This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft File: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft (raw, json) Hash identifier: Ogo67vZLT5s3VH/Uc6IAECFCWw5jWNtSZ7oVu7q83I4= Subject key identifier: D5:C1:A3:F7:45:CE:97:FB:67:F9:FC:1E:A8:F0:93:98:BE:6B:58:ED Authority key identifier: 90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04 Certificate issuer: /CN=90a03b68f87da71c271c9cf5c82e955dbc65c104 Certificate serial: 019AF3525AD735AF44A9414315E47C77242F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft Manifest number: 14B4 Signing time: Sat 06 Dec 2025 11:00:51 +0000 Manifest this update: Sat 06 Dec 2025 11:00:51 +0000 Manifest next update: Sun 07 Dec 2025 11:00:51 +0000 Files and hashes: 1: kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl (hash: 8bCaOLcChhCZk7me4tkcXQTAOTjS2+iwJnsjwVm17FQ=) 2: yawZ00_1T1Sp8kgBpRr9kJDLMKE.roa (hash: a+4sT7IhaHQCrsjdIym/2JOKSsvSh3sX6W3E1vUrWYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:5a:d7:35:af:44:a9:41:43:15:e4:7c:77:24:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a03b68f87da71c271c9cf5c82e955dbc65c104 Validity Not Before: Dec 6 11:00:51 2025 GMT Not After : Dec 7 11:00:51 2025 GMT Subject: CN=d5c1a3f745ce97fb67f9fc1ea8f09398be6b58ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:75:bc:0b:9f:36:77:53:39:4a:e3:81:6b:43: 23:dd:34:0b:36:6b:34:f7:a4:61:20:53:13:53:cb: 2c:06:a4:70:2f:1e:32:3f:72:ec:52:03:50:1b:50: 1d:21:35:bd:eb:81:8d:37:36:2b:bd:83:29:d6:3f: 64:2f:1a:23:d5:f4:d4:4a:59:a8:2d:5b:07:e2:5b: 14:92:5c:00:9a:3b:fa:23:08:52:bc:ac:13:72:9e: 53:e1:f5:24:d2:37:52:34:ed:12:4b:77:3e:46:26: d8:f6:3e:2a:3b:9d:45:f3:8b:b8:32:72:a8:69:54: 2f:87:f4:56:86:b3:1c:ed:df:1c:df:e2:38:41:c4: fa:18:e3:84:e0:72:89:78:2e:cd:8e:33:97:8a:7a: 4a:6b:94:74:27:10:d1:ac:39:96:07:d6:17:90:1a: 71:71:82:6e:40:96:b8:86:18:9e:36:03:74:76:cd: 85:04:d7:5f:4c:dc:5e:1d:ea:62:19:03:21:9f:c1: 03:b6:83:98:54:eb:70:ea:38:29:3f:2e:11:72:73: 72:41:f9:87:ef:74:94:6b:30:af:df:bf:da:5e:92: 1d:ef:14:d1:18:34:5a:19:0b:40:11:70:e9:ac:09: 03:8b:b3:ef:33:3a:44:6c:0b:ea:35:27:9f:71:41: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C1:A3:F7:45:CE:97:FB:67:F9:FC:1E:A8:F0:93:98:BE:6B:58:ED X509v3 Authority Key Identifier: keyid:90:A0:3B:68:F8:7D:A7:1C:27:1C:9C:F5:C8:2E:95:5D:BC:65:C1:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5afc37-0909-4d54-bcef-bd34e0a95a1e/1/kKA7aPh9pxwnHJz1yC6VXbxlwQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b1:8e:19:01:b5:ec:d5:a0:4e:ce:c4:08:6a:89:df:a3:db: b9:3e:2f:c3:06:bc:d9:d2:d5:00:35:0d:1d:c9:00:e0:aa:46: 80:2b:ad:c3:8c:a4:49:ed:0d:11:3a:c4:bf:80:7c:95:7b:ed: cd:86:ff:1d:ea:a1:80:6d:59:7a:8f:41:a6:bb:e3:7a:5a:ae: 85:91:da:d9:77:27:a4:94:22:43:dd:55:a2:b1:dd:ce:4e:14: cb:40:bb:f8:8d:6c:91:62:c0:b2:9a:af:81:ad:c2:96:e3:79: a0:3b:52:ee:89:c2:d8:59:7d:c3:b9:6c:32:5a:c3:dc:c3:8a: a9:f7:2a:f2:e7:da:fb:9e:3e:f6:17:5f:20:dd:4b:b4:49:12: 75:93:32:da:61:a6:87:3c:1f:8f:f6:bf:f7:f5:15:08:e4:79: dd:6c:2b:10:3f:48:0d:07:ad:58:72:54:82:fd:4b:b8:df:95: 80:01:ac:d6:74:2d:85:76:8d:1b:5b:c2:36:be:b3:39:82:f8: 79:c7:a3:7f:a3:3f:5d:9c:a1:24:b7:ca:64:2f:60:f1:33:3d: 37:86:f2:10:01:a0:5b:7c:e9:c5:dd:4d:97:ac:35:c0:6d:51: 63:41:20:8b:61:f9:7c:a3:53:cd:6b:6f:e3:94:d2:29:ce:78: 4d:f6:62:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlrXNa9EqUFDFeR8dyQvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTAzYjY4Zjg3ZGE3MWMyNzFjOWNmNWM4MmU5NTVkYmM2 NWMxMDQwHhcNMjUxMjA2MTEwMDUxWhcNMjUxMjA3MTEwMDUxWjAzMTEwLwYDVQQD EyhkNWMxYTNmNzQ1Y2U5N2ZiNjdmOWZjMWVhOGYwOTM5OGJlNmI1OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3W8C582d1M5SuOBa0Mj3TQLNms0 96RhIFMTU8ssBqRwLx4yP3LsUgNQG1AdITW964GNNzYrvYMp1j9kLxoj1fTUSlmo LVsH4lsUklwAmjv6IwhSvKwTcp5T4fUk0jdSNO0SS3c+RibY9j4qO51F84u4MnKo aVQvh/RWhrMc7d8c3+I4QcT6GOOE4HKJeC7NjjOXinpKa5R0JxDRrDmWB9YXkBpx cYJuQJa4hhieNgN0ds2FBNdfTNxeHepiGQMhn8EDtoOYVOtw6jgpPy4RcnNyQfmH 73SUazCv37/aXpId7xTRGDRaGQtAEXDprAkDi7PvMzpEbAvqNSefcUElAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXBo/dFzpf7Z/n8Hqjwk5i+a1jtMB8GA1UdIwQY MBaAFJCgO2j4faccJxyc9cgulV28ZcEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YWZjMzctMDkwOS00ZDU0LWJjZWYt YmQzNGUwYTk1YTFlLzEva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YWZjMzctMDkwOS00ZDU0LWJjZWYtYmQzNGUwYTk1YTFl LzEva0tBN2FQaDlweHduSEp6MXlDNlZYYnhsd1FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7GOGQG1 7NWgTs7ECGqJ36PbuT4vwwa82dLVADUNHckA4KpGgCutw4ykSe0NETrEv4B8lXvt zYb/HeqhgG1Zeo9BprvjelquhZHa2XcnpJQiQ91VorHdzk4Uy0C7+I1skWLAspqv ga3CluN5oDtS7onC2Fl9w7lsMlrD3MOKqfcq8ufa+54+9hdfIN1LtEkSdZMy2mGm hzwfj/a/9/UVCOR53WwrED9IDQetWHJUgv1LuN+VgAGs1nQthXaNG1vCNr6zOYL4 ecejf6M/XZyhJLfKZC9g8TM9N4byEAGgW3zpxd1Nl6w1wG1RY0Egi2H5fKNTzWtv 45TSKc54TfZi2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:07 2025 by rpki-client