This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json) Hash identifier: pUlL5XOmPZjNwpn/I9JLoED3w11MpNQ2SAYLsy05yS4= Subject key identifier: F1:48:AB:53:EE:5F:51:7A:66:B6:77:EF:13:44:C6:1A:C0:C0:BB:FE Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56 Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956 Certificate serial: 019AF23F94934E9AEA3E009D486F1A40E7A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=) 2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: pdPOkS7KNNzp22MQI26uXxVLf/OqcRWWjjzGWP/TBus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:94:93:4e:9a:ea:3e:00:9d:48:6f:1a:40:e7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956 Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=f148ab53ee5f517a66b677ef1344c61ac0c0bbfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f9:83:48:af:ba:71:1a:fb:e0:a0:d0:e8:4f: e3:1b:fc:e2:90:a2:3e:4a:9e:0f:f9:1c:86:90:d2: 6e:0b:d4:61:d6:fd:60:1e:e2:8a:3e:8c:40:2a:8d: 70:4d:f5:55:0f:1a:a2:15:d2:c3:d3:c9:cb:76:d2: 20:d4:7b:fe:20:ae:91:c6:a8:ad:16:8a:80:ad:c5: cf:c1:00:de:2f:b5:81:b0:37:64:9e:ac:c7:d0:6a: 0c:a7:db:4a:41:b9:b7:9e:5e:99:1e:33:53:db:81: ee:24:4a:d6:89:f9:6d:cd:fe:e8:83:bb:bb:24:ed: 89:c5:81:f9:ce:a3:96:77:1e:58:d7:bb:8a:cc:ac: 94:b0:7f:2c:18:fb:cc:ba:9e:6c:8d:95:fb:fa:5f: b3:a7:18:46:d2:b6:93:4d:53:1e:30:76:52:eb:de: 6a:a7:08:86:a6:eb:3f:0b:14:81:e0:bf:4d:85:7e: b8:71:d9:78:21:99:21:50:27:10:7d:81:8c:2e:b3: 1e:28:ff:44:b7:08:cb:60:4f:73:fc:59:dc:25:65: 26:2a:c3:e1:87:bc:9e:e8:36:d8:59:ad:5f:32:93: 00:8c:c3:6c:cf:43:e1:c8:5e:0d:1f:4b:fc:79:2b: e1:90:b4:c7:8f:a6:06:2c:92:5f:cb:cb:eb:b8:b5: f9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:48:AB:53:EE:5F:51:7A:66:B6:77:EF:13:44:C6:1A:C0:C0:BB:FE X509v3 Authority Key Identifier: keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5a:c6:c5:18:b5:4f:b9:bb:25:02:44:e4:98:ec:e8:4f:d9: ea:b3:ca:5b:f0:5b:4d:73:ae:f9:01:57:59:ed:50:b1:6e:90: ee:6c:61:a1:47:62:d5:eb:be:95:d2:8b:61:23:f7:63:33:9e: 2d:d2:f3:40:2a:3b:d1:7c:cd:a3:c8:1a:b8:af:bf:6c:a2:cc: ba:76:b3:f1:da:f1:0f:8b:16:37:e4:f7:71:f0:23:a8:13:15: c4:e1:70:7e:b2:c1:ce:42:66:16:5f:0c:bb:aa:15:db:6c:6e: 07:74:7e:2f:a6:ec:29:1b:6c:c9:a7:fb:1c:0e:b1:95:47:40: 7c:aa:51:2f:36:6e:e8:d0:b8:c4:49:8c:74:cd:63:39:0b:3e: 07:51:9a:2c:28:1b:85:21:45:8c:f9:29:f7:a2:ad:9f:4c:56: fa:5f:f5:18:91:16:dc:f6:bb:63:2b:3c:6b:19:a9:74:a3:ff: e8:20:1d:ae:ef:90:76:8b:2a:89:8d:73:67:e3:eb:ea:9a:8d: ff:59:a9:c7:f2:82:de:6f:ec:02:f3:03:74:97:8e:01:d3:f2: 3c:87:48:e2:b4:85:ed:04:71:df:1c:42:f6:9d:92:96:8a:21: fc:de:1f:11:2f:fe:41:44:c8:0b:5b:27:a2:b8:4e:db:9d:64: de:b7:a5:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5STTprqPgCdSG8aQOemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZGNjZTkxMDAwNDUxNDk0YzQzYzE1ZDE3MmRhMmViOWQ1 Yjc5NTYwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD EyhmMTQ4YWI1M2VlNWY1MTdhNjZiNjc3ZWYxMzQ0YzYxYWMwYzBiYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPmDSK+6cRr74KDQ6E/jG/zikKI+ Sp4P+RyGkNJuC9Rh1v1gHuKKPoxAKo1wTfVVDxqiFdLD08nLdtIg1Hv+IK6Rxqit FoqArcXPwQDeL7WBsDdknqzH0GoMp9tKQbm3nl6ZHjNT24HuJErWifltzf7og7u7 JO2JxYH5zqOWdx5Y17uKzKyUsH8sGPvMup5sjZX7+l+zpxhG0raTTVMeMHZS695q pwiGpus/CxSB4L9NhX64cdl4IZkhUCcQfYGMLrMeKP9EtwjLYE9z/FncJWUmKsPh h7ye6DbYWa1fMpMAjMNsz0PhyF4NH0v8eSvhkLTHj6YGLJJfy8vruLX5FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFIq1PuX1F6ZrZ37xNExhrAwLv+MB8GA1UdIwQY MBaAFJDczpEABFFJTEPBXRctouudW3lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MWZkYmItOGJhMi00YjdlLTk4MGYt ZWU2MGIwZGRiZGFhLzEva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81MWZkYmItOGJhMi00YjdlLTk4MGYtZWU2MGIwZGRiZGFh LzEva056T2tRQUVVVWxNUThGZEZ5Mmk2NTFiZVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVrGxRi1 T7m7JQJE5Jjs6E/Z6rPKW/BbTXOu+QFXWe1QsW6Q7mxhoUdi1eu+ldKLYSP3YzOe LdLzQCo70XzNo8gauK+/bKLMunaz8drxD4sWN+T3cfAjqBMVxOFwfrLBzkJmFl8M u6oV22xuB3R+L6bsKRtsyaf7HA6xlUdAfKpRLzZu6NC4xEmMdM1jOQs+B1GaLCgb hSFFjPkp96Ktn0xW+l/1GJEW3Pa7Yys8axmpdKP/6CAdru+QdosqiY1zZ+Pr6pqN /1mpx/KC3m/sAvMDdJeOAdPyPIdI4rSF7QRx3xxC9p2Slooh/N4fES/+QUTIC1sn orhO251k3relhw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:03 2025 by rpki-client