This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json) Hash identifier: djAnVfF47XIPKXBUz7Hc6X2p66r2DdbtBsSu5mhgXLs= Subject key identifier: 8E:C5:C0:68:74:1E:CC:12:50:C7:76:04:3F:F9:CF:6A:BC:96:8A:90 Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd Certificate serial: 019B33E91507EE23FFCD031246E6C396AF32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 00:01:11 +0000 Manifest this update: Fri 19 Dec 2025 00:01:11 +0000 Manifest next update: Sat 20 Dec 2025 00:01:11 +0000 Files and hashes: 1: 3nqGhkLV9lVUPlFFGoMeuG1mXiA.roa (hash: XcfY9Hmln8PmxUq94JhUMZLnl3Q3LCi2mdpPddFOCD0=) 2: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: skQ8K/Z+4K62sCLrOcjTGpWDCDYMzllQMdTfj1Db0Z8=) 3: wczF6RhOkPJNWwYJ_phb7iZuDt4.roa (hash: edNLlD3qbOh39DxevC9iFL+lMoE1+tSbPWNytrUaeOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:15:07:ee:23:ff:cd:03:12:46:e6:c3:96:af:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd Validity Not Before: Dec 19 00:01:11 2025 GMT Not After : Dec 20 00:01:11 2025 GMT Subject: CN=8ec5c068741ecc1250c776043ff9cf6abc968a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:ae:d4:2e:9e:7a:af:4c:76:bf:50:23:a8: 44:0e:2d:b1:ca:f3:ba:59:02:64:d8:04:5a:33:21: 60:b4:2e:bc:ba:2a:56:d1:3d:92:57:06:95:40:d6: f0:3c:82:c9:41:3f:51:cd:a0:90:16:64:dd:18:fc: dc:2e:84:90:d0:cb:a5:55:69:ac:df:53:85:a5:35: 2c:81:f4:6f:d3:12:b8:0d:d8:98:b2:4f:d1:59:22: 7e:6f:d1:b8:04:70:1a:98:e2:c8:e1:fb:57:ec:85: 64:5e:62:55:f1:4d:ea:71:7c:29:08:b0:24:d0:67: f4:95:fe:84:eb:4b:9c:41:a6:e0:3e:06:6a:a8:3a: a8:4f:88:b4:53:94:d1:d9:07:16:e3:c6:53:1e:d5: 9f:d0:9e:8f:e9:a1:fa:b5:ef:9e:bd:45:52:6d:82: f0:1c:01:7e:ac:ca:bb:e7:7f:d8:7c:df:3f:d9:ee: 86:29:c4:d8:b5:d4:5d:0b:9d:a0:c3:6e:5c:8b:f5: 02:eb:e1:18:8c:bc:ce:4f:0d:aa:0c:ff:b7:45:14: d8:ae:0f:1b:c9:36:78:a8:0a:6a:6b:e4:30:c3:c1: 65:60:4a:67:ba:16:eb:41:b8:44:c6:24:9e:11:63: 2b:0e:c9:c8:b6:9a:81:bd:93:8d:18:29:56:de:76: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C5:C0:68:74:1E:CC:12:50:C7:76:04:3F:F9:CF:6A:BC:96:8A:90 X509v3 Authority Key Identifier: keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c8:50:86:6f:56:43:18:fb:50:63:02:91:85:40:8f:2c:c8: c8:e0:ec:c3:f8:d3:cf:92:08:f7:f1:76:f0:7f:36:ca:93:83: 46:04:bb:2e:6c:7b:9d:d3:9f:ac:cf:54:01:1c:41:9e:be:89: fa:d5:8c:db:4a:6c:42:6d:19:8a:be:66:a8:4b:2f:ef:3d:70: 8b:8e:30:35:83:20:77:ea:64:5d:1f:5f:81:b7:46:09:7c:cf: fa:e3:c0:fe:18:25:ef:b4:73:ba:24:8b:e5:ca:c2:30:84:cb: c9:0d:5b:c8:5c:9f:bd:4a:b5:e8:33:39:82:31:40:4b:be:ae: 74:c8:e1:03:49:69:da:b8:98:0f:31:1e:e3:d1:1a:25:60:3d: 01:c7:57:7a:3e:59:b4:c5:8e:53:5f:eb:48:50:6f:a4:c6:48: 9c:7d:c2:95:95:b4:8a:58:7e:06:f7:8a:23:1c:5f:f7:84:0f: 98:56:a8:66:69:bf:56:ad:e3:3b:bb:e9:b8:33:99:79:f7:ed: 5b:e7:2d:08:a7:df:15:1d:a5:10:e0:42:a1:70:83:6d:ea:e4: 06:b3:ab:53:82:df:bb:93:38:fb:ac:c9:19:72:36:e9:a6:89: b1:cc:80:ae:10:e4:a6:03:73:8f:fd:2d:ee:a7:8c:23:e7:61: 1f:77:6a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6RUH7iP/zQMSRubDlq8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGM1NzNjMmQ4M2M3ZDhmZDJhM2NmOWE3ZjUzNmY5Mjky NWEzYmQwHhcNMjUxMjE5MDAwMTExWhcNMjUxMjIwMDAwMTExWjAzMTEwLwYDVQQD Eyg4ZWM1YzA2ODc0MWVjYzEyNTBjNzc2MDQzZmY5Y2Y2YWJjOTY4YTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S6u1C6eeq9Mdr9QI6hEDi2xyvO6 WQJk2ARaMyFgtC68uipW0T2SVwaVQNbwPILJQT9RzaCQFmTdGPzcLoSQ0MulVWms 31OFpTUsgfRv0xK4DdiYsk/RWSJ+b9G4BHAamOLI4ftX7IVkXmJV8U3qcXwpCLAk 0Gf0lf6E60ucQabgPgZqqDqoT4i0U5TR2QcW48ZTHtWf0J6P6aH6te+evUVSbYLw HAF+rMq753/YfN8/2e6GKcTYtdRdC52gw25ci/UC6+EYjLzOTw2qDP+3RRTYrg8b yTZ4qApqa+Qww8FlYEpnuhbrQbhExiSeEWMrDsnItpqBvZONGClW3nYUsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7FwGh0HswSUMd2BD/5z2q8loqQMB8GA1UdIwQY MBaAFJCMVzwtg8fY/So8+af1NvkpJaO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEt NGU4NWJmZDdkMDU4LzEva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84M2M0MTYtN2Q5ZC00NDdhLWFkZDEtNGU4NWJmZDdkMDU4 LzEva0l4WFBDMkR4OWo5S2p6NXBfVTItU2tsbzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmshQhm9W Qxj7UGMCkYVAjyzIyODsw/jTz5II9/F28H82ypODRgS7Lmx7ndOfrM9UARxBnr6J +tWM20psQm0Zir5mqEsv7z1wi44wNYMgd+pkXR9fgbdGCXzP+uPA/hgl77RzuiSL 5crCMITLyQ1byFyfvUq16DM5gjFAS76udMjhA0lp2riYDzEe49EaJWA9AcdXej5Z tMWOU1/rSFBvpMZInH3ClZW0ilh+BveKIxxf94QPmFaoZmm/Vq3jO7vpuDOZefft W+ctCKffFR2lEOBCoXCDberkBrOrU4Lfu5M4+6zJGXI26aaJscyArhDkpgNzj/0t 7qeMI+dhH3dq5A== -----END CERTIFICATE-----Generated at Fri Dec 19 09:14:21 2025 by rpki-client