This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json) Hash identifier: 31bHIrxYL7niyDNf4CFd533zpOkSwIh57jzV49mXA1Q= Subject key identifier: 3D:C3:4D:42:3F:02:3A:8A:D9:C2:DA:3C:28:EB:67:BA:BA:C5:1D:01 Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7 Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7 Certificate serial: 019AF464D2EE73E60B437BE6F3B610A9D7A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 16:00:39 +0000 Manifest this update: Sat 06 Dec 2025 16:00:39 +0000 Manifest next update: Sun 07 Dec 2025 16:00:39 +0000 Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=) 2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: afedWVTb46bNkSpk1p45q2F1t0T5zIF+DL00kcY8xPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d2:ee:73:e6:0b:43:7b:e6:f3:b6:10:a9:d7:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7 Validity Not Before: Dec 6 16:00:39 2025 GMT Not After : Dec 7 16:00:39 2025 GMT Subject: CN=3dc34d423f023a8ad9c2da3c28eb67babac51d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:2c:df:a8:7d:fc:40:b1:33:35:66:7c:6e: 49:ca:39:ca:ee:33:26:07:07:0d:ef:3f:37:c0:ae: 2a:9f:8c:68:e5:83:49:8f:9f:85:29:34:79:cc:6e: f6:be:77:af:79:1a:b3:12:15:86:da:19:15:fb:4c: 0b:ad:13:29:94:fa:4f:b3:cb:47:3f:ca:d3:51:1f: 2a:95:20:68:55:90:ad:11:12:6d:57:2b:99:c0:94: c1:3d:0a:ce:b4:59:ea:28:38:c3:1a:c4:cf:e4:33: 35:f9:dd:5b:9b:33:0f:98:40:47:a9:6e:f5:0f:04: 86:8b:7c:e5:46:8d:0d:ed:e6:32:15:bb:a2:74:eb: 79:88:fd:12:e3:69:51:64:94:91:07:e5:d2:29:fe: 85:af:91:b0:41:87:8a:a2:db:8b:1c:db:7b:25:df: 25:d1:43:3d:ac:d0:9a:20:4c:b1:cd:ef:89:d5:cf: 7a:47:d2:d2:ec:99:09:14:16:6b:f9:9b:0f:a4:3c: c6:e3:48:97:3c:28:c9:59:86:b3:ce:9d:ca:23:05: 2b:1e:2b:92:a5:a6:4d:fb:f2:98:e4:d1:80:1a:a5: e5:a5:8c:67:ba:d5:09:e7:c6:a0:60:7a:93:55:e5: cd:be:76:0c:7b:8a:6e:ef:43:97:ca:82:9b:88:79: 6b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C3:4D:42:3F:02:3A:8A:D9:C2:DA:3C:28:EB:67:BA:BA:C5:1D:01 X509v3 Authority Key Identifier: keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0a:2f:69:76:6d:90:cd:12:fc:e8:c7:d1:0f:99:58:f5:86: a4:9a:d0:bc:71:62:a9:72:f1:72:f9:f3:e0:60:ca:cf:77:af: c0:64:34:21:b1:61:2b:ea:db:ec:6b:26:8a:de:26:40:7e:08: b9:c1:89:0c:96:5a:41:0d:a3:d3:28:f3:66:d8:2f:f5:6b:dd: d7:3a:5c:95:db:bd:de:5c:98:65:56:6e:19:64:c0:8c:ca:d4: e7:7a:e3:16:b9:8a:0b:a9:a2:f7:03:74:63:37:41:2b:1c:7c: 40:69:db:d5:b1:d5:3a:b2:3d:bf:ef:91:e6:25:4b:8e:b8:94: ab:09:56:b5:d7:fe:6e:39:1e:b4:ff:8e:01:7f:c1:4d:9f:2d: a8:57:2a:5d:25:27:ae:c0:44:18:4f:8b:e7:09:49:84:ab:a1: 33:59:f1:7a:3e:07:96:18:e8:cd:8e:a7:9f:c3:27:92:1f:21: e7:ba:bf:39:e4:af:16:ab:11:eb:25:9f:65:d8:d5:8e:b7:00: cb:9f:dd:64:a0:f5:3e:98:2f:a5:1f:a0:08:bf:75:86:78:91: 59:d4:f8:61:c3:cc:8b:4d:4d:e7:da:39:f7:29:fa:59:72:1d: af:ff:f2:3f:3b:e8:42:e2:46:df:d5:77:2f:03:fa:0f:6d:de: cc:4f:6c:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNLuc+YLQ3vm87YQqdejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMWM0Yzc2ZWM3NTU2NThkNDVmZDBkM2Y1Y2EzY2M4ZWJk Mzc0YjcwHhcNMjUxMjA2MTYwMDM5WhcNMjUxMjA3MTYwMDM5WjAzMTEwLwYDVQQD EygzZGMzNGQ0MjNmMDIzYThhZDljMmRhM2MyOGViNjdiYWJhYzUxZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2gs36h9/ECxMzVmfG5JyjnK7jMm BwcN7z83wK4qn4xo5YNJj5+FKTR5zG72vneveRqzEhWG2hkV+0wLrRMplPpPs8tH P8rTUR8qlSBoVZCtERJtVyuZwJTBPQrOtFnqKDjDGsTP5DM1+d1bmzMPmEBHqW71 DwSGi3zlRo0N7eYyFbuidOt5iP0S42lRZJSRB+XSKf6Fr5GwQYeKotuLHNt7Jd8l 0UM9rNCaIEyxze+J1c96R9LS7JkJFBZr+ZsPpDzG40iXPCjJWYazzp3KIwUrHiuS paZN+/KY5NGAGqXlpYxnutUJ58agYHqTVeXNvnYMe4pu70OXyoKbiHlrYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3DTUI/AjqK2cLaPCjrZ7q6xR0BMB8GA1UdIwQY MBaAFJEcTHbsdVZY1F/Q0/XKPMjr03S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2Ut NjJkMjc1NGYyODhiLzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2UtNjJkMjc1NGYyODhi LzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAovaXZt kM0S/OjH0Q+ZWPWGpJrQvHFiqXLxcvnz4GDKz3evwGQ0IbFhK+rb7Gsmit4mQH4I ucGJDJZaQQ2j0yjzZtgv9Wvd1zpcldu93lyYZVZuGWTAjMrU53rjFrmKC6mi9wN0 YzdBKxx8QGnb1bHVOrI9v++R5iVLjriUqwlWtdf+bjketP+OAX/BTZ8tqFcqXSUn rsBEGE+L5wlJhKuhM1nxej4HlhjozY6nn8Mnkh8h57q/OeSvFqsR6yWfZdjVjrcA y5/dZKD1PpgvpR+gCL91hniRWdT4YcPMi01N59o59yn6WXIdr//yPzvoQuJG39V3 LwP6D23ezE9sbg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:35 2025 by rpki-client