This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json) Hash identifier: U+xWsTE8TqzmiDEQkjvhJ/WmjWypd+Z86yEJ5R/5+1s= Subject key identifier: DC:8C:1F:56:97:CD:75:FC:12:47:45:D1:02:E8:54:16:BE:4A:ED:58 Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Certificate serial: 019AF2093B0C8DF0D74B1653314F28CAA79F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa (hash: 1y3tSjFaZERbPwiKrhlP5/eJ5GlotVuhhvMAWtoaIrk=) 2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: tYrzf09/pM8NEGfHyIvLO/0TrTAddc5hqGR+TorRekQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3b:0c:8d:f0:d7:4b:16:53:31:4f:28:ca:a7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=dc8c1f5697cd75fc124745d102e85416be4aed58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1c:4e:fc:01:3f:c7:b4:86:6a:3c:05:98:5a: 2a:42:b2:c0:91:5d:99:c0:9c:4e:88:b7:b2:11:68: 44:5c:e8:e2:55:5a:02:d4:0e:4d:0f:bc:1d:1c:48: c7:2d:b5:77:2e:b1:15:1f:3c:28:76:0f:3d:30:7d: 00:0e:05:a8:e7:21:dd:62:8f:1c:1f:fc:cc:47:6b: f6:46:b4:27:9b:ef:a5:55:0f:d6:24:df:d5:c6:79: 66:6e:eb:67:75:60:d3:db:29:e5:23:d6:ef:a3:a4: 38:31:5f:4a:5b:58:00:6c:e2:d0:fa:40:3b:ef:fd: 5c:bc:1a:4f:1f:ab:c0:63:e8:be:bd:b5:fa:80:11: bf:7c:f9:be:73:8d:01:6f:bd:88:64:d5:3d:f3:09: c0:b1:a0:b4:db:b6:8b:d0:2b:98:1a:80:0a:84:61: 10:87:ca:47:1e:b1:9c:c3:c5:df:c8:38:4a:e6:fc: c7:f3:24:c1:26:75:d1:e0:28:54:68:59:88:d4:77: 2e:c8:33:99:ad:c7:03:80:f6:25:90:f5:c3:e8:75: a4:96:5b:89:40:ec:31:9f:f5:3b:7a:86:1c:24:d6: 8c:04:e8:fa:4e:6b:97:d9:9b:a6:1f:e5:d5:92:e8: 4b:55:5f:4e:60:42:fd:c8:58:95:82:b3:72:64:d0: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8C:1F:56:97:CD:75:FC:12:47:45:D1:02:E8:54:16:BE:4A:ED:58 X509v3 Authority Key Identifier: keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:29:c3:47:25:5f:78:e2:73:30:83:72:73:97:85:ee:26:3a: 29:b9:a3:a4:8f:6c:50:9e:a7:79:d9:6c:83:32:98:8e:19:d3: 07:d7:81:ef:20:50:43:ea:5c:0c:42:91:17:ba:f2:0d:a1:35: 3a:34:f6:80:06:08:e9:7e:90:84:21:a7:40:b0:a0:12:7b:6d: 3f:10:5a:5a:05:5f:38:36:05:3e:ce:84:de:a3:4e:f0:37:09: 4c:b2:82:ad:e6:1e:c1:e0:63:4e:66:4e:5b:cf:94:0d:6e:f3: ee:be:f3:8c:d0:ef:ce:f8:20:45:f2:b0:64:a4:52:fa:c5:69: ec:8a:68:c0:ae:16:81:7c:82:cf:b6:e0:e3:b7:2e:a9:d4:6a: 62:29:33:e9:5a:a3:58:9f:e0:9e:1c:76:78:93:97:28:8c:44: c5:cd:37:43:b5:e7:3d:3e:ee:1d:e6:94:31:39:73:6a:e9:47: 37:f9:82:31:9c:45:aa:d2:67:12:d1:a0:1d:73:2f:67:24:b0: 04:b0:b9:86:49:af:5b:de:50:aa:be:b8:e0:75:bb:09:dd:c4: 2b:17:1b:74:07:11:7f:d3:eb:b0:8c:24:32:96:c3:80:e8:d0: 7c:e1:91:d5:1f:17:e5:70:20:5e:41:7b:db:d2:0b:ad:eb:04: f0:a5:49:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTsMjfDXSxZTMU8oyqefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMWRhMGM3YTk5NDA1YzQ2YmFhZDg0Y2I5ZDkzZTgzNDU5 OWM4ZTEwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EyhkYzhjMWY1Njk3Y2Q3NWZjMTI0NzQ1ZDEwMmU4NTQxNmJlNGFlZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxxO/AE/x7SGajwFmFoqQrLAkV2Z wJxOiLeyEWhEXOjiVVoC1A5ND7wdHEjHLbV3LrEVHzwodg89MH0ADgWo5yHdYo8c H/zMR2v2RrQnm++lVQ/WJN/VxnlmbutndWDT2ynlI9bvo6Q4MV9KW1gAbOLQ+kA7 7/1cvBpPH6vAY+i+vbX6gBG/fPm+c40Bb72IZNU98wnAsaC027aL0CuYGoAKhGEQ h8pHHrGcw8XfyDhK5vzH8yTBJnXR4ChUaFmI1HcuyDOZrccDgPYlkPXD6HWklluJ QOwxn/U7eoYcJNaMBOj6TmuX2ZumH+XVkuhLVV9OYEL9yFiVgrNyZNDSIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyMH1aXzXX8EkdF0QLoVBa+Su1YMB8GA1UdIwQY MBaAFJEdoMeplAXEa6rYTLnZPoNFmcjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQt NDcyZjAyNDUwZWMzLzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8yYzdhYzMtZWVkZi00NTViLTllOTQtNDcyZjAyNDUwZWMz LzEva1IyZ3g2bVVCY1JycXRoTXVkay1nMFdaeU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCnDRyVf eOJzMINyc5eF7iY6KbmjpI9sUJ6nedlsgzKYjhnTB9eB7yBQQ+pcDEKRF7ryDaE1 OjT2gAYI6X6QhCGnQLCgEnttPxBaWgVfODYFPs6E3qNO8DcJTLKCreYeweBjTmZO W8+UDW7z7r7zjNDvzvggRfKwZKRS+sVp7IpowK4WgXyCz7bg47cuqdRqYikz6Vqj WJ/gnhx2eJOXKIxExc03Q7XnPT7uHeaUMTlzaulHN/mCMZxFqtJnEtGgHXMvZySw BLC5hkmvW95Qqr644HW7Cd3EKxcbdAcRf9PrsIwkMpbDgOjQfOGR1R8X5XAgXkF7 29ILresE8KVJfw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:25 2025 by rpki-client