This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json) Hash identifier: MTrrFyfxR3CrLu1heA5cTWlPjqNu3IglihQPT+UY4u8= Subject key identifier: 75:87:83:C0:45:4F:36:0B:F4:FD:33:0B:CF:EE:C3:0D:6F:FF:88:8F Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67 Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767 Certificate serial: 019B3B35217EED6E45A55512EBBF9E8D7F05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft Manifest number: 044D Signing time: Sat 20 Dec 2025 10:01:36 +0000 Manifest this update: Sat 20 Dec 2025 10:01:36 +0000 Manifest next update: Sun 21 Dec 2025 10:01:36 +0000 Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=) 2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: z/pwD6/sMFeZtfaLuJG5ImowXdEpnqlhPc8PJ6pPr3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:21:7e:ed:6e:45:a5:55:12:eb:bf:9e:8d:7f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767 Validity Not Before: Dec 20 10:01:36 2025 GMT Not After : Dec 21 10:01:36 2025 GMT Subject: CN=758783c0454f360bf4fd330bcfeec30d6fff888f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:e1:c8:d4:30:a5:eb:e3:98:85:24:e0:49: 33:bc:0b:f5:82:ad:56:b0:53:37:bb:b2:a4:67:f6: fa:c2:4a:d4:ed:e7:72:da:01:3d:3a:c5:93:10:cf: f2:1f:21:7f:30:23:60:bc:82:29:15:91:18:98:e2: 00:cd:2a:89:8e:f4:95:06:70:dd:8a:7b:89:12:8b: 0d:30:e3:8f:39:46:33:87:83:68:20:0e:a3:08:53: 6a:17:94:e3:a7:0c:7b:25:fc:a8:6c:ac:39:71:9e: 6c:9f:79:c7:9c:62:65:a7:e8:3b:5e:a8:90:00:c9: 3f:9e:f0:9d:4e:68:83:48:e0:aa:45:b5:44:3c:03: 3f:59:9e:86:e0:82:d6:18:76:33:91:c0:35:f0:32: d5:86:44:26:fe:e9:f6:db:43:3e:58:ca:c3:14:3a: 80:e1:96:d7:43:9c:85:c1:5d:09:ba:0b:1e:00:fa: 6e:9f:55:78:6d:bc:e0:67:74:bf:a7:bd:69:33:cc: be:39:91:c4:18:0d:e3:cf:32:ae:ad:b8:5b:89:72: 76:91:90:d9:ed:2e:f2:b2:f1:4f:dc:1a:2d:51:21: 40:00:21:44:34:13:b6:f4:a9:f5:a7:a3:8a:a2:ce: d0:63:4b:ba:8b:80:03:78:5e:08:7e:1a:f0:28:82: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:83:C0:45:4F:36:0B:F4:FD:33:0B:CF:EE:C3:0D:6F:FF:88:8F X509v3 Authority Key Identifier: keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:5b:0e:2b:26:8e:33:d6:9d:b2:cd:5b:5b:2c:ae:47:9a:d0: 32:a0:d7:db:6d:61:12:51:41:8f:ce:90:cd:f0:e4:c9:bb:3f: b0:b2:e9:0c:41:1a:63:e9:cc:51:db:6c:08:3c:f6:7c:c0:ea: 24:3c:d1:dc:82:12:43:28:c5:04:58:88:62:58:4a:1d:f3:ce: e6:5b:25:a4:5c:4d:65:06:6a:f4:57:93:d3:7a:25:b2:f4:43: df:3e:33:57:d9:a3:a0:7a:73:24:4a:c5:80:2f:0e:b9:2d:bf: ac:44:7f:ed:b6:8e:f9:74:73:85:99:3b:b1:94:31:0b:0a:28: 04:68:c3:8d:9c:85:44:08:0f:8e:92:2f:28:fa:f3:23:02:24: fd:e4:f5:ed:ca:39:fd:7f:1c:20:98:db:bd:e4:7c:3b:7e:ed: d9:a4:72:d0:d1:ef:27:92:80:43:18:3d:50:95:15:68:94:15: 2f:a4:28:ab:b8:94:9f:b7:4b:43:3b:24:97:53:62:c2:24:57: 95:2c:1a:79:cb:08:68:9b:e2:2b:d0:4e:36:e7:dd:0c:77:57: 13:f9:43:ca:c5:01:88:68:6d:8d:6f:f0:69:77:c2:c7:a3:ac: b1:7a:76:de:7c:e2:5d:f9:c8:e1:48:da:ce:53:fe:a2:bd:5f: ab:67:fa:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NSF+7W5FpVUS67+ejX8FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjc5MmVhOGZmZjkwNDBiMmNkN2YxNzA3MzZlNDJlNzQ4 M2E3NjcwHhcNMjUxMjIwMTAwMTM2WhcNMjUxMjIxMTAwMTM2WjAzMTEwLwYDVQQD Eyg3NTg3ODNjMDQ1NGYzNjBiZjRmZDMzMGJjZmVlYzMwZDZmZmY4ODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2XhyNQwpevjmIUk4EkzvAv1gq1W sFM3u7KkZ/b6wkrU7edy2gE9OsWTEM/yHyF/MCNgvIIpFZEYmOIAzSqJjvSVBnDd inuJEosNMOOPOUYzh4NoIA6jCFNqF5Tjpwx7JfyobKw5cZ5sn3nHnGJlp+g7XqiQ AMk/nvCdTmiDSOCqRbVEPAM/WZ6G4ILWGHYzkcA18DLVhkQm/un220M+WMrDFDqA 4ZbXQ5yFwV0JugseAPpun1V4bbzgZ3S/p71pM8y+OZHEGA3jzzKurbhbiXJ2kZDZ 7S7ysvFP3BotUSFAACFENBO29Kn1p6OKos7QY0u6i4ADeF4IfhrwKIKz4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWHg8BFTzYL9P0zC8/uww1v/4iPMB8GA1UdIwQY MBaAFJD3kuqP/5BAss1/Fwc25C50g6dnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84NDUyYTgtYmFmZS00YTBmLThjNDQt Y2I3NDBkYjA2YjI5LzEva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84NDUyYTgtYmFmZS00YTBmLThjNDQtY2I3NDBkYjA2YjI5 LzEva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFsOKyaO M9adss1bWyyuR5rQMqDX221hElFBj86QzfDkybs/sLLpDEEaY+nMUdtsCDz2fMDq JDzR3IISQyjFBFiIYlhKHfPO5lslpFxNZQZq9FeT03olsvRD3z4zV9mjoHpzJErF gC8OuS2/rER/7baO+XRzhZk7sZQxCwooBGjDjZyFRAgPjpIvKPrzIwIk/eT17co5 /X8cIJjbveR8O37t2aRy0NHvJ5KAQxg9UJUVaJQVL6Qoq7iUn7dLQzskl1NiwiRX lSwaecsIaJviK9BONufdDHdXE/lDysUBiGhtjW/waXfCx6OssXp23nziXfnI4Uja zlP+or1fq2f68g== -----END CERTIFICATE-----Generated at Sat Dec 20 13:54:42 2025 by rpki-client