This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json) Hash identifier: 3nDjAKsuIwjvy6YoWd7+AwA4Lhyy3d/qLAly2xNyUAg= Subject key identifier: 80:B4:17:17:8D:81:D6:81:58:BE:45:CB:54:6F:CB:A3:65:D1:3E:47 Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9 Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9 Certificate serial: 019AF19B919DC676AB214A256975EA71FC9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft Manifest number: 0CD2 Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=) 2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: 9Uu+z5KVShRr/xj3KUx2Y3DcTpLC4g7a5dwr5hF36BE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:91:9d:c6:76:ab:21:4a:25:69:75:ea:71:fc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9 Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=80b417178d81d68158be45cb546fcba365d13e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:52:95:17:24:56:89:f9:fe:de:15:2e:fa:68: f2:98:a8:37:d1:cc:47:4f:4b:26:17:76:e5:f0:87: 46:2c:ff:ec:1b:9f:94:3a:37:80:f8:24:85:9b:bf: aa:39:57:6f:6f:fc:55:0a:6f:cc:10:eb:d5:1b:e8: 72:86:13:0b:6d:c2:32:e0:15:e7:5c:3a:5b:9b:d5: ad:85:5f:2a:d3:98:33:e2:8f:fe:7d:cd:a0:87:d1: fa:d9:93:0c:fc:d7:07:7c:06:b6:b6:c2:e8:89:23: dc:8a:bf:27:03:cf:23:e7:97:0f:8b:7b:3c:03:23: 74:56:6f:c4:bd:4f:b0:f7:fb:52:e8:fb:4f:e9:74: 8b:73:0a:ef:3e:68:ff:dc:3c:0e:32:06:05:9c:d4: e8:ed:b9:0e:74:e0:18:0f:89:95:4c:a5:af:c1:fc: 1a:a5:f1:23:d0:6f:9d:fc:64:b8:3e:ea:c5:5e:6d: 3b:5f:13:35:cc:e6:e9:02:53:f9:15:48:cf:a4:09: 39:75:1c:fc:a7:65:d7:bb:67:8e:df:79:ab:6a:c0: d1:09:bb:23:48:0d:6c:aa:55:be:09:a8:16:e2:48: ad:f8:04:55:60:49:3b:52:ed:31:1c:66:b9:6a:e1: cd:71:24:b8:49:c3:6f:5c:80:e4:06:8c:30:8f:80: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B4:17:17:8D:81:D6:81:58:BE:45:CB:54:6F:CB:A3:65:D1:3E:47 X509v3 Authority Key Identifier: keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2e:0f:90:4a:5a:5c:98:ba:80:b4:c5:8d:5f:5c:e7:f0:6f: 73:21:d7:fc:f0:a8:bf:b2:8c:99:94:35:1e:09:39:c4:ee:28: 8b:1f:48:3a:36:19:02:dc:d6:02:b7:0e:d1:a8:42:65:bc:4b: ca:e7:74:d5:18:1d:c2:44:d2:72:72:64:4d:90:0f:9b:ad:03: 98:a1:5d:06:91:a9:d5:dd:96:1d:96:53:9b:ca:41:dc:9d:59: a8:d7:ec:32:5b:19:c3:92:76:16:83:ec:b9:8d:a2:80:96:2f: 68:09:67:ed:3b:c6:d4:57:0a:b9:aa:ae:45:b3:0f:eb:54:0b: 82:b8:f9:61:6e:27:24:70:1d:e3:f2:6d:0c:c3:ee:c3:5b:a3: fc:11:58:b8:47:27:98:96:63:ed:d2:13:5a:d1:d5:19:ba:95: 4b:75:63:33:18:34:f7:35:1b:6c:13:44:f7:64:8e:e1:ca:b9: ac:09:78:d5:3e:7c:69:8d:f2:40:57:a8:93:2b:03:a6:16:1e: 5b:64:a0:8e:e8:12:e9:02:27:0a:90:b3:a4:30:58:5e:e1:ab: 8c:1d:61:7b:0f:e6:ab:59:64:dc:b1:b0:98:e1:77:c7:24:55: 58:1e:63:2c:7e:b0:5f:27:f0:bb:8f:4f:b8:f9:78:5e:a5:41: 97:42:6d:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5GdxnarIUolaXXqcfyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwY2JhYTZiMzZlNmNkNjg3NGM3OGVkNDVhNGY4ZGQ3MTcz MDMxZDkwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD Eyg4MGI0MTcxNzhkODFkNjgxNThiZTQ1Y2I1NDZmY2JhMzY1ZDEzZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FKVFyRWifn+3hUu+mjymKg30cxH T0smF3bl8IdGLP/sG5+UOjeA+CSFm7+qOVdvb/xVCm/MEOvVG+hyhhMLbcIy4BXn XDpbm9WthV8q05gz4o/+fc2gh9H62ZMM/NcHfAa2tsLoiSPcir8nA88j55cPi3s8 AyN0Vm/EvU+w9/tS6PtP6XSLcwrvPmj/3DwOMgYFnNTo7bkOdOAYD4mVTKWvwfwa pfEj0G+d/GS4PurFXm07XxM1zObpAlP5FUjPpAk5dRz8p2XXu2eO33mrasDRCbsj SA1sqlW+CagW4kit+ARVYEk7Uu0xHGa5auHNcSS4ScNvXIDkBowwj4BLiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC0FxeNgdaBWL5Fy1Rvy6Nl0T5HMB8GA1UdIwQY MBaAFJDLqms25s1odMeO1FpPjdcXMDHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5Njgt YjZkNGM0ZmMwYzIxLzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5NjgtYjZkNGM0ZmMwYzIx LzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAai4PkEpa XJi6gLTFjV9c5/BvcyHX/PCov7KMmZQ1Hgk5xO4oix9IOjYZAtzWArcO0ahCZbxL yud01RgdwkTScnJkTZAPm60DmKFdBpGp1d2WHZZTm8pB3J1ZqNfsMlsZw5J2FoPs uY2igJYvaAln7TvG1FcKuaquRbMP61QLgrj5YW4nJHAd4/JtDMPuw1uj/BFYuEcn mJZj7dITWtHVGbqVS3VjMxg09zUbbBNE92SO4cq5rAl41T58aY3yQFeokysDphYe W2SgjugS6QInCpCzpDBYXuGrjB1hew/mq1lk3LGwmOF3xyRVWB5jLH6wXyfwu49P uPl4XqVBl0Jtlg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:45 2025 by rpki-client