This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json) Hash identifier: pFAzCTJcIpKXGJxC5muRoShQVwAX0UGPJ/GEWmWox2c= Subject key identifier: FA:A7:81:A1:0C:8D:4C:5A:B6:B9:FC:4D:E2:AD:53:2D:44:B6:CA:64 Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc Certificate serial: 019AF31BE629130BA31BE5512E7086D34AF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft Manifest number: 151B Signing time: Sat 06 Dec 2025 10:01:23 +0000 Manifest this update: Sat 06 Dec 2025 10:01:23 +0000 Manifest next update: Sun 07 Dec 2025 10:01:23 +0000 Files and hashes: 1: ELPDypl8AO7yu9Qb_T04CJHIAmc.roa (hash: uMxQfCf54KpZ6vXVJrK4LBRwbGjKGq0Ym1Kz/m5o7Z0=) 2: h7jotg4RS-yoMxmLNwMHtqMIvTo.roa (hash: 0RvIPvSKfKKYiob3W8lnsFljStCAR/IAjli0EYtRtIQ=) 3: iRTljilS88fdbTnqXefNcD2KdQw.roa (hash: SYC9aJR60HZt276fl/3G18s2lWN51c7daVgQyb0yCnk=) 4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: T0I+vZeGcMxTb+KdIlSRueLBa6y4xYY1dhu8xsn+dtQ=) 5: vEwnUG1RajWkcLEBWJPnIiLLgBM.roa (hash: sSHl9JnRfzO2J5TGzVLlmHvYGgd6KK351LDclJH6UZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e6:29:13:0b:a3:1b:e5:51:2e:70:86:d3:4a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc Validity Not Before: Dec 6 10:01:23 2025 GMT Not After : Dec 7 10:01:23 2025 GMT Subject: CN=faa781a10c8d4c5ab6b9fc4de2ad532d44b6ca64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b3:bf:bc:ba:0c:9e:e4:96:97:4d:52:28:20: 56:e6:93:d5:16:a5:e2:1d:c9:31:47:d0:2e:6e:30: 9f:ad:1a:f3:ee:02:09:b2:97:58:f3:fe:1f:a9:66: ad:5b:9d:8c:97:7e:73:50:20:a8:fd:d2:c5:8e:64: 49:33:6a:3a:9a:ca:90:d7:38:b1:8f:39:e3:c3:7c: 9e:21:ff:c0:45:51:71:6e:c8:a8:dc:7b:70:c9:0c: 4f:21:a6:2c:cd:a8:74:a1:92:7c:42:f0:1f:59:cd: 4d:26:03:b5:5a:dd:10:cb:4f:c5:63:f6:a3:a2:3e: 4e:58:0c:58:75:53:ae:13:ff:40:93:a8:2d:76:39: 51:01:a7:95:09:ca:ce:25:eb:8c:da:a3:61:9a:a6: 21:8f:aa:a4:85:db:d4:01:da:9f:71:02:a2:3a:91: 8c:a9:4f:15:2e:98:80:05:95:3f:ef:64:ed:e5:fd: 2f:a1:29:56:9a:e2:56:00:75:68:e6:ac:5e:2c:f6: 92:42:f1:40:99:e6:76:f7:04:db:6b:12:d8:ff:0c: 74:21:8a:de:fc:0c:e5:e9:8a:dc:b7:37:25:9c:6c: 8b:c4:33:88:60:8b:57:7d:d1:b0:b1:17:d0:2a:3c: 4d:0c:b5:56:64:29:59:87:a2:81:3e:fa:cb:d4:5d: 63:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A7:81:A1:0C:8D:4C:5A:B6:B9:FC:4D:E2:AD:53:2D:44:B6:CA:64 X509v3 Authority Key Identifier: keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:83:0b:1b:61:59:d1:9f:0c:6e:38:0b:b4:1a:fc:96:b8:8c: d9:47:0d:3b:9e:44:0e:77:a1:14:d7:fb:4d:2a:dc:28:02:93: 12:2b:16:a1:d6:68:0b:96:d9:94:23:27:6e:ce:fa:4d:c9:ea: 2f:84:fd:18:5b:c1:5e:f4:66:12:dc:2e:17:69:77:5e:9a:86: 5c:d9:ed:a1:fd:39:d9:32:61:8a:26:fc:0d:06:ab:36:9a:70: 3b:9b:3c:b1:0a:f5:a0:d1:67:c4:d7:2c:6f:db:be:43:28:96: 58:1c:8b:da:61:a7:cf:78:fe:bd:bc:f2:64:c3:2b:c4:ed:e4: c0:bf:23:75:c1:96:32:aa:28:e0:4c:51:c7:19:a7:d7:6c:94: 59:67:9f:04:7f:e5:c3:62:a4:5e:d8:db:0b:98:57:37:aa:f5: c2:9f:70:5b:eb:fc:38:45:2f:7e:68:3b:c3:f9:a6:c9:3d:58: 6a:21:10:ff:32:bc:dc:02:12:3c:cb:44:7a:00:61:6d:37:c5: 64:f9:5b:f5:5c:b1:31:74:61:13:20:76:b2:b5:95:f1:da:ce: 58:2d:5b:24:2f:d2:a0:10:57:50:ef:03:f2:ff:3e:be:aa:84: 29:0a:c0:ba:b2:e8:63:6c:72:2a:f8:e6:84:7c:91:30:e7:1a: 51:9e:16:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+YpEwujG+VRLnCG00r2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNDVlYWQ4ZDNmMTI4NDQwMmI2Zjc1NjE0YTg3MjU3NTAz Y2UxYmMwHhcNMjUxMjA2MTAwMTIzWhcNMjUxMjA3MTAwMTIzWjAzMTEwLwYDVQQD EyhmYWE3ODFhMTBjOGQ0YzVhYjZiOWZjNGRlMmFkNTMyZDQ0YjZjYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7O/vLoMnuSWl01SKCBW5pPVFqXi HckxR9AubjCfrRrz7gIJspdY8/4fqWatW52Ml35zUCCo/dLFjmRJM2o6msqQ1zix jznjw3yeIf/ARVFxbsio3HtwyQxPIaYszah0oZJ8QvAfWc1NJgO1Wt0Qy0/FY/aj oj5OWAxYdVOuE/9Ak6gtdjlRAaeVCcrOJeuM2qNhmqYhj6qkhdvUAdqfcQKiOpGM qU8VLpiABZU/72Tt5f0voSlWmuJWAHVo5qxeLPaSQvFAmeZ29wTbaxLY/wx0IYre /Azl6YrctzclnGyLxDOIYItXfdGwsRfQKjxNDLVWZClZh6KBPvrL1F1juwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqngaEMjUxatrn8TeKtUy1EtspkMB8GA1UdIwQY MBaAFJFF6tjT8ShEArb3VhSocldQPOG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzct MmFkMTk1MjY0YzcyLzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzctMmFkMTk1MjY0Yzcy LzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYMLG2FZ 0Z8MbjgLtBr8lriM2UcNO55EDnehFNf7TSrcKAKTEisWodZoC5bZlCMnbs76Tcnq L4T9GFvBXvRmEtwuF2l3XpqGXNntof052TJhiib8DQarNppwO5s8sQr1oNFnxNcs b9u+QyiWWByL2mGnz3j+vbzyZMMrxO3kwL8jdcGWMqoo4ExRxxmn12yUWWefBH/l w2KkXtjbC5hXN6r1wp9wW+v8OEUvfmg7w/mmyT1YaiEQ/zK83AISPMtEegBhbTfF ZPlb9VyxMXRhEyB2srWV8drOWC1bJC/SoBBXUO8D8v8+vqqEKQrAurLoY2xyKvjm hHyRMOcaUZ4W0g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:31:36 2025 by rpki-client