This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json) Hash identifier: /oHFjxROF0LblMZJDeOY9ppQeKL//S+erHDtd6Ao1f0= Subject key identifier: 43:34:F0:96:84:E1:A0:BB:DC:B8:3A:9A:7B:98:C0:76:D8:91:1B:69 Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Certificate serial: 019B36B354FF8C8289BADF4FDBED317A8623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 13:01:20 +0000 Manifest this update: Fri 19 Dec 2025 13:01:20 +0000 Manifest next update: Sat 20 Dec 2025 13:01:20 +0000 Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=) 2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: R4iRtw1LTrfilbWHahYts+aKlmWFCs1fJGhlP2lEMe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:54:ff:8c:82:89:ba:df:4f:db:ed:31:7a:86:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39 Validity Not Before: Dec 19 13:01:20 2025 GMT Not After : Dec 20 13:01:20 2025 GMT Subject: CN=4334f09684e1a0bbdcb83a9a7b98c076d8911b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:24:fb:65:a8:e0:23:32:4f:0f:d8:69:dd:62: 33:85:6e:86:02:d0:ba:a2:8b:f5:40:5b:6a:f1:67: e9:bc:00:db:6c:59:d4:6a:b7:cf:5d:89:79:2b:2f: c2:7e:33:48:a5:e9:57:f5:79:2b:42:1a:85:55:56: 9d:59:d4:70:4d:83:23:7f:30:05:ee:95:f1:2f:7d: 27:b1:20:79:18:8d:eb:6b:24:af:b5:98:7d:7b:56: c0:20:94:6a:9c:a9:b9:8f:6d:f5:fa:e9:e3:cc:11: ae:12:3c:42:c9:9d:84:1c:8a:88:81:37:bd:df:42: 3d:7f:9a:b2:b5:40:aa:c0:85:63:bd:da:d1:60:aa: c6:dd:8d:f3:e5:a3:84:c8:c2:80:d4:e7:a2:2c:70: 58:d0:95:a9:e6:56:45:9c:5e:9f:01:0d:60:f1:99: e3:f6:a1:19:49:e5:f6:b2:5a:96:8d:84:77:2a:51: b9:95:e9:bc:79:54:4b:57:02:d0:fe:86:7a:d2:e1: cd:09:87:8b:e4:08:98:b1:c5:af:f0:bc:ae:ac:ec: bf:6d:7c:9a:7a:d4:07:33:d9:74:ec:93:03:c7:55: 32:15:47:fc:61:22:f8:4d:d2:77:16:5c:ca:2c:fa: 93:96:05:ae:e5:cc:e0:2a:09:85:39:1f:b8:ec:1d: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:34:F0:96:84:E1:A0:BB:DC:B8:3A:9A:7B:98:C0:76:D8:91:1B:69 X509v3 Authority Key Identifier: keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e2:14:af:6a:ce:f4:dd:9f:5a:72:50:f4:d1:f3:21:e8:8c: 0d:7f:58:6b:27:b8:d5:35:e1:c8:88:f8:ad:33:ba:40:ab:82: c1:44:ac:0e:a4:b9:31:a2:27:fc:41:e0:61:8e:a5:38:d8:bc: 77:f1:68:09:20:91:7f:5e:ad:a7:5c:6a:29:f7:2b:60:67:8f: 8c:fc:b5:52:5e:42:ef:79:25:43:d4:2a:35:e7:fa:95:9a:d9: 94:e3:2c:14:14:8b:02:fc:3e:46:32:c0:72:4a:8a:36:c7:26: f5:33:e4:ef:82:0a:62:f7:a7:e1:46:13:d9:8d:54:ec:3c:64: 27:07:ca:59:d1:8f:54:ef:0f:ab:91:1c:29:b9:2f:6b:ec:a3: 01:a2:33:32:91:d7:f0:03:28:4a:a5:e2:60:8f:62:8b:31:80: 1d:dd:11:ce:bd:2c:66:51:93:12:5a:05:e8:ee:c2:55:ae:86: e1:f1:fa:2b:87:5d:c0:e1:f8:7a:9a:c8:31:3a:79:61:a7:d1: 79:4c:9f:a4:01:e5:6e:2d:3d:5e:3c:51:40:2e:e6:a1:7b:38: a7:70:78:c3:08:b9:ea:ad:6b:da:c8:5f:8a:bb:cc:b0:d0:59: 9a:b4:27:2c:2e:d7:a1:2c:70:27:2d:e4:48:aa:40:58:ae:91: ae:d6:60:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s1T/jIKJut9P2+0xeoYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj MDdjMzkwHhcNMjUxMjE5MTMwMTIwWhcNMjUxMjIwMTMwMTIwWjAzMTEwLwYDVQQD Eyg0MzM0ZjA5Njg0ZTFhMGJiZGNiODNhOWE3Yjk4YzA3NmQ4OTExYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yT7ZajgIzJPD9hp3WIzhW6GAtC6 oov1QFtq8WfpvADbbFnUarfPXYl5Ky/CfjNIpelX9XkrQhqFVVadWdRwTYMjfzAF 7pXxL30nsSB5GI3raySvtZh9e1bAIJRqnKm5j231+unjzBGuEjxCyZ2EHIqIgTe9 30I9f5qytUCqwIVjvdrRYKrG3Y3z5aOEyMKA1OeiLHBY0JWp5lZFnF6fAQ1g8Znj 9qEZSeX2slqWjYR3KlG5lem8eVRLVwLQ/oZ60uHNCYeL5AiYscWv8LyurOy/bXya etQHM9l07JMDx1UyFUf8YSL4TdJ3FlzKLPqTlgWu5czgKgmFOR+47B2Q7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM08JaE4aC73Lg6mnuYwHbYkRtpMB8GA1UdIwQY MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeIUr2rO 9N2fWnJQ9NHzIeiMDX9Yaye41TXhyIj4rTO6QKuCwUSsDqS5MaIn/EHgYY6lONi8 d/FoCSCRf16tp1xqKfcrYGePjPy1Ul5C73klQ9QqNef6lZrZlOMsFBSLAvw+RjLA ckqKNscm9TPk74IKYven4UYT2Y1U7DxkJwfKWdGPVO8Pq5EcKbkva+yjAaIzMpHX 8AMoSqXiYI9iizGAHd0Rzr0sZlGTEloF6O7CVa6G4fH6K4ddwOH4eprIMTp5YafR eUyfpAHlbi09XjxRQC7moXs4p3B4wwi56q1r2shfirvMsNBZmrQnLC7XoSxwJy3k SKpAWK6RrtZgGQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:11:49 2025 by rpki-client