This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json) Hash identifier: SixIZrG3Z8L+fApVvJXfVlSHA4T7zZWXZdc6PWauYns= Subject key identifier: F3:DB:FC:B0:59:5D:40:FF:D6:AB:5A:22:68:39:21:2A:31:B0:B8:8D Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94 Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094 Certificate serial: 019AF2AD8B1631E502FF04F1207970B4F1BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft Manifest number: 15A7 Signing time: Sat 06 Dec 2025 08:00:50 +0000 Manifest this update: Sat 06 Dec 2025 08:00:50 +0000 Manifest next update: Sun 07 Dec 2025 08:00:50 +0000 Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: LDsRRb2LnF3ViNb0pOtke4ancLgXITUwuG/z/dS6kIQ=) 2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8b:16:31:e5:02:ff:04:f1:20:79:70:b4:f1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094 Validity Not Before: Dec 6 08:00:50 2025 GMT Not After : Dec 7 08:00:50 2025 GMT Subject: CN=f3dbfcb0595d40ffd6ab5a226839212a31b0b88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:1f:43:55:17:cf:73:a8:b1:78:bb:72:5c: b4:08:99:f0:92:30:39:fc:79:fc:f0:a6:22:89:22: 17:fa:07:d6:a0:bb:35:91:d0:76:43:05:75:40:ab: 80:e6:6d:0f:4c:03:af:c5:ba:c7:69:f0:79:c0:0b: 54:0b:95:e3:ae:d9:43:1f:b2:3f:c8:52:75:4d:04: a2:50:61:0f:b6:5a:dd:06:b8:ba:2f:08:e7:e7:25: 3f:94:51:27:86:79:f5:8e:9c:30:5c:99:5f:ca:fe: 27:fb:63:d4:e4:d9:64:85:dc:f7:98:39:67:39:bb: b4:a0:cc:2f:91:f7:d6:ac:a2:c7:03:28:5e:54:8a: 5a:83:66:06:c5:83:e3:2f:27:c8:be:83:cb:d2:39: 3c:3d:2c:e6:9d:0b:05:ad:4e:d0:8c:80:40:ce:a1: 65:d5:7a:b1:57:7d:82:36:c9:b2:bb:0b:23:12:e5: f5:6b:e3:04:e7:64:d6:80:29:d4:15:16:58:e8:30: 01:e3:f9:eb:94:0f:42:80:1b:b2:fb:47:bb:fa:1c: a5:d4:4d:12:40:5e:91:a3:b3:20:75:58:fd:70:f8: 5e:6e:36:10:35:ef:48:03:6d:21:ae:55:a2:d5:ef: d0:2f:85:e4:aa:ae:d6:61:5c:59:0e:98:ea:33:61: 2a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DB:FC:B0:59:5D:40:FF:D6:AB:5A:22:68:39:21:2A:31:B0:B8:8D X509v3 Authority Key Identifier: keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d0:04:90:b2:49:11:f2:30:d7:6a:89:04:08:89:70:59:cf: 9f:ca:df:59:98:f8:e6:ab:08:6c:53:d2:79:1e:f7:83:c2:fe: 48:0e:77:6b:79:d8:ed:db:9c:a7:de:15:93:89:4e:48:5f:cb: 2a:f6:a6:62:c8:dc:0d:33:c2:e3:fa:a5:42:ed:98:7d:34:1f: c7:71:c4:33:34:1b:de:34:66:e6:6a:70:5f:12:ef:12:c6:c0: 31:c1:6b:5c:f7:d7:94:3b:12:aa:96:6b:bb:7a:3b:d1:7c:a1: fa:a0:94:e6:f5:16:49:57:94:33:bf:c4:6e:bb:4a:95:5f:62: c1:52:f4:43:03:7c:e8:5c:3b:e4:2d:83:49:e1:f5:db:75:1a: 2f:85:37:4e:d1:d9:f5:15:b0:aa:49:be:1a:09:c7:65:e0:28: 0b:8c:86:4c:bd:a6:d3:f7:84:46:32:a1:9b:c5:a2:c9:73:94: 9f:b6:1a:e0:be:e7:8c:b4:e0:a5:41:c2:7e:b5:ae:8a:0d:58: 92:e6:ae:12:97:b9:a6:ba:81:95:14:f0:61:b6:98:72:c1:2a: 05:67:29:62:41:a8:5a:4f:7c:12:39:21:f9:2f:e8:25:61:02: b6:ca:98:35:54:a1:48:e2:ab:fd:37:fc:07:71:f4:46:06:3c: 8d:ea:c5:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYsWMeUC/wTxIHlwtPG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOWI1Nzg4OTYwYmQxNzkwNTY4NDhlYzk1NmZkNjExZDRj ZjgwOTQwHhcNMjUxMjA2MDgwMDUwWhcNMjUxMjA3MDgwMDUwWjAzMTEwLwYDVQQD EyhmM2RiZmNiMDU5NWQ0MGZmZDZhYjVhMjI2ODM5MjEyYTMxYjBiODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoIfQ1UXz3OosXi7cly0CJnwkjA5 /Hn88KYiiSIX+gfWoLs1kdB2QwV1QKuA5m0PTAOvxbrHafB5wAtUC5XjrtlDH7I/ yFJ1TQSiUGEPtlrdBri6Lwjn5yU/lFEnhnn1jpwwXJlfyv4n+2PU5Nlkhdz3mDln Obu0oMwvkffWrKLHAyheVIpag2YGxYPjLyfIvoPL0jk8PSzmnQsFrU7QjIBAzqFl 1XqxV32CNsmyuwsjEuX1a+ME52TWgCnUFRZY6DAB4/nrlA9CgBuy+0e7+hyl1E0S QF6Ro7MgdVj9cPhebjYQNe9IA20hrlWi1e/QL4Xkqq7WYVxZDpjqM2EqMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPb/LBZXUD/1qtaImg5ISoxsLiNMB8GA1UdIwQY MBaAFJCbV4iWC9F5BWhI7JVv1hHUz4CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2Yjct ZGY0YzlmMzRkYzViLzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2YjctZGY0YzlmMzRkYzVi LzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdAEkLJJ EfIw12qJBAiJcFnPn8rfWZj45qsIbFPSeR73g8L+SA53a3nY7ducp94Vk4lOSF/L KvamYsjcDTPC4/qlQu2YfTQfx3HEMzQb3jRm5mpwXxLvEsbAMcFrXPfXlDsSqpZr u3o70Xyh+qCU5vUWSVeUM7/EbrtKlV9iwVL0QwN86Fw75C2DSeH123UaL4U3TtHZ 9RWwqkm+GgnHZeAoC4yGTL2m0/eERjKhm8WiyXOUn7Ya4L7njLTgpUHCfrWuig1Y kuauEpe5prqBlRTwYbaYcsEqBWcpYkGoWk98Ejkh+S/oJWECtsqYNVShSOKr/Tf8 B3H0RgY8jerFFg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:06 2025 by rpki-client