This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json) Hash identifier: bkjezKwu/n0zUGI0fyON3q5ZuTRhIaf0sR6hKam4Rtw= Subject key identifier: 56:85:52:B0:ED:C8:CE:F5:A7:7B:48:4A:7B:73:3A:F2:0F:D4:BA:D4 Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e Certificate serial: 019AF01A71F9E47D0A2C99D3195E057BBEFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft Manifest number: 10BD Signing time: Fri 05 Dec 2025 20:00:56 +0000 Manifest this update: Fri 05 Dec 2025 20:00:56 +0000 Manifest next update: Sat 06 Dec 2025 20:00:56 +0000 Files and hashes: 1: 1L8Aqg_kqc0jDD9ENoLfdgxQwl4.asa (hash: 1+NBbcWIg/X+t80cTnY58PEQO1jKIDWahJgetMPmIKo=) 2: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: EwBYt/SvB1/6ThONydNrk+9L6pRkxkJXfQepRX8txBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1a:71:f9:e4:7d:0a:2c:99:d3:19:5e:05:7b:be:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e Validity Not Before: Dec 5 20:00:56 2025 GMT Not After : Dec 6 20:00:56 2025 GMT Subject: CN=568552b0edc8cef5a77b484a7b733af20fd4bad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d6:a8:45:7c:82:5f:ce:23:fd:5c:d4:be:d2: 21:9c:c3:80:9d:25:12:89:d5:36:1c:3c:53:b0:f9: b3:2f:f3:e9:42:58:b1:8c:c0:76:65:13:4b:c7:b9: 22:e6:a7:54:62:06:6d:24:7c:39:2d:f3:dd:af:68: 97:bc:46:83:db:6c:aa:d6:3c:5b:f4:f9:06:82:a8: 8d:8a:be:42:c8:7a:22:a9:f5:d5:15:2f:69:91:02: 76:d3:47:47:d8:d2:03:67:43:62:59:f0:31:61:06: 0d:b3:db:f2:5c:7f:20:89:8a:85:86:8b:b3:26:36: 18:a0:ef:ce:2a:3e:f1:9e:ac:3b:dc:6a:be:c0:8c: 12:f9:b6:1d:8d:f2:07:8f:fd:dc:f2:a7:4a:64:34: fc:9a:0c:10:4d:d3:7d:c0:16:0b:66:ff:2d:db:90: 74:eb:02:93:20:33:00:f8:68:ff:e4:1f:2f:5a:4e: 03:5c:5e:e8:22:b4:9a:67:f6:79:39:69:92:f1:8a: d8:0c:1f:3e:69:4b:28:f0:18:ff:93:8c:20:81:c7: ae:78:92:eb:07:1f:22:41:99:9c:6b:59:20:55:37: c0:67:02:2f:bd:d0:bd:c0:93:6c:67:89:57:c9:6f: 2b:b3:45:f2:2d:9b:e6:74:0b:ba:fe:a6:93:a4:b9: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:85:52:B0:ED:C8:CE:F5:A7:7B:48:4A:7B:73:3A:F2:0F:D4:BA:D4 X509v3 Authority Key Identifier: keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:40:ab:3c:1a:dc:52:b4:d1:53:80:a4:94:2c:ac:56:a9:f3: 2a:73:61:63:fa:11:bf:46:17:8f:ab:33:10:eb:d1:6b:55:38: 68:6a:83:8e:fd:0b:dc:25:f3:c0:fc:0d:21:55:ad:c6:24:7b: 88:6e:d4:8e:da:e6:a6:3f:95:f1:c4:88:04:6c:27:02:44:05: ec:84:47:04:d7:d7:2c:61:70:f2:f0:e4:e1:f3:35:d3:e1:81: f9:5f:52:0b:1b:89:9d:c7:40:e3:28:f3:a8:71:33:3a:85:0f: 20:1b:2e:f1:f9:db:27:22:8a:8f:64:80:a6:8c:43:79:5f:16: 64:c2:5e:ff:f5:31:de:a5:6e:ea:3e:d0:3c:90:8e:08:09:4c: cd:63:66:ba:22:c5:20:94:4a:26:a4:26:c7:70:3a:e7:dd:d4: bc:f4:45:c7:f5:7f:3a:f7:29:74:27:5d:8d:b9:c7:7d:71:0a: e7:d0:13:cb:a6:2e:74:af:8c:8f:7e:d5:52:ce:ab:58:b8:e2: d4:8b:b1:d6:52:df:e9:42:e3:99:68:e6:05:00:00:4c:bf:30: 14:21:6a:80:db:af:58:27:77:a9:ee:13:06:62:c3:3e:cd:1e: 14:67:c9:d3:ba:94:64:5c:e7:25:f3:a2:85:f4:64:de:4c:d3: 44:42:0e:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGnH55H0KLJnTGV4Fe77/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzkxNjc3YWRlZjdhMmU5YjBiMGU0MGU5M2IyYzRhZmM0 ZGIzNWUwHhcNMjUxMjA1MjAwMDU2WhcNMjUxMjA2MjAwMDU2WjAzMTEwLwYDVQQD Eyg1Njg1NTJiMGVkYzhjZWY1YTc3YjQ4NGE3YjczM2FmMjBmZDRiYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNaoRXyCX84j/VzUvtIhnMOAnSUS idU2HDxTsPmzL/PpQlixjMB2ZRNLx7ki5qdUYgZtJHw5LfPdr2iXvEaD22yq1jxb 9PkGgqiNir5CyHoiqfXVFS9pkQJ200dH2NIDZ0NiWfAxYQYNs9vyXH8giYqFhouz JjYYoO/OKj7xnqw73Gq+wIwS+bYdjfIHj/3c8qdKZDT8mgwQTdN9wBYLZv8t25B0 6wKTIDMA+Gj/5B8vWk4DXF7oIrSaZ/Z5OWmS8YrYDB8+aUso8Bj/k4wggceueJLr Bx8iQZmca1kgVTfAZwIvvdC9wJNsZ4lXyW8rs0XyLZvmdAu6/qaTpLn9kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaFUrDtyM71p3tISntzOvIP1LrUMB8GA1UdIwQY MBaAFJE5Fnet73oumwsOQOk7LEr8TbNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMt NDZiY2IzNmRmNGIzLzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9jZmRlZjQtMDMyOS00OGQxLWEzYzMtNDZiY2IzNmRmNGIz LzEva1RrV2Q2M3ZlaTZiQ3c1QTZUc3NTdnhOczE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUCrPBrc UrTRU4CklCysVqnzKnNhY/oRv0YXj6szEOvRa1U4aGqDjv0L3CXzwPwNIVWtxiR7 iG7Ujtrmpj+V8cSIBGwnAkQF7IRHBNfXLGFw8vDk4fM10+GB+V9SCxuJncdA4yjz qHEzOoUPIBsu8fnbJyKKj2SApoxDeV8WZMJe//Ux3qVu6j7QPJCOCAlMzWNmuiLF IJRKJqQmx3A6593UvPRFx/V/OvcpdCddjbnHfXEK59ATy6YudK+Mj37VUs6rWLji 1Iux1lLf6ULjmWjmBQAATL8wFCFqgNuvWCd3qe4TBmLDPs0eFGfJ07qUZFznJfOi hfRk3kzTREIO6w== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:17 2025 by rpki-client