This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json) Hash identifier: IEshmL85vb0KfDTxkWFdw4NHtdmirSY2J4uGaZst/NI= Subject key identifier: D9:17:FD:20:A3:7B:D0:4A:65:E6:B6:2D:A4:01:69:E8:B3:BA:CA:30 Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57 Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57 Certificate serial: 019AF16485DD800C2E777B2CCD4FB9EBE17B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:01:28 +0000 Manifest this update: Sat 06 Dec 2025 02:01:28 +0000 Manifest next update: Sun 07 Dec 2025 02:01:28 +0000 Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=) 2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=) 3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: F2UWuVREwVyJqhhEZqLWOGtcTC3I5xzgoQW1OLYyRDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:85:dd:80:0c:2e:77:7b:2c:cd:4f:b9:eb:e1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57 Validity Not Before: Dec 6 02:01:28 2025 GMT Not After : Dec 7 02:01:28 2025 GMT Subject: CN=d917fd20a37bd04a65e6b62da40169e8b3baca30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:19:55:14:77:e7:54:39:a2:72:ad:94:b5: 65:16:22:03:6d:55:23:03:70:68:3f:d5:8e:47:bf: b7:f1:9a:11:0c:a1:13:c8:d1:bf:35:67:d1:2f:27: 6d:5b:c4:b1:34:25:b8:d4:b6:ee:13:d8:12:bf:65: 86:6f:c0:2e:fb:51:db:92:b7:ee:16:9e:2d:8c:89: 2f:c1:3d:3e:a5:9d:5a:8a:23:fe:4e:e0:ce:26:8e: 1f:2b:9d:1c:45:b1:a7:47:dc:30:86:8d:e0:23:7c: ec:b0:58:d7:99:bd:e0:25:d8:10:6e:92:da:09:6d: 98:9c:6c:b4:df:cc:7f:29:b9:46:4d:28:30:2c:62: 10:ec:04:b6:d5:8f:ce:e1:83:98:b7:8b:fb:54:f6: 86:3e:f6:22:8f:a3:67:91:2e:3a:ff:c1:ad:be:5b: b2:c8:33:9b:52:38:d0:b8:0d:35:4f:00:97:bc:0e: b0:a3:80:e5:59:be:bc:53:03:55:74:34:14:cd:ea: 37:9b:87:21:b1:68:2a:fb:21:df:e8:e9:8c:ed:a2: 95:45:f9:61:53:df:fe:70:da:42:70:87:8c:c7:6b: 88:4d:01:a7:19:af:18:9f:56:fb:70:b5:5f:7c:70: f4:a2:9f:43:89:cd:73:b2:3d:46:83:1f:fa:a7:54: cb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:17:FD:20:A3:7B:D0:4A:65:E6:B6:2D:A4:01:69:E8:B3:BA:CA:30 X509v3 Authority Key Identifier: keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:2e:c6:fa:72:1e:34:d9:d1:d3:a1:83:4c:66:15:26:d7:7b: 73:7c:d7:e9:88:ce:e1:b0:6e:bc:6b:c9:16:ef:3c:ab:4b:92: 60:26:5f:6b:28:40:16:4d:60:eb:80:a0:cb:2c:b5:fe:b1:b3: f0:3d:5a:41:13:b3:ec:86:d4:ef:5e:8c:2e:32:30:af:11:ef: b9:4d:af:61:12:2c:9d:3f:41:3a:b4:a1:d0:d5:fd:b6:71:ef: e3:a8:a9:49:74:3b:6c:5e:66:0b:ff:e4:46:8c:d8:e7:fe:a1: f4:64:79:b3:77:cd:99:13:53:f0:35:01:7a:b2:bf:4a:74:02: 97:bc:17:2b:86:c5:5d:ae:56:1d:a0:23:7b:c3:28:32:b8:dc: 1e:cd:7b:7d:61:42:26:b4:d0:0e:d9:a9:a2:38:37:98:cc:fc: b9:4e:dd:68:1e:d3:0c:43:42:ac:1f:b0:57:2b:70:f8:4a:32: e2:37:47:90:dc:47:d6:25:da:ab:28:b1:45:82:16:18:8d:ec: 60:f8:2e:f5:32:0a:6a:3b:0a:ed:58:f2:79:48:1a:15:82:a9: 9a:4d:82:9f:9d:1f:e6:b9:41:d6:ac:3f:27:a7:8d:6b:8d:07: b1:7c:91:94:0d:ce:a3:82:44:5e:53:1d:ea:4f:3f:9b:d4:c3: 31:01:74:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIXdgAwud3sszU+56+F7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl MTlhNTcwHhcNMjUxMjA2MDIwMTI4WhcNMjUxMjA3MDIwMTI4WjAzMTEwLwYDVQQD EyhkOTE3ZmQyMGEzN2JkMDRhNjVlNmI2MmRhNDAxNjllOGIzYmFjYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4EZVRR351Q5onKtlLVlFiIDbVUj A3BoP9WOR7+38ZoRDKETyNG/NWfRLydtW8SxNCW41LbuE9gSv2WGb8Au+1Hbkrfu Fp4tjIkvwT0+pZ1aiiP+TuDOJo4fK50cRbGnR9wwho3gI3zssFjXmb3gJdgQbpLa CW2YnGy038x/KblGTSgwLGIQ7AS21Y/O4YOYt4v7VPaGPvYij6NnkS46/8Gtvluy yDObUjjQuA01TwCXvA6wo4DlWb68UwNVdDQUzeo3m4chsWgq+yHf6OmM7aKVRflh U9/+cNpCcIeMx2uITQGnGa8Yn1b7cLVffHD0op9Dic1zsj1Ggx/6p1TL/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkX/SCje9BKZea2LaQBaeizusowMB8GA1UdIwQY MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt YjljYTc1NTVjMmM1LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1 LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeS7G+nIe NNnR06GDTGYVJtd7c3zX6YjO4bBuvGvJFu88q0uSYCZfayhAFk1g64Cgyyy1/rGz 8D1aQROz7IbU716MLjIwrxHvuU2vYRIsnT9BOrSh0NX9tnHv46ipSXQ7bF5mC//k RozY5/6h9GR5s3fNmRNT8DUBerK/SnQCl7wXK4bFXa5WHaAje8MoMrjcHs17fWFC JrTQDtmpojg3mMz8uU7daB7TDENCrB+wVytw+Eoy4jdHkNxH1iXaqyixRYIWGI3s YPgu9TIKajsK7VjyeUgaFYKpmk2Cn50f5rlB1qw/J6eNa40HsXyRlA3Oo4JEXlMd 6k8/m9TDMQF0sA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:54 2025 by rpki-client