This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json) Hash identifier: 5ipq9pmh3w9gdpc/pzT979byCENJxYRa8sq+YuWdCto= Subject key identifier: 79:B0:48:31:12:E0:7B:9A:89:CB:AC:90:55:6B:BE:84:BE:3C:74:19 Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Certificate serial: 019AF388FEC6F626A08BFC20E7C299415266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft Manifest number: 0B56 Signing time: Sat 06 Dec 2025 12:00:32 +0000 Manifest this update: Sat 06 Dec 2025 12:00:32 +0000 Manifest next update: Sun 07 Dec 2025 12:00:32 +0000 Files and hashes: 1: REM4mLJG7EnsBgBtsv162D0wKhg.roa (hash: lvlcTJIeXHpqeTqGfZTwiMwS8+bWAY5YDqELcR5epC0=) 2: Tkqht9ZvM7aeuWPx5RB29sIJQsY.roa (hash: GjW60rpkATBwTZcA2wdYPAVMSlJOCTBR0jsl1OrgYgE=) 3: XddNSlbeSdL2BDOBSBtXKwmbrLQ.roa (hash: YTwv2DMMu/UpDiaZkqxeVtYaDul2+Oka8KEh6z36NkA=) 4: b10-uyzSDsE84X1NxkfqXsdCqjM.roa (hash: 656/1JM/Gtv27/XvapYOtDJ81ebQFKIEF9n9ARvTwoo=) 5: bXzPu6L2HXchD9ZujQmLXPM_bDM.roa (hash: KqR406WMI/nRws1aNrGcGP+z2vKLl1H8bxnYaFt2+LA=) 6: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: ubeHmCqo8BsWhffgTmK3ZTyr+BNTxafdxeJddY95c8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:fe:c6:f6:26:a0:8b:fc:20:e7:c2:99:41:52:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd Validity Not Before: Dec 6 12:00:32 2025 GMT Not After : Dec 7 12:00:32 2025 GMT Subject: CN=79b0483112e07b9a89cbac90556bbe84be3c7419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:3a:8c:10:3f:06:9a:9b:97:ea:14:40:ea: 23:14:6c:bb:2a:49:df:09:02:56:ee:39:3e:f8:91: e8:8d:19:a7:cf:e9:a5:d4:22:94:d6:05:d7:3b:eb: e5:e0:2b:0d:96:35:8b:e2:d5:4e:5a:fe:5c:31:fa: d9:bb:ef:9c:33:c1:f5:94:99:57:7f:fc:ac:e8:ca: fb:77:7f:2b:9b:e2:48:de:50:15:7b:6a:31:87:45: 8a:d4:40:f3:05:dd:42:db:ab:df:a6:36:b2:a2:ec: ef:b7:88:b6:f1:b7:22:22:b0:80:45:8c:bd:8f:7a: 28:f7:b3:af:f3:b7:16:51:cb:c3:e6:50:43:61:8a: a7:28:b4:aa:46:d2:30:03:e3:fe:03:89:7f:6a:52: 5c:ce:db:ca:bd:f5:d0:78:03:7a:fe:48:d5:b8:4e: 8a:75:48:93:02:92:ad:93:4e:ce:02:5d:0a:3f:59: ee:5b:fd:06:56:9f:91:de:8b:c8:bd:79:3f:02:32: f3:7e:d3:38:9d:09:2f:5c:64:2c:de:82:86:2c:d3: ef:ff:34:1d:a2:63:58:10:f1:69:2d:88:8e:cb:79: 5f:f5:72:3b:e9:77:50:12:de:31:d8:f8:09:96:91: f0:a5:60:a9:6f:60:d6:bf:f4:d5:91:17:ad:a7:47: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B0:48:31:12:E0:7B:9A:89:CB:AC:90:55:6B:BE:84:BE:3C:74:19 X509v3 Authority Key Identifier: keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:15:77:23:86:cb:ba:5c:66:ee:2c:c3:f4:ea:85:26:3e:b0: d8:64:0c:67:a2:a2:2f:ef:31:d2:63:b2:3e:9e:66:a2:d6:f0: 77:3a:8d:4d:06:3a:c0:7a:cd:a3:63:b5:2f:f3:da:33:ad:57: 07:ce:3e:f8:4b:35:b0:3c:92:71:c9:76:19:69:52:f1:44:1a: b3:0e:60:ca:aa:e7:61:c9:7f:cc:b0:d2:0b:ba:13:d8:59:dd: 3e:0b:f1:f4:09:b8:92:7c:f1:ce:75:e8:9b:67:a0:95:22:be: 5d:1e:23:ff:3c:d2:79:56:37:52:b8:ee:bc:89:f2:6c:5a:35: 7e:64:05:9c:30:8f:65:9f:bb:9d:9b:32:d1:92:81:1e:90:86: a1:20:df:e7:01:51:5a:2e:9c:5b:fe:0b:09:7c:1d:99:5b:7b: 9f:c2:ca:62:64:16:f7:23:66:cc:18:4d:51:87:72:23:05:36: 5a:5f:d7:cf:9e:37:c0:1c:fa:c5:ab:a1:67:bb:52:98:b1:f4: 64:6d:da:73:85:16:1e:05:86:ae:08:eb:f7:2b:43:01:8f:86: 59:89:4f:d3:18:f9:db:67:df:5c:28:61:df:44:be:70:35:31: 6e:f1:9a:36:37:ac:14:af:45:56:33:89:fd:ba:09:38:d4:69: 09:ed:0f:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziP7G9iagi/wg58KZQVJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzgxYmM5NjlkZTZhZGMzZDFkZGMwZWI4OWJkZWVhY2U5 ODA1Y2QwHhcNMjUxMjA2MTIwMDMyWhcNMjUxMjA3MTIwMDMyWjAzMTEwLwYDVQQD Eyg3OWIwNDgzMTEyZTA3YjlhODljYmFjOTA1NTZiYmU4NGJlM2M3NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27c6jBA/Bpqbl+oUQOojFGy7Kknf CQJW7jk++JHojRmnz+ml1CKU1gXXO+vl4CsNljWL4tVOWv5cMfrZu++cM8H1lJlX f/ys6Mr7d38rm+JI3lAVe2oxh0WK1EDzBd1C26vfpjayouzvt4i28bciIrCARYy9 j3oo97Ov87cWUcvD5lBDYYqnKLSqRtIwA+P+A4l/alJcztvKvfXQeAN6/kjVuE6K dUiTApKtk07OAl0KP1nuW/0GVp+R3ovIvXk/AjLzftM4nQkvXGQs3oKGLNPv/zQd omNYEPFpLYiOy3lf9XI76XdQEt4x2PgJlpHwpWCpb2DWv/TVkRetp0ebyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmwSDES4HuaicuskFVrvoS+PHQZMB8GA1UdIwQY MBaAFJE4G8lp3mrcPR3cDrib3urOmAXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMt MjU2ZGE5NWQxMzQ1LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMtMjU2ZGE5NWQxMzQ1 LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRV3I4bL ulxm7izD9OqFJj6w2GQMZ6KiL+8x0mOyPp5motbwdzqNTQY6wHrNo2O1L/PaM61X B84++Es1sDySccl2GWlS8UQasw5gyqrnYcl/zLDSC7oT2FndPgvx9Am4knzxznXo m2eglSK+XR4j/zzSeVY3UrjuvInybFo1fmQFnDCPZZ+7nZsy0ZKBHpCGoSDf5wFR Wi6cW/4LCXwdmVt7n8LKYmQW9yNmzBhNUYdyIwU2Wl/Xz543wBz6xauhZ7tSmLH0 ZG3ac4UWHgWGrgjr9ytDAY+GWYlP0xj522ffXChh30S+cDUxbvGaNjesFK9FVjOJ /boJONRpCe0PQg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:37 2025 by rpki-client