This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json) Hash identifier: M4XX6f19/8W5ZVoqJ5Z2Xel/sPhzj+z+LaUjvAnTCkA= Subject key identifier: 52:86:5E:8F:8E:78:F2:71:6B:06:BE:A3:58:77:B7:C5:C8:ED:24:CB Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4 Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4 Certificate serial: 019AF42E43A4FE9A0A687CC0C1ADB81B910B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft Manifest number: 16CA Signing time: Sat 06 Dec 2025 15:01:03 +0000 Manifest this update: Sat 06 Dec 2025 15:01:03 +0000 Manifest next update: Sun 07 Dec 2025 15:01:03 +0000 Files and hashes: 1: i0znYyDIsk78QzCDDCTg60lK9ig.roa (hash: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=) 2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: 9LbkgrjUxy5sad5cdO+RQtcaUehFOtjHGZo4x0eEb70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:43:a4:fe:9a:0a:68:7c:c0:c1:ad:b8:1b:91:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4 Validity Not Before: Dec 6 15:01:03 2025 GMT Not After : Dec 7 15:01:03 2025 GMT Subject: CN=52865e8f8e78f2716b06bea35877b7c5c8ed24cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:62:90:01:39:b5:35:df:13:5a:50:ff:8f: b6:1f:6c:81:b8:7d:29:0b:aa:73:da:c1:b6:49:85: d2:93:0e:52:2f:e2:82:1d:a3:2d:ca:a3:3d:02:52: 01:d7:1e:88:17:d6:bc:bd:55:57:15:d8:e9:0b:a9: 28:f8:24:94:d2:6c:bb:e3:28:fc:69:13:c3:d0:a7: fe:0d:37:b6:a0:42:f1:e6:e1:f0:5e:60:96:14:e4: 10:92:59:b3:5c:a0:20:15:39:25:78:66:8a:aa:77: 83:7a:3e:81:40:55:a5:07:90:a6:38:f2:19:d8:73: ef:63:e8:92:7e:6e:73:08:a3:b8:3f:94:b4:90:32: 07:85:ac:af:7b:b8:78:6b:55:8a:b2:84:fd:96:dd: 73:c1:66:a2:6e:82:4a:e8:a6:72:2e:f7:58:20:07: 8b:4c:e2:b7:df:c6:95:d9:08:13:10:fc:7f:27:a7: cd:70:70:f4:b3:a5:cd:94:b3:be:ac:c4:a0:34:7d: 64:23:b6:d6:7e:46:ff:7b:cf:ea:a8:b1:00:c7:90: f6:90:2a:f0:9f:fb:60:40:bc:49:3e:b7:d6:1f:55: 56:c3:50:af:5f:0e:7c:1e:d7:e5:77:a1:67:3d:d5: f3:c1:57:5e:2b:23:d1:d1:bd:3b:fb:ac:33:e9:a9: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:86:5E:8F:8E:78:F2:71:6B:06:BE:A3:58:77:B7:C5:C8:ED:24:CB X509v3 Authority Key Identifier: keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:be:b0:3f:fb:02:b8:75:38:5a:11:43:83:fa:75:34:f8:6a: 76:c1:02:d4:a9:39:c0:07:5e:3d:08:ff:bd:03:68:a1:09:a9: bb:ad:e2:b6:9f:88:c2:66:5d:5e:b3:68:23:d7:83:11:e6:f9: ec:fa:c8:a8:aa:64:8c:37:12:49:e9:ba:aa:50:b0:e0:e1:64: 64:64:6e:ba:f1:7f:61:da:f4:27:88:c2:75:32:81:01:59:f5: bd:39:51:c4:ac:97:fb:18:8d:f2:b4:e3:03:16:0e:d7:de:3b: ce:9b:50:42:c1:37:14:24:0a:0f:43:47:43:f8:b5:df:d9:3d: b7:a8:b9:84:57:30:a7:3a:18:0e:cb:0d:f9:58:dc:06:7b:f4: 68:98:09:55:7e:c7:7a:f4:05:f4:dd:bd:2c:23:5c:f9:71:bd: de:46:f1:53:32:a3:66:74:60:f1:ff:4a:6a:4e:bf:fd:17:de: 8c:95:fb:4c:bc:c9:24:4b:ae:4d:95:30:e1:2d:6a:12:44:a4: c7:8a:62:da:22:fd:df:9c:fb:51:fe:12:f1:c3:14:2e:a2:8f: aa:6c:3f:5e:bc:4e:a8:37:f5:4d:c4:85:39:93:4d:95:db:1e: cf:07:6a:fb:fd:d4:f8:78:4a:fe:1b:42:4d:94:62:cd:55:f9: 85:fd:2c:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkOk/poKaHzAwa24G5ELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzgzNjg1OWM2Y2UxODY5MzQwZWRmMWYyNzM3MDliODA5 NGQ5ZDQwHhcNMjUxMjA2MTUwMTAzWhcNMjUxMjA3MTUwMTAzWjAzMTEwLwYDVQQD Eyg1Mjg2NWU4ZjhlNzhmMjcxNmIwNmJlYTM1ODc3YjdjNWM4ZWQyNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJdikAE5tTXfE1pQ/4+2H2yBuH0p C6pz2sG2SYXSkw5SL+KCHaMtyqM9AlIB1x6IF9a8vVVXFdjpC6ko+CSU0my74yj8 aRPD0Kf+DTe2oELx5uHwXmCWFOQQklmzXKAgFTkleGaKqneDej6BQFWlB5CmOPIZ 2HPvY+iSfm5zCKO4P5S0kDIHhayve7h4a1WKsoT9lt1zwWaiboJK6KZyLvdYIAeL TOK338aV2QgTEPx/J6fNcHD0s6XNlLO+rMSgNH1kI7bWfkb/e8/qqLEAx5D2kCrw n/tgQLxJPrfWH1VWw1CvXw58Htfld6FnPdXzwVdeKyPR0b07+6wz6akinQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKGXo+OePJxawa+o1h3t8XI7STLMB8GA1UdIwQY MBaAFJE4NoWcbOGGk0Dt8fJzcJuAlNnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lOGYzNDQtZWRiMi00NDAwLWIzY2Et NTI3YWM1NGMyMzU3LzEva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lOGYzNDQtZWRiMi00NDAwLWIzY2EtNTI3YWM1NGMyMzU3 LzEva1RnMmhaeHM0WWFUUU8zeDhuTndtNENVMmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARr6wP/sC uHU4WhFDg/p1NPhqdsEC1Kk5wAdePQj/vQNooQmpu63itp+IwmZdXrNoI9eDEeb5 7PrIqKpkjDcSSem6qlCw4OFkZGRuuvF/Ydr0J4jCdTKBAVn1vTlRxKyX+xiN8rTj AxYO1947zptQQsE3FCQKD0NHQ/i139k9t6i5hFcwpzoYDssN+VjcBnv0aJgJVX7H evQF9N29LCNc+XG93kbxUzKjZnRg8f9Kak6//RfejJX7TLzJJEuuTZUw4S1qEkSk x4pi2iL935z7Uf4S8cMULqKPqmw/XrxOqDf1TcSFOZNNldsezwdq+/3U+HhK/htC TZRizVX5hf0sow== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:47 2025 by rpki-client