This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft File: kljqmCx9enWV6Dphx66z12GIlww.mft (raw, json) Hash identifier: NmVUdM1eXYqN1IAdBifP29mh2Nuhi0rVKv093+TLWOI= Subject key identifier: 89:0C:82:99:12:3B:CE:F9:78:C0:90:0A:DF:B5:59:F1:08:22:EF:2F Authority key identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C Certificate issuer: /CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c Certificate serial: 019B3BD9B8C5AFEA01EA52AE8D3C1C8967D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft Manifest number: 152D Signing time: Sat 20 Dec 2025 13:01:22 +0000 Manifest this update: Sat 20 Dec 2025 13:01:22 +0000 Manifest next update: Sun 21 Dec 2025 13:01:22 +0000 Files and hashes: 1: kljqmCx9enWV6Dphx66z12GIlww.crl (hash: 6j02NkLIU2gMSHAaDgKmBFyVXFF50M4kMJ726IRBcP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:b8:c5:af:ea:01:ea:52:ae:8d:3c:1c:89:67:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c Validity Not Before: Dec 20 13:01:22 2025 GMT Not After : Dec 21 13:01:22 2025 GMT Subject: CN=890c8299123bcef978c0900adfb559f10822ef2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:04:9c:cd:07:ab:c3:a5:f4:2d:52:b4:db: b5:cc:a4:ba:cc:0a:03:e4:e1:ad:3d:7c:5a:e3:2c: 7e:ea:18:0f:bc:80:91:b0:cb:1d:87:0a:d4:f7:c3: 2e:6c:16:8f:19:a4:2a:0a:87:44:09:89:0c:bc:7f: 30:e6:9a:98:4f:32:db:9b:1a:c8:ef:d5:36:38:94: 44:6e:53:11:13:2f:af:4a:d6:c7:89:02:bf:71:63: a6:e1:de:0b:95:b9:7e:f1:3a:bf:22:34:94:56:54: b4:31:48:5b:07:25:24:29:dc:dd:3f:99:7b:f9:a8: cf:ea:27:c8:15:cc:31:86:75:de:ce:31:dc:51:b0: 26:95:c1:b4:49:0b:de:d3:01:b3:27:11:cb:70:b7: 03:74:37:1f:9b:62:d4:37:79:b0:b3:de:7c:8c:24: 9f:c1:b0:73:31:79:06:c4:c4:ac:48:81:42:80:2d: af:e4:a3:c9:e6:97:3b:eb:ab:64:73:10:b6:d5:64: b6:f2:7b:b9:53:9b:93:68:54:9f:66:1e:80:d7:0c: 16:c5:ff:f6:aa:bf:2f:cf:5f:d9:77:8d:ff:7e:b9: b0:c1:74:91:0c:91:5e:07:da:8e:6a:fb:ea:45:12: 5f:e5:72:e8:e1:4a:c7:8c:ae:d9:1a:41:5f:e9:fe: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0C:82:99:12:3B:CE:F9:78:C0:90:0A:DF:B5:59:F1:08:22:EF:2F X509v3 Authority Key Identifier: keyid:92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:21:e4:67:c2:88:2b:72:e6:86:80:7e:10:71:63:17:1c:b4: d5:bc:9b:5d:48:d3:c5:84:8c:59:ac:47:cd:51:22:dc:77:14: c2:d1:cf:25:1a:e9:46:49:34:d5:c8:d0:b4:73:d7:24:fd:c7: b1:16:cf:c2:64:b9:86:81:62:55:8b:ad:87:41:08:ea:c8:01: 85:f7:c0:b4:69:17:ea:d2:48:a9:59:52:4e:59:d0:ce:2e:06: 6e:ba:69:7a:97:24:c8:6d:3a:43:d0:25:ae:32:f4:1e:c2:a8: 76:cf:f5:ba:37:6b:12:a5:8f:49:24:4e:18:f7:20:17:c2:8f: e6:40:fe:89:84:0e:d2:be:3a:62:73:8a:47:23:45:19:5b:35: 94:eb:02:97:de:15:c0:e6:3b:14:83:79:ca:4c:a0:2a:07:8f: 9d:40:23:88:86:dd:13:bd:b6:3c:5e:01:64:c6:e5:5f:78:16: 70:6f:87:37:06:da:b2:20:5c:cc:b5:df:fd:30:1e:47:94:06: 76:43:f0:40:0d:44:49:13:b3:3a:f1:30:37:65:a9:13:c8:f6: 8f:7b:fa:f2:82:95:24:9a:ea:e6:17:4b:3b:ee:36:ee:c1:23: 02:47:40:82:c6:8d:de:67:07:2f:a5:b7:06:82:ad:e8:93:d5: 9e:83:96:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72bjFr+oB6lKujTwciWfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNThlYTk4MmM3ZDdhNzU5NWU4M2E2MWM3YWViM2Q3NjE4 ODk3MGMwHhcNMjUxMjIwMTMwMTIyWhcNMjUxMjIxMTMwMTIyWjAzMTEwLwYDVQQD Eyg4OTBjODI5OTEyM2JjZWY5NzhjMDkwMGFkZmI1NTlmMTA4MjJlZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ4EnM0Hq8Ol9C1StNu1zKS6zAoD 5OGtPXxa4yx+6hgPvICRsMsdhwrU98MubBaPGaQqCodECYkMvH8w5pqYTzLbmxrI 79U2OJREblMREy+vStbHiQK/cWOm4d4Llbl+8Tq/IjSUVlS0MUhbByUkKdzdP5l7 +ajP6ifIFcwxhnXezjHcUbAmlcG0SQve0wGzJxHLcLcDdDcfm2LUN3mws958jCSf wbBzMXkGxMSsSIFCgC2v5KPJ5pc766tkcxC21WS28nu5U5uTaFSfZh6A1wwWxf/2 qr8vz1/Zd43/frmwwXSRDJFeB9qOavvqRRJf5XLo4UrHjK7ZGkFf6f6mLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkMgpkSO875eMCQCt+1WfEIIu8vMB8GA1UdIwQY MBaAFJJY6pgsfXp1leg6Yceus9dhiJcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xqcW1DeDllbldWNkRwaHg2NnoxMkdJbHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mOTFlZWQtOThjNi00N2Y2LWFiZjct OTExMDcwZjI3ZTM3LzEva2xqcW1DeDllbldWNkRwaHg2NnoxMkdJbHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mOTFlZWQtOThjNi00N2Y2LWFiZjctOTExMDcwZjI3ZTM3 LzEva2xqcW1DeDllbldWNkRwaHg2NnoxMkdJbHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCHkZ8KI K3LmhoB+EHFjFxy01bybXUjTxYSMWaxHzVEi3HcUwtHPJRrpRkk01cjQtHPXJP3H sRbPwmS5hoFiVYuth0EI6sgBhffAtGkX6tJIqVlSTlnQzi4GbrppepckyG06Q9Al rjL0HsKods/1ujdrEqWPSSROGPcgF8KP5kD+iYQO0r46YnOKRyNFGVs1lOsCl94V wOY7FIN5ykygKgePnUAjiIbdE722PF4BZMblX3gWcG+HNwbasiBczLXf/TAeR5QG dkPwQA1ESROzOvEwN2WpE8j2j3v68oKVJJrq5hdLO+427sEjAkdAgsaN3mcHL6W3 BoKt6JPVnoOWPg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:16:23 2025 by rpki-client