This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft File: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft (raw, json) Hash identifier: rMs9w5p0DIP9FyOLtkofw9VYWGHpUk7fCl3xQCBdKm0= Subject key identifier: 58:95:0C:CD:16:E3:B9:1D:E9:6C:F9:3A:36:BC:D1:68:6D:E7:47:27 Authority key identifier: 90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39 Certificate issuer: /CN=907d02304a8a0630afe6a985e4dc09007851f839 Certificate serial: 019AF2AD78A987EDB2AB6C3386076C03956C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft Manifest number: DB Signing time: Sat 06 Dec 2025 08:00:46 +0000 Manifest this update: Sat 06 Dec 2025 08:00:46 +0000 Manifest next update: Sun 07 Dec 2025 08:00:46 +0000 Files and hashes: 1: kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl (hash: fG0kxFK8McS3Jz/saBdjnGa0PTDT5l7FPQE5uxVeJOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:78:a9:87:ed:b2:ab:6c:33:86:07:6c:03:95:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=907d02304a8a0630afe6a985e4dc09007851f839 Validity Not Before: Dec 6 08:00:46 2025 GMT Not After : Dec 7 08:00:46 2025 GMT Subject: CN=58950ccd16e3b91de96cf93a36bcd1686de74727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:e1:0b:b4:4b:bb:50:3b:78:e7:ff:de:8c: 98:5b:2b:2d:27:90:61:c8:fc:f8:01:b4:16:fb:8a: 08:17:bf:8f:ca:7e:a3:26:a0:e3:17:37:86:94:d4: 78:16:90:15:09:86:a2:67:c2:5d:f6:4e:ef:17:da: 10:fa:3e:0d:17:f5:f5:3b:94:64:80:c0:7c:c0:e4: f5:93:8e:cd:8a:01:5a:6b:a1:77:0a:af:56:00:ae: ba:9d:dd:dd:b0:2f:bd:bb:84:33:ca:f9:b6:cf:c2: a0:9b:f2:6b:b8:c6:6c:71:60:14:4a:52:fd:1c:a4: cc:09:40:8c:31:86:7b:20:75:09:1c:82:01:b7:24: cd:e1:f4:56:f9:84:da:d8:4c:9c:8b:ae:ff:56:c8: 9a:03:1d:92:8b:c1:d0:1c:01:bc:c5:b2:b5:05:4a: cc:25:97:82:bc:95:25:da:e6:a5:58:31:15:96:22: 7f:8f:94:4a:af:56:4e:01:f7:f7:c0:2e:82:a2:4e: b5:07:58:a8:75:55:84:dd:c1:b2:04:d9:1f:eb:5e: 37:5b:52:db:87:f4:82:ad:e5:3f:b7:67:8b:ee:df: f8:6d:18:c0:b9:fe:88:4c:d9:a3:18:b5:e4:97:33: 89:1f:5b:64:28:b0:72:88:fb:9f:64:e1:72:20:da: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:95:0C:CD:16:E3:B9:1D:E9:6C:F9:3A:36:BC:D1:68:6D:E7:47:27 X509v3 Authority Key Identifier: keyid:90:7D:02:30:4A:8A:06:30:AF:E6:A9:85:E4:DC:09:00:78:51:F8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1571dd-2e9e-4a50-b812-961a06d2acf4/1/kH0CMEqKBjCv5qmF5NwJAHhR-Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:17:a2:91:38:14:82:ba:86:7e:f7:b7:95:b3:4e:94:f3:7f: ab:c0:4b:36:27:fa:2a:2d:9f:2e:c5:63:56:e7:41:2c:3b:b2: e3:d6:62:77:29:39:f1:48:0e:3a:6a:03:81:7d:eb:9b:8c:a3: 50:dc:1c:35:d0:a4:04:6c:0b:5f:7f:c3:8c:8f:a2:77:51:ef: 4d:3f:ac:0b:8b:30:0c:16:3a:cb:9c:6d:0a:c6:11:81:38:5e: 6c:af:7b:29:3c:0e:95:26:18:0a:fc:b1:a6:50:4d:2e:c4:1a: 0b:10:0f:ad:75:da:c5:fd:4f:9a:06:0e:1e:80:18:17:bb:5d: fb:f7:ed:a0:c3:01:37:ef:ad:2c:e4:7b:ca:f3:5c:07:5a:2f: 19:a8:a5:fd:0a:9c:6c:0b:cb:24:4d:7a:02:d3:72:4c:0f:6c: 21:e8:96:df:92:a0:d4:a4:dc:d0:bb:4f:55:d4:fc:4a:0d:83: c7:c3:20:f5:6b:0d:5a:e6:d8:70:0f:93:cd:5e:19:53:3b:16: 2e:4a:1b:dc:f5:92:c3:5e:bf:72:18:e1:ab:99:c8:e0:0e:92: 7d:02:fd:4e:98:23:90:13:2b:66:35:fa:77:ca:83:9e:79:e6: d9:31:a1:c6:26:01:84:06:9b:14:62:17:6e:32:1a:7d:ab:1d: 5a:2e:1d:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXiph+2yq2wzhgdsA5VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwN2QwMjMwNGE4YTA2MzBhZmU2YTk4NWU0ZGMwOTAwNzg1 MWY4MzkwHhcNMjUxMjA2MDgwMDQ2WhcNMjUxMjA3MDgwMDQ2WjAzMTEwLwYDVQQD Eyg1ODk1MGNjZDE2ZTNiOTFkZTk2Y2Y5M2EzNmJjZDE2ODZkZTc0NzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8fhC7RLu1A7eOf/3oyYWystJ5Bh yPz4AbQW+4oIF7+Pyn6jJqDjFzeGlNR4FpAVCYaiZ8Jd9k7vF9oQ+j4NF/X1O5Rk gMB8wOT1k47NigFaa6F3Cq9WAK66nd3dsC+9u4Qzyvm2z8Kgm/JruMZscWAUSlL9 HKTMCUCMMYZ7IHUJHIIBtyTN4fRW+YTa2Eyci67/VsiaAx2Si8HQHAG8xbK1BUrM JZeCvJUl2ualWDEVliJ/j5RKr1ZOAff3wC6Cok61B1iodVWE3cGyBNkf6143W1Lb h/SCreU/t2eL7t/4bRjAuf6ITNmjGLXklzOJH1tkKLByiPufZOFyINqJ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiVDM0W47kd6Wz5Oja80Wht50cnMB8GA1UdIwQY MBaAFJB9AjBKigYwr+apheTcCQB4Ufg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0gwQ01FcUtCakN2NXFtRjVOd0pBSGhSLURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xNTcxZGQtMmU5ZS00YTUwLWI4MTIt OTYxYTA2ZDJhY2Y0LzEva0gwQ01FcUtCakN2NXFtRjVOd0pBSGhSLURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xNTcxZGQtMmU5ZS00YTUwLWI4MTItOTYxYTA2ZDJhY2Y0 LzEva0gwQ01FcUtCakN2NXFtRjVOd0pBSGhSLURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBeikTgU grqGfve3lbNOlPN/q8BLNif6Ki2fLsVjVudBLDuy49Zidyk58UgOOmoDgX3rm4yj UNwcNdCkBGwLX3/DjI+id1HvTT+sC4swDBY6y5xtCsYRgThebK97KTwOlSYYCvyx plBNLsQaCxAPrXXaxf1PmgYOHoAYF7td+/ftoMMBN++tLOR7yvNcB1ovGail/Qqc bAvLJE16AtNyTA9sIeiW35Kg1KTc0LtPVdT8Sg2Dx8Mg9WsNWubYcA+TzV4ZUzsW Lkob3PWSw16/chjhq5nI4A6SfQL9TpgjkBMrZjX6d8qDnnnm2TGhxiYBhAabFGIX bjIafasdWi4dXg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:16 2025 by rpki-client