This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json) Hash identifier: immlRkWEfxGmhBG+tnfVYTIVpjpLNJRvh1Kaa1ReKDE= Subject key identifier: 01:96:3C:43:7D:0D:D9:D4:BC:E1:AC:3F:38:48:14:71:6D:5D:24:9E Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50 Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50 Certificate serial: 019AF23FECF23BCDE300E6F7EDDEA051B6A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=) 2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=) 3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: blk2gLfFfn0Rb/kz+GbQfOAmaIXjuDMJ0OdLZj/wdaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ec:f2:3b:cd:e3:00:e6:f7:ed:de:a0:51:b6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50 Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=01963c437d0dd9d4bce1ac3f384814716d5d249e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:70:00:24:e7:2f:66:70:81:51:ab:39:bb: 7b:bf:1b:1a:e4:62:fa:e3:a9:54:bf:2b:2f:f5:4a: 2e:d9:19:7a:c4:c7:b4:16:3b:4f:cf:cf:df:0a:e7: 28:ba:ae:43:ad:be:80:09:d2:1c:a8:3b:68:0f:cf: d1:c4:cd:e3:e5:5e:2b:73:d7:31:3e:79:64:ec:e7: 7c:64:da:e4:79:14:37:d7:89:b1:7e:58:1a:05:23: 33:ab:83:09:19:7a:54:af:02:f8:c6:eb:c5:a7:38: 01:d0:2f:01:37:0c:8e:3c:fe:c6:f7:4f:08:48:da: 22:82:56:dd:99:26:b5:de:23:7b:c3:d7:35:f9:2f: 99:c9:6f:6f:fe:33:22:f6:d1:28:3a:6e:02:29:5d: fa:0c:3c:7d:82:97:53:71:e2:39:0f:32:3b:bf:6f: d1:1f:22:6d:45:11:4b:ef:f6:ec:74:72:47:c4:93: 00:e7:d3:b8:72:9a:01:fa:1a:c2:0d:30:8f:cf:21: 12:db:02:a4:6c:75:c6:bf:1d:9c:ca:e4:d5:7d:8b: c6:16:99:e6:41:fc:b6:af:60:5f:1f:4b:12:e0:e1: 20:5f:0a:c0:63:81:73:13:31:fb:ef:ba:c7:63:53: ec:cb:10:69:b4:ac:06:af:5a:c6:9c:44:43:15:22: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:96:3C:43:7D:0D:D9:D4:BC:E1:AC:3F:38:48:14:71:6D:5D:24:9E X509v3 Authority Key Identifier: keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7f:08:20:4d:01:db:06:4b:2f:b6:66:e9:f9:ba:f3:d2:ec: 08:03:82:93:93:89:fa:22:cc:2e:86:63:26:5a:d6:ab:7d:b9: 76:94:3b:e3:70:0e:55:c9:fd:4c:21:55:69:77:90:21:4f:3d: 46:0f:ca:98:bb:fd:0c:45:b2:13:37:dc:a7:02:55:60:49:b6: 4f:a8:fa:3d:a8:c1:ed:d0:75:ca:0b:9d:68:09:8d:c3:99:a3: 91:1e:aa:0b:5d:f7:33:fc:8e:af:bf:dc:c5:8a:d8:2c:3f:5f: 71:aa:eb:46:f9:0b:ed:36:10:3d:c1:0a:09:7d:4c:94:7f:2a: f3:0b:13:d3:01:0e:c6:4c:5a:cc:3d:53:2d:33:ff:70:ad:39: 64:e7:9e:51:eb:fb:3a:6b:b7:f1:e2:29:c8:a9:da:81:01:0e: 09:78:ce:60:dd:60:37:58:14:7d:a9:f9:8c:ff:01:79:f0:aa: 6a:32:fa:a3:f6:fd:8a:53:aa:47:5e:62:d1:07:0f:55:99:d4: f0:30:1e:64:a9:75:22:54:ea:15:fa:bf:fc:d9:0a:2d:21:1b: 6b:10:b4:16:fd:79:18:4f:23:75:63:d3:69:93:cc:63:92:a2: c4:86:81:8f:d3:90:8a:23:fc:fd:b7:d2:71:a2:c6:69:b1:39: 62:19:4d:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+zyO83jAOb37d6gUbahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwM2VjNGM1MDJhNDJjNWJiZmRiNzBlYTlmNDQwY2ExNTAw YWNjNTAwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD EygwMTk2M2M0MzdkMGRkOWQ0YmNlMWFjM2YzODQ4MTQ3MTZkNWQyNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPRwACTnL2ZwgVGrObt7vxsa5GL6 46lUvysv9Uou2Rl6xMe0FjtPz8/fCucouq5Drb6ACdIcqDtoD8/RxM3j5V4rc9cx Pnlk7Od8ZNrkeRQ314mxflgaBSMzq4MJGXpUrwL4xuvFpzgB0C8BNwyOPP7G908I SNoiglbdmSa13iN7w9c1+S+ZyW9v/jMi9tEoOm4CKV36DDx9gpdTceI5DzI7v2/R HyJtRRFL7/bsdHJHxJMA59O4cpoB+hrCDTCPzyES2wKkbHXGvx2cyuTVfYvGFpnm Qfy2r2BfH0sS4OEgXwrAY4FzEzH777rHY1PsyxBptKwGr1rGnERDFSLl7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGWPEN9DdnUvOGsPzhIFHFtXSSeMB8GA1UdIwQY MBaAFJA+xMUCpCxbv9tw6p9EDKFQCsxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MGM1NDgtNWNjNi00N2MzLTllOGYt YmRkYjI5Zjg1ZmI4LzEva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MGM1NDgtNWNjNi00N2MzLTllOGYtYmRkYjI5Zjg1ZmI4 LzEva0Q3RXhRS2tMRnVfMjNEcW4wUU1vVkFLekZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHn8IIE0B 2wZLL7Zm6fm689LsCAOCk5OJ+iLMLoZjJlrWq325dpQ743AOVcn9TCFVaXeQIU89 Rg/KmLv9DEWyEzfcpwJVYEm2T6j6PajB7dB1ygudaAmNw5mjkR6qC133M/yOr7/c xYrYLD9fcarrRvkL7TYQPcEKCX1MlH8q8wsT0wEOxkxazD1TLTP/cK05ZOeeUev7 Omu38eIpyKnagQEOCXjOYN1gN1gUfan5jP8BefCqajL6o/b9ilOqR15i0QcPVZnU 8DAeZKl1IlTqFfq//NkKLSEbaxC0Fv15GE8jdWPTaZPMY5KixIaBj9OQiiP8/bfS caLGabE5YhlN4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:23 2025 by rpki-client