This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json) Hash identifier: cQyaToSyf33im/kKiM7/lykVS7BNmLH6p1xZD9zsWsA= Subject key identifier: E6:F2:5F:63:FA:C9:A4:3A:B9:73:AE:1D:39:1D:8B:5F:6D:15:53:97 Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62 Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62 Certificate serial: 019AF23F9B17AF52D763CA2B5097AD047B80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft Manifest number: 0A5E Signing time: Sat 06 Dec 2025 06:00:45 +0000 Manifest this update: Sat 06 Dec 2025 06:00:45 +0000 Manifest next update: Sun 07 Dec 2025 06:00:45 +0000 Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=) 2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: 576P8X0/LB33+AFPio3Jdjqd69L7AO3IlvblIPG9+x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9b:17:af:52:d7:63:ca:2b:50:97:ad:04:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62 Validity Not Before: Dec 6 06:00:45 2025 GMT Not After : Dec 7 06:00:45 2025 GMT Subject: CN=e6f25f63fac9a43ab973ae1d391d8b5f6d155397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:a7:79:14:b8:bd:a6:2e:48:f9:b4:a2:81: b7:c1:65:b6:8d:aa:4c:99:31:40:e5:78:c3:1e:93: 15:8c:a4:4c:89:40:12:6f:b0:b6:ca:b4:24:74:85: 05:38:cb:34:23:48:b0:ba:43:c7:0f:ec:b4:47:79: 7c:89:10:61:9e:19:62:7d:c2:77:a7:0c:2c:11:3c: d2:8d:4a:4c:a8:4f:6c:48:8f:7a:f4:6e:ed:fd:f9: dd:a5:fe:bf:d9:c3:ea:06:28:63:14:f8:cb:e9:fa: a5:de:86:bc:2b:7c:c2:bd:07:84:0e:b3:7c:7a:37: 37:56:fb:d4:0a:a2:af:95:e1:5f:5c:9e:f8:85:f7: de:bc:a6:5b:c2:77:64:cd:66:6e:87:d4:78:44:d4: 74:fd:a3:da:07:ef:05:70:0d:c8:e9:e0:ce:65:3a: 69:a9:38:23:17:9a:b8:08:3c:f0:ed:0d:11:95:1a: b3:46:89:32:55:72:dc:e1:a8:1e:17:be:33:4d:53: 9f:ae:d0:b7:18:e7:fc:d7:07:69:9d:a3:76:e0:1f: 5e:b6:f8:60:79:c9:07:9c:f7:0e:15:92:cb:80:a3: 56:d8:87:f7:ae:17:a2:e1:0e:48:69:a7:74:20:55: f4:2f:27:41:f2:8a:c5:16:a7:fa:15:7b:e5:8c:e6: da:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F2:5F:63:FA:C9:A4:3A:B9:73:AE:1D:39:1D:8B:5F:6D:15:53:97 X509v3 Authority Key Identifier: keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:9b:61:67:4b:72:59:9c:33:de:67:c4:aa:d5:c7:e1:d4:db: 4e:5d:82:b1:98:91:95:fe:22:26:b6:06:6c:03:50:9c:7e:c4: cc:d3:c5:8f:1f:9e:01:41:ef:e3:ea:c2:6d:0c:ae:99:a2:e1: c5:51:bd:b5:92:7f:f7:ad:e3:3f:ec:64:72:f5:84:8e:f9:bd: b6:cb:7f:bd:fc:a8:85:4c:e7:26:40:3a:fc:85:14:b2:00:f6: 0c:60:f0:44:91:10:a5:d0:50:d2:ef:75:4e:c6:01:26:18:b4: 20:c8:46:01:68:31:c2:f1:c7:24:13:f5:5c:6a:42:17:91:e5: 82:2b:cb:35:0c:ce:8c:d3:3e:b4:4b:b7:73:05:bb:76:ad:40: ea:85:46:8a:ec:61:34:b5:fb:34:45:2a:66:b9:c8:c8:c6:4a: 20:59:2c:5b:11:61:50:e4:b7:7c:eb:25:32:4a:d7:99:e0:43: 39:5c:cf:3b:1f:ae:57:09:87:96:86:50:ad:5a:48:f1:48:da: 4c:4e:1b:4b:f7:25:12:c3:20:03:8c:e9:fe:ce:fc:44:45:42: 01:af:01:c2:17:f9:b9:a8:85:3c:4f:51:80:ea:a7:af:2f:87: e0:66:a9:5e:b7:9a:80:da:42:99:e8:fd:e1:4f:42:ef:eb:5c: e8:cb:8b:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5sXr1LXY8orUJetBHuAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjhmYWZjZjdjNDQxYWU0OWMxY2VmOTVjNTE4YjI4MjI4 YzdjNjIwHhcNMjUxMjA2MDYwMDQ1WhcNMjUxMjA3MDYwMDQ1WjAzMTEwLwYDVQQD EyhlNmYyNWY2M2ZhYzlhNDNhYjk3M2FlMWQzOTFkOGI1ZjZkMTU1Mzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaOneRS4vaYuSPm0ooG3wWW2japM mTFA5XjDHpMVjKRMiUASb7C2yrQkdIUFOMs0I0iwukPHD+y0R3l8iRBhnhlifcJ3 pwwsETzSjUpMqE9sSI969G7t/fndpf6/2cPqBihjFPjL6fql3oa8K3zCvQeEDrN8 ejc3VvvUCqKvleFfXJ74hffevKZbwndkzWZuh9R4RNR0/aPaB+8FcA3I6eDOZTpp qTgjF5q4CDzw7Q0RlRqzRokyVXLc4ageF74zTVOfrtC3GOf81wdpnaN24B9etvhg eckHnPcOFZLLgKNW2If3rhei4Q5Iaad0IFX0LydB8orFFqf6FXvljObaaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObyX2P6yaQ6uXOuHTkdi19tFVOXMB8GA1UdIwQY MBaAFJD4+vz3xEGuScHO+VxRiygijHxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDct OGFhNGViYWQ0ZTY1LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDctOGFhNGViYWQ0ZTY1 LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5thZ0ty WZwz3mfEqtXH4dTbTl2CsZiRlf4iJrYGbANQnH7EzNPFjx+eAUHv4+rCbQyumaLh xVG9tZJ/963jP+xkcvWEjvm9tst/vfyohUznJkA6/IUUsgD2DGDwRJEQpdBQ0u91 TsYBJhi0IMhGAWgxwvHHJBP1XGpCF5HlgivLNQzOjNM+tEu3cwW7dq1A6oVGiuxh NLX7NEUqZrnIyMZKIFksWxFhUOS3fOslMkrXmeBDOVzPOx+uVwmHloZQrVpI8Uja TE4bS/clEsMgA4zp/s78REVCAa8Bwhf5uaiFPE9RgOqnry+H4GapXreagNpCmej9 4U9C7+tc6MuLvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:10 2025 by rpki-client