This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json) Hash identifier: 8WMNZBDdzVdN6C931izqhD8a3wTDBiMx8LrXoNQosPU= Subject key identifier: E1:47:D4:8A:78:EC:87:6B:8C:58:CC:84:B3:C7:28:6C:5F:58:3A:4C Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a Certificate serial: 019B292E7FCBB5E3695F612D8BD4F7B0987B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft Manifest number: 0EB5 Signing time: Tue 16 Dec 2025 22:01:11 +0000 Manifest this update: Tue 16 Dec 2025 22:01:11 +0000 Manifest next update: Wed 17 Dec 2025 22:01:11 +0000 Files and hashes: 1: MuGN2Hka5jz3uKEmny_HpiiDodE.asa (hash: 6xt+FPkYOOMIE89vAz2BiI+yVSDgp4pZb6MQ1N+deOs=) 2: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=) 3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: va9MO50sqNJv70dGvH1Qp59W0zOd9AhwzMqVEFDGtYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:7f:cb:b5:e3:69:5f:61:2d:8b:d4:f7:b0:98:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a Validity Not Before: Dec 16 22:01:11 2025 GMT Not After : Dec 17 22:01:11 2025 GMT Subject: CN=e147d48a78ec876b8c58cc84b3c7286c5f583a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:46:fc:7f:08:69:76:45:5a:ae:c0:dd:55: 16:ca:e9:2a:d4:6d:a3:03:5e:45:7a:e6:5b:7d:8d: c7:a3:c7:db:9d:7b:48:d6:32:a1:ec:bc:60:6a:13: 87:31:d3:43:6f:97:84:fc:3f:4b:0b:43:d6:47:53: b8:e6:be:ff:ee:ce:4c:65:cb:cf:0b:a9:69:f1:c0: 80:b4:e5:66:f9:9e:12:2d:d9:ea:93:07:8f:ae:84: 15:81:20:c2:eb:eb:d0:fa:50:00:b1:eb:36:4a:67: ac:3b:47:cb:86:94:70:20:d3:d3:85:e8:8d:8f:69: f9:47:64:b2:15:09:e5:82:4e:c9:07:52:26:15:ad: a2:20:4e:a8:0d:0e:2a:02:cf:9a:06:ad:51:b8:a8: 61:dd:1c:03:c9:68:6b:42:35:f2:e1:a5:d6:3b:2f: f8:33:42:7a:56:de:cf:35:05:08:18:ad:c0:f4:e3: 41:da:27:a7:f2:80:aa:b3:b8:db:13:bd:6b:e3:62: 45:f4:e4:4f:a8:44:0f:7f:61:d2:f5:5c:2a:ee:58: d2:f6:51:0c:e0:3d:84:79:2e:98:31:b1:8a:43:08: 00:fb:95:ed:b2:9c:2a:45:49:52:53:d4:80:f5:42: bf:10:c6:42:cd:a3:ae:81:7b:73:a9:b3:cb:37:c9: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:47:D4:8A:78:EC:87:6B:8C:58:CC:84:B3:C7:28:6C:5F:58:3A:4C X509v3 Authority Key Identifier: keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b4:90:7f:e3:28:24:24:1c:79:a0:35:69:af:82:09:bb:5f: 92:45:7f:71:d9:11:e5:18:9d:2b:35:67:09:98:57:2f:00:93: 4a:42:03:fc:86:43:3c:0d:ec:c1:fc:dc:3b:00:8a:53:95:b4: dc:bd:99:c7:62:18:56:ba:8b:35:82:5d:43:86:e7:a3:52:65: 89:ab:a9:7d:9d:1f:e8:89:fe:73:75:2e:ce:03:2e:d4:1b:2c: 07:0f:35:0f:1c:ce:b9:71:49:cb:ab:75:52:ef:25:53:03:87: fe:6c:27:da:28:18:a4:67:e6:ab:e0:c2:80:0b:20:80:3d:90: 5a:31:31:f2:c4:0a:c6:c4:ca:32:4d:ca:53:e1:ce:d8:6e:62: 42:5b:22:66:78:35:60:05:01:a9:37:2f:a4:43:31:74:b2:ac: 47:c6:de:ef:ad:5f:65:1c:cf:54:a1:c7:0f:94:83:9f:13:bb: 76:7b:00:c4:6c:f4:1d:70:ea:19:17:8d:b8:56:a4:3e:14:4e: b4:29:d5:6c:76:63:ac:d3:9c:e6:3d:8d:b8:a0:2a:8c:7d:36: eb:97:bb:60:15:a3:ba:c2:8a:13:e8:37:ca:a5:28:7a:6a:e1: c9:9a:05:60:cc:6b:0d:75:ab:d7:de:2e:c6:8c:c9:e5:20:f4: 1c:34:14:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLn/LteNpX2Eti9T3sJh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYThlY2ZlZTUxZjY4ZDVmODAzYWFlNmZiZmMxZmRjNDE5 MDI2MmEwHhcNMjUxMjE2MjIwMTExWhcNMjUxMjE3MjIwMTExWjAzMTEwLwYDVQQD EyhlMTQ3ZDQ4YTc4ZWM4NzZiOGM1OGNjODRiM2M3Mjg2YzVmNTgzYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7ZG/H8IaXZFWq7A3VUWyukq1G2j A15FeuZbfY3Ho8fbnXtI1jKh7LxgahOHMdNDb5eE/D9LC0PWR1O45r7/7s5MZcvP C6lp8cCAtOVm+Z4SLdnqkweProQVgSDC6+vQ+lAAses2SmesO0fLhpRwINPTheiN j2n5R2SyFQnlgk7JB1ImFa2iIE6oDQ4qAs+aBq1RuKhh3RwDyWhrQjXy4aXWOy/4 M0J6Vt7PNQUIGK3A9ONB2ien8oCqs7jbE71r42JF9ORPqEQPf2HS9Vwq7ljS9lEM 4D2EeS6YMbGKQwgA+5XtspwqRUlSU9SA9UK/EMZCzaOugXtzqbPLN8m0AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFH1Ip47IdrjFjMhLPHKGxfWDpMMB8GA1UdIwQY MBaAFKyo7P7lH2jV+AOq5vv8H9xBkCYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUt YmJkN2IwYWJhNmFiLzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUtYmJkN2IwYWJhNmFi LzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLSQf+Mo JCQceaA1aa+CCbtfkkV/cdkR5RidKzVnCZhXLwCTSkID/IZDPA3swfzcOwCKU5W0 3L2Zx2IYVrqLNYJdQ4bno1JliaupfZ0f6In+c3UuzgMu1BssBw81DxzOuXFJy6t1 Uu8lUwOH/mwn2igYpGfmq+DCgAsggD2QWjEx8sQKxsTKMk3KU+HO2G5iQlsiZng1 YAUBqTcvpEMxdLKsR8be761fZRzPVKHHD5SDnxO7dnsAxGz0HXDqGReNuFakPhRO tCnVbHZjrNOc5j2NuKAqjH0265e7YBWjusKKE+g3yqUoemrhyZoFYMxrDXWr194u xozJ5SD0HDQUTA== -----END CERTIFICATE-----Generated at Wed Dec 17 03:05:48 2025 by rpki-client