This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json) Hash identifier: J25Ai+wU3VnUXUvhb5ZPTLy/ppIT8LzBquvbDrFQTzo= Subject key identifier: 37:F7:88:9A:37:C8:53:20:07:BE:00:81:67:C7:1C:44:CA:38:46:C3 Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2 Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2 Certificate serial: 019AF3899CAA13C3A7186D4873991330863A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:01:13 +0000 Manifest this update: Sat 06 Dec 2025 12:01:13 +0000 Manifest next update: Sun 07 Dec 2025 12:01:13 +0000 Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: 9Ap5CyfTPQiIPf8Gu128OdMtO6tnidcqPdQRvGJwRW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:9c:aa:13:c3:a7:18:6d:48:73:99:13:30:86:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2 Validity Not Before: Dec 6 12:01:13 2025 GMT Not After : Dec 7 12:01:13 2025 GMT Subject: CN=37f7889a37c8532007be008167c71c44ca3846c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:22:7a:84:fa:be:11:7e:b4:d4:8b:88:98: b6:73:18:32:a8:e0:2e:f5:23:c8:a2:85:4d:36:f3: b4:e0:f3:36:0b:a1:9b:b8:2b:d3:c2:04:a6:40:a8: 6f:18:89:84:2e:f3:54:48:fc:4e:a6:96:a4:5a:5b: 18:4c:72:d4:7c:cb:f7:66:90:03:08:97:8f:47:e8: c0:f1:ea:3e:f8:e2:51:b9:eb:fc:3e:e3:14:e8:53: ab:26:88:ef:85:49:a9:f4:8d:13:2a:9a:24:80:87: 33:c3:73:de:a1:c8:24:4a:5b:23:28:b4:6b:e1:24: 20:b3:b1:14:47:0b:03:f8:62:05:1e:2b:21:06:94: b1:e0:85:f7:97:e7:5d:af:a4:69:ac:ea:5a:14:48: c9:f8:3f:17:b2:c4:20:d2:f8:c3:4b:43:11:40:b4: de:50:5a:c5:e4:a2:a4:1f:58:71:27:5a:5f:de:dc: 56:46:8e:21:f2:48:c4:1a:bc:7f:dd:22:47:92:30: c1:7e:70:ed:48:e0:2b:27:37:46:0b:be:4f:e6:7c: 73:16:09:e1:1c:46:db:10:2c:12:2d:8f:18:d0:e6: 6d:2e:30:1a:c5:0c:a4:4f:6c:fa:7f:b7:05:a8:fe: 2f:79:c3:21:e2:cc:8d:22:84:68:6f:53:35:92:00: 34:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F7:88:9A:37:C8:53:20:07:BE:00:81:67:C7:1C:44:CA:38:46:C3 X509v3 Authority Key Identifier: keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4a:58:33:cf:3e:c7:95:f6:92:b3:f7:02:fd:41:d0:b8:1d: 85:ac:6b:c2:28:2a:81:b9:b5:65:b8:25:6d:95:00:66:93:e8: 26:70:6f:6f:53:e4:7b:97:f2:b5:cd:1b:98:9f:ed:5d:fc:4c: 86:aa:6b:96:da:3f:1b:5b:a2:ff:88:8b:15:52:ec:db:f0:65: cd:b1:f3:41:02:82:26:b7:08:0c:ad:18:3d:a4:71:8f:52:27: d3:6b:c3:bb:55:b5:b5:f5:39:9e:ec:7c:97:1d:ee:70:0b:8d: e8:86:67:f8:da:9f:13:84:35:81:f7:c3:4f:50:a9:1d:14:e0: 72:45:0f:ef:0e:95:b7:80:3e:11:9b:f2:1e:e2:63:4b:aa:a4: da:ce:ad:f2:36:26:d0:a3:7b:29:6b:b4:51:c9:89:7d:6f:4b: b9:f5:c0:d9:6a:0d:5d:05:0b:99:ae:8b:96:90:3a:a2:28:88: fe:27:fc:5f:70:99:7c:e8:6b:d8:6a:ea:33:69:98:d3:d5:6a: 85:e4:f5:e9:cb:09:b0:1a:51:93:7e:03:e6:a7:8d:e4:ab:b1: ca:02:81:e1:88:3b:21:59:0f:0f:15:63:47:0a:ef:0a:fa:2c: 4f:ca:fd:48:68:7e:6a:e4:0f:e8:05:ee:16:1e:8b:b7:0e:0c: d8:5f:bc:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZyqE8OnGG1Ic5kTMIY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMzJiODg3NDAxMWQ4MDM5MGFmODEyMjhlYjUwN2IxNmQw MjVkZDIwHhcNMjUxMjA2MTIwMTEzWhcNMjUxMjA3MTIwMTEzWjAzMTEwLwYDVQQD EygzN2Y3ODg5YTM3Yzg1MzIwMDdiZTAwODE2N2M3MWM0NGNhMzg0NmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriQieoT6vhF+tNSLiJi2cxgyqOAu 9SPIooVNNvO04PM2C6GbuCvTwgSmQKhvGImELvNUSPxOppakWlsYTHLUfMv3ZpAD CJePR+jA8eo++OJRuev8PuMU6FOrJojvhUmp9I0TKpokgIczw3PeocgkSlsjKLRr 4SQgs7EURwsD+GIFHishBpSx4IX3l+ddr6RprOpaFEjJ+D8XssQg0vjDS0MRQLTe UFrF5KKkH1hxJ1pf3txWRo4h8kjEGrx/3SJHkjDBfnDtSOArJzdGC75P5nxzFgnh HEbbECwSLY8Y0OZtLjAaxQykT2z6f7cFqP4vecMh4syNIoRob1M1kgA0/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDf3iJo3yFMgB74AgWfHHETKOEbDMB8GA1UdIwQY MBaAFJIyuIdAEdgDkK+BIo61B7FtAl3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2pLNGgwQVIyQU9RcjRFaWpyVUhzVzBDWGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNDk3ZjItNDA5ZS00NmVjLWEwMzkt ZDA0ODEyNjU1ZDgzLzEva2pLNGgwQVIyQU9RcjRFaWpyVUhzVzBDWGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jNDk3ZjItNDA5ZS00NmVjLWEwMzktZDA0ODEyNjU1ZDgz LzEva2pLNGgwQVIyQU9RcjRFaWpyVUhzVzBDWGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0pYM88+ x5X2krP3Av1B0Lgdhaxrwigqgbm1ZbglbZUAZpPoJnBvb1Pke5fytc0bmJ/tXfxM hqprlto/G1ui/4iLFVLs2/BlzbHzQQKCJrcIDK0YPaRxj1In02vDu1W1tfU5nux8 lx3ucAuN6IZn+NqfE4Q1gffDT1CpHRTgckUP7w6Vt4A+EZvyHuJjS6qk2s6t8jYm 0KN7KWu0UcmJfW9LufXA2WoNXQULma6LlpA6oiiI/if8X3CZfOhr2GrqM2mY09Vq heT16csJsBpRk34D5qeN5KuxygKB4Yg7IVkPDxVjRwrvCvosT8r9SGh+auQP6AXu Fh6Ltw4M2F+8Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:39 2025 by rpki-client