This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json) Hash identifier: Ow8N9Ji7i+911B1kqSGmxvQOoZpe8PshJctxaLr5MW4= Subject key identifier: 2A:46:3B:10:1D:E2:81:63:0C:BF:8A:55:3C:96:0B:93:B9:EF:F9:32 Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45 Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45 Certificate serial: 019AF50AE026E5EC734ADD49FDB852ACF4FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft Manifest number: 0A6E Signing time: Sat 06 Dec 2025 19:02:01 +0000 Manifest this update: Sat 06 Dec 2025 19:02:01 +0000 Manifest next update: Sun 07 Dec 2025 19:02:01 +0000 Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: mj8WmEG8hK3UIKlbcz7Qste3+6IvpvI1HOP6tE0Usfs=) 2: y00kCOm4x0sTFaBDOqD5L5fES6Y.roa (hash: G4M+BrvsrjKhmQGsYy0izNdpM9hsyiGzIDC7Si8ke98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e0:26:e5:ec:73:4a:dd:49:fd:b8:52:ac:f4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45 Validity Not Before: Dec 6 19:02:01 2025 GMT Not After : Dec 7 19:02:01 2025 GMT Subject: CN=2a463b101de281630cbf8a553c960b93b9eff932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:df:78:59:d3:49:75:11:7d:0e:26:0e:81:b6: f8:a8:e2:4e:09:db:ea:b6:2f:f0:39:e5:b9:af:70: 75:0c:b0:bb:cf:cf:4a:57:2a:24:41:b0:64:d8:a6: 51:a3:fe:56:2a:1c:bb:33:ff:00:09:c4:8e:7f:3d: 2f:e6:25:00:4a:4e:9d:a1:25:3b:c1:e3:62:02:60: 95:3d:c1:11:14:97:d5:87:78:17:6d:28:76:15:f5: 8b:68:c2:d3:2a:2c:b7:a9:32:ce:18:f4:04:c7:90: cf:49:b0:9b:78:e3:67:5f:31:0b:e1:30:ae:33:95: ee:14:97:ed:5b:52:29:a4:ec:aa:10:2f:94:58:ba: 36:aa:9c:2f:1f:2d:db:99:ad:78:d0:1c:2f:65:7b: bd:0e:05:7e:84:3a:fb:89:a5:aa:94:03:3b:ec:ff: 32:fa:b1:45:dd:64:b5:93:92:d2:ec:cb:9c:a2:7b: 31:a2:c6:38:25:a5:48:d8:a3:e8:e5:be:6a:80:f6: 78:36:49:be:14:95:0c:82:07:8c:54:be:8b:8c:a0: 23:43:fb:9e:6f:cc:67:c8:aa:26:46:39:13:09:48: 83:ae:a8:5d:a1:5f:4a:b3:a0:83:f8:24:12:61:49: 3b:7e:29:1e:52:99:27:7e:e8:ea:f9:24:7d:59:04: 51:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:46:3B:10:1D:E2:81:63:0C:BF:8A:55:3C:96:0B:93:B9:EF:F9:32 X509v3 Authority Key Identifier: keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:80:34:76:a7:e3:fc:ae:19:5b:2b:f6:8c:8e:68:50:8a:9b: 49:89:66:66:23:8a:c4:92:d4:c2:6d:76:dd:2b:6a:6e:2f:e2: f9:f6:81:d3:7e:da:84:6c:61:96:96:23:a8:8b:16:41:23:72: 7a:36:1d:26:56:f7:8a:36:4f:31:62:12:bd:cd:be:38:11:41: 16:aa:4a:7c:1e:bd:5c:3f:01:12:01:99:64:e8:96:ab:ff:18: ed:46:82:21:60:ec:20:5b:f6:2c:cd:09:30:c4:ce:d9:18:e2: 37:d2:a4:a3:d1:5a:ef:e8:74:9c:68:fc:9c:bd:d0:2d:64:ae: 41:75:ac:bc:d3:02:ba:30:3a:87:7f:52:62:76:55:2f:eb:09: a3:7f:46:d1:0a:24:44:1e:b9:2c:27:a1:a4:b3:1a:aa:5e:76: f2:82:05:10:d4:54:94:57:c6:b8:2f:50:33:38:ec:7e:25:b6: a2:78:29:8f:38:18:8f:b7:f5:c4:fd:7e:ad:2a:0a:e1:3d:a3: 6c:9d:b6:e1:fe:24:f1:17:ca:43:c7:c1:04:74:ad:0c:ab:32: 7a:60:e0:74:4f:e8:16:52:d8:9c:83:12:da:1c:d4:7d:96:a5: 85:28:b3:5a:f6:34:b3:e2:4c:be:27:5a:64:81:09:2c:a8:d2: 7d:5f:09:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CuAm5exzSt1J/bhSrPT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwN2E1YzRlYTQ1M2I0NmM4MWNiMTM2ZDkyYjkzMDliMTQ2 YzNlNDUwHhcNMjUxMjA2MTkwMjAxWhcNMjUxMjA3MTkwMjAxWjAzMTEwLwYDVQQD EygyYTQ2M2IxMDFkZTI4MTYzMGNiZjhhNTUzYzk2MGI5M2I5ZWZmOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit94WdNJdRF9DiYOgbb4qOJOCdvq ti/wOeW5r3B1DLC7z89KVyokQbBk2KZRo/5WKhy7M/8ACcSOfz0v5iUASk6doSU7 weNiAmCVPcERFJfVh3gXbSh2FfWLaMLTKiy3qTLOGPQEx5DPSbCbeONnXzEL4TCu M5XuFJftW1IppOyqEC+UWLo2qpwvHy3bma140BwvZXu9DgV+hDr7iaWqlAM77P8y +rFF3WS1k5LS7MuconsxosY4JaVI2KPo5b5qgPZ4Nkm+FJUMggeMVL6LjKAjQ/ue b8xnyKomRjkTCUiDrqhdoV9Ks6CD+CQSYUk7fikeUpknfujq+SR9WQRRjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpGOxAd4oFjDL+KVTyWC5O57/kyMB8GA1UdIwQY MBaAFJB6XE6kU7RsgcsTbZK5MJsUbD5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDIt YjJhMmI4Yjg0N2I5LzEva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDItYjJhMmI4Yjg0N2I5 LzEva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIA0dqfj /K4ZWyv2jI5oUIqbSYlmZiOKxJLUwm123Stqbi/i+faB037ahGxhlpYjqIsWQSNy ejYdJlb3ijZPMWISvc2+OBFBFqpKfB69XD8BEgGZZOiWq/8Y7UaCIWDsIFv2LM0J MMTO2RjiN9Kko9Fa7+h0nGj8nL3QLWSuQXWsvNMCujA6h39SYnZVL+sJo39G0Qok RB65LCehpLMaql528oIFENRUlFfGuC9QMzjsfiW2ongpjzgYj7f1xP1+rSoK4T2j bJ224f4k8RfKQ8fBBHStDKsyemDgdE/oFlLYnIMS2hzUfZalhSizWvY0s+JMvida ZIEJLKjSfV8JyA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:38 2025 by rpki-client