This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json) Hash identifier: dD1LHIeHq8NRDN/QU++gwQB8lE0m+/Cx3kKHN8mdOz0= Subject key identifier: FF:E6:D3:6C:C2:AA:45:5F:18:A0:AC:37:46:ED:F0:4D:CB:13:D0:97 Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504 Certificate serial: 019B65431137163DE7B3DDE743117CD9C00B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft Manifest number: 179E Signing time: Sun 28 Dec 2025 14:00:52 +0000 Manifest this update: Sun 28 Dec 2025 14:00:52 +0000 Manifest next update: Mon 29 Dec 2025 14:00:52 +0000 Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: TMhurI3HLOpElrthaIT40kWXh04yeEAIE2r6pWxruz8=) 2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:43:11:37:16:3d:e7:b3:dd:e7:43:11:7c:d9:c0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504 Validity Not Before: Dec 28 14:00:52 2025 GMT Not After : Dec 29 14:00:52 2025 GMT Subject: CN=ffe6d36cc2aa455f18a0ac3746edf04dcb13d097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:df:05:08:ad:97:2d:a1:8c:bd:ab:72:a7:75: 49:21:10:bc:25:20:26:a0:e8:04:c4:11:7b:97:f9: 12:89:fd:25:17:e8:9b:f9:95:6b:8c:59:50:bc:18: 0a:3f:ba:bf:67:9e:d8:31:0f:c7:c8:25:51:f3:fd: 7f:ec:e2:45:89:b6:cd:8f:06:5b:e3:4f:d0:ad:26: 5c:2b:67:75:c4:d0:8a:b8:f9:24:c4:ff:d9:81:7d: 1b:a0:50:0d:52:0a:95:3e:ff:58:e6:5a:7c:31:1f: c4:bd:bf:1b:21:eb:95:ef:6f:e0:19:f2:f6:8e:b5: b2:d1:7b:6e:d1:07:55:1a:54:10:63:a0:72:2d:23: 05:61:21:87:1c:5d:17:9b:49:2f:cd:f3:33:8c:5d: e6:84:3a:41:b5:5e:39:ad:de:fe:2d:bb:ce:3c:51: db:69:ef:7b:7d:7c:d8:05:c1:4f:44:e0:39:1a:33: 3c:2e:04:82:12:d8:a9:f5:61:1c:70:8d:3b:22:b3: 2e:9d:51:7b:b0:38:df:70:b6:21:35:1d:b7:8e:a1: e1:cc:57:9c:d7:44:66:b7:f8:47:ff:6c:bc:81:38: c9:91:f1:8d:a9:70:a5:5c:15:81:c0:94:57:40:b0: 6e:00:ae:42:1d:6d:bc:24:4b:08:94:0d:78:48:43: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E6:D3:6C:C2:AA:45:5F:18:A0:AC:37:46:ED:F0:4D:CB:13:D0:97 X509v3 Authority Key Identifier: keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:b3:db:80:04:1d:e0:fa:bc:9c:b1:81:cd:d8:fa:90:5b:ee: e8:7e:c5:4f:b5:9b:83:7a:c1:b9:b5:25:31:07:45:fd:35:0e: 67:be:60:07:61:68:d0:f0:73:58:1d:e7:34:49:86:f1:4e:d1: 2e:27:74:02:6c:a0:db:aa:d0:87:ad:76:5a:27:d6:81:34:93: 1a:37:e1:fe:b5:ba:80:db:52:19:a7:6d:cf:ea:c1:84:36:cd: 8a:8a:71:75:f7:f1:3f:51:93:08:2a:74:39:16:2b:da:4d:93: fb:c6:6f:ba:97:75:2f:19:20:66:07:3d:e9:6c:b8:ee:e3:76: ec:0b:1a:71:c6:26:57:0f:d2:1c:22:93:de:36:6a:ba:4d:2e: 3e:6e:a9:02:fa:9f:58:e6:6c:9d:1e:c1:17:1e:7f:f5:56:31: 5d:09:0e:8d:bb:de:e7:2f:a1:04:85:c1:d8:3d:3c:dc:19:57: cc:77:18:71:93:81:67:30:3e:55:4a:83:79:37:58:8d:5a:c9: 94:42:53:b6:2e:c6:33:e3:66:c3:1d:2f:cb:d4:37:f0:44:99: 20:0f:ee:81:74:96:76:c4:08:34:c9:96:95:30:99:9b:9b:04: bc:3a:cf:10:7b:23:81:a9:6a:42:9b:81:59:38:7b:72:4a:7a: 7c:9a:5d:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQxE3Fj3ns93nQxF82cALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTE2Mzc5YTA0MmRmNzQ0NWU0MmVmYjM2NDZkMWYyNWE2 N2Q1MDQwHhcNMjUxMjI4MTQwMDUyWhcNMjUxMjI5MTQwMDUyWjAzMTEwLwYDVQQD EyhmZmU2ZDM2Y2MyYWE0NTVmMThhMGFjMzc0NmVkZjA0ZGNiMTNkMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN8FCK2XLaGMvatyp3VJIRC8JSAm oOgExBF7l/kSif0lF+ib+ZVrjFlQvBgKP7q/Z57YMQ/HyCVR8/1/7OJFibbNjwZb 40/QrSZcK2d1xNCKuPkkxP/ZgX0boFANUgqVPv9Y5lp8MR/Evb8bIeuV72/gGfL2 jrWy0Xtu0QdVGlQQY6ByLSMFYSGHHF0Xm0kvzfMzjF3mhDpBtV45rd7+LbvOPFHb ae97fXzYBcFPROA5GjM8LgSCEtip9WEccI07IrMunVF7sDjfcLYhNR23jqHhzFec 10Rmt/hH/2y8gTjJkfGNqXClXBWBwJRXQLBuAK5CHW28JEsIlA14SEOe5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/m02zCqkVfGKCsN0bt8E3LE9CXMB8GA1UdIwQY MBaAFJBRY3mgQt90ReQu+zZG0fJaZ9UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYt NDRhOTFiYTE3YjA4LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYtNDRhOTFiYTE3YjA4 LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzrPbgAQd 4Pq8nLGBzdj6kFvu6H7FT7Wbg3rBubUlMQdF/TUOZ75gB2Fo0PBzWB3nNEmG8U7R Lid0Amyg26rQh612WifWgTSTGjfh/rW6gNtSGadtz+rBhDbNiopxdffxP1GTCCp0 ORYr2k2T+8Zvupd1LxkgZgc96Wy47uN27AsaccYmVw/SHCKT3jZquk0uPm6pAvqf WOZsnR7BFx5/9VYxXQkOjbve5y+hBIXB2D083BlXzHcYcZOBZzA+VUqDeTdYjVrJ lEJTti7GM+Nmwx0vy9Q38ESZIA/ugXSWdsQINMmWlTCZm5sEvDrPEHsjgalqQpuB WTh7ckp6fJpdrw== -----END CERTIFICATE-----Generated at Sun Dec 28 20:12:55 2025 by rpki-client