This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft File: klA6rxJq980DHKw84eOYwXS4LgI.mft (raw, json) Hash identifier: F5LBPxWJ8jNIW/RbMFleUEKo2K4agS3wrOh8Ml+pjaU= Subject key identifier: F7:4F:69:9C:E6:E8:77:90:A8:88:88:81:0E:93:1F:DE:80:FF:78:8B Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02 Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02 Certificate serial: 019AF0BF51CA9E086349BD507B8532EE7CF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft Manifest number: 0EC4 Signing time: Fri 05 Dec 2025 23:01:01 +0000 Manifest this update: Fri 05 Dec 2025 23:01:01 +0000 Manifest next update: Sat 06 Dec 2025 23:01:01 +0000 Files and hashes: 1: LyKlqkZe1vL0FqTF3iiSvFK7hTQ.roa (hash: 2Vj99SsHB7IFNM1FIg40rxpKy12rqtdylkU9a0vtpMc=) 2: klA6rxJq980DHKw84eOYwXS4LgI.crl (hash: XsIrfcWluKQ//woFQFZP7Bt9AiRfPHxHhBOU5njufXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:51:ca:9e:08:63:49:bd:50:7b:85:32:ee:7c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02 Validity Not Before: Dec 5 23:01:01 2025 GMT Not After : Dec 6 23:01:01 2025 GMT Subject: CN=f74f699ce6e87790a88888810e931fde80ff788b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:d6:dc:3a:16:bf:27:78:9f:d1:fa:aa:7e: c8:20:37:70:6b:db:79:ff:d8:77:37:3f:10:f9:85: 84:08:0c:46:7f:23:04:91:c3:df:02:c7:eb:ca:af: d0:14:ca:79:39:c9:47:bb:f9:fd:d0:a5:0e:41:76: 4e:2b:1c:8e:7e:df:65:11:53:e0:44:d0:79:ff:64: 29:05:bf:e1:a7:a2:b5:6c:21:3a:01:2f:c5:40:fd: b2:4d:ce:c7:77:29:47:97:eb:fb:46:e7:3e:dd:13: 2e:d5:c7:0a:00:de:47:6e:97:1a:69:85:2d:61:93: 72:23:37:4f:f6:48:55:1e:17:2c:27:55:fb:02:d3: 91:04:9f:d9:98:b7:3e:82:b1:7e:65:59:65:a7:a7: 86:2e:b3:74:95:9e:fd:c4:4d:5d:3a:f9:8a:c0:3e: a8:d9:99:33:1e:95:5f:ae:39:b8:36:06:31:e2:bc: b2:87:07:02:24:5a:16:4a:9c:03:60:87:6b:fe:87: 57:a9:63:5a:c0:cc:e9:c9:40:6f:ac:95:7a:1d:ff: 5b:1f:e7:71:57:56:24:7a:64:80:04:a7:38:e7:3b: 92:3a:84:a4:45:29:39:92:2f:62:a3:52:47:f2:38: 79:9f:37:fb:a8:a3:1f:04:37:ec:ee:f3:23:7b:5d: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4F:69:9C:E6:E8:77:90:A8:88:88:81:0E:93:1F:DE:80:FF:78:8B X509v3 Authority Key Identifier: keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:64:d6:a4:49:10:94:8e:f1:5d:bf:70:67:f4:39:6f:fc:09: e7:50:bf:d0:bb:33:00:62:01:f4:c0:a5:aa:e1:e1:83:37:f0: ae:bd:a8:11:32:8a:3f:63:09:90:a3:50:0a:3d:d4:50:7f:9e: 92:c9:8e:6f:53:ed:03:ce:89:b9:10:63:5e:c0:d5:2f:4c:0a: b7:7c:71:e4:74:c7:6f:62:53:95:30:09:5c:8a:74:73:db:e1: 98:7f:71:71:2b:e9:52:5e:92:1e:e9:07:46:a4:0d:03:f9:8f: 99:0f:03:b0:79:50:1a:62:9c:95:af:d8:1d:28:83:ff:1e:6e: f0:1c:bc:14:dd:cc:dd:b3:99:3f:50:74:aa:18:7c:39:ca:18: 26:5d:5a:41:51:2f:25:39:42:22:a2:91:47:39:97:17:04:c7: 74:8f:8e:06:f3:17:55:e1:60:b6:71:f6:f5:5f:b3:46:26:ac: c4:16:0f:ae:aa:ac:c5:0d:ff:55:a4:17:c3:32:99:35:94:3a: a0:4c:ba:ac:5b:64:25:d1:53:4a:e6:6f:4b:94:3d:33:08:0d: ae:e0:60:7e:c3:c6:50:d5:d5:24:87:56:39:0b:97:70:dc:2e: 88:e9:41:69:a4:67:37:0f:0a:14:1b:97:0d:bb:6f:7e:e5:6d: c8:65:10:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1HKnghjSb1Qe4Uy7nz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTAzYWFmMTI2YWY3Y2QwMzFjYWMzY2UxZTM5OGMxNzRi ODJlMDIwHhcNMjUxMjA1MjMwMTAxWhcNMjUxMjA2MjMwMTAxWjAzMTEwLwYDVQQD EyhmNzRmNjk5Y2U2ZTg3NzkwYTg4ODg4ODEwZTkzMWZkZTgwZmY3ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9rW3DoWvyd4n9H6qn7IIDdwa9t5 /9h3Nz8Q+YWECAxGfyMEkcPfAsfryq/QFMp5OclHu/n90KUOQXZOKxyOft9lEVPg RNB5/2QpBb/hp6K1bCE6AS/FQP2yTc7HdylHl+v7Ruc+3RMu1ccKAN5HbpcaaYUt YZNyIzdP9khVHhcsJ1X7AtORBJ/ZmLc+grF+ZVllp6eGLrN0lZ79xE1dOvmKwD6o 2ZkzHpVfrjm4NgYx4ryyhwcCJFoWSpwDYIdr/odXqWNawMzpyUBvrJV6Hf9bH+dx V1YkemSABKc45zuSOoSkRSk5ki9io1JH8jh5nzf7qKMfBDfs7vMje13W0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdPaZzm6HeQqIiIgQ6TH96A/3iLMB8GA1UdIwQY MBaAFJJQOq8SavfNAxysPOHjmMF0uC4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3Njgt YWZkMTI2OGZkYmZkLzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3NjgtYWZkMTI2OGZkYmZk LzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemTWpEkQ lI7xXb9wZ/Q5b/wJ51C/0LszAGIB9MClquHhgzfwrr2oETKKP2MJkKNQCj3UUH+e ksmOb1PtA86JuRBjXsDVL0wKt3xx5HTHb2JTlTAJXIp0c9vhmH9xcSvpUl6SHukH RqQNA/mPmQ8DsHlQGmKcla/YHSiD/x5u8By8FN3M3bOZP1B0qhh8OcoYJl1aQVEv JTlCIqKRRzmXFwTHdI+OBvMXVeFgtnH29V+zRiasxBYPrqqsxQ3/VaQXwzKZNZQ6 oEy6rFtkJdFTSuZvS5Q9MwgNruBgfsPGUNXVJIdWOQuXcNwuiOlBaaRnNw8KFBuX DbtvfuVtyGUQMg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:44 2025 by rpki-client