This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json) Hash identifier: oVRdwbyd0yxIKp+Jf43J+3fAWfMpWLSDIyQjmwCuDvM= Subject key identifier: E2:D0:C6:22:E8:31:29:F9:F5:8A:F9:D4:B9:2E:90:44:1B:98:A9:FB Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0 Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0 Certificate serial: 019AF2AD53DBB98A81D0FF18DA29880E862A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: 0UG4jj7GuDHOfk24KEl+at3XBCakeT3enhndqSOkSNk=) 2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:53:db:b9:8a:81:d0:ff:18:da:29:88:0e:86:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0 Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=e2d0c622e83129f9f58af9d4b92e90441b98a9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:ce:05:76:f3:c8:d0:be:6e:69:d6:7f:f9: 72:6e:d0:21:36:9e:62:2e:92:ca:53:6c:3e:7f:2d: ec:ad:b0:dc:e7:6d:59:82:cf:ae:56:ba:dd:51:f1: 0e:11:5c:f9:23:c6:1b:51:df:bf:36:dd:8d:6b:02: 6c:37:0f:0a:e4:61:dc:fd:be:47:7d:f7:7b:32:e8: 67:0f:2d:90:fd:5b:d7:7f:96:d1:7b:0e:87:c6:06: 57:d0:51:20:1d:40:36:e4:c5:68:3a:ff:f8:75:69: fa:2b:ef:3b:4a:9b:03:f7:3f:ae:0a:e8:b4:62:7a: 29:d1:4a:a1:fd:df:80:27:da:9d:73:86:ab:10:0e: 39:e5:33:12:9c:e7:5f:3e:df:d1:ab:7d:02:74:bd: 37:e9:83:c3:2e:6e:a1:3a:23:8f:f1:22:e6:68:44: 2d:6a:3a:5c:72:0f:47:9f:49:c1:79:30:7a:b8:ab: 23:6f:57:aa:24:2f:91:b9:9a:ed:55:3b:03:39:78: 47:06:07:d6:63:d8:97:2e:e5:cf:4c:69:61:01:d1: 8f:8a:9b:96:40:44:98:63:99:f4:f2:98:d4:5e:8e: 20:a7:76:12:65:a0:10:9c:cb:fb:30:dd:10:da:b6: 67:c5:4c:85:5a:fe:df:0c:89:ac:75:aa:86:05:57: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D0:C6:22:E8:31:29:F9:F5:8A:F9:D4:B9:2E:90:44:1B:98:A9:FB X509v3 Authority Key Identifier: keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e6:c4:f3:c5:16:58:71:cf:11:71:8f:ad:cd:2c:91:c1:4e: 07:f0:4c:39:b0:f7:bc:c6:0d:ff:bc:55:48:ec:4b:45:5f:c8: 42:6b:e7:40:e3:f4:fa:74:0d:67:a2:8c:a8:12:8f:7a:48:c2: 95:cc:4f:12:5e:54:06:ca:2a:0f:44:3c:93:20:64:c7:99:ba: 94:0a:e2:51:65:45:d6:7c:9f:96:2f:f6:4c:7a:2b:18:9b:15: c9:a6:e4:27:b5:c7:f8:54:c3:8a:0d:e7:73:d4:ef:bc:85:c9: 87:1c:df:2f:76:11:69:c2:d4:10:d1:32:c6:a1:db:0c:c0:9a: 91:6a:c2:4d:34:6a:f0:9d:d5:c1:9c:f2:23:57:09:8d:4e:35: 40:ed:1a:0f:c3:f8:25:6c:00:8a:8e:e3:30:0a:13:e8:28:87: 0a:2a:ce:97:be:71:69:97:2d:c1:e9:83:88:c9:cf:c0:8d:6f: 82:c8:59:0a:b9:60:20:c0:9e:12:67:d7:28:e7:84:bd:a8:6c: 44:89:4f:16:6f:7f:dc:af:10:12:c1:36:1d:e2:cd:67:8a:4b: d2:86:cf:e9:25:96:62:4c:ab:40:91:07:53:68:6c:a9:e8:15: 03:17:9c:03:25:0f:d1:73:0f:a7:29:4c:1c:92:e5:fb:09:6f: af:26:0e:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVPbuYqB0P8Y2imIDoYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMzZkNjc4YzRiYmNhYzI0YWU2YmVhOWEyNGM5OTVjNDhk NTkzZjAwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD EyhlMmQwYzYyMmU4MzEyOWY5ZjU4YWY5ZDRiOTJlOTA0NDFiOThhOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo63OBXbzyNC+bmnWf/lybtAhNp5i LpLKU2w+fy3srbDc521Zgs+uVrrdUfEOEVz5I8YbUd+/Nt2NawJsNw8K5GHc/b5H ffd7MuhnDy2Q/VvXf5bRew6HxgZX0FEgHUA25MVoOv/4dWn6K+87SpsD9z+uCui0 Ynop0Uqh/d+AJ9qdc4arEA455TMSnOdfPt/Rq30CdL036YPDLm6hOiOP8SLmaEQt ajpccg9Hn0nBeTB6uKsjb1eqJC+RuZrtVTsDOXhHBgfWY9iXLuXPTGlhAdGPipuW QESYY5n08pjUXo4gp3YSZaAQnMv7MN0Q2rZnxUyFWv7fDImsdaqGBVdcsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLQxiLoMSn59Yr51LkukEQbmKn7MB8GA1UdIwQY MBaAFCo21njEu8rCSua+qaJMmVxI1ZPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUt ZGY2NTFiOTY2YjJiLzEvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUtZGY2NTFiOTY2YjJi LzEvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+bE88UW WHHPEXGPrc0skcFOB/BMObD3vMYN/7xVSOxLRV/IQmvnQOP0+nQNZ6KMqBKPekjC lcxPEl5UBsoqD0Q8kyBkx5m6lAriUWVF1nyfli/2THorGJsVyabkJ7XH+FTDig3n c9TvvIXJhxzfL3YRacLUENEyxqHbDMCakWrCTTRq8J3VwZzyI1cJjU41QO0aD8P4 JWwAio7jMAoT6CiHCirOl75xaZctwemDiMnPwI1vgshZCrlgIMCeEmfXKOeEvahs RIlPFm9/3K8QEsE2HeLNZ4pL0obP6SWWYkyrQJEHU2hsqegVAxecAyUP0XMPpylM HJLl+wlvryYODw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:01 2025 by rpki-client