This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json) Hash identifier: xAeQ7GVsQwn1tz3TUqttV30rOZ+4ZdzGMyav9tJ4jeo= Subject key identifier: 65:D7:CE:E2:24:7A:45:0C:D6:44:E1:AA:81:12:00:85:F0:37:76:8F Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21 Certificate serial: 019B3BA26FE77B08E57B0EF727CFB8FF5AD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 12:00:59 +0000 Manifest this update: Sat 20 Dec 2025 12:00:59 +0000 Manifest next update: Sun 21 Dec 2025 12:00:59 +0000 Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=) 2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: laYwuVU9hXjI2SXmT/e/Aw3qNuB/Xi7rYFzuHTeUIVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:6f:e7:7b:08:e5:7b:0e:f7:27:cf:b8:ff:5a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21 Validity Not Before: Dec 20 12:00:59 2025 GMT Not After : Dec 21 12:00:59 2025 GMT Subject: CN=65d7cee2247a450cd644e1aa81120085f037768f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e6:3d:d6:ae:7a:d0:9f:ac:c9:34:e8:50:f5: 8f:52:0e:74:eb:a0:c6:6e:a7:c9:57:86:77:0b:1d: e6:36:8d:94:16:1f:63:2c:1c:44:75:ed:80:30:ca: f4:b4:8a:41:61:40:f5:17:26:66:4b:d5:b9:31:09: e2:6e:d5:42:62:e7:2d:7b:8a:a9:bb:eb:3d:a0:2f: 5e:b6:13:1a:e4:d9:24:46:0e:1b:b5:d3:b5:3d:5f: 2f:8f:ad:d2:bf:72:b4:1f:e0:57:79:1b:fd:2b:21: a7:08:39:aa:82:8b:a1:e6:f1:66:e6:f7:80:4e:cd: a1:9d:b9:1f:52:3c:10:ad:a0:49:9a:65:de:67:e0: 81:e4:6f:7d:d0:d3:bd:c9:88:d0:99:86:9f:d0:63: d4:a5:e3:f2:a5:52:9f:63:76:83:c6:5f:b8:f0:82: 6f:cb:50:77:9a:45:8e:6c:c1:7a:63:bf:30:d1:dd: 15:02:1c:cd:02:01:5b:7f:a0:4d:5a:36:cd:fe:b5: 66:fc:69:ae:f9:a7:9b:94:0b:73:f7:2a:51:04:41: c6:cb:11:6a:d2:f6:54:53:4f:2e:0a:c7:9d:c1:16: ea:de:dc:14:a6:4f:a4:48:63:93:a1:70:f4:5e:8b: bd:d8:39:f4:44:97:ca:40:49:33:66:a1:59:ae:04: da:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D7:CE:E2:24:7A:45:0C:D6:44:E1:AA:81:12:00:85:F0:37:76:8F X509v3 Authority Key Identifier: keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:89:a3:45:66:9e:5f:e9:3f:0f:57:b6:82:c1:3d:bc:d7:38: 6d:43:ee:60:1d:71:aa:56:48:51:72:a1:45:80:d3:e5:c0:f7: a8:7f:c3:5d:c3:06:b6:71:a2:ae:50:7e:ba:cd:6b:67:80:09: 9d:ff:1f:52:7e:dc:76:18:50:3c:da:b3:dd:bc:fc:16:b0:3d: f6:78:50:5e:ec:aa:79:7d:20:34:8e:ff:d2:9f:62:55:fd:2a: ee:02:37:a6:3e:92:22:6d:b9:d3:dd:60:01:4a:76:dc:63:59: 7e:40:bb:47:09:8b:36:7f:30:d5:6f:0f:1a:7f:85:48:89:fe: 1d:4d:6d:05:0e:fe:d6:c8:e2:55:fd:42:0f:dd:2c:f8:b2:81: ae:a6:06:24:7a:17:2c:1d:02:cb:53:87:97:1a:8a:75:49:b7: 7c:b1:d5:5b:a0:42:c6:f3:f7:b7:38:ae:bd:b6:c0:a7:3f:31: 51:f0:67:de:ea:6a:bc:27:13:5c:e9:e2:7e:40:de:65:63:90: c5:10:38:e6:3b:ca:05:63:4a:5c:7e:01:05:43:81:b4:e7:80: bc:64:38:6c:5c:26:5e:22:3f:8a:42:c3:4f:de:a6:0a:22:31: 85:b8:81:d3:60:73:35:93:2c:ff:57:e0:91:40:b1:de:95:23: 75:cb:cb:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7om/newjlew73J8+4/1rQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZTZkMzI0MjI1N2IyOTY1YjYyNzhmZjhjMTdlMTZmZjNm MDhiMjEwHhcNMjUxMjIwMTIwMDU5WhcNMjUxMjIxMTIwMDU5WjAzMTEwLwYDVQQD Eyg2NWQ3Y2VlMjI0N2E0NTBjZDY0NGUxYWE4MTEyMDA4NWYwMzc3NjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuY91q560J+syTToUPWPUg5066DG bqfJV4Z3Cx3mNo2UFh9jLBxEde2AMMr0tIpBYUD1FyZmS9W5MQnibtVCYucte4qp u+s9oC9ethMa5NkkRg4btdO1PV8vj63Sv3K0H+BXeRv9KyGnCDmqgouh5vFm5veA Ts2hnbkfUjwQraBJmmXeZ+CB5G990NO9yYjQmYaf0GPUpePypVKfY3aDxl+48IJv y1B3mkWObMF6Y78w0d0VAhzNAgFbf6BNWjbN/rVm/Gmu+aeblAtz9ypRBEHGyxFq 0vZUU08uCsedwRbq3twUpk+kSGOToXD0Xou92Dn0RJfKQEkzZqFZrgTaPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXXzuIkekUM1kThqoESAIXwN3aPMB8GA1UdIwQY MBaAFJHm0yQiV7KWW2J4/4wX4W/z8IshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4Njct N2U3NGE2YTk4ZWNkLzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4NjctN2U3NGE2YTk4ZWNk LzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4mjRWae X+k/D1e2gsE9vNc4bUPuYB1xqlZIUXKhRYDT5cD3qH/DXcMGtnGirlB+us1rZ4AJ nf8fUn7cdhhQPNqz3bz8FrA99nhQXuyqeX0gNI7/0p9iVf0q7gI3pj6SIm25091g AUp23GNZfkC7RwmLNn8w1W8PGn+FSIn+HU1tBQ7+1sjiVf1CD90s+LKBrqYGJHoX LB0Cy1OHlxqKdUm3fLHVW6BCxvP3tziuvbbApz8xUfBn3upqvCcTXOnifkDeZWOQ xRA45jvKBWNKXH4BBUOBtOeAvGQ4bFwmXiI/ikLDT96mCiIxhbiB02BzNZMs/1fg kUCx3pUjdcvLvg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:53 2025 by rpki-client