This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json) Hash identifier: t+/YStJ2dDBi91E/2mOqWeHAwOe5FniebUmiw/SKGoA= Subject key identifier: 28:8A:71:E4:3E:77:E7:A1:F9:62:93:3D:D3:2F:C8:11:27:8A:69:FD Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a Certificate serial: 019AF31B3FAD026490788F44B5ADFDA1FFAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft Manifest number: 11EA Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=) 2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: CpDu/NK3SRHaytQ2sUIMQoglx3KVyrkaj7bKZvvn8ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3f:ad:02:64:90:78:8f:44:b5:ad:fd:a1:ff:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=288a71e43e77e7a1f962933dd32fc811278a69fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:af:27:24:bb:c4:98:5b:a3:57:a8:8d:55:af: dd:45:dd:72:ac:f0:f9:4c:b1:01:37:a8:bc:e8:43: af:3b:54:de:2a:6e:11:01:44:4c:d3:0f:ec:64:15: 89:77:45:c1:60:05:d0:70:5d:ba:96:4f:b1:dc:aa: 86:a7:18:cf:9b:db:bc:9b:90:6c:82:ef:ba:dd:2c: 35:5b:bc:62:52:77:51:d4:eb:85:a7:bb:13:88:9c: 9b:8b:8e:95:70:5c:40:ee:b2:82:88:32:d1:a6:46: b7:18:a1:5b:04:55:14:87:6a:83:af:55:ee:7e:ee: 19:d2:be:97:dd:97:f0:55:8f:53:ad:33:94:98:c5: 5b:fc:73:48:c6:95:c6:8c:5b:6a:6e:2b:35:22:2f: 0f:32:2a:e6:b2:32:31:fc:a6:b5:b9:bb:11:41:92: 6b:9c:ad:8c:9f:01:cc:5a:79:6d:8d:03:3a:6f:fb: 4f:73:e5:c1:19:d8:c1:4a:19:30:40:21:23:f4:dd: 84:0a:5e:5f:c0:8c:55:31:4e:39:d4:08:14:dc:7e: 0f:81:47:91:cf:f9:04:ad:e8:22:54:30:0e:1a:06: 0c:b1:f9:a8:48:52:c5:2a:49:48:d2:a6:f1:d3:60: ca:3c:88:f9:91:b6:23:a4:4f:7c:8c:7e:81:d5:21: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8A:71:E4:3E:77:E7:A1:F9:62:93:3D:D3:2F:C8:11:27:8A:69:FD X509v3 Authority Key Identifier: keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:83:8c:0d:4e:0a:21:fb:fc:13:b7:87:7a:b9:b4:d9:27:03: 23:77:95:22:7a:e3:a6:17:73:21:61:7f:13:07:2d:9d:07:ae: af:1b:8a:79:08:09:b2:0d:1d:7e:1f:e7:0d:16:40:81:14:7a: 64:97:65:bd:35:e8:67:1a:b4:8b:01:59:a8:ca:40:e9:63:49: b5:c4:a8:71:68:bd:e0:1c:26:a7:69:a6:49:d2:89:0c:ab:6b: 63:f5:38:fe:cd:ab:a3:71:3d:ca:41:15:44:a4:59:b0:30:cd: 60:05:eb:8d:78:a0:7a:66:f7:08:f4:28:54:48:d8:a5:a7:2d: 39:9d:22:06:02:44:e8:90:92:36:aa:c0:ac:2b:b5:18:80:0b: c7:06:44:6c:42:70:b8:21:72:a0:9b:28:33:bf:72:90:6c:c2: cf:ae:5e:5b:ce:4f:ba:57:c3:39:15:29:51:6c:53:f2:9d:46: c0:4a:08:ca:7c:5e:c3:f8:11:58:e1:de:7b:63:9a:cd:82:fb: ef:79:ee:d2:6b:ea:3e:71:f0:8c:ce:7a:67:f6:63:4a:33:00: 43:a8:76:bf:5d:03:7b:31:43:96:10:1a:b4:92:e4:bc:9a:d4: c4:d9:89:7d:6d:db:9f:67:c6:73:ce:5b:8b:b0:60:cd:01:92: eb:a3:d1:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGz+tAmSQeI9Eta39of+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTJkZWM3Yjc2MTdmZTM5Yzg1NTBlZTIwYzM4MjIwMWFi OWFmMmEwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD EygyODhhNzFlNDNlNzdlN2ExZjk2MjkzM2RkMzJmYzgxMTI3OGE2OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q8nJLvEmFujV6iNVa/dRd1yrPD5 TLEBN6i86EOvO1TeKm4RAURM0w/sZBWJd0XBYAXQcF26lk+x3KqGpxjPm9u8m5Bs gu+63Sw1W7xiUndR1OuFp7sTiJybi46VcFxA7rKCiDLRpka3GKFbBFUUh2qDr1Xu fu4Z0r6X3ZfwVY9TrTOUmMVb/HNIxpXGjFtqbis1Ii8PMirmsjIx/Ka1ubsRQZJr nK2MnwHMWnltjQM6b/tPc+XBGdjBShkwQCEj9N2ECl5fwIxVMU451AgU3H4PgUeR z/kEregiVDAOGgYMsfmoSFLFKklI0qbx02DKPIj5kbYjpE98jH6B1SGwoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiKceQ+d+eh+WKTPdMvyBEnimn9MB8GA1UdIwQY MBaAFJBS3se3YX/jnIVQ7iDDgiAaua8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lOWE3YTEtZTlmZS00N2Q0LWFlMzIt ZGYwYTQ0ODAwYWE1LzEva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9lOWE3YTEtZTlmZS00N2Q0LWFlMzItZGYwYTQ0ODAwYWE1 LzEva0ZMZXg3ZGhmLU9jaFZEdUlNT0NJQnE1cnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIOMDU4K Ifv8E7eHerm02ScDI3eVInrjphdzIWF/EwctnQeurxuKeQgJsg0dfh/nDRZAgRR6 ZJdlvTXoZxq0iwFZqMpA6WNJtcSocWi94Bwmp2mmSdKJDKtrY/U4/s2ro3E9ykEV RKRZsDDNYAXrjXigemb3CPQoVEjYpactOZ0iBgJE6JCSNqrArCu1GIALxwZEbEJw uCFyoJsoM79ykGzCz65eW85PulfDORUpUWxT8p1GwEoIynxew/gRWOHee2OazYL7 73nu0mvqPnHwjM56Z/ZjSjMAQ6h2v10DezFDlhAatJLkvJrUxNmJfW3bn2fGc85b i7BgzQGS66PRnA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:05 2025 by rpki-client