This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json) Hash identifier: KjIoXZ2URqAvKPVTjKMsf6Jok+psy2XhAiqmSwb+TOY= Subject key identifier: 3D:CB:5B:E4:E0:5E:A1:8B:3A:1A:F4:D0:28:0F:63:44:D4:31:41:F3 Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df Certificate serial: 019B44A5CF4C40D48D850E362F7BCA2D3174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 06:01:15 +0000 Manifest this update: Mon 22 Dec 2025 06:01:15 +0000 Manifest next update: Tue 23 Dec 2025 06:01:15 +0000 Files and hashes: 1: 6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa (hash: gkVSjCGx8IsHv5K/Qw9S9gdePh2YLb49mTKwa/5dQoA=) 2: ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa (hash: hmCSaS0Wu7YEQqY6nNJRdpritFyq3hIDgudp8EuE1fw=) 3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: zvO3wskxHVFvfJvBOK2QHYNTr98plrzgiXpR/OsC3Qk=) 4: rd6hfh2x52BDGiRJllR6149itW8.roa (hash: CEiJf5vw/0k6qBwbBaFAB9ewgzEg3Zx08ds/2EBhN80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:cf:4c:40:d4:8d:85:0e:36:2f:7b:ca:2d:31:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df Validity Not Before: Dec 22 06:01:15 2025 GMT Not After : Dec 23 06:01:15 2025 GMT Subject: CN=3dcb5be4e05ea18b3a1af4d0280f6344d43141f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:66:38:87:42:4f:f4:8c:10:08:d8:cb:05: ab:29:6a:35:54:a2:57:80:27:89:7b:08:90:87:53: f4:c5:64:d0:47:2f:32:9b:42:7a:1d:55:27:58:7c: 28:08:ee:97:fe:34:3e:86:f3:87:4c:98:af:15:e0: 30:15:af:6c:0f:da:96:5c:f5:73:67:f8:29:81:3a: 64:3a:80:59:3c:b1:36:2b:83:50:f8:da:1a:90:92: d4:bf:5a:7d:89:1c:49:8e:2c:bd:6c:8d:5a:04:11: 01:20:85:14:37:b7:5e:b8:be:1d:48:8f:43:6f:9d: d4:64:b6:df:34:7e:8e:49:5d:ec:f3:a9:c4:04:cc: f8:c2:51:ea:78:eb:c8:ef:06:f2:7a:c8:33:89:a2: 01:67:41:ac:43:de:f4:72:43:1e:d7:66:70:2c:98: 01:a7:32:a9:99:14:05:3a:0b:2c:a7:6b:61:0a:5c: f0:94:6a:bf:68:4a:7d:74:19:37:73:9f:2c:42:ad: 3a:c9:5d:09:da:0d:d7:fb:46:c1:71:77:67:9a:1d: 3d:ac:3e:f4:36:50:ab:57:0f:87:b4:b0:f0:c6:3d: d7:04:5c:39:8c:b4:7c:41:0f:94:46:b2:2a:45:f0: a5:f8:bf:00:0d:e3:fd:96:d9:31:40:03:aa:7f:ea: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CB:5B:E4:E0:5E:A1:8B:3A:1A:F4:D0:28:0F:63:44:D4:31:41:F3 X509v3 Authority Key Identifier: keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8d:2c:36:8a:a2:ab:57:d6:f3:74:71:f7:b5:29:65:d6:7e: e8:9b:8f:3f:a7:2e:a1:aa:5b:f4:68:1d:7a:13:b6:c0:c1:6f: 46:87:fb:13:24:7a:04:69:c6:8f:22:8d:8e:58:48:88:81:44: 07:f8:4f:14:1c:85:61:0d:c2:5d:95:3a:d4:ba:db:c1:15:b4: 41:37:a6:86:6a:8e:62:d3:21:db:9e:13:f0:f9:75:74:2b:41: c0:2b:bd:63:f0:d8:a2:cd:9c:ac:c8:bf:e4:a3:38:1e:ff:e1: 69:72:50:c8:f7:7a:76:1f:7d:8d:80:38:c3:63:b7:7a:7b:f0: c7:b4:6f:ec:06:25:49:1d:10:82:f9:5c:f6:92:79:00:8b:15: e4:3e:01:17:1e:47:3c:1d:37:4d:a2:2f:7b:59:b6:95:dd:d6: 0a:03:33:d0:5a:64:07:21:05:20:23:eb:5a:46:96:67:eb:83: ec:0f:24:dc:07:01:cc:eb:de:ad:12:5f:22:7d:35:26:75:59: 64:1e:ed:89:c2:03:a3:41:7a:c3:e7:31:9a:11:76:21:55:70: 07:93:25:e5:e5:a2:37:84:b5:3a:83:a7:1e:ff:e9:a6:2d:77: 58:7e:c0:fd:39:16:4e:c4:b0:78:3b:9b:0e:8e:25:29:3a:cb: 09:ac:19:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpc9MQNSNhQ42L3vKLTF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjI3M2E2M2M1MWVhZjNmOWU1YWU3YjlmYWFmZGIyOTMx MzQwZGYwHhcNMjUxMjIyMDYwMTE1WhcNMjUxMjIzMDYwMTE1WjAzMTEwLwYDVQQD EygzZGNiNWJlNGUwNWVhMThiM2ExYWY0ZDAyODBmNjM0NGQ0MzE0MWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvNmOIdCT/SMEAjYywWrKWo1VKJX gCeJewiQh1P0xWTQRy8ym0J6HVUnWHwoCO6X/jQ+hvOHTJivFeAwFa9sD9qWXPVz Z/gpgTpkOoBZPLE2K4NQ+NoakJLUv1p9iRxJjiy9bI1aBBEBIIUUN7deuL4dSI9D b53UZLbfNH6OSV3s86nEBMz4wlHqeOvI7wbyesgziaIBZ0GsQ970ckMe12ZwLJgB pzKpmRQFOgssp2thClzwlGq/aEp9dBk3c58sQq06yV0J2g3X+0bBcXdnmh09rD70 NlCrVw+HtLDwxj3XBFw5jLR8QQ+URrIqRfCl+L8ADeP9ltkxQAOqf+rO3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3LW+TgXqGLOhr00CgPY0TUMUHzMB8GA1UdIwQY MBaAFJDyc6Y8Uerz+eWue5+q/bKTE0DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2Yt NTA4MmMyOGI3MTVmLzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2YtNTA4MmMyOGI3MTVm LzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW40sNoqi q1fW83Rx97UpZdZ+6JuPP6cuoapb9GgdehO2wMFvRof7EyR6BGnGjyKNjlhIiIFE B/hPFByFYQ3CXZU61LrbwRW0QTemhmqOYtMh254T8Pl1dCtBwCu9Y/DYos2crMi/ 5KM4Hv/haXJQyPd6dh99jYA4w2O3envwx7Rv7AYlSR0Qgvlc9pJ5AIsV5D4BFx5H PB03TaIve1m2ld3WCgMz0FpkByEFICPrWkaWZ+uD7A8k3AcBzOverRJfIn01JnVZ ZB7ticIDo0F6w+cxmhF2IVVwB5Ml5eWiN4S1OoOnHv/ppi13WH7A/TkWTsSweDub Do4lKTrLCawZ9Q== -----END CERTIFICATE-----Generated at Mon Dec 22 09:46:00 2025 by rpki-client