This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json) Hash identifier: EJ5WdOKhIqRd81zVcShZ3t2B3VNU5igecIJnV4KjCMA= Subject key identifier: DF:52:38:6C:F8:52:41:3A:56:3D:AF:F6:34:23:8C:FA:10:FD:F3:03 Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d Certificate serial: 019B63549493B56DD63EA1403657816486C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft Manifest number: 135F Signing time: Sun 28 Dec 2025 05:00:45 +0000 Manifest this update: Sun 28 Dec 2025 05:00:45 +0000 Manifest next update: Mon 29 Dec 2025 05:00:45 +0000 Files and hashes: 1: CWePTkWPKqmq8XCrzmvHtdzJ66c.roa (hash: w47SbHpgg+8nHiedozoZtpn2WeqKZNjvBRbXbOYH5sQ=) 2: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (hash: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=) 3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: 79pho2Qx8IVyS32m1xlbNKNybreku2zezzhGcoSoXSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:94:93:b5:6d:d6:3e:a1:40:36:57:81:64:86:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d Validity Not Before: Dec 28 05:00:45 2025 GMT Not After : Dec 29 05:00:45 2025 GMT Subject: CN=df52386cf852413a563daff634238cfa10fdf303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4d:44:42:03:f1:ba:52:ba:be:31:f0:21:ea: c6:6e:aa:ba:44:fa:59:78:7b:19:44:d1:65:e2:3d: ca:62:23:f3:46:5d:6b:f2:10:32:cd:85:43:24:de: 2f:46:81:72:55:74:10:6b:b5:b2:e7:5e:6d:da:ea: e5:67:a9:6e:40:79:76:29:60:3b:4a:a3:86:5d:37: 48:cd:30:35:9a:62:fd:1e:4e:ec:49:7f:0f:9f:e6: d4:51:1a:cc:17:d6:65:f0:5b:c5:78:b5:fb:b1:60: 45:1b:6c:2c:e9:f5:53:ec:62:bf:69:8c:56:6a:7f: 03:44:28:68:c7:e1:e9:86:8c:2c:a8:17:94:b6:64: cf:08:0d:3d:ec:ec:f5:38:3a:2a:4e:1d:93:53:7e: f3:b1:af:61:65:55:80:72:22:3e:89:56:c4:a3:3a: 86:2a:f2:ea:24:64:2e:da:dc:cc:b5:2d:08:87:e6: 20:8c:59:14:5a:36:e4:88:e9:4b:45:5d:c2:1a:51: 34:0b:c9:8a:68:0f:6f:d6:2a:82:d6:9a:c4:85:be: fd:d2:7b:80:de:a9:44:b1:a5:e0:7f:cb:60:fa:da: 9e:ea:01:86:cc:c3:a0:fa:94:ff:8b:91:37:ef:3a: 9f:a6:a5:f9:24:66:ce:54:53:1c:a1:14:d4:64:47: a3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:52:38:6C:F8:52:41:3A:56:3D:AF:F6:34:23:8C:FA:10:FD:F3:03 X509v3 Authority Key Identifier: keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:af:3c:90:a1:f2:f5:f7:6c:b7:d3:fe:6b:69:11:86:99:dc: 1f:d0:00:03:2a:d8:51:b2:28:a5:df:22:8c:c1:89:0d:90:5f: a3:91:92:cd:a7:5c:b6:ba:ca:5e:1d:4f:cc:18:51:69:f5:32: 7e:39:c4:2d:d7:db:cb:eb:70:b1:8b:f4:1b:53:5d:c3:ec:43: ee:a6:b9:7c:b3:a3:30:ff:ab:7c:07:a2:38:c1:49:5f:09:c9: 5a:0b:0b:d2:1c:8b:ff:1a:cf:45:2d:71:46:6e:a4:32:c2:cc: 6a:9d:84:3e:66:f9:22:06:1c:a0:c2:60:ec:d5:49:d8:5b:21: 14:77:76:81:8f:8f:26:d5:69:b3:10:14:24:0d:28:51:d5:48: 7a:fe:f3:19:f5:c7:b5:de:ac:b2:5f:d9:f5:ef:9d:82:e2:bb: 2a:03:80:49:d1:b3:48:63:39:49:b7:9e:79:2e:21:58:41:1b: 96:81:6f:cf:ff:dd:f7:95:4c:77:a9:9a:39:18:ed:eb:1b:90: fd:27:28:fb:55:ab:a7:ae:bd:a0:64:24:78:88:50:5c:cc:6d: f8:de:72:a9:0f:da:1a:10:16:4e:be:b9:d1:82:4c:f9:2a:4b: 2f:0f:d7:a1:e8:8c:89:77:3a:64:b4:20:20:cd:12:1d:86:6f: 1d:f6:a5:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVJSTtW3WPqFANleBZIbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjA1ZjVhNjRlYTFmYjA5MGFkMjZkY2ZkYjE4Y2VmYjlh YWJkOGQwHhcNMjUxMjI4MDUwMDQ1WhcNMjUxMjI5MDUwMDQ1WjAzMTEwLwYDVQQD EyhkZjUyMzg2Y2Y4NTI0MTNhNTYzZGFmZjYzNDIzOGNmYTEwZmRmMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk1EQgPxulK6vjHwIerGbqq6RPpZ eHsZRNFl4j3KYiPzRl1r8hAyzYVDJN4vRoFyVXQQa7Wy515t2urlZ6luQHl2KWA7 SqOGXTdIzTA1mmL9Hk7sSX8Pn+bUURrMF9Zl8FvFeLX7sWBFG2ws6fVT7GK/aYxW an8DRChox+HphowsqBeUtmTPCA097Oz1ODoqTh2TU37zsa9hZVWAciI+iVbEozqG KvLqJGQu2tzMtS0Ih+YgjFkUWjbkiOlLRV3CGlE0C8mKaA9v1iqC1prEhb790nuA 3qlEsaXgf8tg+tqe6gGGzMOg+pT/i5E37zqfpqX5JGbOVFMcoRTUZEejQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9SOGz4UkE6Vj2v9jQjjPoQ/fMDMB8GA1UdIwQY MBaAFJIgX1pk6h+wkK0m3P2xjO+5qr2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEt MDljMWI3MzM2YTUxLzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEtMDljMWI3MzM2YTUx LzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArK88kKHy 9fdst9P+a2kRhpncH9AAAyrYUbIopd8ijMGJDZBfo5GSzadctrrKXh1PzBhRafUy fjnELdfby+twsYv0G1Ndw+xD7qa5fLOjMP+rfAeiOMFJXwnJWgsL0hyL/xrPRS1x Rm6kMsLMap2EPmb5IgYcoMJg7NVJ2FshFHd2gY+PJtVpsxAUJA0oUdVIev7zGfXH td6ssl/Z9e+dguK7KgOASdGzSGM5SbeeeS4hWEEbloFvz//d95VMd6maORjt6xuQ /Sco+1Wrp669oGQkeIhQXMxt+N5yqQ/aGhAWTr650YJM+SpLLw/XoeiMiXc6ZLQg IM0SHYZvHfalsg== -----END CERTIFICATE-----Generated at Sun Dec 28 08:03:11 2025 by rpki-client