This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json) Hash identifier: Fz6QkrhCJ9AAseyajLtSyzWASdSjApBy3mfDtTRQkq4= Subject key identifier: E3:A9:EF:66:55:CF:93:67:DC:CC:AF:35:65:FA:2A:4C:98:14:78:F7 Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76 Certificate serial: 019B3FB5D0D5D170DDAF16928B544D43A82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft Manifest number: 115C Signing time: Sun 21 Dec 2025 07:00:38 +0000 Manifest this update: Sun 21 Dec 2025 07:00:38 +0000 Manifest next update: Mon 22 Dec 2025 07:00:38 +0000 Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=) 2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: coatdzXNivA0YTpYHIoIfDyS+al9E+p8nmD7OaoHvXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:d0:d5:d1:70:dd:af:16:92:8b:54:4d:43:a8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76 Validity Not Before: Dec 21 07:00:38 2025 GMT Not After : Dec 22 07:00:38 2025 GMT Subject: CN=e3a9ef6655cf9367dcccaf3565fa2a4c981478f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:1f:de:74:dd:2d:22:89:7a:20:90:24:64: b6:62:60:b6:ee:16:2b:e4:c7:48:fb:5d:2d:13:de: 55:60:04:27:d5:a9:60:e4:76:f6:4b:4d:00:66:54: 03:93:db:45:19:0e:5b:1e:2c:11:a3:85:4e:9e:1a: fa:58:3a:a9:34:a4:15:b4:8e:20:f3:2e:c5:6d:a8: bd:e9:69:38:b8:9b:9e:ed:32:e9:c9:33:ba:72:29: a4:34:ca:14:06:23:53:cf:97:e9:c8:9f:1b:88:43: 67:98:81:51:f1:12:c9:3b:a8:81:22:16:00:10:64: ca:4f:3c:e6:a1:94:ca:94:fc:e4:04:30:23:0b:7e: 68:70:7e:92:61:ef:4d:76:0c:23:45:d5:7b:81:3c: d3:56:11:bc:dc:08:65:b3:08:73:b5:c2:d3:b4:52: 0d:d2:dc:9b:d0:8c:87:44:b2:6b:25:7a:fb:32:2e: 5f:50:23:18:b0:b6:51:69:cb:9d:4a:1e:95:63:77: d1:1e:82:44:3c:d0:15:d8:66:c1:75:6a:89:ae:f5: 4d:ed:65:a2:31:bc:4a:b2:3c:5a:ca:fd:25:76:1f: 68:fa:5b:6b:4b:f3:57:32:d5:e4:ec:8c:d0:95:9d: f0:9c:c8:8c:7d:f4:7a:1c:ec:69:1e:2a:08:42:bf: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A9:EF:66:55:CF:93:67:DC:CC:AF:35:65:FA:2A:4C:98:14:78:F7 X509v3 Authority Key Identifier: keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:81:1b:f7:a9:ce:3b:33:2a:28:09:0c:62:e4:45:08:3f:b3: 0b:51:3a:2f:84:c5:dc:af:0b:35:b6:8b:7e:86:ee:26:61:b3: 5b:46:7f:f6:13:1b:ab:3f:24:cd:00:2c:36:e6:77:92:c3:f6: 3a:8f:0f:a9:0f:26:06:85:f7:f1:de:d5:3b:95:69:3a:e9:c4: 15:e1:65:3b:6d:7d:be:8e:e9:78:b5:b2:f8:41:b2:ea:bf:08: 49:4e:9f:57:b3:f6:c2:da:0b:89:81:f3:78:dc:ec:06:85:9f: 6b:eb:f7:14:a2:fd:b9:69:9d:2c:d5:0a:aa:ff:c6:e0:00:6f: d1:14:f5:20:b5:b4:15:47:83:fb:7a:ff:ae:fa:48:30:71:6b: cf:cd:cd:cb:9f:a5:b2:6c:45:e1:23:95:8d:71:56:6b:0f:5a: 78:64:a4:28:68:7c:58:fe:bb:de:05:ab:e8:06:f2:2c:82:c2: f9:08:0f:72:f3:52:69:e8:46:06:2e:7b:23:e7:27:6b:a8:e8: 5e:7c:41:49:c1:9f:7d:14:21:87:ef:4b:19:f6:28:61:25:ad: 43:1b:71:60:2a:c4:f1:93:fa:4c:8d:84:84:78:c1:d2:ce:6c: bf:32:b5:fb:3c:db:8e:d5:03:c6:1e:23:62:55:a6:86:be:08: e6:5d:dc:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tdDV0XDdrxaSi1RNQ6gtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj ZWZjNzYwHhcNMjUxMjIxMDcwMDM4WhcNMjUxMjIyMDcwMDM4WjAzMTEwLwYDVQQD EyhlM2E5ZWY2NjU1Y2Y5MzY3ZGNjY2FmMzU2NWZhMmE0Yzk4MTQ3OGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgwf3nTdLSKJeiCQJGS2YmC27hYr 5MdI+10tE95VYAQn1alg5Hb2S00AZlQDk9tFGQ5bHiwRo4VOnhr6WDqpNKQVtI4g 8y7Fbai96Wk4uJue7TLpyTO6cimkNMoUBiNTz5fpyJ8biENnmIFR8RLJO6iBIhYA EGTKTzzmoZTKlPzkBDAjC35ocH6SYe9NdgwjRdV7gTzTVhG83AhlswhztcLTtFIN 0tyb0IyHRLJrJXr7Mi5fUCMYsLZRacudSh6VY3fRHoJEPNAV2GbBdWqJrvVN7WWi MbxKsjxayv0ldh9o+ltrS/NXMtXk7IzQlZ3wnMiMffR6HOxpHioIQr8IiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOp72ZVz5Nn3MyvNWX6KkyYFHj3MB8GA1UdIwQY MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct MDU1N2JkNzIxN2YxLzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYEb96nO OzMqKAkMYuRFCD+zC1E6L4TF3K8LNbaLfobuJmGzW0Z/9hMbqz8kzQAsNuZ3ksP2 Oo8PqQ8mBoX38d7VO5VpOunEFeFlO219vo7peLWy+EGy6r8ISU6fV7P2wtoLiYHz eNzsBoWfa+v3FKL9uWmdLNUKqv/G4ABv0RT1ILW0FUeD+3r/rvpIMHFrz83Ny5+l smxF4SOVjXFWaw9aeGSkKGh8WP673gWr6AbyLILC+QgPcvNSaehGBi57I+cna6jo XnxBScGffRQhh+9LGfYoYSWtQxtxYCrE8ZP6TI2EhHjB0s5svzK1+zzbjtUDxh4j YlWmhr4I5l3cHA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:05:10 2025 by rpki-client