This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json) Hash identifier: AMwJzAhp058fN2sBC0Q4U+aWQNgWyrPMvLzubBL7CAs= Subject key identifier: 64:AC:4C:A9:13:86:B1:A5:3C:35:ED:2D:C3:06:DC:B4:8E:1E:E6:F5 Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df Certificate serial: 019B6F2278844D51C847A3E076D863BC06D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 12:01:28 +0000 Manifest this update: Tue 30 Dec 2025 12:01:28 +0000 Manifest next update: Wed 31 Dec 2025 12:01:28 +0000 Files and hashes: 1: 6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa (hash: gkVSjCGx8IsHv5K/Qw9S9gdePh2YLb49mTKwa/5dQoA=) 2: ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa (hash: hmCSaS0Wu7YEQqY6nNJRdpritFyq3hIDgudp8EuE1fw=) 3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: biForho+JH0nFCihnN4W5H2tmIx8sXEX6HI4hPwFkLg=) 4: rd6hfh2x52BDGiRJllR6149itW8.roa (hash: CEiJf5vw/0k6qBwbBaFAB9ewgzEg3Zx08ds/2EBhN80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:22:78:84:4d:51:c8:47:a3:e0:76:d8:63:bc:06:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df Validity Not Before: Dec 30 12:01:28 2025 GMT Not After : Dec 31 12:01:28 2025 GMT Subject: CN=64ac4ca91386b1a53c35ed2dc306dcb48e1ee6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:44:28:8e:73:45:30:3d:e0:3f:28:73:f6: 28:6e:5a:c6:f8:43:6f:d4:52:09:11:79:b5:b3:be: e1:3c:c9:91:88:7e:15:39:83:c3:44:eb:20:79:5b: b3:4a:9a:5a:bc:28:f0:ae:58:09:e6:26:1a:48:19: e5:e2:63:11:7e:8f:8f:12:6d:ad:35:aa:d5:9c:89: fe:9c:57:b7:40:e2:22:c8:1f:3c:cf:df:8f:48:e5: ab:42:52:d2:bb:6d:8c:ec:db:a4:e8:00:7e:cf:2e: b1:ff:ea:df:df:3e:d0:69:f6:71:96:0a:04:0e:04: 6d:0c:4d:59:88:01:45:c6:9b:cf:25:7f:58:6d:43: 28:63:2f:e2:eb:94:39:67:4f:25:92:c6:df:52:69: c8:10:7c:93:e3:3f:4b:08:0d:65:cb:32:d5:e8:bf: a7:1a:51:7d:c0:bf:cc:c8:b1:94:27:65:77:8c:9f: 96:46:59:69:15:f1:39:ea:45:e4:fa:b0:f4:65:34: c6:3d:f3:88:8b:45:eb:7b:39:81:28:69:ee:4a:b9: b6:02:34:a3:eb:26:a5:98:c3:ca:1d:30:84:bc:a8: e8:2d:93:fc:7d:8a:5b:49:0f:58:4a:75:f3:9f:41: f0:5f:d3:69:57:1b:25:03:3f:b5:a7:fc:a1:59:ef: 0f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AC:4C:A9:13:86:B1:A5:3C:35:ED:2D:C3:06:DC:B4:8E:1E:E6:F5 X509v3 Authority Key Identifier: keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2d:00:2b:95:da:c8:34:9e:cf:c1:8b:0b:e6:4a:51:a8:22: 7e:73:48:ab:38:5a:80:e8:e6:2f:4d:41:a0:83:1e:86:40:46: 6d:f2:ec:60:b9:86:36:32:2a:40:38:23:29:a3:fc:00:06:c6: 63:f3:23:2f:d6:e2:2a:d5:cc:7a:28:bd:ee:13:78:09:12:76: 14:e9:1f:f8:7d:59:7f:10:b5:3b:e2:07:57:ea:6a:e3:bd:5d: 5e:5b:a8:05:51:8e:4b:78:49:76:43:a3:cc:5f:bc:ec:ad:cf: 39:c6:f0:52:66:d9:1e:e8:9c:7d:8b:cb:58:67:4d:d8:56:6f: fd:5e:7c:68:4d:20:a6:ff:19:d6:42:30:c8:a5:8e:e5:a9:90: 36:13:cb:1f:43:51:31:e0:20:92:44:d0:b7:1b:8b:ec:5a:91: f9:10:b0:7a:4d:4a:3a:e4:e5:0c:62:20:61:40:f9:e3:f1:eb: f7:79:d3:5f:78:9a:69:5c:0e:40:5d:f4:59:b6:4a:e2:9b:d0: 18:7b:5f:64:06:a7:ce:06:17:48:24:a5:d4:6a:56:e2:76:4f: 40:ba:d7:be:f5:01:48:ba:16:bd:cf:16:88:ec:71:23:97:54: 29:51:d4:fe:62:ce:a1:86:4f:f8:fe:e3:22:45:9d:66:9c:7e: 39:12:ed:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIniETVHIR6PgdthjvAbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI3M2E2M2M1MWVhZjNmOWU1YWU3YjlmYWFmZGIyOTMx MzQwZGYwHhcNMjUxMjMwMTIwMTI4WhcNMjUxMjMxMTIwMTI4WjAzMTEwLwYDVQQD Eyg2NGFjNGNhOTEzODZiMWE1M2MzNWVkMmRjMzA2ZGNiNDhlMWVlNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUBEKI5zRTA94D8oc/YoblrG+ENv 1FIJEXm1s77hPMmRiH4VOYPDROsgeVuzSppavCjwrlgJ5iYaSBnl4mMRfo+PEm2t NarVnIn+nFe3QOIiyB88z9+PSOWrQlLSu22M7Nuk6AB+zy6x/+rf3z7QafZxlgoE DgRtDE1ZiAFFxpvPJX9YbUMoYy/i65Q5Z08lksbfUmnIEHyT4z9LCA1lyzLV6L+n GlF9wL/MyLGUJ2V3jJ+WRllpFfE56kXk+rD0ZTTGPfOIi0XrezmBKGnuSrm2AjSj 6yalmMPKHTCEvKjoLZP8fYpbSQ9YSnXzn0HwX9NpVxslAz+1p/yhWe8PFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSsTKkThrGlPDXtLcMG3LSOHub1MB8GA1UdIwQY MBaAFJDyc6Y8Uerz+eWue5+q/bKTE0DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2Yt NTA4MmMyOGI3MTVmLzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2YtNTA4MmMyOGI3MTVm LzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZC0AK5Xa yDSez8GLC+ZKUagifnNIqzhagOjmL01BoIMehkBGbfLsYLmGNjIqQDgjKaP8AAbG Y/MjL9biKtXMeii97hN4CRJ2FOkf+H1ZfxC1O+IHV+pq471dXluoBVGOS3hJdkOj zF+87K3POcbwUmbZHuicfYvLWGdN2FZv/V58aE0gpv8Z1kIwyKWO5amQNhPLH0NR MeAgkkTQtxuL7FqR+RCwek1KOuTlDGIgYUD54/Hr93nTX3iaaVwOQF30WbZK4pvQ GHtfZAanzgYXSCSl1GpW4nZPQLrXvvUBSLoWvc8WiOxxI5dUKVHU/mLOoYZP+P7j IkWdZpx+ORLt2A== -----END CERTIFICATE-----Generated at Tue Dec 30 16:32:47 2025 by rpki-client