This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json) Hash identifier: sVu3/9zrcwbXgFBpgRgr41vn2YUIXk3q03bNJMFQrcc= Subject key identifier: 43:C8:4D:83:23:A2:CC:C9:9F:A6:45:7A:72:56:32:69:7B:02:C2:84 Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97 Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097 Certificate serial: 019B416D98D385A537CA80C7EF1A5729CF63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft Manifest number: 0FDB Signing time: Sun 21 Dec 2025 15:01:00 +0000 Manifest this update: Sun 21 Dec 2025 15:01:00 +0000 Manifest next update: Mon 22 Dec 2025 15:01:00 +0000 Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=) 2: V7lXlsc_KCrBF5PGRWvxEoDs1jE.roa (hash: 3HSkq2ZQ4Tv+kukR6Ld2lDKWo32adQgvx+S4uGpggoY=) 3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: CMs16JqDtGjYC3zSCgMruPgZOcAov8CPKmo/Fyvsuzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:98:d3:85:a5:37:ca:80:c7:ef:1a:57:29:cf:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097 Validity Not Before: Dec 21 15:01:00 2025 GMT Not After : Dec 22 15:01:00 2025 GMT Subject: CN=43c84d8323a2ccc99fa6457a725632697b02c284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:48:21:f6:76:19:7c:e9:1d:2f:26:8b:27: af:3f:dc:32:a2:3a:39:1b:f6:8b:12:11:20:9c:72: fa:6f:c8:a0:7a:bd:4f:2b:7f:e3:03:2c:eb:47:33: 18:cc:b1:e0:60:3a:dd:bd:f7:e0:03:3f:20:62:6d: b5:46:6a:1a:e2:94:e4:b1:0c:07:a2:5b:5b:bd:fe: 7f:3e:19:b9:00:09:b1:73:36:0e:cb:5c:6a:e0:df: 25:c2:a0:d1:a4:e8:45:79:50:38:f2:47:45:49:93: 77:e0:f4:5d:e2:b2:ad:f9:e4:30:58:e9:f5:ec:2c: 92:36:ff:fb:15:9e:0a:0b:52:9d:59:46:36:bc:2d: 91:48:87:c8:e5:a3:dc:4e:56:76:30:4b:a4:55:4b: b4:15:07:df:09:74:25:be:b6:41:2b:55:30:88:cd: 1d:69:df:69:4b:c1:16:b0:d1:4c:5a:b8:5b:db:3a: 45:b9:ea:51:a6:b8:08:39:07:b7:98:18:3b:d1:34: 7e:f9:fd:af:37:89:5f:10:5c:9f:03:c9:6c:6a:fa: 98:34:fa:0d:73:2c:cc:f5:87:f8:e2:25:84:ae:e9: 31:7b:87:4a:99:ad:6f:51:10:1d:1d:cb:3a:58:b4: a5:3f:89:48:88:21:dd:80:a5:a6:fa:44:32:6d:07: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:4D:83:23:A2:CC:C9:9F:A6:45:7A:72:56:32:69:7B:02:C2:84 X509v3 Authority Key Identifier: keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:61:94:91:76:d1:cf:01:d7:b6:ad:35:29:79:ac:45:83:38: 57:37:f6:e9:70:8a:b1:c8:b1:8a:ea:31:b5:f8:ac:eb:29:6a: 4a:24:d3:67:81:92:e4:a4:53:4b:fe:dd:7e:96:09:6a:6c:a7: 33:62:f3:72:11:2a:f3:62:67:fe:22:9d:44:8e:79:0e:01:14: 8b:23:45:03:69:8f:3d:76:6d:5b:9d:7c:39:fd:6f:3e:c9:5e: db:0f:04:de:b2:ea:b3:4f:17:3d:3e:3a:d6:49:95:6c:c3:ae: 9a:9b:89:44:52:18:17:9a:66:a3:e2:50:10:a0:21:9f:46:4e: d0:11:e0:5c:c1:9c:d1:20:92:8c:05:21:0e:f5:d0:9d:b1:c6: 06:e1:86:af:45:0f:6c:16:c1:9c:f3:f2:05:a8:fe:f6:4f:a1: 3b:6a:f6:ca:1f:19:fc:cb:74:2f:14:89:ee:6f:8f:f9:df:5e: 72:42:9f:c1:19:3a:0a:2c:e6:ba:df:c6:ff:52:c4:24:06:d9: 7d:e9:00:f5:36:9a:37:c3:fb:37:ce:2e:56:13:00:53:2b:73: 7c:45:8e:84:55:85:bc:6c:0c:df:ec:a5:4c:89:e1:2b:f9:e4: b5:8a:88:84:68:74:c3:6d:42:83:0f:9e:19:3c:20:3d:16:0c: 69:7a:22:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbZjThaU3yoDH7xpXKc9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTMzZTAxMzY0NGRiOWM5ZWU5YjkxZGY3MmUxMzM4ZGI4 ZTIwOTcwHhcNMjUxMjIxMTUwMTAwWhcNMjUxMjIyMTUwMTAwWjAzMTEwLwYDVQQD Eyg0M2M4NGQ4MzIzYTJjY2M5OWZhNjQ1N2E3MjU2MzI2OTdiMDJjMjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7FIIfZ2GXzpHS8miyevP9wyojo5 G/aLEhEgnHL6b8iger1PK3/jAyzrRzMYzLHgYDrdvffgAz8gYm21Rmoa4pTksQwH oltbvf5/Phm5AAmxczYOy1xq4N8lwqDRpOhFeVA48kdFSZN34PRd4rKt+eQwWOn1 7CySNv/7FZ4KC1KdWUY2vC2RSIfI5aPcTlZ2MEukVUu0FQffCXQlvrZBK1UwiM0d ad9pS8EWsNFMWrhb2zpFuepRprgIOQe3mBg70TR++f2vN4lfEFyfA8lsavqYNPoN cyzM9Yf44iWErukxe4dKma1vURAdHcs6WLSlP4lIiCHdgKWm+kQybQcnFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPITYMjoszJn6ZFenJWMml7AsKEMB8GA1UdIwQY MBaAFJKTPgE2RNucnum5HfcuEzjbjiCXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTkt NWNjMmVmMDk5YWVlLzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82YmVmMjItZjM0NS00NjAzLWExZTktNWNjMmVmMDk5YWVl LzEva3BNLUFUWkUyNXllNmJrZDl5NFRPTnVPSUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWGUkXbR zwHXtq01KXmsRYM4Vzf26XCKscixiuoxtfis6ylqSiTTZ4GS5KRTS/7dfpYJamyn M2LzchEq82Jn/iKdRI55DgEUiyNFA2mPPXZtW518Of1vPsle2w8E3rLqs08XPT46 1kmVbMOumpuJRFIYF5pmo+JQEKAhn0ZO0BHgXMGc0SCSjAUhDvXQnbHGBuGGr0UP bBbBnPPyBaj+9k+hO2r2yh8Z/Mt0LxSJ7m+P+d9eckKfwRk6Cizmut/G/1LEJAbZ fekA9TaaN8P7N84uVhMAUytzfEWOhFWFvGwM3+ylTInhK/nktYqIhGh0w21Cgw+e GTwgPRYMaXoiyQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:26:27 2025 by rpki-client