This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json) Hash identifier: Tqd19ekMp1t3Vg7ypKCbjwhicib1ly0BGpR8gKzynOQ= Subject key identifier: C8:92:C0:D8:65:04:79:F0:4E:86:50:4B:B0:2B:B3:0E:48:87:A9:FF Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42 Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142 Certificate serial: 019AF5409F92A8C70FED1273BA7DD448C0DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft Manifest number: 0B92 Signing time: Sat 06 Dec 2025 20:00:44 +0000 Manifest this update: Sat 06 Dec 2025 20:00:44 +0000 Manifest next update: Sun 07 Dec 2025 20:00:44 +0000 Files and hashes: 1: HJG2LfZbcdQILd5mjrG6JouJjB8.roa (hash: AJsKTbmetLnV+AkJjtEMj7IQPl7myVO7TWx6kpWmD6s=) 2: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: bQ/GEHRHb6bGcDgtDPjoBldLD47iVluK7qx/tn8xpJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:9f:92:a8:c7:0f:ed:12:73:ba:7d:d4:48:c0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142 Validity Not Before: Dec 6 20:00:44 2025 GMT Not After : Dec 7 20:00:44 2025 GMT Subject: CN=c892c0d8650479f04e86504bb02bb30e4887a9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:25:45:40:6a:7f:15:25:92:d9:25:15:f7: 86:17:88:36:69:a0:99:ce:65:98:6f:ea:22:7d:bb: cf:df:c7:ea:2e:b3:e6:13:7b:c7:9e:61:9e:37:2b: 62:33:a9:23:ed:c0:8e:4d:00:9b:72:6b:56:c5:8b: ca:62:3f:d1:37:be:02:ab:fa:22:3e:99:9d:c9:46: 91:82:14:06:d3:ac:f3:4d:9f:0a:8a:b2:04:6a:c7: ed:95:db:ed:e2:f7:84:a8:d9:9d:1d:8b:8b:78:ea: a6:dc:53:02:39:25:32:43:fc:ec:98:13:ec:1d:90: c6:88:71:0e:5c:c1:30:5e:b2:0a:fb:fb:6e:f4:4c: 91:a0:8b:7a:8f:ad:5a:d5:0d:e6:c0:85:fc:f2:b8: 09:af:8b:3a:9a:28:a1:d3:c1:a1:1a:e0:03:68:2a: 79:40:7e:b2:2c:35:5b:56:18:a0:4b:ae:76:9a:26: e5:91:f9:6a:4d:3d:21:97:07:d1:6d:f9:c1:d2:18: 98:69:68:da:15:03:2b:17:86:73:db:52:39:53:0b: 18:9c:43:6a:9a:ca:cf:6e:42:c5:32:ae:9f:5e:e6: f9:f6:f3:e7:0c:4f:58:5f:ad:b6:b7:c6:cd:da:e2: 26:40:f3:e2:3b:c8:e6:d5:84:a6:f8:58:a4:cf:2a: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:92:C0:D8:65:04:79:F0:4E:86:50:4B:B0:2B:B3:0E:48:87:A9:FF X509v3 Authority Key Identifier: keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:66:b3:6a:2f:50:7a:63:a0:fc:7f:57:bc:fa:67:b1:97:9f: 93:e2:9e:ef:92:4f:3f:bd:6b:66:60:2c:bd:30:6c:25:cc:36: 1d:f4:3f:91:9f:cb:c9:62:f5:ed:c7:b4:93:6b:a6:fc:f9:76: 70:6d:f7:d2:7e:ab:91:fe:63:ce:52:cc:fb:77:73:57:50:f8: 37:cd:16:e0:8a:e6:46:78:be:62:9e:54:4e:5d:65:df:64:9b: d4:29:b8:38:f5:99:00:58:e8:1a:10:50:38:a3:70:08:ac:76: 1d:50:e9:89:a8:6d:6d:b2:79:cf:ca:c0:eb:f5:08:bd:5f:1e: c2:ad:96:3c:89:d6:8c:e2:06:83:11:aa:4d:a3:31:44:2e:0d: 97:ff:76:24:ce:1e:0c:21:6d:10:1d:54:1b:ff:b2:70:66:8a: ed:b3:71:76:17:88:f6:90:a0:ac:c4:91:01:c7:b3:cd:42:67: a1:8f:ee:e6:45:e1:9c:f2:c8:c1:df:1c:df:b7:b3:6b:cd:1c: 5f:4c:50:e4:3f:70:23:95:07:9d:ec:cd:b9:37:ff:25:8d:0b: 22:4b:21:cd:13:be:93:c8:e2:71:d0:81:de:6d:62:96:67:f8: 42:30:b7:f3:09:bc:77:63:5b:2a:59:c7:10:9a:cd:f0:10:10: 2d:92:54:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJ+SqMcP7RJzun3USMDaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBkM2U0NjcyOTY4Zjg2ZTg5NTVkYjYyMGNiNzY1ZGI5 ZDcxNDIwHhcNMjUxMjA2MjAwMDQ0WhcNMjUxMjA3MjAwMDQ0WjAzMTEwLwYDVQQD EyhjODkyYzBkODY1MDQ3OWYwNGU4NjUwNGJiMDJiYjMwZTQ4ODdhOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1QlRUBqfxUlktklFfeGF4g2aaCZ zmWYb+oifbvP38fqLrPmE3vHnmGeNytiM6kj7cCOTQCbcmtWxYvKYj/RN74Cq/oi PpmdyUaRghQG06zzTZ8KirIEasftldvt4veEqNmdHYuLeOqm3FMCOSUyQ/zsmBPs HZDGiHEOXMEwXrIK+/tu9EyRoIt6j61a1Q3mwIX88rgJr4s6miih08GhGuADaCp5 QH6yLDVbVhigS652miblkflqTT0hlwfRbfnB0hiYaWjaFQMrF4Zz21I5UwsYnENq msrPbkLFMq6fXub59vPnDE9YX622t8bN2uImQPPiO8jm1YSm+FikzypkQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiSwNhlBHnwToZQS7Arsw5Ih6n/MB8GA1UdIwQY MBaAFJKA0+RnKWj4bolV22IMt2XbnXFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTkt MDkwZmUzZGEyNDMzLzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTktMDkwZmUzZGEyNDMz LzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmazai9Q emOg/H9XvPpnsZefk+Ke75JPP71rZmAsvTBsJcw2HfQ/kZ/LyWL17ce0k2um/Pl2 cG330n6rkf5jzlLM+3dzV1D4N80W4IrmRni+Yp5UTl1l32Sb1Cm4OPWZAFjoGhBQ OKNwCKx2HVDpiahtbbJ5z8rA6/UIvV8ewq2WPInWjOIGgxGqTaMxRC4Nl/92JM4e DCFtEB1UG/+ycGaK7bNxdheI9pCgrMSRAcezzUJnoY/u5kXhnPLIwd8c37eza80c X0xQ5D9wI5UHnezNuTf/JY0LIkshzRO+k8jicdCB3m1ilmf4QjC38wm8d2NbKlnH EJrN8BAQLZJUqw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:06 2025 by rpki-client