This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json) Hash identifier: qFhv0WEPt4Z33Ps3THisGQ6k0XK14l8bYwUWqrttUl0= Subject key identifier: 1C:45:55:F9:A7:AE:8F:C8:B2:C1:CC:CC:35:AC:85:36:F6:BC:F9:16 Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1 Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1 Certificate serial: 019AF1648582AFF1FCC6531FBA3B5F0A8D4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft Manifest number: 09EC Signing time: Sat 06 Dec 2025 02:01:27 +0000 Manifest this update: Sat 06 Dec 2025 02:01:27 +0000 Manifest next update: Sun 07 Dec 2025 02:01:27 +0000 Files and hashes: 1: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: QE6oJj1hLK8thOrz2udx4UEmIvwT98j110e25xuQs7g=) 2: rzOwmj7yNxYTqaPlre3nKadsFUw.roa (hash: DAKc4JSGHKnobmz2nOoFMUFGL3C1Ey22s4rc8SfdlJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:85:82:af:f1:fc:c6:53:1f:ba:3b:5f:0a:8d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1 Validity Not Before: Dec 6 02:01:27 2025 GMT Not After : Dec 7 02:01:27 2025 GMT Subject: CN=1c4555f9a7ae8fc8b2c1cccc35ac8536f6bcf916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:1d:52:7b:7e:cd:a3:3a:db:73:8d:6c:d6: 7f:90:ee:29:a3:ed:2b:d5:b8:76:3b:ee:71:59:c6: 9b:5b:d1:d1:de:04:cf:84:16:63:e6:4b:52:91:7a: c1:81:e5:49:50:71:0a:74:2e:21:2b:11:a7:56:0e: 2c:ea:5a:13:b9:a4:4f:a5:35:b7:64:d8:48:57:0c: 9d:ef:4f:b7:66:91:25:51:1b:3c:c8:fd:1f:cb:88: 9e:81:13:91:99:77:1f:0f:0a:ca:60:22:a1:eb:18: d9:a2:dd:5e:7f:f4:e9:69:f3:ff:87:ce:0a:38:32: ed:75:c2:58:e6:39:a4:dc:d3:5a:43:e7:60:e7:22: 85:4b:bb:8d:1e:e9:6f:e5:42:ac:91:92:6b:2f:48: 23:60:fd:78:68:0e:01:d4:29:ac:8d:16:c5:14:3c: a2:cd:99:9a:ce:82:e0:b1:e2:48:16:a4:b6:d1:d4: e0:20:21:1c:1a:b8:18:2e:6d:60:86:58:3d:e1:cf: f0:bd:49:b2:85:13:5f:fe:68:3d:8e:57:ba:d4:35: dd:8d:99:7f:f9:30:f4:56:cb:5c:2a:39:6a:c2:33: 24:31:bd:e8:94:73:59:9b:af:3b:3e:04:1a:f2:4c: aa:f3:2f:36:00:c5:b4:88:38:e9:40:61:0c:1f:a2: c3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:45:55:F9:A7:AE:8F:C8:B2:C1:CC:CC:35:AC:85:36:F6:BC:F9:16 X509v3 Authority Key Identifier: keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:55:94:b2:69:1d:ad:71:7b:5a:ef:11:b4:b7:0d:ef:7d:e3: 64:f2:99:32:99:ef:81:a0:d9:6c:33:fb:0f:d1:fe:88:1f:e9: 13:35:29:64:b0:4d:e7:ef:94:03:44:d0:05:df:6e:ab:8d:6d: 19:d1:4a:85:fe:96:12:79:c7:c4:8a:9f:07:c8:00:48:08:99: da:23:f7:00:10:54:b9:47:cb:d9:45:de:6c:a1:f0:5c:58:d8: 8e:1a:6b:dd:44:76:cf:6f:7a:f3:c1:50:ee:5a:bc:22:37:28: 93:1c:90:d8:e3:66:08:27:02:5c:20:d7:5d:ba:0c:a2:80:83: ce:90:fb:71:17:dc:e5:51:dd:11:a8:28:4b:33:b7:c7:df:c2: 01:41:14:82:fe:97:58:7a:75:5e:26:3b:88:86:73:19:82:ab: 44:bc:3c:1d:04:ae:63:d9:3b:80:5a:11:59:51:18:fe:7b:0c: 6f:49:ba:21:16:96:a8:50:f3:33:01:c5:81:f9:d7:32:a8:32: 35:9b:00:c2:e5:0f:b3:23:9a:53:a4:29:92:ff:41:12:2a:66: b2:e2:16:05:16:73:64:6c:8f:f1:eb:4c:aa:52:d1:0b:c7:d0: fe:cb:59:84:c5:44:a4:32:10:fa:15:6f:00:fd:48:07:da:fb: 31:e2:9e:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIWCr/H8xlMfujtfCo1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTdjYmYxN2QwYmEwYTI2YWIwMWE2NDA2MDE0MTExNGNl MmI5ZDEwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD EygxYzQ1NTVmOWE3YWU4ZmM4YjJjMWNjY2MzNWFjODUzNmY2YmNmOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+odUnt+zaM623ONbNZ/kO4po+0r 1bh2O+5xWcabW9HR3gTPhBZj5ktSkXrBgeVJUHEKdC4hKxGnVg4s6loTuaRPpTW3 ZNhIVwyd70+3ZpElURs8yP0fy4iegRORmXcfDwrKYCKh6xjZot1ef/TpafP/h84K ODLtdcJY5jmk3NNaQ+dg5yKFS7uNHulv5UKskZJrL0gjYP14aA4B1CmsjRbFFDyi zZmazoLgseJIFqS20dTgICEcGrgYLm1ghlg94c/wvUmyhRNf/mg9jle61DXdjZl/ +TD0VstcKjlqwjMkMb3olHNZm687PgQa8kyq8y82AMW0iDjpQGEMH6LDwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxFVfmnro/IssHMzDWshTb2vPkWMB8GA1UdIwQY MBaAFJCny/F9C6CiarAaZAYBQRFM4rnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85MGVkOGQtZjkxZS00NGI2LWE4NGYt ZWRmYmZlZTcwYWY1LzEva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85MGVkOGQtZjkxZS00NGI2LWE4NGYtZWRmYmZlZTcwYWY1 LzEva0tmTDhYMExvS0pxc0Jwa0JnRkJFVXppdWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlWUsmkd rXF7Wu8RtLcN733jZPKZMpnvgaDZbDP7D9H+iB/pEzUpZLBN5++UA0TQBd9uq41t GdFKhf6WEnnHxIqfB8gASAiZ2iP3ABBUuUfL2UXebKHwXFjYjhpr3UR2z29688FQ 7lq8IjcokxyQ2ONmCCcCXCDXXboMooCDzpD7cRfc5VHdEagoSzO3x9/CAUEUgv6X WHp1XiY7iIZzGYKrRLw8HQSuY9k7gFoRWVEY/nsMb0m6IRaWqFDzMwHFgfnXMqgy NZsAwuUPsyOaU6Qpkv9BEipmsuIWBRZzZGyP8etMqlLRC8fQ/stZhMVEpDIQ+hVv AP1IB9r7MeKesw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:28 2025 by rpki-client