This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft File: kMDxVcgmfsgeEIO337k_NOm5Aa4.mft (raw, json) Hash identifier: lC5TTpoZkbawggPzupP+xlnpnCXtkQkiX+7sVv/j6cY= Subject key identifier: ED:E3:2A:8A:DA:7F:8F:04:D0:14:BA:A7:11:33:2E:1D:4C:92:E9:36 Authority key identifier: 90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE Certificate issuer: /CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae Certificate serial: 019AF2E449A21CFFE8B4CA4E1B7530CC2D05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft Manifest number: 67 Signing time: Sat 06 Dec 2025 09:00:38 +0000 Manifest this update: Sat 06 Dec 2025 09:00:38 +0000 Manifest next update: Sun 07 Dec 2025 09:00:38 +0000 Files and hashes: 1: Bw1UT74k-dOGeuGPKO4Kh8QWil8.roa (hash: hfrkdnxNY3IQTF5ruyFfonVNss2RvXrobwb71f8Yp7U=) 2: kMDxVcgmfsgeEIO337k_NOm5Aa4.crl (hash: OXyr0KMOIqWkKkpDckNickkcsZqcDvXIWzhFaZBFzqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:49:a2:1c:ff:e8:b4:ca:4e:1b:75:30:cc:2d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90c0f155c8267ec81e1083b7dfb93f34e9b901ae Validity Not Before: Dec 6 09:00:38 2025 GMT Not After : Dec 7 09:00:38 2025 GMT Subject: CN=ede32a8ada7f8f04d014baa711332e1d4c92e936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:b3:eb:64:b2:13:da:8d:99:ef:9e:1b:7b: 5e:c5:a3:66:fc:c9:34:dc:23:b0:f4:30:fa:fa:72: f1:de:a4:3a:50:c4:91:6c:07:5d:d4:85:43:30:84: 15:70:59:98:93:ed:1c:4a:10:72:01:fd:53:9e:dd: 1a:c9:d4:cd:98:35:e2:ea:75:01:21:18:4b:d8:51: 9b:f9:eb:11:6c:d9:b0:a4:8c:a7:ab:77:fc:ed:de: ec:2f:0a:01:45:1f:95:2b:7c:1c:23:60:bd:01:5f: 13:28:13:87:84:85:9d:cf:83:c5:9c:65:e9:93:e4: 0a:69:1e:d4:9f:ca:ff:f5:e9:54:b7:ae:ab:b3:0d: 7f:17:13:b6:90:41:16:09:67:f5:fa:7b:65:fc:d0: 87:bd:d9:83:93:53:1d:2d:88:a7:c8:c0:3d:aa:46: 06:7b:5f:17:80:c3:cf:75:61:79:3e:de:f4:64:1b: 71:b0:ca:10:af:33:30:a3:83:72:bc:82:48:97:e1: 1f:bf:67:3b:9b:e0:af:89:8a:54:70:0d:e2:3e:a9: 1f:e7:d5:87:9a:43:93:bf:a6:e1:47:a5:d9:0a:a9: a9:3c:26:94:a1:2f:12:c6:dc:21:54:61:e1:d2:00: 74:dd:29:3e:57:4f:ed:c8:00:4a:dc:e5:77:d9:e9: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E3:2A:8A:DA:7F:8F:04:D0:14:BA:A7:11:33:2E:1D:4C:92:E9:36 X509v3 Authority Key Identifier: keyid:90:C0:F1:55:C8:26:7E:C8:1E:10:83:B7:DF:B9:3F:34:E9:B9:01:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMDxVcgmfsgeEIO337k_NOm5Aa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/845dbc-c764-49fa-b9aa-5961d346a172/1/kMDxVcgmfsgeEIO337k_NOm5Aa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a6:61:bb:ae:61:29:88:f5:70:ae:3a:e5:a0:89:f6:4a:e1: fd:0a:2f:15:1a:3e:47:ea:8b:32:a9:41:93:e2:85:11:b5:fd: 2c:85:20:c2:ad:27:07:93:02:fb:4f:79:48:ba:41:2b:03:cc: 0a:ae:c7:a1:15:d5:f0:c4:bf:6e:2e:c2:2b:8e:4c:3c:e6:1a: f1:cb:35:eb:af:f9:48:c9:44:0e:6b:3a:6d:2c:b4:b1:5e:eb: 13:d6:2c:18:b5:fa:36:eb:4d:c2:93:47:56:85:ef:bb:f3:3f: ac:5f:99:ee:ac:1f:e4:21:44:be:92:b0:ef:ae:c3:c6:28:a5: c2:7c:39:0b:cf:a6:cd:2f:d0:cf:3c:34:d1:d7:39:ec:40:47: 99:98:81:96:85:a9:3f:cc:d2:9e:ec:d1:b8:aa:a6:48:75:1d: 82:c8:76:9c:fc:21:81:95:d2:a0:36:f6:03:d9:f7:d2:0e:10: e0:4a:3f:fb:d4:50:2e:cb:6b:66:c0:c7:a2:ed:d6:b9:39:f6: 57:c9:a2:37:9e:bb:0f:24:0e:21:df:c0:3e:84:c2:20:e5:15: 7b:33:91:27:1e:28:21:cd:bf:07:9c:bc:03:16:de:13:66:94: 65:85:12:37:ca:7d:d2:1f:0d:db:dc:f5:43:24:e9:65:74:6a: 66:37:96:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EmiHP/otMpOG3UwzC0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYzBmMTU1YzgyNjdlYzgxZTEwODNiN2RmYjkzZjM0ZTli OTAxYWUwHhcNMjUxMjA2MDkwMDM4WhcNMjUxMjA3MDkwMDM4WjAzMTEwLwYDVQQD EyhlZGUzMmE4YWRhN2Y4ZjA0ZDAxNGJhYTcxMTMzMmUxZDRjOTJlOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDaz62SyE9qNme+eG3texaNm/Mk0 3COw9DD6+nLx3qQ6UMSRbAdd1IVDMIQVcFmYk+0cShByAf1Tnt0aydTNmDXi6nUB IRhL2FGb+esRbNmwpIynq3f87d7sLwoBRR+VK3wcI2C9AV8TKBOHhIWdz4PFnGXp k+QKaR7Un8r/9elUt66rsw1/FxO2kEEWCWf1+ntl/NCHvdmDk1MdLYinyMA9qkYG e18XgMPPdWF5Pt70ZBtxsMoQrzMwo4NyvIJIl+Efv2c7m+CviYpUcA3iPqkf59WH mkOTv6bhR6XZCqmpPCaUoS8SxtwhVGHh0gB03Sk+V0/tyABK3OV32ekG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3jKoraf48E0BS6pxEzLh1Mkuk2MB8GA1UdIwQY MBaAFJDA8VXIJn7IHhCDt9+5PzTpuQGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84NDVkYmMtYzc2NC00OWZhLWI5YWEt NTk2MWQzNDZhMTcyLzEva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84NDVkYmMtYzc2NC00OWZhLWI5YWEtNTk2MWQzNDZhMTcy LzEva01EeFZjZ21mc2dlRUlPMzM3a19OT201QWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6Zhu65h KYj1cK465aCJ9krh/QovFRo+R+qLMqlBk+KFEbX9LIUgwq0nB5MC+095SLpBKwPM Cq7HoRXV8MS/bi7CK45MPOYa8cs166/5SMlEDms6bSy0sV7rE9YsGLX6NutNwpNH VoXvu/M/rF+Z7qwf5CFEvpKw767Dxiilwnw5C8+mzS/Qzzw00dc57EBHmZiBloWp P8zSnuzRuKqmSHUdgsh2nPwhgZXSoDb2A9n30g4Q4Eo/+9RQLstrZsDHou3WuTn2 V8miN567DyQOId/APoTCIOUVezORJx4oIc2/B5y8AxbeE2aUZYUSN8p90h8N29z1 QyTpZXRqZjeWxg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:37 2025 by rpki-client