This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json) Hash identifier: BZrlh4UvbIZnHsz02SZd56GKu8E83VTv0AM06T5lJNU= Subject key identifier: 8C:61:A1:7A:74:99:FC:0E:B5:D4:26:55:51:B7:EC:92:1F:AD:61:17 Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df Certificate serial: 019B51BD1BC3345470AA40FBF9F420390397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft Manifest number: 148F Signing time: Wed 24 Dec 2025 19:01:46 +0000 Manifest this update: Wed 24 Dec 2025 19:01:46 +0000 Manifest next update: Thu 25 Dec 2025 19:01:46 +0000 Files and hashes: 1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=) 2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: TEwgLDvm2lzUsK3BtbG6tZmvJVXNdfZJ2MXPwh6B1Ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:1b:c3:34:54:70:aa:40:fb:f9:f4:20:39:03:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df Validity Not Before: Dec 24 19:01:46 2025 GMT Not After : Dec 25 19:01:46 2025 GMT Subject: CN=8c61a17a7499fc0eb5d4265551b7ec921fad6117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:21:a2:04:8d:13:09:69:93:f1:f4:91:13: d5:d9:2e:95:94:ae:9a:e0:97:04:bd:fb:91:1c:02: df:d9:6a:52:25:bb:15:c7:11:2d:5d:ad:a7:7a:7a: f3:ab:78:ee:e3:7a:84:bd:eb:8b:1a:95:9d:d6:c5: dc:50:1c:8f:bd:c3:c3:9e:8e:7e:78:2b:24:d9:ac: 48:ce:a4:43:6e:9d:13:c9:18:1e:dc:6e:b3:a6:d1: a3:1e:91:4e:69:01:a3:93:fa:9a:b7:42:50:24:b1: 9e:6a:31:24:31:34:0c:b9:6d:d9:1f:f1:60:98:8a: ed:d8:97:f3:03:f5:58:23:4c:14:b3:66:4a:88:7f: cd:d2:cd:4d:1c:91:77:b3:e5:7f:a8:51:a2:d3:e5: 7c:67:41:20:6b:c4:d4:05:2f:85:63:76:59:cd:16: 4f:3c:91:b5:b0:a9:68:29:99:8c:45:ad:0b:85:ee: aa:90:a7:7a:4a:24:f7:8c:1d:a0:60:a9:61:94:03: 44:8f:14:81:be:da:b6:f7:a4:55:8e:79:de:bf:af: 5f:02:df:0a:98:79:b2:80:55:46:f5:0e:6a:3a:54: 6d:a0:3a:c0:66:41:d5:9e:a2:89:37:37:22:66:0a: 46:7d:15:31:5f:0e:91:e6:e9:3f:4d:08:5a:78:41: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:61:A1:7A:74:99:FC:0E:B5:D4:26:55:51:B7:EC:92:1F:AD:61:17 X509v3 Authority Key Identifier: keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:0a:26:3c:9c:d4:61:1a:4e:f6:da:e7:82:a9:42:4e:bb:cb: 08:0e:fc:f0:cb:80:e9:d7:9e:b8:3c:3b:70:37:c8:11:20:7b: 39:80:73:92:bd:c2:4d:f0:17:67:72:f9:dc:e9:fe:3e:bd:1f: 8a:e6:68:be:5e:11:d3:95:03:fd:a9:75:9d:9e:c2:d2:e0:ca: 55:d3:16:0e:7f:ec:34:18:46:e3:7a:70:2a:c3:73:f4:60:51: 04:5e:d6:4f:38:9e:8a:6a:c2:63:2a:00:3b:73:ad:64:bf:05: a8:59:94:5b:6e:1d:48:56:50:bb:52:56:69:aa:07:41:c8:9b: de:28:fd:e8:90:f5:4c:e4:f8:c3:cd:34:63:d7:40:62:f7:40: 53:d8:26:35:94:a7:c1:23:be:16:5f:68:d2:69:af:f9:eb:37: 61:99:a3:36:fb:99:85:0f:4b:b4:83:6d:fd:4d:b5:69:67:44: e3:91:ae:7d:52:81:b8:b0:d6:7d:f8:87:fa:85:88:64:fd:7b: e8:f5:9e:03:b0:59:fe:fd:6e:da:8d:2a:df:ba:5f:ee:54:97: 4b:fe:3f:4e:18:43:f1:fa:8b:23:0a:60:05:5e:a5:f1:1f:06: 92:85:6d:e9:49:84:fb:ad:2e:e4:98:cb:e5:4a:d7:0d:25:ad: cb:aa:a6:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvRvDNFRwqkD7+fQgOQOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjE0YTkwZDQwOTVmZDI2NzY1Y2MwZTRkZjg5OWU4YzQ2 YzA2ZGYwHhcNMjUxMjI0MTkwMTQ2WhcNMjUxMjI1MTkwMTQ2WjAzMTEwLwYDVQQD Eyg4YzYxYTE3YTc0OTlmYzBlYjVkNDI2NTU1MWI3ZWM5MjFmYWQ2MTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzUhogSNEwlpk/H0kRPV2S6VlK6a 4JcEvfuRHALf2WpSJbsVxxEtXa2nenrzq3ju43qEveuLGpWd1sXcUByPvcPDno5+ eCsk2axIzqRDbp0TyRge3G6zptGjHpFOaQGjk/qat0JQJLGeajEkMTQMuW3ZH/Fg mIrt2JfzA/VYI0wUs2ZKiH/N0s1NHJF3s+V/qFGi0+V8Z0Ega8TUBS+FY3ZZzRZP PJG1sKloKZmMRa0Lhe6qkKd6SiT3jB2gYKlhlANEjxSBvtq296RVjnnev69fAt8K mHmygFVG9Q5qOlRtoDrAZkHVnqKJNzciZgpGfRUxXw6R5uk/TQhaeEESOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxhoXp0mfwOtdQmVVG37JIfrWEXMB8GA1UdIwQY MBaAFJIhSpDUCV/SZ2XMDk34mejEbAbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEt NTdkODAzMGI2MWUxLzEva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEtNTdkODAzMGI2MWUx LzEva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAomPJzU YRpO9trngqlCTrvLCA788MuA6deeuDw7cDfIESB7OYBzkr3CTfAXZ3L53On+Pr0f iuZovl4R05UD/al1nZ7C0uDKVdMWDn/sNBhG43pwKsNz9GBRBF7WTzieimrCYyoA O3OtZL8FqFmUW24dSFZQu1JWaaoHQcib3ij96JD1TOT4w800Y9dAYvdAU9gmNZSn wSO+Fl9o0mmv+es3YZmjNvuZhQ9LtINt/U21aWdE45GufVKBuLDWffiH+oWIZP17 6PWeA7BZ/v1u2o0q37pf7lSXS/4/ThhD8fqLIwpgBV6l8R8GkoVt6UmE+60u5JjL 5UrXDSWty6qmmg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:45 2025 by rpki-client