This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json) Hash identifier: MoUm+IVkPwKqzAoYlzAy8JvLEgT7Ko59SqWfUMJyuho= Subject key identifier: 36:65:D8:FC:4B:99:47:42:DA:6C:A0:EA:C0:BA:38:2F:C3:E9:7C:90 Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8 Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8 Certificate serial: 019B3A9077903EACB5E84F0CF5E1BF0A269F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft Manifest number: 0B9B Signing time: Sat 20 Dec 2025 07:01:44 +0000 Manifest this update: Sat 20 Dec 2025 07:01:44 +0000 Manifest next update: Sun 21 Dec 2025 07:01:44 +0000 Files and hashes: 1: bRhGJqv0p8mJ4Y5Zi3hw3lkQdsk.roa (hash: z2JalsCXdVTGdLdK888EdCX/YOon+kmiEVhkkUSf3/w=) 2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: IO5dU94xDlgExoHb8pbXFhgITmjWMmNQA2LR6w80BG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:77:90:3e:ac:b5:e8:4f:0c:f5:e1:bf:0a:26:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8 Validity Not Before: Dec 20 07:01:44 2025 GMT Not After : Dec 21 07:01:44 2025 GMT Subject: CN=3665d8fc4b994742da6ca0eac0ba382fc3e97c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:22:a4:66:1f:d9:df:3d:b4:5a:fc:a4:dd: a3:98:95:63:57:a8:d0:30:5b:25:52:45:f1:35:17: e5:ce:c9:e7:ec:c7:8c:65:67:95:78:98:67:0c:51: 08:e2:14:30:9e:62:57:78:e7:cd:73:6e:9a:cc:b5: c5:d4:85:48:cd:13:3f:02:7b:d9:43:d6:47:59:5f: e0:5c:2f:c2:13:19:ce:f8:7f:0f:3d:bc:ea:8e:09: 73:72:f3:59:a1:be:96:23:9a:6d:d3:a8:26:3e:27: 94:98:3d:66:ab:b9:4e:77:56:46:06:a8:f3:93:70: e3:a3:9e:81:08:cc:f1:49:d7:e6:c0:a0:59:47:cd: 79:24:f4:05:61:c0:77:1d:83:51:34:52:f4:64:ef: c7:b8:14:53:b3:e3:9a:d1:e8:be:60:b9:19:4e:35: 69:1c:9d:87:b4:34:7a:05:2d:d4:b1:07:1b:02:6d: cc:84:17:69:24:b0:e8:9f:ba:f9:7a:85:c3:24:af: 92:09:86:eb:bf:8a:27:f5:75:01:8c:24:64:ab:93: 27:6e:9d:3a:93:d1:86:d4:ea:dc:22:07:e5:3c:29: 73:ad:7e:0c:7e:51:21:d1:63:9a:f6:6e:4f:a4:f5: d5:6f:4a:7c:60:a2:89:dc:09:ad:1a:d5:ae:ca:5f: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:65:D8:FC:4B:99:47:42:DA:6C:A0:EA:C0:BA:38:2F:C3:E9:7C:90 X509v3 Authority Key Identifier: keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:29:81:05:90:0a:80:5f:da:4b:0d:a4:68:18:58:33:3b:e9: 45:1d:c2:ec:da:74:e0:7a:5d:91:c3:d5:79:db:5a:c9:b7:0d: b7:97:d6:09:6e:c5:35:db:c9:dd:09:da:22:4b:c6:6d:c6:b3: e3:c6:5c:0a:67:94:59:10:61:45:f8:7b:ce:f3:13:0a:ed:a1: 94:0c:fe:73:97:0c:c4:1b:5a:5c:0c:8f:5b:7d:11:79:33:b4: 90:be:9c:1b:b2:f6:24:85:52:40:36:dd:42:ac:af:ea:7b:30: 26:85:1c:72:fb:ad:63:cc:65:01:38:c0:3e:12:a3:af:3e:ee: a5:68:6b:d9:ec:22:3e:99:8c:24:2e:5d:ad:6d:86:9d:a3:24: d0:5b:d6:b6:ec:00:17:e7:54:6c:2b:0e:a4:6a:24:45:f1:ff: f7:08:31:d6:95:45:81:dc:e5:3a:08:7b:7c:cc:8a:b1:ec:be: 79:ad:0e:ce:4c:0f:86:5d:5e:80:6e:5d:da:36:10:58:ca:25: af:08:f4:0d:fd:74:42:56:ca:5d:e3:b5:ea:1e:03:16:08:c5: e4:fe:fe:82:8b:02:d1:7a:e7:29:7d:9b:26:0b:a4:84:24:ee: 7c:8f:1f:11:a8:68:2c:f2:19:07:8d:bf:b8:a7:df:02:3d:98: ce:8a:7a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kHeQPqy16E8M9eG/CiafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMTAxMDBmM2NjNzg3ZDYzMTUzMDNjYjdmYzg4ZDllMjVl NTZlYTgwHhcNMjUxMjIwMDcwMTQ0WhcNMjUxMjIxMDcwMTQ0WjAzMTEwLwYDVQQD EygzNjY1ZDhmYzRiOTk0NzQyZGE2Y2EwZWFjMGJhMzgyZmMzZTk3YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7cipGYf2d89tFr8pN2jmJVjV6jQ MFslUkXxNRflzsnn7MeMZWeVeJhnDFEI4hQwnmJXeOfNc26azLXF1IVIzRM/AnvZ Q9ZHWV/gXC/CExnO+H8PPbzqjglzcvNZob6WI5pt06gmPieUmD1mq7lOd1ZGBqjz k3Djo56BCMzxSdfmwKBZR815JPQFYcB3HYNRNFL0ZO/HuBRTs+Oa0ei+YLkZTjVp HJ2HtDR6BS3UsQcbAm3MhBdpJLDon7r5eoXDJK+SCYbrv4on9XUBjCRkq5Mnbp06 k9GG1OrcIgflPClzrX4MflEh0WOa9m5PpPXVb0p8YKKJ3AmtGtWuyl8guQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZl2PxLmUdC2myg6sC6OC/D6XyQMB8GA1UdIwQY MBaAFJEQEA88x4fWMVMDy3/IjZ4l5W6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAt MGUwMzc3ZDRlNmQ2LzEva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAtMGUwMzc3ZDRlNmQ2 LzEva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCmBBZAK gF/aSw2kaBhYMzvpRR3C7Np04HpdkcPVedtaybcNt5fWCW7FNdvJ3QnaIkvGbcaz 48ZcCmeUWRBhRfh7zvMTCu2hlAz+c5cMxBtaXAyPW30ReTO0kL6cG7L2JIVSQDbd Qqyv6nswJoUccvutY8xlATjAPhKjrz7upWhr2ewiPpmMJC5drW2GnaMk0FvWtuwA F+dUbCsOpGokRfH/9wgx1pVFgdzlOgh7fMyKsey+ea0OzkwPhl1egG5d2jYQWMol rwj0Df10QlbKXeO16h4DFgjF5P7+gosC0XrnKX2bJgukhCTufI8fEahoLPIZB42/ uKffAj2Yzop61Q== -----END CERTIFICATE-----Generated at Sat Dec 20 16:06:08 2025 by rpki-client