This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json) Hash identifier: pV5Ln1Z766+W5vjrROsI9heODRbUKCabIOTVilBEjvI= Subject key identifier: 89:A5:76:59:0B:19:9A:81:20:17:86:38:3F:D3:AC:1B:80:DA:AF:3F Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78 Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78 Certificate serial: 019B3D59B3702BEBF020570F086FEDF95593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 20:00:47 +0000 Manifest this update: Sat 20 Dec 2025 20:00:47 +0000 Manifest next update: Sun 21 Dec 2025 20:00:47 +0000 Files and hashes: 1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=) 2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: f0qgl2Qz4ZUILN32EYkh6DnjcpIvSAEdpQw4lJDnuoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:b3:70:2b:eb:f0:20:57:0f:08:6f:ed:f9:55:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78 Validity Not Before: Dec 20 20:00:47 2025 GMT Not After : Dec 21 20:00:47 2025 GMT Subject: CN=89a576590b199a81201786383fd3ac1b80daaf3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:3f:a3:ce:c6:42:10:a4:dd:fd:2c:34:8d: 2b:fb:8b:63:4f:0e:f0:c3:c4:54:d2:1b:a6:3c:ba: 07:52:fb:a6:c3:e3:2a:6a:e5:f5:b0:e2:93:da:28: 33:f5:e2:1e:90:48:37:5e:e8:1f:6f:4b:9e:16:eb: c3:7e:c7:f5:46:8b:8d:d8:b2:c3:61:d8:0f:c1:95: 2d:63:ff:87:b6:c5:72:38:07:d5:b9:20:33:46:aa: 1c:6f:9f:f8:a7:39:b5:84:db:c6:29:fb:24:26:0d: c8:51:0a:14:5d:6a:19:7e:d9:20:2e:ba:f4:9a:50: 70:3d:f0:0a:5d:08:10:c8:e9:e9:18:13:d1:e6:fa: ae:17:18:7b:59:c4:dc:54:e6:fe:fb:68:3a:a1:ed: 2d:ec:cf:a3:cc:1a:9a:0a:52:61:99:da:98:6a:81: 05:b5:15:74:3c:9d:91:7f:b2:cb:96:c4:59:c3:e9: f0:c4:5c:7a:e4:96:3d:40:1d:52:43:be:a1:27:42: 65:12:a9:1d:13:56:64:2f:aa:e5:b8:b7:e7:5d:f7: c9:75:c0:9f:1b:c6:98:b0:d8:2d:b8:9f:d6:d4:d3: 6d:ef:fd:5f:ee:c2:c1:de:8c:7a:f1:ac:c8:f8:a7: ff:50:40:27:19:c2:33:f5:92:ed:b6:6f:96:ad:7d: 3b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A5:76:59:0B:19:9A:81:20:17:86:38:3F:D3:AC:1B:80:DA:AF:3F X509v3 Authority Key Identifier: keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ee:9e:9f:a8:7a:23:5c:8e:ae:53:b7:8f:78:7a:f6:19:8b: ec:4d:0c:83:c9:09:10:0e:44:a7:58:32:e5:0f:53:fc:d5:73: 9d:47:92:60:de:93:89:bf:6f:1a:60:a6:67:43:99:bd:87:ac: b1:9c:69:ad:57:5c:87:fd:64:f0:ee:22:62:26:80:d2:7f:41: f6:c7:37:0c:49:c9:d5:9a:cb:ac:cb:58:af:8d:5b:81:69:d5: 46:80:2c:1f:12:d3:df:96:2c:0a:cb:a7:cc:08:f4:c6:3e:d4: ff:76:8d:7a:8b:b5:aa:a5:99:13:28:88:cd:08:74:d9:75:87: 6e:e5:01:b7:15:7e:c8:6c:d5:5a:82:1c:be:09:6c:1f:85:3b: 2f:bb:99:d3:bb:c4:a7:e8:38:2c:c4:37:d2:1a:20:02:2f:ad: fc:3c:e7:c3:a4:43:78:2d:82:2e:e5:38:70:ab:d6:96:22:3b: 7c:0e:fd:60:4c:f2:78:b9:d3:45:c5:11:a2:26:4c:ca:22:f6: d7:0d:51:36:d3:7a:a1:b7:4d:17:18:3d:c1:bf:34:23:bb:15: 47:b6:04:a4:f0:b4:b6:49:46:48:cc:24:f1:d6:96:fe:23:ac: e2:49:a2:85:f6:c4:ec:c2:4a:cb:fb:3e:35:72:f8:59:9a:bf: e2:6f:aa:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WbNwK+vwIFcPCG/t+VWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMzkxMzUzZjZlMWY1MDI1MDRhMDg2OGViZjhhZDBkZWJj OWRhNzgwHhcNMjUxMjIwMjAwMDQ3WhcNMjUxMjIxMjAwMDQ3WjAzMTEwLwYDVQQD Eyg4OWE1NzY1OTBiMTk5YTgxMjAxNzg2MzgzZmQzYWMxYjgwZGFhZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYw/o87GQhCk3f0sNI0r+4tjTw7w w8RU0humPLoHUvumw+MqauX1sOKT2igz9eIekEg3Xugfb0ueFuvDfsf1RouN2LLD YdgPwZUtY/+HtsVyOAfVuSAzRqocb5/4pzm1hNvGKfskJg3IUQoUXWoZftkgLrr0 mlBwPfAKXQgQyOnpGBPR5vquFxh7WcTcVOb++2g6oe0t7M+jzBqaClJhmdqYaoEF tRV0PJ2Rf7LLlsRZw+nwxFx65JY9QB1SQ76hJ0JlEqkdE1ZkL6rluLfnXffJdcCf G8aYsNgtuJ/W1NNt7/1f7sLB3ox68azI+Kf/UEAnGcIz9ZLttm+WrX07jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImldlkLGZqBIBeGOD/TrBuA2q8/MB8GA1UdIwQY MBaAFJI5E1P24fUCUEoIaOv4rQ3rydp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yMjc2NzAtZmU0ZC00YmQ2LWJmMjgt YjI1NDViNDA0ZWVjLzEva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yMjc2NzAtZmU0ZC00YmQ2LWJmMjgtYjI1NDViNDA0ZWVj LzEva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+6en6h6 I1yOrlO3j3h69hmL7E0Mg8kJEA5Ep1gy5Q9T/NVznUeSYN6Tib9vGmCmZ0OZvYes sZxprVdch/1k8O4iYiaA0n9B9sc3DEnJ1ZrLrMtYr41bgWnVRoAsHxLT35YsCsun zAj0xj7U/3aNeou1qqWZEyiIzQh02XWHbuUBtxV+yGzVWoIcvglsH4U7L7uZ07vE p+g4LMQ30hogAi+t/Dznw6RDeC2CLuU4cKvWliI7fA79YEzyeLnTRcURoiZMyiL2 1w1RNtN6obdNFxg9wb80I7sVR7YEpPC0tklGSMwk8daW/iOs4kmihfbE7MJKy/s+ NXL4WZq/4m+qUQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:54 2025 by rpki-client