This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft File: kJrEshegjDSPstyft0IuHekY9Rc.mft (raw, json) Hash identifier: n4v1R1+3DMzGtGusoVMoAZ5XYVNcXGUf7M/JLkN5KyA= Subject key identifier: 04:F9:4E:CE:BB:3F:38:2B:61:CF:54:23:34:C4:E2:9D:8D:4A:45:A9 Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Certificate serial: 019AF31B42BF9D0E2BEDDBCE61E206277DD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft Manifest number: 0A57 Signing time: Sat 06 Dec 2025 10:00:41 +0000 Manifest this update: Sat 06 Dec 2025 10:00:41 +0000 Manifest next update: Sun 07 Dec 2025 10:00:41 +0000 Files and hashes: 1: 68fsEjYkrgR4by_fTbemVJ74S4g.roa (hash: llyOhetb8mMlkTVijjj2HRYaNacwV37b8WoQhej4dKA=) 2: 6GUg_eGgnlwGaZPq01uGg5LgvFA.roa (hash: aAq0jIcn0dtcVSjsOoB6mFGUamTJv2Ofxf6NLQamzvw=) 3: kJrEshegjDSPstyft0IuHekY9Rc.crl (hash: XpknWhzT+3EkCzeCCPeMhPFV5XvBcjlxdNNJ4QID2no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:42:bf:9d:0e:2b:ed:db:ce:61:e2:06:27:7d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Validity Not Before: Dec 6 10:00:41 2025 GMT Not After : Dec 7 10:00:41 2025 GMT Subject: CN=04f94ecebb3f382b61cf542334c4e29d8d4a45a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:1b:15:1b:b4:2d:a1:d2:30:a9:14:4a:bf: ae:4a:f6:c1:31:3b:94:03:d4:92:37:46:d1:06:67: 1e:6a:ce:a6:0e:d1:d2:65:bf:be:e8:d0:02:f7:10: 41:3a:17:6d:20:f6:e9:04:39:ac:6d:13:89:aa:c3: 7d:12:9c:50:fe:61:63:e7:11:63:ed:a4:4d:e6:72: e1:39:c4:6b:04:78:30:76:3d:ae:10:88:42:ef:31: cf:64:7b:ba:2e:85:8b:1b:cd:13:84:61:43:b5:ab: 3b:2f:2c:06:62:ba:42:9d:b7:fc:e7:af:6a:bb:ed: 19:9d:8e:ad:f7:0b:2a:e9:a7:6b:17:eb:ae:f8:0d: 2c:2b:37:3e:af:42:b7:b3:18:26:52:f5:61:85:73: dc:eb:14:7f:f5:cd:d6:8f:c6:86:b4:c7:b0:54:62: 7b:19:ef:6b:47:87:c5:9b:fe:70:5c:8b:fb:7e:bf: 70:77:3a:f7:6d:f0:6b:e2:fb:cc:7e:e2:a8:b4:95: 6e:0b:5f:18:71:90:0a:79:50:b2:8a:81:36:2e:da: c2:b6:8b:5c:25:b5:8c:eb:72:71:96:bc:0c:39:36: 04:c4:09:05:f2:5d:2c:63:6c:45:c3:af:c3:95:df: 3d:fc:34:6b:34:62:9d:b0:f1:1f:d0:78:00:b8:09: 05:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F9:4E:CE:BB:3F:38:2B:61:CF:54:23:34:C4:E2:9D:8D:4A:45:A9 X509v3 Authority Key Identifier: keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:29:75:76:aa:82:e0:f6:08:97:ca:10:26:54:62:12:5d:a7: d7:32:32:92:da:d9:47:5e:c8:81:da:a2:8f:3a:aa:ec:cd:17: be:1a:6d:3e:a0:ee:18:8b:9c:c6:5d:2e:13:e4:59:dd:e6:cf: a1:ef:cd:fc:f0:29:7e:6e:fe:83:c8:82:e9:56:98:42:78:6b: 8d:61:33:5e:58:13:13:9e:2c:2b:cf:b0:2e:4b:0f:63:0e:e6: be:0d:94:e2:da:63:7f:41:2a:eb:97:2b:77:f6:cb:56:c7:a8: ee:fd:e9:2e:38:44:50:8e:0f:00:b5:b5:4f:9e:29:23:b5:09: aa:ab:fa:9d:a9:56:2c:c8:78:dd:ef:00:3d:16:88:dc:18:e1: 36:1e:58:30:bf:c6:eb:95:ab:1f:43:e4:5a:af:d8:4b:8e:7d: 62:20:10:07:8b:4f:a0:f4:75:d1:ef:a2:9b:e9:90:1c:a7:7b: e2:71:0a:6d:ae:4c:40:6e:a4:a6:75:6c:20:c7:40:08:ff:1b: 29:6d:eb:89:dd:da:8a:96:ac:11:d5:fa:9e:f4:2f:88:db:a0: 3b:40:71:b1:c6:94:0e:bb:a1:41:55:da:33:ba:8a:10:05:aa: f0:2d:11:88:4f:a8:cd:d0:26:db:63:d5:b7:ee:04:74:5d:a4: 03:ef:14:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0K/nQ4r7dvOYeIGJ33YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx OGY1MTcwHhcNMjUxMjA2MTAwMDQxWhcNMjUxMjA3MTAwMDQxWjAzMTEwLwYDVQQD EygwNGY5NGVjZWJiM2YzODJiNjFjZjU0MjMzNGM0ZTI5ZDhkNGE0NWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW0bFRu0LaHSMKkUSr+uSvbBMTuU A9SSN0bRBmceas6mDtHSZb++6NAC9xBBOhdtIPbpBDmsbROJqsN9EpxQ/mFj5xFj 7aRN5nLhOcRrBHgwdj2uEIhC7zHPZHu6LoWLG80ThGFDtas7LywGYrpCnbf8569q u+0ZnY6t9wsq6adrF+uu+A0sKzc+r0K3sxgmUvVhhXPc6xR/9c3Wj8aGtMewVGJ7 Ge9rR4fFm/5wXIv7fr9wdzr3bfBr4vvMfuKotJVuC18YcZAKeVCyioE2LtrCtotc JbWM63JxlrwMOTYExAkF8l0sY2xFw6/Dld89/DRrNGKdsPEf0HgAuAkFlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT5Ts67PzgrYc9UIzTE4p2NSkWpMB8GA1UdIwQY MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt ZGVkYzUyYTJlZDhmLzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyl1dqqC 4PYIl8oQJlRiEl2n1zIyktrZR17Igdqijzqq7M0XvhptPqDuGIucxl0uE+RZ3ebP oe/N/PApfm7+g8iC6VaYQnhrjWEzXlgTE54sK8+wLksPYw7mvg2U4tpjf0Eq65cr d/bLVseo7v3pLjhEUI4PALW1T54pI7UJqqv6nalWLMh43e8APRaI3BjhNh5YML/G 65WrH0PkWq/YS459YiAQB4tPoPR10e+im+mQHKd74nEKba5MQG6kpnVsIMdACP8b KW3rid3aipasEdX6nvQviNugO0BxscaUDruhQVXaM7qKEAWq8C0RiE+ozdAm22PV t+4EdF2kA+8U3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:59 2025 by rpki-client