This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json) Hash identifier: 8ojtHfb75JSwfFVMjDtjiz+ltyOjSOARcAte4jRP0i0= Subject key identifier: A7:8E:F1:BA:41:A2:CA:44:49:C1:57:9B:2A:BA:3F:81:1B:02:F3:03 Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51 Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351 Certificate serial: 019AF19B304AF852C65E83104053439B1C5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft Manifest number: 062F Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=) 2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=) 3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: EK6+rkO0p5WFYc4r99H1SJP9iDq1bB0lApMfIeHbqTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:30:4a:f8:52:c6:5e:83:10:40:53:43:9b:1c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351 Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=a78ef1ba41a2ca4449c1579b2aba3f811b02f303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:b6:d2:06:4b:32:f5:6b:9e:d0:dc:a5:af: 27:2f:bc:83:58:cd:0e:3f:fd:03:b0:45:dc:94:5a: a9:f2:39:60:7f:38:22:e1:cc:c4:7a:6d:2a:64:29: d8:96:6d:02:54:51:65:87:b7:32:08:b2:28:77:b0: ce:f9:73:3d:80:00:b5:a5:97:7b:92:4d:65:69:34: 40:90:3a:31:7b:4d:0e:d1:6b:f8:45:31:9d:7e:8c: 47:db:88:56:15:50:8a:78:09:40:25:02:4b:8d:6f: d1:8c:f5:0a:68:c5:8d:f6:2c:df:a3:c9:cb:86:c4: 71:1c:26:f3:42:2b:99:4a:0e:58:98:d6:f3:f6:fc: 27:2a:33:55:b8:49:bc:c6:84:d0:25:93:60:18:57: e4:fb:d8:62:f5:8d:87:95:52:7d:30:26:99:17:0a: 56:b0:90:59:8b:40:b9:28:c1:8b:0c:5a:a4:43:50: b3:53:40:98:13:64:83:ca:0b:c9:b1:61:3c:62:10: d2:e5:3d:87:30:a3:06:cf:39:96:f5:9c:d2:cd:72: 4a:9a:5e:eb:55:18:38:92:1e:c0:b7:1a:83:b7:3f: 09:17:6c:76:53:8c:64:8e:7e:7b:04:b7:a4:f3:ab: 2c:5f:32:07:99:73:b2:44:db:d4:ec:07:bd:a4:de: b7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8E:F1:BA:41:A2:CA:44:49:C1:57:9B:2A:BA:3F:81:1B:02:F3:03 X509v3 Authority Key Identifier: keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8b:f3:3f:bd:0b:40:ac:2e:30:cb:23:29:58:06:53:8b:15: e6:79:8d:3a:71:1f:5c:62:e2:b2:64:50:73:5d:2e:73:76:18: ac:2f:f7:d4:11:92:93:31:71:b9:a1:5d:ae:c1:4a:f6:fd:c2: 44:f0:89:2a:4c:42:aa:9b:15:95:de:3c:b0:f3:6f:d8:2a:07: 7e:e7:c1:04:18:6f:08:71:f7:0b:7d:0a:09:1b:86:2c:ac:c6: d7:e3:27:b9:db:d8:1c:fe:a9:a9:ac:00:fa:95:90:cc:86:52: 85:02:18:16:54:92:2c:9e:cc:43:25:d9:a6:f6:13:38:8c:74: c6:11:ca:08:27:ef:3c:76:00:89:b3:09:c3:f9:ef:d5:8b:4e: 91:17:54:2d:81:39:52:15:a1:ef:a8:21:4b:eb:f7:50:4e:7e: 66:af:f4:18:9d:2a:70:42:56:43:e5:9e:83:13:62:c8:a2:6e: ab:c1:80:96:40:f4:6d:dd:c4:37:6a:3d:02:cf:0a:9a:e3:72: 44:59:1e:30:16:e0:1f:0f:0b:23:10:97:25:30:40:6f:00:be: 36:13:8c:3a:40:3c:43:4c:0c:f6:f6:2e:81:24:98:0d:00:68: 91:8c:c8:db:c7:40:c3:13:ef:6e:74:07:0f:17:c7:65:55:af: a7:7c:6b:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzBK+FLGXoMQQFNDmxxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi MmYzNTEwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD EyhhNzhlZjFiYTQxYTJjYTQ0NDljMTU3OWIyYWJhM2Y4MTFiMDJmMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowO20gZLMvVrntDcpa8nL7yDWM0O P/0DsEXclFqp8jlgfzgi4czEem0qZCnYlm0CVFFlh7cyCLIod7DO+XM9gAC1pZd7 kk1laTRAkDoxe00O0Wv4RTGdfoxH24hWFVCKeAlAJQJLjW/RjPUKaMWN9izfo8nL hsRxHCbzQiuZSg5YmNbz9vwnKjNVuEm8xoTQJZNgGFfk+9hi9Y2HlVJ9MCaZFwpW sJBZi0C5KMGLDFqkQ1CzU0CYE2SDygvJsWE8YhDS5T2HMKMGzzmW9ZzSzXJKml7r VRg4kh7AtxqDtz8JF2x2U4xkjn57BLek86ssXzIHmXOyRNvU7Ae9pN63JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeO8bpBospEScFXmyq6P4EbAvMDMB8GA1UdIwQY MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYvzP70L QKwuMMsjKVgGU4sV5nmNOnEfXGLismRQc10uc3YYrC/31BGSkzFxuaFdrsFK9v3C RPCJKkxCqpsVld48sPNv2CoHfufBBBhvCHH3C30KCRuGLKzG1+MnudvYHP6pqawA +pWQzIZShQIYFlSSLJ7MQyXZpvYTOIx0xhHKCCfvPHYAibMJw/nv1YtOkRdULYE5 UhWh76ghS+v3UE5+Zq/0GJ0qcEJWQ+WegxNiyKJuq8GAlkD0bd3EN2o9As8KmuNy RFkeMBbgHw8LIxCXJTBAbwC+NhOMOkA8Q0wM9vYugSSYDQBokYzI28dAwxPvbnQH DxfHZVWvp3xr7g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:13 2025 by rpki-client