This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft File: kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json) Hash identifier: DBLw+gRObusK1m8IJ7UupLsWY+kvNi62C7mJvzdcVxI= Subject key identifier: 18:BF:7B:01:39:28:92:5E:DD:82:98:A6:37:3C:E6:0D:50:D0:2D:74 Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76 Certificate serial: 019B32D629528A6DC2A61F8F28EFED9D2187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:00:54 +0000 Manifest this update: Thu 18 Dec 2025 19:00:54 +0000 Manifest next update: Fri 19 Dec 2025 19:00:54 +0000 Files and hashes: 1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=) 2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: jtHpMt9pu8Dpt/Ydyn66GjHvOV+rF6wjYV3W9cTNti8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:29:52:8a:6d:c2:a6:1f:8f:28:ef:ed:9d:21:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76 Validity Not Before: Dec 18 19:00:54 2025 GMT Not After : Dec 19 19:00:54 2025 GMT Subject: CN=18bf7b013928925edd8298a6373ce60d50d02d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:ea:1a:4d:c9:7c:39:56:2c:7d:4a:63:e4: 9b:d5:42:9b:f7:fa:34:af:5f:f2:af:30:2b:8b:d7: aa:25:42:17:fd:83:b9:6b:30:58:89:e5:30:23:90: fe:b6:4a:c2:d4:91:47:95:25:1b:98:99:77:c8:51: bc:91:45:e9:a1:e3:d4:49:e6:d7:c0:d4:66:64:ed: 46:02:43:e2:00:47:2b:03:bb:51:3b:ac:d9:7f:f1: 57:52:e6:fb:cf:a2:e4:b0:26:1f:f0:b4:22:7e:80: 8e:59:40:b2:f8:c8:6c:3f:63:ec:6b:6e:1a:51:e1: e2:9e:10:6b:2d:08:00:b1:40:22:15:17:a4:59:12: af:8d:3a:e1:3f:68:87:71:63:16:3e:68:33:a7:17: c9:2f:93:ec:98:50:56:65:8c:05:92:7f:a2:85:55: a7:ae:8b:14:02:71:d0:bc:72:2a:69:ec:43:d1:12: 87:88:75:3f:49:14:0a:71:eb:98:7a:62:63:e0:5c: 2e:46:77:90:08:90:45:85:ba:f6:aa:9f:37:26:a4: 7f:15:fc:33:56:1b:19:7e:45:f0:2d:26:ed:f7:27: c5:b7:30:3e:e9:5d:ab:fd:48:8f:ec:71:25:84:82: f9:68:be:53:cd:4f:11:d4:2f:ec:76:55:7d:45:35: 8d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BF:7B:01:39:28:92:5E:DD:82:98:A6:37:3C:E6:0D:50:D0:2D:74 X509v3 Authority Key Identifier: keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7b:de:e7:80:32:fd:17:32:de:cf:e6:ca:2c:15:ff:d1:46: dd:84:5d:93:a6:46:2b:0c:b3:52:7a:f9:cb:8a:86:ff:f8:27: 84:54:5e:91:61:44:86:6b:2e:5d:59:86:59:08:1a:29:1a:ad: 2e:45:f4:64:5b:64:0f:42:d4:0b:a8:a8:c4:c7:9c:a7:e2:ec: a5:bb:28:8b:bc:49:16:97:e7:92:f1:f9:33:f8:70:72:78:bf: aa:9b:4a:0d:46:f2:65:22:9d:d5:b3:c2:85:9c:c3:f7:6f:8f: 0a:ea:5f:e8:15:36:a6:74:ee:16:86:28:12:03:0e:cc:da:c6: 1b:e0:2f:09:bb:5f:f0:68:8d:67:73:fd:3e:48:a9:9a:ed:23: b0:45:de:c5:7a:5d:87:d5:e2:cb:ff:29:a1:fb:54:ec:33:d5: 8c:fd:0e:d8:f9:51:87:f8:a3:23:0d:68:bd:65:f6:4c:c6:d6: b7:94:de:9d:2a:58:04:71:e6:5b:91:f7:49:7e:d2:ee:26:64: ed:b4:53:cb:40:24:e8:c3:b5:73:d1:5b:40:67:12:33:d5:d3: 61:7c:e9:47:68:af:e8:fa:5d:33:4e:0b:5e:52:d6:cb:bb:db: b6:5a:63:d9:23:a6:5c:ac:fa:9a:92:12:06:e6:3e:08:43:cb: e4:26:33:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1ilSim3Cph+PKO/tnSGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTRjNjk5YTgxZGQ5NjJhODg2MGYzZmIwYjdkMDMzNDNk ZWJmNzYwHhcNMjUxMjE4MTkwMDU0WhcNMjUxMjE5MTkwMDU0WjAzMTEwLwYDVQQD EygxOGJmN2IwMTM5Mjg5MjVlZGQ4Mjk4YTYzNzNjZTYwZDUwZDAyZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaLqGk3JfDlWLH1KY+Sb1UKb9/o0 r1/yrzAri9eqJUIX/YO5azBYieUwI5D+tkrC1JFHlSUbmJl3yFG8kUXpoePUSebX wNRmZO1GAkPiAEcrA7tRO6zZf/FXUub7z6LksCYf8LQifoCOWUCy+MhsP2Psa24a UeHinhBrLQgAsUAiFRekWRKvjTrhP2iHcWMWPmgzpxfJL5PsmFBWZYwFkn+ihVWn rosUAnHQvHIqaexD0RKHiHU/SRQKceuYemJj4FwuRneQCJBFhbr2qp83JqR/Ffwz VhsZfkXwLSbt9yfFtzA+6V2r/UiP7HElhIL5aL5TzU8R1C/sdlV9RTWNJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi/ewE5KJJe3YKYpjc85g1Q0C10MB8GA1UdIwQY MBaAFJBUxpmoHdliqIYPP7C30DND3r92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2Mt MmI0YTE2NTk0MjEzLzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2MtMmI0YTE2NTk0MjEz LzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHve54Ay /Rcy3s/myiwV/9FG3YRdk6ZGKwyzUnr5y4qG//gnhFRekWFEhmsuXVmGWQgaKRqt LkX0ZFtkD0LUC6ioxMecp+Lspbsoi7xJFpfnkvH5M/hwcni/qptKDUbyZSKd1bPC hZzD92+PCupf6BU2pnTuFoYoEgMOzNrGG+AvCbtf8GiNZ3P9Pkipmu0jsEXexXpd h9Xiy/8poftU7DPVjP0O2PlRh/ijIw1ovWX2TMbWt5TenSpYBHHmW5H3SX7S7iZk 7bRTy0Ak6MO1c9FbQGcSM9XTYXzpR2iv6PpdM04LXlLWy7vbtlpj2SOmXKz6mpIS BuY+CEPL5CYzXg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:22:11 2025 by rpki-client