This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json) Hash identifier: PI6BOgocY5kCHX7eiD30dZA0GimcKUmwPK9pqxFnSVw= Subject key identifier: 84:52:37:C9:AF:95:4F:D2:FB:08:A8:A3:D4:DC:3F:53:C3:2D:93:99 Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3 Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3 Certificate serial: 019AF31D11FD59EFFD78990741C586CC24AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft Manifest number: 1640 Signing time: Sat 06 Dec 2025 10:02:39 +0000 Manifest this update: Sat 06 Dec 2025 10:02:39 +0000 Manifest next update: Sun 07 Dec 2025 10:02:39 +0000 Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=) 2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: BNWJ9UQsqQ/mEDNHz+yWoC/d4N+bOPg14aSE3Z2jrAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:11:fd:59:ef:fd:78:99:07:41:c5:86:cc:24:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929f0769c63883573f2703d766462570af5590f3 Validity Not Before: Dec 6 10:02:39 2025 GMT Not After : Dec 7 10:02:39 2025 GMT Subject: CN=845237c9af954fd2fb08a8a3d4dc3f53c32d9399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:95:ed:a4:47:2b:b3:13:78:b8:dd:8a:71: c5:79:0e:51:fa:b6:2f:38:64:41:8e:73:93:33:52: 5b:f3:73:86:8f:30:26:c1:d0:e0:4c:51:2d:2b:4b: 70:7d:f1:ce:6f:92:a9:f5:cf:26:80:8e:f4:36:b0: 95:9c:76:b6:a7:1b:9d:05:6f:da:6d:17:84:0a:31: 51:cc:49:4c:91:bf:91:58:e0:cb:b0:1f:bd:36:d9: e4:18:e0:75:4a:93:0b:02:0c:d0:2a:a6:8a:20:0f: 8a:e1:69:34:97:cd:83:ed:77:40:17:98:21:7e:21: 11:9f:3a:44:73:85:09:2c:f0:85:69:31:06:ef:08: 24:a4:63:b0:18:15:0d:50:3d:86:cb:5d:6c:b7:2f: 5c:9e:8c:1d:f2:9c:2e:ac:af:6a:3c:21:d7:81:3d: 2b:b0:5f:e3:f3:68:22:55:ec:3c:24:5c:4c:1a:f9: 14:b5:d2:37:19:af:c6:ed:80:44:22:8f:94:21:f1: 88:b2:bc:23:a5:68:98:ac:ad:71:e3:59:e8:78:0e: 89:77:9d:42:20:52:21:b6:29:34:f9:5f:75:fc:0a: 1a:f4:60:d1:4d:45:23:af:4d:99:80:b3:51:b6:b1: 02:d0:81:a5:79:04:9f:17:ee:74:aa:38:e3:25:f0: 7c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:52:37:C9:AF:95:4F:D2:FB:08:A8:A3:D4:DC:3F:53:C3:2D:93:99 X509v3 Authority Key Identifier: keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9d:b7:01:fe:26:d4:f9:f1:b8:0a:a4:c7:9f:6a:c4:c4:c8: a7:ec:91:1a:f1:e8:c7:12:46:d8:f1:2a:94:bc:6b:0a:33:4c: fb:b8:ce:6b:66:da:df:b5:30:fd:6b:16:d2:37:3a:d0:fb:6c: d6:33:e2:9b:21:97:8d:fd:d6:03:2b:9d:dd:54:22:08:4b:b1: b1:6d:00:44:e4:3d:d4:65:47:84:4c:77:66:a8:70:d9:43:ba: 7f:4c:b1:58:22:49:7e:d3:09:74:0e:64:61:15:5f:93:6f:0a: 2b:aa:7f:04:32:05:e9:9b:84:a2:a9:2d:ae:c1:9a:35:20:b4: 74:b9:97:05:7e:b1:7a:4a:60:3e:7f:e2:97:3b:57:25:58:17: 5b:7d:de:07:0e:6c:5e:9c:21:37:1b:df:26:4f:3b:30:fb:39: c4:9d:9a:7d:7b:d0:e9:1f:70:f5:99:4d:48:3d:6e:ce:eb:66: 07:a3:ea:1e:67:62:ec:6a:88:af:73:a6:99:90:1a:ef:9c:48: 44:52:05:b1:fa:8c:81:a4:6d:8f:c9:2c:97:29:72:19:b3:3c: 50:fc:8c:1f:00:4b:27:52:70:3a:9d:8d:c6:27:17:bd:65:d8: e5:54:c0:0a:e2:17:7d:cb:91:0d:1e:8a:f6:f6:e1:fb:e6:9a: 62:d9:a7:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRH9We/9eJkHQcWGzCStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOWYwNzY5YzYzODgzNTczZjI3MDNkNzY2NDYyNTcwYWY1 NTkwZjMwHhcNMjUxMjA2MTAwMjM5WhcNMjUxMjA3MTAwMjM5WjAzMTEwLwYDVQQD Eyg4NDUyMzdjOWFmOTU0ZmQyZmIwOGE4YTNkNGRjM2Y1M2MzMmQ5Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1yV7aRHK7MTeLjdinHFeQ5R+rYv OGRBjnOTM1Jb83OGjzAmwdDgTFEtK0twffHOb5Kp9c8mgI70NrCVnHa2pxudBW/a bReECjFRzElMkb+RWODLsB+9NtnkGOB1SpMLAgzQKqaKIA+K4Wk0l82D7XdAF5gh fiERnzpEc4UJLPCFaTEG7wgkpGOwGBUNUD2Gy11sty9cnowd8pwurK9qPCHXgT0r sF/j82giVew8JFxMGvkUtdI3Ga/G7YBEIo+UIfGIsrwjpWiYrK1x41noeA6Jd51C IFIhtik0+V91/Aoa9GDRTUUjr02ZgLNRtrEC0IGleQSfF+50qjjjJfB8iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRSN8mvlU/S+wioo9TcP1PDLZOZMB8GA1UdIwQY MBaAFJKfB2nGOINXPycD12ZGJXCvVZDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3A4SGFjWTRnMWNfSndQWFprWWxjSzlWa1BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84NjFkMzktZjhkNC00YWEzLTlkNGIt NWQ4MDY5YzRhNjU3LzEva3A4SGFjWTRnMWNfSndQWFprWWxjSzlWa1BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84NjFkMzktZjhkNC00YWEzLTlkNGItNWQ4MDY5YzRhNjU3 LzEva3A4SGFjWTRnMWNfSndQWFprWWxjSzlWa1BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcp23Af4m 1PnxuAqkx59qxMTIp+yRGvHoxxJG2PEqlLxrCjNM+7jOa2ba37Uw/WsW0jc60Pts 1jPimyGXjf3WAyud3VQiCEuxsW0AROQ91GVHhEx3Zqhw2UO6f0yxWCJJftMJdA5k YRVfk28KK6p/BDIF6ZuEoqktrsGaNSC0dLmXBX6xekpgPn/ilztXJVgXW33eBw5s XpwhNxvfJk87MPs5xJ2afXvQ6R9w9ZlNSD1uzutmB6PqHmdi7GqIr3OmmZAa75xI RFIFsfqMgaRtj8kslylyGbM8UPyMHwBLJ1JwOp2NxicXvWXY5VTACuIXfcuRDR6K 9vbh++aaYtmn+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:46 2025 by rpki-client