This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft File: kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json) Hash identifier: 3CuHNrcopx2ZHYqXJTCMUTq4X8qn9UaKEl/oXLvaDYY= Subject key identifier: 47:3E:9C:1B:81:84:D8:80:00:17:83:76:6D:EE:44:D9:06:1B:E9:E1 Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C Certificate issuer: /CN=931a9eae1141122d15f0a64ef078c8029febfe3c Certificate serial: 019AF2093BE5AB5065A42B12848CBFDC0640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: 0jQX6xmDw3MEDTTMaDdUbxThTGB4lfU6J9+V2SnbS08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3b:e5:ab:50:65:a4:2b:12:84:8c:bf:dc:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=473e9c1b8184d880001783766dee44d9061be9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:62:6c:2b:a0:14:e9:75:eb:ef:f2:9f:2e: ce:59:07:b9:f3:12:19:12:37:1d:37:68:aa:c2:e5: 33:91:67:45:3f:1e:99:70:4d:b1:b2:8e:2f:ff:3e: d7:92:32:76:aa:ed:b2:78:35:d9:23:b7:10:51:21: 48:4b:e8:e9:09:db:c0:a5:9f:8a:84:76:71:1a:f2: 2e:a0:9c:0d:cc:a9:af:52:4f:82:53:d8:28:0d:e1: 0b:98:66:2d:1d:cb:23:32:53:69:a6:8c:46:1f:01: 56:bf:ac:da:54:83:f9:95:e1:40:ac:c0:95:69:18: a2:c2:be:e8:1f:01:d4:22:cb:4a:3e:50:fd:61:c1: 90:1f:b6:71:62:11:9b:68:c2:c6:d3:75:44:f7:f7: eb:57:7a:8c:c5:ec:f5:f5:c3:ae:3d:e4:88:0e:7a: 3f:08:cd:95:a4:9e:e6:5b:bc:44:0b:18:0b:a6:58: de:d0:90:63:f1:67:73:42:2d:c1:6b:36:50:18:02: d5:5f:f1:fd:49:13:2c:1f:97:5c:d4:b2:31:e7:b9: 2c:2f:45:1c:c1:1d:a8:fb:99:76:d8:1e:d1:fb:a3: ae:3d:b4:10:97:f0:96:3f:2e:92:8e:50:c0:67:27: 85:25:91:d0:fe:46:dd:96:a3:b3:c9:1a:18:6e:19: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3E:9C:1B:81:84:D8:80:00:17:83:76:6D:EE:44:D9:06:1B:E9:E1 X509v3 Authority Key Identifier: keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0a:ec:00:14:f4:c0:d1:34:57:be:ba:1a:31:83:8b:c0:90: f4:8c:d3:91:e9:51:e2:c1:9f:f5:62:f0:98:b9:9b:83:33:a1: e0:36:47:39:3e:2e:33:08:5e:08:63:e3:1e:ea:b6:33:1f:c0: 6c:76:72:6b:fd:5d:b0:f6:38:03:0b:af:f6:12:6a:31:69:77: 5e:57:f1:a4:79:b2:ee:b5:2a:4d:58:36:60:36:92:dc:9c:c0: 5b:4e:27:78:60:80:36:2e:1f:26:21:db:00:d3:43:05:13:43: 48:1a:7f:51:f7:49:f2:a9:22:26:01:ff:76:ae:a6:97:59:57: dc:f6:95:ec:aa:e5:93:f4:c3:d6:90:f8:82:3b:fc:a2:0a:df: 24:d8:af:39:4c:b8:ea:9e:e5:db:e8:26:fc:17:29:02:55:1d: 2d:57:c3:1a:86:db:c2:9a:bf:7f:c0:c3:44:c7:57:b4:ac:e6: d4:68:ee:43:d2:fb:4a:00:45:67:90:5c:08:4c:68:5f:3c:f8: 9f:35:85:71:62:2f:4e:78:f3:a4:1a:8e:9a:b8:07:0e:db:e6: a9:65:ec:f4:a6:0d:70:8e:8b:bb:b9:9a:30:1e:62:0b:45:8b: 90:e3:49:a8:93:d7:29:3f:83:45:6a:c9:85:1b:81:3a:6f:dc: 75:8f:ff:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTvlq1BlpCsShIy/3AZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMWE5ZWFlMTE0MTEyMmQxNWYwYTY0ZWYwNzhjODAyOWZl YmZlM2MwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD Eyg0NzNlOWMxYjgxODRkODgwMDAxNzgzNzY2ZGVlNDRkOTA2MWJlOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bpibCugFOl16+/yny7OWQe58xIZ EjcdN2iqwuUzkWdFPx6ZcE2xso4v/z7XkjJ2qu2yeDXZI7cQUSFIS+jpCdvApZ+K hHZxGvIuoJwNzKmvUk+CU9goDeELmGYtHcsjMlNppoxGHwFWv6zaVIP5leFArMCV aRiiwr7oHwHUIstKPlD9YcGQH7ZxYhGbaMLG03VE9/frV3qMxez19cOuPeSIDno/ CM2VpJ7mW7xECxgLplje0JBj8WdzQi3BazZQGALVX/H9SRMsH5dc1LIx57ksL0Uc wR2o+5l22B7R+6OuPbQQl/CWPy6SjlDAZyeFJZHQ/kbdlqOzyRoYbhnkCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc+nBuBhNiAABeDdm3uRNkGG+nhMB8GA1UdIwQY MBaAFJManq4RQRItFfCmTvB4yAKf6/48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80NzM3NjgtM2E1OS00YjBiLWFkMjYt MTkxMzZiN2IwMzk2LzEva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80NzM3NjgtM2E1OS00YjBiLWFkMjYtMTkxMzZiN2IwMzk2 LzEva3hxZXJoRkJFaTBWOEtaTzhIaklBcF9yX2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcArsABT0 wNE0V766GjGDi8CQ9IzTkelR4sGf9WLwmLmbgzOh4DZHOT4uMwheCGPjHuq2Mx/A bHZya/1dsPY4Awuv9hJqMWl3XlfxpHmy7rUqTVg2YDaS3JzAW04neGCANi4fJiHb ANNDBRNDSBp/UfdJ8qkiJgH/dq6ml1lX3PaV7Krlk/TD1pD4gjv8ogrfJNivOUy4 6p7l2+gm/BcpAlUdLVfDGobbwpq/f8DDRMdXtKzm1GjuQ9L7SgBFZ5BcCExoXzz4 nzWFcWIvTnjzpBqOmrgHDtvmqWXs9KYNcI6Lu7maMB5iC0WLkONJqJPXKT+DRWrJ hRuBOm/cdY//PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:52:39 2025 by rpki-client