This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json) Hash identifier: HS5sfIV6+CC0vTnf5ih1sUrkumQawjofglnuxDTcym4= Subject key identifier: 9D:BC:23:47:E2:90:3F:82:43:3C:65:65:9C:A8:28:32:28:69:87:D3 Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e Certificate serial: 019B2C67004E9D1F5F4468E1A7801CF39263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft Manifest number: 07DF Signing time: Wed 17 Dec 2025 13:01:46 +0000 Manifest this update: Wed 17 Dec 2025 13:01:46 +0000 Manifest next update: Thu 18 Dec 2025 13:01:46 +0000 Files and hashes: 1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=) 2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: ZSOPXKRgNiCO2zxF0431PdnGGOXZEYOrlmDo5KsMlKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:67:00:4e:9d:1f:5f:44:68:e1:a7:80:1c:f3:92:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e Validity Not Before: Dec 17 13:01:46 2025 GMT Not After : Dec 18 13:01:46 2025 GMT Subject: CN=9dbc2347e2903f82433c65659ca82832286987d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:12:c9:46:5d:ce:e6:96:c4:69:0f:ec:70:4e: 1a:44:95:82:85:6b:df:9d:ab:4a:65:f7:64:b1:5c: 84:78:b7:6f:51:7a:5c:2d:7f:c6:fc:81:b7:76:74: 8b:38:81:44:78:3f:a8:b7:b1:31:df:87:df:e6:69: 0f:12:33:eb:89:83:ef:b0:d9:57:db:0d:49:a0:5f: 5c:93:99:9c:3b:8e:a6:5b:9f:71:4a:ee:83:78:92: f6:1f:89:64:8b:54:67:6f:3c:07:ba:d5:4c:a8:a6: 20:f4:6d:3e:98:d4:f0:33:6e:43:c0:ad:f8:02:a4: c9:2f:69:fa:e7:6a:43:03:32:ab:26:1e:6c:51:dd: 27:cf:df:b3:40:84:da:6b:f5:5b:e5:c6:01:fd:3a: 70:0a:3f:9b:da:ad:b1:07:d6:0f:cf:06:d9:f9:af: aa:f4:06:e5:ec:8c:5d:19:34:ad:15:4f:c0:82:8d: 32:ae:72:ce:52:95:8c:5f:06:10:81:bd:20:29:c1: 12:24:8d:e4:a5:c1:54:8a:6a:82:39:67:8e:8f:bb: ca:bf:df:77:f6:c7:62:33:99:f3:c4:e8:44:96:39: 8e:41:46:1c:60:76:68:d0:97:36:d1:eb:82:45:77: f7:f2:cc:d1:a8:fc:d1:c9:de:24:9c:50:d0:79:0a: 26:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BC:23:47:E2:90:3F:82:43:3C:65:65:9C:A8:28:32:28:69:87:D3 X509v3 Authority Key Identifier: keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3a:2a:d4:25:ab:3c:d7:96:09:e6:29:df:d0:78:8d:d9:0d: 78:73:1e:e5:16:3d:99:f4:25:b3:ef:11:52:87:01:52:06:1b: bb:db:b2:47:c1:59:e8:24:be:33:10:b4:82:17:f8:13:e7:e2: 66:f6:8a:f9:39:93:f9:8c:a9:d3:6b:c8:e6:b5:50:21:d6:83: ca:80:22:8f:b4:1c:87:89:4d:36:7c:62:99:fe:88:84:34:e2: d5:21:14:55:33:e6:99:79:aa:ca:bd:3e:26:9e:f4:48:9f:84: 58:75:cf:11:c7:b7:8e:a5:12:da:3f:36:08:7d:61:ea:e2:96: cb:a0:28:5d:18:1b:ed:07:60:59:97:d2:63:34:0c:af:5e:98: 3f:62:b0:70:49:15:f9:fb:cc:93:be:d2:34:f5:2f:54:64:9a: e3:13:97:3d:6a:e7:68:df:d9:d5:d8:39:a3:5a:18:91:1e:b7: c0:fd:7c:90:63:0c:d9:b0:2b:5f:a9:02:53:2d:1f:50:7f:a8: 1c:b4:1a:85:5e:18:6f:10:3d:8f:c4:93:69:da:fd:21:0d:e7: df:ff:fe:e3:14:e4:3a:63:bb:42:e2:e2:c8:18:47:24:62:41: de:6d:2e:5e:b4:ab:4a:73:f9:c0:07:06:19:a2:2b:19:ce:5b: 5b:9e:20:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZwBOnR9fRGjhp4Ac85JjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNWExMDkzMzZkZTg5NzEyZTI0OWM5ODQ2YzlkYmIxYjNj OThjN2UwHhcNMjUxMjE3MTMwMTQ2WhcNMjUxMjE4MTMwMTQ2WjAzMTEwLwYDVQQD Eyg5ZGJjMjM0N2UyOTAzZjgyNDMzYzY1NjU5Y2E4MjgzMjI4Njk4N2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RLJRl3O5pbEaQ/scE4aRJWChWvf natKZfdksVyEeLdvUXpcLX/G/IG3dnSLOIFEeD+ot7Ex34ff5mkPEjPriYPvsNlX 2w1JoF9ck5mcO46mW59xSu6DeJL2H4lki1RnbzwHutVMqKYg9G0+mNTwM25DwK34 AqTJL2n652pDAzKrJh5sUd0nz9+zQITaa/Vb5cYB/TpwCj+b2q2xB9YPzwbZ+a+q 9Abl7IxdGTStFU/Ago0yrnLOUpWMXwYQgb0gKcESJI3kpcFUimqCOWeOj7vKv993 9sdiM5nzxOhEljmOQUYcYHZo0Jc20euCRXf38szRqPzRyd4knFDQeQomqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ28I0fikD+CQzxlZZyoKDIoaYfTMB8GA1UdIwQY MBaAFJBaEJM23olxLiScmEbJ27GzyYx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYt YjI0OGNmYTk2YTY5LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9kYWI2YWUtZGJhOC00YjI4LTljOGYtYjI0OGNmYTk2YTY5 LzEva0ZvUWt6YmVpWEV1Skp5WVJzbmJzYlBKakg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojoq1CWr PNeWCeYp39B4jdkNeHMe5RY9mfQls+8RUocBUgYbu9uyR8FZ6CS+MxC0ghf4E+fi ZvaK+TmT+Yyp02vI5rVQIdaDyoAij7Qch4lNNnximf6IhDTi1SEUVTPmmXmqyr0+ Jp70SJ+EWHXPEce3jqUS2j82CH1h6uKWy6AoXRgb7QdgWZfSYzQMr16YP2KwcEkV +fvMk77SNPUvVGSa4xOXPWrnaN/Z1dg5o1oYkR63wP18kGMM2bArX6kCUy0fUH+o HLQahV4YbxA9j8STadr9IQ3n3//+4xTkOmO7QuLiyBhHJGJB3m0uXrSrSnP5wAcG GaIrGc5bW54gjA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:16:45 2025 by rpki-client