This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json) Hash identifier: m5TBA+1m9xNaIhhHlS8+IGYtqQAx+15lY7EO4YRm6JU= Subject key identifier: F6:8E:52:D4:60:A9:33:29:A4:BB:D1:E8:4A:F6:83:2D:EB:3D:36:77 Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0 Certificate serial: 019AF50ACE0E8CCB06BBCA29147B839DE7F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:01:57 +0000 Manifest this update: Sat 06 Dec 2025 19:01:57 +0000 Manifest next update: Sun 07 Dec 2025 19:01:57 +0000 Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=) 2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: yf6aQ5bYYCDzxKqCdSwRaIVJQ7nSbOe9k06o1sEC8Hw=) 3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:ce:0e:8c:cb:06:bb:ca:29:14:7b:83:9d:e7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0 Validity Not Before: Dec 6 19:01:57 2025 GMT Not After : Dec 7 19:01:57 2025 GMT Subject: CN=f68e52d460a93329a4bbd1e84af6832deb3d3677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4d:cd:bd:b5:1c:05:30:c6:98:49:bd:b4:e4: 27:76:69:bf:3d:f6:7f:8c:fa:7e:de:29:c1:90:ce: ea:61:58:c2:2e:79:70:3b:5a:53:02:5a:53:32:80: 3a:bc:e9:a9:db:af:81:bf:8b:17:4a:42:59:bd:94: 77:ab:ad:5e:59:53:43:10:62:28:3f:10:b8:ee:9f: a3:d2:f1:95:21:d4:82:de:3d:6e:61:4b:67:f8:9a: eb:fd:1b:c2:af:20:8a:a3:d9:67:77:7e:7c:ad:ad: c8:b7:c2:ee:8e:47:b6:b6:ab:4b:e0:86:4d:eb:a2: 7a:06:e6:f3:a4:84:fc:84:2b:fd:a8:e7:c2:ef:48: ee:7f:b5:db:f9:c0:c9:0b:da:17:d6:c1:0b:ff:c0: fe:5f:59:3f:75:08:d9:a0:95:52:4f:c5:b7:9d:30: 41:94:64:30:1e:46:3f:d2:de:e4:dd:ae:e1:1b:3f: 32:57:2b:e4:7d:e8:36:e1:87:52:ad:64:4a:74:fd: 10:1b:fe:03:8a:ca:14:e9:5b:ae:57:fb:05:b8:5e: b9:4d:04:90:88:33:19:30:0d:5a:67:65:55:80:ea: e3:c9:f0:e8:3a:fb:9f:7c:87:7a:9e:cd:b1:ff:62: f3:2c:0e:19:17:98:08:25:5b:2b:bc:a0:a3:83:b3: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8E:52:D4:60:A9:33:29:A4:BB:D1:E8:4A:F6:83:2D:EB:3D:36:77 X509v3 Authority Key Identifier: keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:dd:88:1f:6c:d9:21:93:cc:e3:73:94:3c:48:2b:67:6d:bb: 44:9a:5f:51:8b:8c:43:fe:ec:2c:e7:bf:10:5b:46:26:de:7c: 1e:b3:7b:c9:df:43:79:3a:1d:d3:a6:04:17:66:27:3c:6e:7f: 03:4b:1a:fe:3e:ee:2b:cf:9a:8f:69:65:f8:15:b6:10:9b:82: 6f:c6:66:99:28:fa:76:8d:ea:70:92:c3:89:87:77:e5:fa:22: 86:ce:3e:a3:4c:41:4d:21:29:7e:63:87:77:2b:fe:79:6d:72: fc:45:89:6e:4b:87:07:9b:04:11:6f:28:e1:d8:72:67:af:1f: 7a:41:16:e4:d0:93:57:ff:43:fb:a7:e3:4d:ec:ef:eb:ef:9b: 1f:24:16:8c:1d:82:92:3b:77:06:25:c3:56:b0:15:ba:2e:5f: e2:fc:77:da:af:f8:2f:00:6b:c7:6e:67:cc:2b:7a:39:46:a3: 38:92:8d:a1:1f:bf:6d:38:09:39:9e:bd:a3:67:10:0a:82:d0: 56:9e:18:06:7b:f8:ec:cb:6b:4c:9f:ab:ca:72:38:d1:2a:ef: d7:33:d2:62:ea:2c:72:6f:72:f0:ee:68:f8:31:8c:2e:86:d6: 38:cb:21:35:c9:01:a3:38:cf:cd:30:8b:e0:43:26:2e:36:64: 16:3d:95:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cs4OjMsGu8opFHuDnefyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMmUzMzBiNTg3OTU5MGFiYWU4MWJmNDBhOTFhNTEwMWJj MThmYTAwHhcNMjUxMjA2MTkwMTU3WhcNMjUxMjA3MTkwMTU3WjAzMTEwLwYDVQQD EyhmNjhlNTJkNDYwYTkzMzI5YTRiYmQxZTg0YWY2ODMyZGViM2QzNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+E3NvbUcBTDGmEm9tOQndmm/PfZ/ jPp+3inBkM7qYVjCLnlwO1pTAlpTMoA6vOmp26+Bv4sXSkJZvZR3q61eWVNDEGIo PxC47p+j0vGVIdSC3j1uYUtn+Jrr/RvCryCKo9lnd358ra3It8Lujke2tqtL4IZN 66J6BubzpIT8hCv9qOfC70juf7Xb+cDJC9oX1sEL/8D+X1k/dQjZoJVST8W3nTBB lGQwHkY/0t7k3a7hGz8yVyvkfeg24YdSrWRKdP0QG/4DisoU6VuuV/sFuF65TQSQ iDMZMA1aZ2VVgOrjyfDoOvuffId6ns2x/2LzLA4ZF5gIJVsrvKCjg7OCYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaOUtRgqTMppLvR6Er2gy3rPTZ3MB8GA1UdIwQY MBaAFJIuMwtYeVkKuugb9AqRpRAbwY+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgt NTY4NjcyYzI1Y2E4LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgtNTY4NjcyYzI1Y2E4 LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATN2IH2zZ IZPM43OUPEgrZ227RJpfUYuMQ/7sLOe/EFtGJt58HrN7yd9DeTod06YEF2YnPG5/ A0sa/j7uK8+aj2ll+BW2EJuCb8ZmmSj6do3qcJLDiYd35foihs4+o0xBTSEpfmOH dyv+eW1y/EWJbkuHB5sEEW8o4dhyZ68fekEW5NCTV/9D+6fjTezv6++bHyQWjB2C kjt3BiXDVrAVui5f4vx32q/4LwBrx25nzCt6OUajOJKNoR+/bTgJOZ69o2cQCoLQ Vp4YBnv47MtrTJ+rynI40Srv1zPSYuoscm9y8O5o+DGMLobWOMshNckBozjPzTCL 4EMmLjZkFj2V+A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:47 2025 by rpki-client