This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft File: kaBxUIM4JgVRpV8B_QcI_fXggoc.mft (raw, json) Hash identifier: J77D5ovvTd2D1MIyqGoz/ojhveVJRLf7EHfG9yTq4S0= Subject key identifier: D4:0D:8A:A6:29:4D:F0:D6:40:D3:1B:88:5B:6A:22:66:94:3F:95:FF Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 Certificate issuer: /CN=91a071508338260551a55f01fd0708fdf5e08287 Certificate serial: 019B3231D05CC007D76D80871478CAE5E827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 16:01:23 +0000 Manifest this update: Thu 18 Dec 2025 16:01:23 +0000 Manifest next update: Fri 19 Dec 2025 16:01:23 +0000 Files and hashes: 1: Cgt_gy7EMOYMV19k2tz2rtLd7TU.roa (hash: j2CPj0aVUdndtIwS2SsvRubF8DiJi7ArwXEuxy5F6uI=) 2: LtAL3K8AdfyisGKqq9Vjp_7EH0w.roa (hash: ExkUCXkAhlWeYSrTyMjTF0LGwM8Q8/UHTNY3ZJzGHYE=) 3: kaBxUIM4JgVRpV8B_QcI_fXggoc.crl (hash: 7P9kCQ7J+lCsQQMNdO8lpASAhSuiATE88g1RcCrEs2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:d0:5c:c0:07:d7:6d:80:87:14:78:ca:e5:e8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287 Validity Not Before: Dec 18 16:01:23 2025 GMT Not After : Dec 19 16:01:23 2025 GMT Subject: CN=d40d8aa6294df0d640d31b885b6a2266943f95ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:5d:1d:13:7e:f7:b8:e3:f3:e9:2f:a8:9c: 37:89:b2:db:10:bd:e4:93:a6:1b:5d:be:94:04:99: f3:88:5a:6a:9d:f8:99:08:47:cb:a9:9e:a4:d7:74: f0:e0:d6:a1:c0:3a:ee:2a:d0:4d:cf:a6:f0:bc:18: 97:0c:e5:39:99:5e:db:fc:6b:bc:83:b2:0c:5b:73: 90:e8:17:88:12:ce:1f:5a:14:60:00:43:08:2d:0b: d4:68:aa:7a:c5:d2:5b:47:89:11:e1:3f:a3:ad:a1: db:fe:3f:86:72:16:66:60:12:94:85:28:2b:de:75: 19:76:9f:b1:3e:f9:53:83:6b:5d:de:03:ce:49:78: 98:5b:76:49:75:01:e0:6a:79:8a:75:f5:03:25:18: ef:eb:7a:d6:c6:1f:d7:b6:6a:d6:cb:e2:c4:be:45: fa:a7:dc:9c:a6:f0:12:be:8a:e4:47:53:d3:f0:1b: b1:7c:41:70:bf:86:d4:31:6a:d0:bb:3d:a0:9b:9c: 71:c0:9d:ff:07:42:79:84:7b:5d:a5:86:af:0e:dc: 32:fa:a7:d6:c7:d8:d7:6e:ee:9a:e4:a4:47:16:e5: 1c:29:d0:cd:c3:79:f8:57:c2:9f:0e:23:53:02:a6: a3:da:10:a1:d0:0f:ea:b4:52:a1:7b:4b:74:e5:c3: 66:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0D:8A:A6:29:4D:F0:D6:40:D3:1B:88:5B:6A:22:66:94:3F:95:FF X509v3 Authority Key Identifier: keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:03:6c:64:33:c7:4c:3c:3f:a4:4f:df:a3:ed:15:54:2d:9e: af:07:75:ca:22:d7:ca:32:e1:2f:7a:a4:25:dc:ad:54:7e:2b: 60:1b:bc:35:71:22:fb:f7:02:de:07:e7:4c:18:b2:3d:a3:06: 52:2f:bc:58:3d:a5:c8:74:7d:e2:39:fa:c1:06:74:5f:37:16: c0:26:71:05:1b:9c:33:a1:7e:fd:60:ff:26:48:9c:ae:4c:f6: d9:65:13:e4:98:0e:ea:ea:45:10:68:e0:94:ce:2e:ad:41:e1: 11:8f:5c:b9:1c:40:36:34:a1:8e:19:5e:54:31:69:c6:90:07: 59:9e:39:04:40:7d:dd:01:65:c2:b8:db:7e:2a:ef:d1:f5:97: a1:80:12:68:cc:c8:3f:74:9d:de:56:0c:db:f4:b3:e9:53:ea: ca:e5:90:27:85:93:66:59:54:87:22:db:1d:e4:ad:0e:2d:39: cf:49:20:e9:cd:28:50:fe:44:ca:65:50:b3:2d:92:96:0d:3a: 34:49:88:3f:3c:3a:0c:ed:c0:ee:fe:5f:75:d9:6e:47:eb:7d: 61:df:65:56:df:4a:b6:a5:8d:c7:4d:f1:78:82:5e:95:9d:fe: 25:01:cd:a3:e2:c8:db:b5:e7:31:d5:f7:5e:a1:5f:5a:50:20: c3:b4:a9:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMdBcwAfXbYCHFHjK5egnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYTA3MTUwODMzODI2MDU1MWE1NWYwMWZkMDcwOGZkZjVl MDgyODcwHhcNMjUxMjE4MTYwMTIzWhcNMjUxMjE5MTYwMTIzWjAzMTEwLwYDVQQD EyhkNDBkOGFhNjI5NGRmMGQ2NDBkMzFiODg1YjZhMjI2Njk0M2Y5NWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1tdHRN+97jj8+kvqJw3ibLbEL3k k6YbXb6UBJnziFpqnfiZCEfLqZ6k13Tw4NahwDruKtBNz6bwvBiXDOU5mV7b/Gu8 g7IMW3OQ6BeIEs4fWhRgAEMILQvUaKp6xdJbR4kR4T+jraHb/j+GchZmYBKUhSgr 3nUZdp+xPvlTg2td3gPOSXiYW3ZJdQHganmKdfUDJRjv63rWxh/XtmrWy+LEvkX6 p9ycpvASvorkR1PT8BuxfEFwv4bUMWrQuz2gm5xxwJ3/B0J5hHtdpYavDtwy+qfW x9jXbu6a5KRHFuUcKdDNw3n4V8KfDiNTAqaj2hCh0A/qtFKhe0t05cNmMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQNiqYpTfDWQNMbiFtqImaUP5X/MB8GA1UdIwQY MBaAFJGgcVCDOCYFUaVfAf0HCP314IKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWIt ZWU1NTU5YjM2NThiLzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xNWNjNTItNTFlZS00NjBlLTlhZWItZWU1NTU5YjM2NThi LzEva2FCeFVJTTRKZ1ZScFY4Ql9RY0lfZlhnZ29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwNsZDPH TDw/pE/fo+0VVC2erwd1yiLXyjLhL3qkJdytVH4rYBu8NXEi+/cC3gfnTBiyPaMG Ui+8WD2lyHR94jn6wQZ0XzcWwCZxBRucM6F+/WD/Jkicrkz22WUT5JgO6upFEGjg lM4urUHhEY9cuRxANjShjhleVDFpxpAHWZ45BEB93QFlwrjbfirv0fWXoYASaMzI P3Sd3lYM2/Sz6VPqyuWQJ4WTZllUhyLbHeStDi05z0kg6c0oUP5EymVQsy2Slg06 NEmIPzw6DO3A7v5fddluR+t9Yd9lVt9KtqWNx03xeIJelZ3+JQHNo+LI27XnMdX3 XqFfWlAgw7SpQg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:25:41 2025 by rpki-client