This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft File: kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft (raw, json) Hash identifier: WsqwTn7GTEZNF14ordhgNrlGfJQ/3T5xltOevXSaVaI= Subject key identifier: BB:F9:BD:C3:04:85:1B:88:2F:D3:78:26:98:DF:2B:A9:CB:A2:EC:54 Authority key identifier: 91:77:BA:4C:65:4D:A9:82:F6:21:15:75:FC:C8:1C:4F:09:CB:3A:1B Certificate issuer: /CN=9177ba4c654da982f6211575fcc81c4f09cb3a1b Certificate serial: 019AF0BF89C2BA52347D078D4E99E14D7E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft Manifest number: 3B Signing time: Fri 05 Dec 2025 23:01:15 +0000 Manifest this update: Fri 05 Dec 2025 23:01:15 +0000 Manifest next update: Sat 06 Dec 2025 23:01:15 +0000 Files and hashes: 1: JiK2pjmCPrTXNIAPXjRmT-mxX2g.roa (hash: wPkXhb4r7jSAULebsw8xQOmHcFjCQBNs6OfuXo7EuTM=) 2: kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl (hash: HSxZRdsphLuNtYMfcY4lpGsCXtytXcK5nvD8EYqm8MY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:89:c2:ba:52:34:7d:07:8d:4e:99:e1:4d:7e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9177ba4c654da982f6211575fcc81c4f09cb3a1b Validity Not Before: Dec 5 23:01:15 2025 GMT Not After : Dec 6 23:01:15 2025 GMT Subject: CN=bbf9bdc304851b882fd3782698df2ba9cba2ec54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:e0:be:a7:34:fc:f4:e9:ac:b2:77:00:95: 24:d0:7e:f8:1a:0a:18:1c:49:a8:72:6e:86:97:9d: 5e:f5:0c:d6:e9:2d:3b:40:3e:69:a3:89:e9:60:05: 75:e9:3b:c5:33:07:3f:09:66:ed:cd:59:9c:46:d5: 8e:15:96:77:97:6b:e7:7d:27:5f:78:25:e8:40:09: b4:4b:40:e2:fb:46:b0:e2:87:f2:dc:20:cd:d5:eb: 01:6a:6d:0b:ec:e1:92:84:1d:7e:7a:4f:8f:58:8b: 74:e6:ff:6a:28:8f:d3:0c:8a:77:f4:65:65:db:a4: 63:a1:7f:4d:f5:9d:33:fa:60:bf:cd:50:51:c8:3d: 87:3f:c8:a9:57:82:c4:c8:ab:d3:5d:7f:7d:f8:8d: 6e:34:7e:03:74:20:cd:00:aa:93:86:3d:fe:8d:90: 45:af:ea:43:93:20:27:82:b2:bb:92:c8:1c:3f:1c: df:9a:b7:e3:08:c0:83:6a:f5:43:63:64:a0:b1:43: ed:c7:63:6e:b7:25:ca:6e:fb:b2:e1:36:af:ce:61: 6c:38:96:67:73:57:56:92:a8:30:84:8a:9a:86:89: 69:86:92:5a:4d:e4:0b:e6:a8:d6:85:25:4d:69:81: f7:71:c2:70:81:77:fb:8c:53:f6:0a:fe:06:33:f8: c5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F9:BD:C3:04:85:1B:88:2F:D3:78:26:98:DF:2B:A9:CB:A2:EC:54 X509v3 Authority Key Identifier: keyid:91:77:BA:4C:65:4D:A9:82:F6:21:15:75:FC:C8:1C:4F:09:CB:3A:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:07:d2:1e:0f:5a:39:92:21:02:f0:20:7c:31:ee:80:bf:a9: 65:9f:39:9c:db:91:00:2b:4a:7e:1c:db:61:83:4d:32:38:78: a3:fa:ca:0c:b2:3f:a5:d4:4a:67:8b:c9:f4:6e:2a:3b:ad:86: 48:90:18:f9:3b:53:ce:28:e1:b2:b0:93:0f:11:49:b8:99:59: 98:18:d1:78:02:5a:59:d0:fb:a0:42:02:51:bf:d7:a0:16:59: f8:00:2f:97:2f:0c:3b:72:8d:9d:2c:30:e9:77:42:e6:1f:93: 35:56:5d:90:c8:cf:dc:26:f8:4c:6c:76:b8:d0:b7:c5:37:fb: d9:c6:cf:06:94:7c:2b:7a:98:ec:93:b5:a9:e9:d1:41:e1:b5: 1f:78:a5:da:ab:22:f2:ef:c3:6a:22:76:0c:c3:a5:81:d5:5e: 11:0d:c9:46:38:e4:0d:91:ce:46:4d:db:f4:d7:86:07:c2:90: 07:7c:32:2b:93:fb:19:59:74:cc:ed:bb:86:9e:95:1e:7e:ac: 6f:ff:8e:ca:b3:81:fd:8f:c4:6d:2a:2b:14:bb:90:8e:b1:4c: f8:d7:71:37:64:51:b1:1d:1d:48:16:64:cf:6c:f7:b7:ef:b4: a7:81:9e:43:21:ce:ec:7b:cc:d6:59:0d:f4:31:91:d1:e8:31: d2:e5:3b:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4nCulI0fQeNTpnhTX4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNzdiYTRjNjU0ZGE5ODJmNjIxMTU3NWZjYzgxYzRmMDlj YjNhMWIwHhcNMjUxMjA1MjMwMTE1WhcNMjUxMjA2MjMwMTE1WjAzMTEwLwYDVQQD EyhiYmY5YmRjMzA0ODUxYjg4MmZkMzc4MjY5OGRmMmJhOWNiYTJlYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZDgvqc0/PTprLJ3AJUk0H74GgoY HEmocm6Gl51e9QzW6S07QD5po4npYAV16TvFMwc/CWbtzVmcRtWOFZZ3l2vnfSdf eCXoQAm0S0Di+0aw4ofy3CDN1esBam0L7OGShB1+ek+PWIt05v9qKI/TDIp39GVl 26RjoX9N9Z0z+mC/zVBRyD2HP8ipV4LEyKvTXX99+I1uNH4DdCDNAKqThj3+jZBF r+pDkyAngrK7ksgcPxzfmrfjCMCDavVDY2SgsUPtx2NutyXKbvuy4TavzmFsOJZn c1dWkqgwhIqaholphpJaTeQL5qjWhSVNaYH3ccJwgXf7jFP2Cv4GM/jFIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLv5vcMEhRuIL9N4JpjfK6nLouxUMB8GA1UdIwQY MBaAFJF3ukxlTamC9iEVdfzIHE8JyzobMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1hlNlRHVk5xWUwySVJWMV9NZ2NUd25MT2hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82NGQyZGMtMWM3ZC00N2EwLWFkMzct NDU0MzdkMTZjZjczLzEva1hlNlRHVk5xWUwySVJWMV9NZ2NUd25MT2hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82NGQyZGMtMWM3ZC00N2EwLWFkMzctNDU0MzdkMTZjZjcz LzEva1hlNlRHVk5xWUwySVJWMV9NZ2NUd25MT2hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgfSHg9a OZIhAvAgfDHugL+pZZ85nNuRACtKfhzbYYNNMjh4o/rKDLI/pdRKZ4vJ9G4qO62G SJAY+TtTzijhsrCTDxFJuJlZmBjReAJaWdD7oEICUb/XoBZZ+AAvly8MO3KNnSww 6XdC5h+TNVZdkMjP3Cb4TGx2uNC3xTf72cbPBpR8K3qY7JO1qenRQeG1H3il2qsi 8u/DaiJ2DMOlgdVeEQ3JRjjkDZHORk3b9NeGB8KQB3wyK5P7GVl0zO27hp6VHn6s b/+OyrOB/Y/EbSorFLuQjrFM+NdxN2RRsR0dSBZkz2z3t++0p4GeQyHO7HvM1lkN 9DGR0egx0uU7fw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:39 2025 by rpki-client