This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json) Hash identifier: bXOg5DjVKrAtOYDzXIZs1XpA77TE+3v3TnGTuSzdqV8= Subject key identifier: 04:64:54:D4:AD:85:3B:B4:EF:86:39:BB:42:33:E8:F1:35:1F:2D:1B Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d Certificate serial: 019AF38918DE2A44C25DCB3FD10CB86D8BC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft Manifest number: 06BD Signing time: Sat 06 Dec 2025 12:00:39 +0000 Manifest this update: Sat 06 Dec 2025 12:00:39 +0000 Manifest next update: Sun 07 Dec 2025 12:00:39 +0000 Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=) 2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=) 3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: SN1sXa1zQxaM7TebJjUcG2qUfABqqdW1FbGR6degskU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:18:de:2a:44:c2:5d:cb:3f:d1:0c:b8:6d:8b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d Validity Not Before: Dec 6 12:00:39 2025 GMT Not After : Dec 7 12:00:39 2025 GMT Subject: CN=046454d4ad853bb4ef8639bb4233e8f1351f2d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:60:23:15:ea:bd:cb:5a:ab:17:d8:92:a8: c6:ee:5f:bf:05:d0:1a:3a:bd:9d:a0:c4:44:a9:ad: a2:c9:a6:6f:ca:4f:7e:8e:92:6b:c1:0b:c8:08:9f: a6:be:60:10:4f:c4:92:bd:05:92:8f:98:c1:5c:78: 11:0a:de:9b:ea:ba:09:96:9b:3a:cf:ca:ba:c3:95: 27:d1:f1:82:04:88:a9:f3:9d:e2:97:d1:1b:06:af: 37:d6:2e:85:7d:72:75:eb:a0:cb:d6:e9:32:0b:5b: fb:06:73:bb:b4:93:3b:85:02:29:da:e7:3a:16:a5: 12:d6:4f:67:ba:8b:e8:e3:4c:3f:18:d1:ae:0a:bc: 6f:4a:f2:9d:32:2d:12:fc:b1:9e:45:76:60:0e:ea: ff:0e:0b:b7:b6:a4:5a:ee:1d:90:49:fc:b1:70:03: 0c:96:12:e4:1c:41:e2:6d:9d:8d:68:ec:cb:96:8b: f5:00:9e:1e:f9:66:6d:cb:4e:34:07:39:df:6e:c6: 56:bd:84:1e:f4:62:ff:b5:8f:73:ce:b7:db:1f:7a: d9:b2:ce:a3:46:eb:37:70:bb:ff:27:9c:ce:90:82: 23:e1:1a:3b:2d:83:ae:2f:93:e3:1b:d4:b6:5a:17: de:6e:c7:c9:1f:20:cf:5c:aa:f4:87:f9:26:5d:f5: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:64:54:D4:AD:85:3B:B4:EF:86:39:BB:42:33:E8:F1:35:1F:2D:1B X509v3 Authority Key Identifier: keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e9:3d:1c:18:44:07:73:c9:b6:17:55:d5:e5:63:aa:3b:3f: 75:88:ce:2e:ac:b2:f3:ee:65:55:25:c4:5e:72:9c:df:25:b5: d1:4c:42:3a:ab:39:25:26:de:79:06:78:40:18:d7:58:f9:fe: 00:a1:69:2a:c1:5e:96:d2:79:e6:10:42:9a:a1:2e:4d:0a:ad: cc:0c:6a:2d:3e:c3:9a:04:a3:b9:34:44:76:53:05:a8:11:41: 9b:36:60:a6:01:07:e0:e6:ff:9b:e6:f4:8f:5d:7b:4f:ea:7f: 04:a2:0e:e0:90:b7:79:8f:7f:f6:f0:1a:b1:77:a6:4f:2f:78: db:6a:d9:47:05:4e:8a:c9:85:59:99:8e:d5:70:b6:38:dd:9e: fd:74:a5:73:a4:11:a1:97:ad:d0:d7:dd:41:40:50:09:da:dd: 6c:14:3a:e4:6f:82:01:54:18:2b:d5:44:bc:74:07:69:25:03: 32:1f:c4:1a:96:ce:2e:6f:97:50:c3:6e:9f:f4:3a:d9:9a:1d: 3d:d1:44:4b:be:d3:86:cf:82:cc:8a:34:c6:36:a6:62:d5:6c: aa:f3:d0:e8:54:9f:71:e9:ee:88:a9:52:6f:0c:18:32:f0:c9: ff:d0:ee:37:2b:61:d2:93:a6:c1:58:2f:61:e3:c0:72:4d:39: a0:b5:c2:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRjeKkTCXcs/0Qy4bYvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDkwODlhOGUzMjhkMzJkNmRlMTZkN2RhMjU3YjgxMWIw NTIzOWQwHhcNMjUxMjA2MTIwMDM5WhcNMjUxMjA3MTIwMDM5WjAzMTEwLwYDVQQD EygwNDY0NTRkNGFkODUzYmI0ZWY4NjM5YmI0MjMzZThmMTM1MWYyZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdRgIxXqvctaqxfYkqjG7l+/BdAa Or2doMREqa2iyaZvyk9+jpJrwQvICJ+mvmAQT8SSvQWSj5jBXHgRCt6b6roJlps6 z8q6w5Un0fGCBIip853il9EbBq831i6FfXJ166DL1ukyC1v7BnO7tJM7hQIp2uc6 FqUS1k9nuovo40w/GNGuCrxvSvKdMi0S/LGeRXZgDur/Dgu3tqRa7h2QSfyxcAMM lhLkHEHibZ2NaOzLlov1AJ4e+WZty040BznfbsZWvYQe9GL/tY9zzrfbH3rZss6j Rus3cLv/J5zOkIIj4Ro7LYOuL5PjG9S2WhfebsfJHyDPXKr0h/kmXfXkpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARkVNSthTu074Y5u0Iz6PE1Hy0bMB8GA1UdIwQY MBaAFJLZCJqOMo0y1t4W19ole4EbBSOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2It ZGYzYzA3ZjM0MTFlLzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2ItZGYzYzA3ZjM0MTFl LzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduk9HBhE B3PJthdV1eVjqjs/dYjOLqyy8+5lVSXEXnKc3yW10UxCOqs5JSbeeQZ4QBjXWPn+ AKFpKsFeltJ55hBCmqEuTQqtzAxqLT7DmgSjuTREdlMFqBFBmzZgpgEH4Ob/m+b0 j117T+p/BKIO4JC3eY9/9vAasXemTy9422rZRwVOismFWZmO1XC2ON2e/XSlc6QR oZet0NfdQUBQCdrdbBQ65G+CAVQYK9VEvHQHaSUDMh/EGpbOLm+XUMNun/Q62Zod PdFES77Ths+CzIo0xjamYtVsqvPQ6FSfcenuiKlSbwwYMvDJ/9DuNyth0pOmwVgv YePAck05oLXCRw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:42 2025 by rpki-client