This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json) Hash identifier: cbcI9lD/TZEfWH1bGxfWLr/dhZxOA9ym35cVZRxLPwM= Subject key identifier: 9A:24:89:9C:9B:DE:CB:14:82:27:C0:7B:72:05:D2:00:17:E5:F6:C3 Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Certificate serial: 019B405A95E300EAAFE3092C1F35542BE11B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:00:36 +0000 Manifest this update: Sun 21 Dec 2025 10:00:36 +0000 Manifest next update: Mon 22 Dec 2025 10:00:36 +0000 Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=) 2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: h7m1s9RY+QGb3h0KXIwCsi6AbEPqFWxPHn0reGZDE3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:95:e3:00:ea:af:e3:09:2c:1f:35:54:2b:e1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Validity Not Before: Dec 21 10:00:36 2025 GMT Not After : Dec 22 10:00:36 2025 GMT Subject: CN=9a24899c9bdecb148227c07b7205d20017e5f6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:52:b3:84:b0:a1:a6:86:32:52:91:d3:8b: 73:a1:33:18:02:fb:18:e1:0e:0a:b5:40:44:39:0b: f3:72:7c:26:c9:7e:c6:6d:d1:df:73:09:8b:c2:26: 64:e1:fe:11:be:85:45:6a:42:32:d1:79:58:e3:ae: 94:59:59:4c:ae:53:8e:6d:20:20:94:16:64:44:5e: 46:b9:ff:67:30:48:49:0f:b7:f7:7a:c7:67:37:31: ed:76:cc:24:f3:d1:30:8c:2b:3e:4e:ab:2a:fb:f8: 94:31:ad:75:30:ab:e5:e3:c2:e9:b7:aa:7d:8d:92: 17:5e:15:89:1e:5a:d3:92:e2:e3:61:0d:04:fa:98: 56:e6:80:f0:74:9e:31:12:6a:2b:9b:5b:9f:0e:68: 09:aa:90:54:6a:80:80:ff:ee:7b:86:fd:28:50:f1: a0:b7:79:61:a6:86:87:d5:03:16:dd:0f:83:8c:94: 10:77:8a:3b:c0:f3:0e:34:50:c4:52:07:f9:af:34: d1:0a:34:09:5c:3e:89:3c:c2:32:96:ee:96:3b:da: 7e:57:be:7f:59:64:7c:6f:d8:a1:ba:b8:f4:24:3d: 91:50:45:95:46:87:83:e1:bc:20:bf:4a:9c:6a:4f: 75:fa:89:be:da:e1:ff:f2:91:cf:2c:f0:e5:4e:aa: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:24:89:9C:9B:DE:CB:14:82:27:C0:7B:72:05:D2:00:17:E5:F6:C3 X509v3 Authority Key Identifier: keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:82:e5:b0:95:01:66:43:d1:3d:ee:a0:2a:a1:74:45:15:3a: 7e:fb:fa:04:8f:19:f5:51:eb:fd:2f:f6:44:6b:cd:e0:9c:76: 84:2f:b5:c5:e7:d4:e0:b4:d1:20:e9:f9:a8:07:ae:9e:b5:d3: c3:d6:ec:6e:e2:81:f7:f2:b7:6e:18:cf:6f:11:dc:0c:87:46: 47:7a:fe:19:cc:a4:6d:48:7b:be:10:9c:73:ee:2e:25:1c:34: bc:84:c7:d3:d3:13:9f:fc:c9:9c:c9:7d:78:a0:c3:4e:2c:0a: 62:fd:17:69:ed:c0:9f:2d:26:14:92:31:ce:4f:0a:1d:62:5d: fc:7c:55:86:97:7e:9a:76:97:65:88:12:c9:42:80:a5:dc:a1: be:41:a7:75:eb:73:03:e8:0d:1a:28:4b:06:91:79:6f:f0:a8: b7:2b:69:27:db:17:cf:d4:52:2f:3e:77:be:f0:64:c5:36:c9: 15:77:14:a6:68:b2:b1:41:7a:fd:d8:77:c7:84:70:58:34:a7: e4:e4:71:2d:27:36:31:6a:a3:90:e5:ab:13:8f:71:8b:a8:5e: 80:0f:ca:40:92:5a:b2:5e:b4:f3:c7:0b:b5:57:9c:48:8f:a5: 1a:65:b7:e9:65:ec:15:03:dc:48:56:cd:1b:e1:45:45:68:28: e9:33:57:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWpXjAOqv4wksHzVUK+EbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGE3ZWE3MTI4MDFlNGM4ZmViODViM2YwNzhkMDViYTEw MWFhZTEwHhcNMjUxMjIxMTAwMDM2WhcNMjUxMjIyMTAwMDM2WjAzMTEwLwYDVQQD Eyg5YTI0ODk5YzliZGVjYjE0ODIyN2MwN2I3MjA1ZDIwMDE3ZTVmNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXtSs4SwoaaGMlKR04tzoTMYAvsY 4Q4KtUBEOQvzcnwmyX7GbdHfcwmLwiZk4f4RvoVFakIy0XlY466UWVlMrlOObSAg lBZkRF5Guf9nMEhJD7f3esdnNzHtdswk89EwjCs+Tqsq+/iUMa11MKvl48Lpt6p9 jZIXXhWJHlrTkuLjYQ0E+phW5oDwdJ4xEmorm1ufDmgJqpBUaoCA/+57hv0oUPGg t3lhpoaH1QMW3Q+DjJQQd4o7wPMONFDEUgf5rzTRCjQJXD6JPMIylu6WO9p+V75/ WWR8b9ihurj0JD2RUEWVRoeD4bwgv0qcak91+om+2uH/8pHPLPDlTqp2KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJokiZyb3ssUgifAe3IF0gAX5fbDMB8GA1UdIwQY MBaAFJCKfqcSgB5Mj+uFs/B40FuhAarhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEt MWExMmNjMGIwNDA2LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEtMWExMmNjMGIwNDA2 LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYLlsJUB ZkPRPe6gKqF0RRU6fvv6BI8Z9VHr/S/2RGvN4Jx2hC+1xefU4LTRIOn5qAeunrXT w9bsbuKB9/K3bhjPbxHcDIdGR3r+GcykbUh7vhCcc+4uJRw0vITH09MTn/zJnMl9 eKDDTiwKYv0Xae3Any0mFJIxzk8KHWJd/HxVhpd+mnaXZYgSyUKApdyhvkGndetz A+gNGihLBpF5b/CotytpJ9sXz9RSLz53vvBkxTbJFXcUpmiysUF6/dh3x4RwWDSn 5ORxLSc2MWqjkOWrE49xi6hegA/KQJJasl6088cLtVecSI+lGmW36WXsFQPcSFbN G+FFRWgo6TNXIA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:02:59 2025 by rpki-client