This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft File: kljqmCx9enWV6Dphx66z12GIlww.mft (raw, json) Hash identifier: Z122lzZiObH859RaK6vgWq3ILprS59p2p6ymzW27O20= Subject key identifier: EB:E0:C1:C0:29:25:3F:62:44:78:6E:BB:BE:E5:4F:F9:0A:E2:3F:DD Authority key identifier: 92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C Certificate issuer: /CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c Certificate serial: 019AF08839C5A571FD0C4B8187DFA6B4687D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft Manifest number: 1506 Signing time: Fri 05 Dec 2025 22:00:50 +0000 Manifest this update: Fri 05 Dec 2025 22:00:50 +0000 Manifest next update: Sat 06 Dec 2025 22:00:50 +0000 Files and hashes: 1: kljqmCx9enWV6Dphx66z12GIlww.crl (hash: MEUFQTQc0WmFHnbnu2lqLG2Lcn+Ru0h2tj4h1x8Z9i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:39:c5:a5:71:fd:0c:4b:81:87:df:a6:b4:68:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9258ea982c7d7a7595e83a61c7aeb3d76188970c Validity Not Before: Dec 5 22:00:50 2025 GMT Not After : Dec 6 22:00:50 2025 GMT Subject: CN=ebe0c1c029253f6244786ebbbee54ff90ae23fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:cc:f2:13:59:22:39:38:c0:a4:95:b1:03: 8d:15:f8:9a:06:52:84:36:0b:64:0c:5c:5e:c4:ab: 2b:6f:c2:d5:f0:65:17:67:87:98:80:1a:2c:26:8f: b9:1c:bf:1a:21:7c:68:9d:74:c5:49:94:3d:2c:c9: fd:87:e8:9b:27:8c:44:93:fd:dd:2d:51:05:24:e6: 0b:ae:12:cf:bb:b5:30:a1:f4:20:57:b8:ed:ee:d0: 04:92:ab:6c:aa:96:ce:37:81:bf:25:a1:7e:16:aa: c6:45:ea:f7:eb:24:57:7a:10:8f:76:14:cf:52:94: 1b:4c:23:91:00:f9:46:30:fc:ee:65:99:81:5d:d7: ad:4e:5e:62:3d:32:ff:a6:7f:a8:1f:18:48:2c:e1: b1:35:f0:13:83:cf:c8:08:d4:10:23:20:fa:31:ac: 6a:02:cb:dc:ca:0f:26:7b:47:1c:66:74:98:5e:b3: 7c:ce:f7:0d:ff:62:a3:49:bb:13:5c:29:9d:38:ae: 5a:ff:c3:99:51:5b:e6:98:1d:2e:ed:08:96:a9:f5: 72:b4:e3:c9:13:0e:db:63:b5:38:6c:87:49:9a:bb: 2c:b4:91:c5:4e:60:9b:e0:47:2d:0d:86:de:10:68: 83:47:de:aa:cc:cc:6f:b1:57:85:2c:94:14:b2:6f: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E0:C1:C0:29:25:3F:62:44:78:6E:BB:BE:E5:4F:F9:0A:E2:3F:DD X509v3 Authority Key Identifier: keyid:92:58:EA:98:2C:7D:7A:75:95:E8:3A:61:C7:AE:B3:D7:61:88:97:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kljqmCx9enWV6Dphx66z12GIlww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f91eed-98c6-47f6-abf7-911070f27e37/1/kljqmCx9enWV6Dphx66z12GIlww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c9:91:66:06:3a:f8:ec:16:c8:99:3f:54:5f:53:d2:15:28: 26:f7:f3:a5:98:51:30:82:a6:a5:e1:8d:9a:ce:24:3d:d4:6b: e1:f3:1b:88:e3:bb:b6:2b:2b:f6:49:7e:9b:4e:02:af:3a:21: b6:8b:2f:ae:b8:e3:73:b0:98:ac:58:3a:69:bf:bb:fe:30:0c: 7f:06:3d:7d:6b:5b:f7:5c:fa:33:b2:4e:9e:3b:5e:70:63:27: 91:0f:2c:11:63:a1:72:9f:69:50:8b:bb:ca:79:3c:15:79:76: 94:a3:0b:f6:c9:91:9f:7e:00:63:66:91:5d:ea:0c:7b:7b:73: 28:90:28:92:1a:6e:d5:f2:cd:08:85:62:b5:b7:f0:4f:9f:f4: fa:ca:c6:84:8d:b4:14:43:7a:8b:35:e8:bf:cf:54:04:7b:ee: 41:f7:81:ac:e7:7b:1a:89:46:10:30:02:a1:c2:77:d5:6f:bc: bb:88:24:18:cf:ba:1a:b2:37:e6:78:b6:00:58:1e:e0:b4:0d: 26:80:ff:fa:a1:ca:c3:5f:24:4c:b1:4f:b5:9b:3b:f9:a0:b2: c0:26:63:41:a2:3c:d8:ec:ff:8c:6b:91:6d:da:73:92:67:87: a5:9f:20:f0:b2:21:81:21:de:ec:64:33:71:6b:01:ca:6b:f5: 28:91:c9:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDnFpXH9DEuBh9+mtGh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNThlYTk4MmM3ZDdhNzU5NWU4M2E2MWM3YWViM2Q3NjE4 ODk3MGMwHhcNMjUxMjA1MjIwMDUwWhcNMjUxMjA2MjIwMDUwWjAzMTEwLwYDVQQD EyhlYmUwYzFjMDI5MjUzZjYyNDQ3ODZlYmJiZWU1NGZmOTBhZTIzZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh3M8hNZIjk4wKSVsQONFfiaBlKE NgtkDFxexKsrb8LV8GUXZ4eYgBosJo+5HL8aIXxonXTFSZQ9LMn9h+ibJ4xEk/3d LVEFJOYLrhLPu7UwofQgV7jt7tAEkqtsqpbON4G/JaF+FqrGRer36yRXehCPdhTP UpQbTCORAPlGMPzuZZmBXdetTl5iPTL/pn+oHxhILOGxNfATg8/ICNQQIyD6Maxq Asvcyg8me0ccZnSYXrN8zvcN/2KjSbsTXCmdOK5a/8OZUVvmmB0u7QiWqfVytOPJ Ew7bY7U4bIdJmrsstJHFTmCb4EctDYbeEGiDR96qzMxvsVeFLJQUsm9ZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvgwcApJT9iRHhuu77lT/kK4j/dMB8GA1UdIwQY MBaAFJJY6pgsfXp1leg6Yceus9dhiJcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xqcW1DeDllbldWNkRwaHg2NnoxMkdJbHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mOTFlZWQtOThjNi00N2Y2LWFiZjct OTExMDcwZjI3ZTM3LzEva2xqcW1DeDllbldWNkRwaHg2NnoxMkdJbHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9mOTFlZWQtOThjNi00N2Y2LWFiZjctOTExMDcwZjI3ZTM3 LzEva2xqcW1DeDllbldWNkRwaHg2NnoxMkdJbHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMmRZgY6 +OwWyJk/VF9T0hUoJvfzpZhRMIKmpeGNms4kPdRr4fMbiOO7tisr9kl+m04Crzoh tosvrrjjc7CYrFg6ab+7/jAMfwY9fWtb91z6M7JOnjtecGMnkQ8sEWOhcp9pUIu7 ynk8FXl2lKML9smRn34AY2aRXeoMe3tzKJAokhpu1fLNCIVitbfwT5/0+srGhI20 FEN6izXov89UBHvuQfeBrOd7GolGEDACocJ31W+8u4gkGM+6GrI35ni2AFge4LQN JoD/+qHKw18kTLFPtZs7+aCywCZjQaI82Oz/jGuRbdpzkmeHpZ8g8LIhgSHe7GQz cWsBymv1KJHJyA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:52 2025 by rpki-client