This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft File: kgm43V6nJYkIN4Zh8rqe-JrToLE.mft (raw, json) Hash identifier: B1SMbnig78z5Zx6lv9z3GvUrZbNymL3gIoFe7HI+uMw= Subject key identifier: FA:2B:2F:FE:03:57:DB:FD:8D:EE:10:3F:0B:DD:2B:27:F4:94:E2:0B Authority key identifier: 92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1 Certificate issuer: /CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1 Certificate serial: 019B4091EEE35672D343802CB5130BD3407F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft Manifest number: 02FD Signing time: Sun 21 Dec 2025 11:01:04 +0000 Manifest this update: Sun 21 Dec 2025 11:01:04 +0000 Manifest next update: Mon 22 Dec 2025 11:01:04 +0000 Files and hashes: 1: WReM2adAhR_LtpNyhGqyNjE1Y4M.roa (hash: CfgqMj+xDVkXamVtZy6LM6aMe3AmsivTTFfgXAb+rPQ=) 2: kgm43V6nJYkIN4Zh8rqe-JrToLE.crl (hash: 2skFzT0QMA2ClXWO5AeSD+PkP0tECPC0Y+XNPlfgi1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:ee:e3:56:72:d3:43:80:2c:b5:13:0b:d3:40:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9209b8dd5ea7258908378661f2ba9ef89ad3a0b1 Validity Not Before: Dec 21 11:01:04 2025 GMT Not After : Dec 22 11:01:04 2025 GMT Subject: CN=fa2b2ffe0357dbfd8dee103f0bdd2b27f494e20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8c:23:02:a0:d8:15:6b:54:b6:b5:86:ea:e4: a8:9c:c8:6a:84:e5:9b:9a:2c:e8:40:8a:c5:c6:06: 3e:59:36:46:5b:3b:7c:69:1a:0d:18:26:14:49:70: e3:99:72:e8:93:9a:fe:fb:9c:3a:69:de:c6:be:7d: 1d:23:6d:38:b8:06:3d:96:f6:45:a3:72:c7:41:43: c9:1c:58:9d:2c:45:1d:73:df:b3:19:8e:ac:14:01: 57:25:af:8b:5f:b6:a4:26:9a:29:5d:1c:7d:92:6c: 01:91:fe:84:c2:21:bf:ee:bf:dd:06:61:71:f8:4b: db:97:33:d9:52:e8:f7:82:0c:4a:51:a2:1c:ee:bc: f9:1a:0e:67:5c:8e:0e:73:be:5c:38:93:e8:7b:71: 9e:02:10:c8:4d:8c:46:46:d7:cf:4d:64:af:13:fe: 28:6b:59:fb:73:d2:6b:ec:e9:bb:ef:4c:20:71:a5: 18:f4:86:b7:8f:12:8a:8a:36:3a:6a:68:57:f4:31: 40:d0:b8:46:53:52:9f:5a:e8:81:ec:30:fb:4c:54: 7b:b6:8b:4a:a7:84:80:f2:27:58:c7:6a:7a:b2:01: 5f:24:64:f8:a2:64:d9:1b:3a:80:38:91:3d:fc:bc: ef:9d:68:78:ba:a4:7f:82:58:75:39:68:bd:49:99: e1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:2F:FE:03:57:DB:FD:8D:EE:10:3F:0B:DD:2B:27:F4:94:E2:0B X509v3 Authority Key Identifier: keyid:92:09:B8:DD:5E:A7:25:89:08:37:86:61:F2:BA:9E:F8:9A:D3:A0:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgm43V6nJYkIN4Zh8rqe-JrToLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/688da5-d238-47ce-b2e8-890ffea8d0bc/1/kgm43V6nJYkIN4Zh8rqe-JrToLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:15:10:d1:71:fc:f3:19:04:eb:4c:69:6e:fb:d1:10:de:3b: 68:74:fb:63:09:26:ee:8d:06:e0:82:dc:20:99:00:29:f4:19: 6f:4c:4d:2b:0a:95:6b:16:d4:9d:d3:2d:70:ad:ec:6a:ce:af: 2f:82:f9:dd:0d:c4:26:97:d7:4c:d9:40:34:d6:ff:31:94:34: 4d:74:b9:89:65:ad:b1:7b:cd:9d:fc:38:87:ce:6a:64:6d:58: d0:ce:f1:0e:6d:28:05:90:5d:20:21:2f:1f:bd:52:53:41:60: 2c:3e:d9:b2:b5:3e:9a:6c:d8:6c:52:8d:f9:ad:a4:c5:3a:25: 27:44:35:48:b4:1a:5c:18:92:31:1c:53:3a:28:09:50:40:33: 53:7f:40:af:30:43:bf:35:64:8e:87:85:3f:93:3b:04:77:55: ca:19:50:c4:2c:f2:a8:ab:7f:75:ad:c0:c3:97:48:74:4b:57: 17:44:a6:14:66:93:f0:60:d6:05:80:52:ef:93:75:22:13:da: d4:49:e3:b6:7c:f9:e3:35:e1:d9:40:cb:98:ee:b4:8b:ff:07: 63:4e:65:d3:7a:53:31:50:63:89:00:56:ff:68:30:1c:ea:75: d5:ec:2f:d6:b2:ae:b6:35:a2:bf:1c:d6:08:13:0b:bf:23:76: a1:f1:21:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAke7jVnLTQ4AstRML00B/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMDliOGRkNWVhNzI1ODkwODM3ODY2MWYyYmE5ZWY4OWFk M2EwYjEwHhcNMjUxMjIxMTEwMTA0WhcNMjUxMjIyMTEwMTA0WjAzMTEwLwYDVQQD EyhmYTJiMmZmZTAzNTdkYmZkOGRlZTEwM2YwYmRkMmIyN2Y0OTRlMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIwjAqDYFWtUtrWG6uSonMhqhOWb mizoQIrFxgY+WTZGWzt8aRoNGCYUSXDjmXLok5r++5w6ad7Gvn0dI204uAY9lvZF o3LHQUPJHFidLEUdc9+zGY6sFAFXJa+LX7akJpopXRx9kmwBkf6EwiG/7r/dBmFx +EvblzPZUuj3ggxKUaIc7rz5Gg5nXI4Oc75cOJPoe3GeAhDITYxGRtfPTWSvE/4o a1n7c9Jr7Om770wgcaUY9Ia3jxKKijY6amhX9DFA0LhGU1KfWuiB7DD7TFR7totK p4SA8idYx2p6sgFfJGT4omTZGzqAOJE9/LzvnWh4uqR/glh1OWi9SZnh2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPorL/4DV9v9je4QPwvdKyf0lOILMB8GA1UdIwQY MBaAFJIJuN1epyWJCDeGYfK6nvia06CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgt ODkwZmZlYThkMGJjLzEva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy82ODhkYTUtZDIzOC00N2NlLWIyZTgtODkwZmZlYThkMGJj LzEva2dtNDNWNm5KWWtJTjRaaDhycWUtSnJUb0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBUQ0XH8 8xkE60xpbvvREN47aHT7Ywkm7o0G4ILcIJkAKfQZb0xNKwqVaxbUndMtcK3sas6v L4L53Q3EJpfXTNlANNb/MZQ0TXS5iWWtsXvNnfw4h85qZG1Y0M7xDm0oBZBdICEv H71SU0FgLD7ZsrU+mmzYbFKN+a2kxTolJ0Q1SLQaXBiSMRxTOigJUEAzU39ArzBD vzVkjoeFP5M7BHdVyhlQxCzyqKt/da3Aw5dIdEtXF0SmFGaT8GDWBYBS75N1IhPa 1Enjtnz54zXh2UDLmO60i/8HY05l03pTMVBjiQBW/2gwHOp11ewv1rKutjWivxzW CBMLvyN2ofEhHA== -----END CERTIFICATE-----Generated at Sun Dec 21 21:09:54 2025 by rpki-client