jycWzyRXvN202gd2ztIR u+rMJbsoH9MLeGfLHYmZutg6NcNe4hniqwoguEcLd+liEWd3U8qilqLI1twL2S4T ZjmjM8832EXy2w== -----END CERTIFICATE-----Generated at Wed Dec 24 21:52:38 2025 by rpki-client