This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json) Hash identifier: kEucRlgh9BMISRwbEeEVFONJN5TElWWyQZjKyrptkc4= Subject key identifier: 81:A2:02:8E:48:F1:B4:1E:9B:92:B2:E9:BD:0F:FD:C6:FD:4A:D0:A9 Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf Certificate serial: 019AF2AD8B10F488FFF0D065CC7D187DFD17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft Manifest number: 145A Signing time: Sat 06 Dec 2025 08:00:50 +0000 Manifest this update: Sat 06 Dec 2025 08:00:50 +0000 Manifest next update: Sun 07 Dec 2025 08:00:50 +0000 Files and hashes: 1: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=) 2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: l++VO/ozNZ06pj4woT0cNYXZBOLxL2IdvJ1jzOlznuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8b:10:f4:88:ff:f0:d0:65:cc:7d:18:7d:fd:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf Validity Not Before: Dec 6 08:00:50 2025 GMT Not After : Dec 7 08:00:50 2025 GMT Subject: CN=81a2028e48f1b41e9b92b2e9bd0ffdc6fd4ad0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:90:84:35:59:e7:49:55:13:51:8c:2f:c5: 7f:23:f9:4a:bf:4a:ec:04:f9:4e:18:60:fa:24:f8: 0f:80:35:fe:cc:f4:f7:33:28:1a:28:da:01:83:d7: 74:9a:87:8b:3b:d2:cb:cb:08:f2:80:29:1c:59:69: fe:6b:2c:68:a1:d4:72:36:4c:0b:e3:c7:50:e1:77: c7:d8:96:65:09:9e:e5:3d:59:ba:b1:d5:d1:b0:14: 11:cb:23:87:b1:a5:c4:3f:5c:6c:ce:3b:d0:62:6a: b9:cf:d4:67:fe:fc:32:57:2f:c5:05:6c:57:a5:0a: 46:bc:87:0e:bc:96:d3:af:07:ca:b9:e1:f3:32:a6: 87:8d:57:9e:3a:f8:6d:0e:e4:15:58:e6:fe:02:9f: ae:ac:9d:a7:68:99:ba:e4:f7:47:20:4e:58:a4:4f: 70:f9:68:2c:2a:37:fd:11:b1:06:c5:6e:2e:55:88: 4e:60:a2:b6:ee:37:54:1f:3b:c6:64:75:f8:8f:4b: 11:1a:94:37:11:8e:49:ec:cc:18:43:b6:a2:f1:2f: f9:ba:a1:14:66:09:9e:4d:ff:de:b4:60:7c:04:47: 60:ad:9a:3c:80:9b:73:9c:08:2d:26:b8:53:fb:8f: 82:d6:0f:a2:24:61:38:20:00:18:20:ed:84:e1:ec: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A2:02:8E:48:F1:B4:1E:9B:92:B2:E9:BD:0F:FD:C6:FD:4A:D0:A9 X509v3 Authority Key Identifier: keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:18:2d:92:5f:99:6c:2e:09:e9:f3:41:33:9d:f5:ec:5c:a5: 48:71:42:cd:25:36:86:5b:0f:58:75:16:4b:78:f7:27:fc:c7: cf:2e:0e:0d:50:3d:df:af:ba:85:70:28:d1:2c:81:f6:1a:ef: a9:60:ad:29:56:d8:b3:2b:33:8b:b5:17:c2:dd:4a:68:13:c4: a4:f8:62:2a:c7:18:60:08:6a:20:75:23:4b:0f:a7:50:22:bd: 99:0a:d1:11:a8:ef:89:aa:ed:05:7a:0d:ba:1e:8c:9e:a5:ad: 55:76:bd:eb:f3:04:18:99:d4:49:5b:f8:b0:dd:70:72:19:92: 69:b1:39:aa:ee:bd:ec:53:1f:6a:27:8c:18:e1:bb:c7:30:5a: 7f:9d:d8:1d:71:88:e0:54:7f:a0:0c:67:86:83:a3:36:0c:06: 36:51:5d:56:fc:35:d9:4c:37:d4:de:9c:65:fb:db:43:f9:75: 16:7c:fc:62:2a:f1:56:7d:50:c9:ca:c7:20:33:80:3d:ee:72: aa:ad:6c:c7:5f:0d:0b:99:cd:c5:f5:7a:a5:a7:f6:6c:d6:7c: 61:d2:72:55:f9:bb:a0:10:56:62:c0:78:76:83:db:3e:99:05: 2c:10:5d:bc:b5:5b:51:8d:ce:e8:de:74:9d:a8:87:67:75:da: b3:77:5a:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYsQ9Ij/8NBlzH0Yff0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOTgxNTNiZGUwZTM0NTg0YmFjOTFmYTE4NjhkN2VmMjRk NjhiY2YwHhcNMjUxMjA2MDgwMDUwWhcNMjUxMjA3MDgwMDUwWjAzMTEwLwYDVQQD Eyg4MWEyMDI4ZTQ4ZjFiNDFlOWI5MmIyZTliZDBmZmRjNmZkNGFkMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju2QhDVZ50lVE1GML8V/I/lKv0rs BPlOGGD6JPgPgDX+zPT3MygaKNoBg9d0moeLO9LLywjygCkcWWn+ayxoodRyNkwL 48dQ4XfH2JZlCZ7lPVm6sdXRsBQRyyOHsaXEP1xszjvQYmq5z9Rn/vwyVy/FBWxX pQpGvIcOvJbTrwfKueHzMqaHjVeeOvhtDuQVWOb+Ap+urJ2naJm65PdHIE5YpE9w +WgsKjf9EbEGxW4uVYhOYKK27jdUHzvGZHX4j0sRGpQ3EY5J7MwYQ7ai8S/5uqEU ZgmeTf/etGB8BEdgrZo8gJtznAgtJrhT+4+C1g+iJGE4IAAYIO2E4ezzswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGiAo5I8bQem5Ky6b0P/cb9StCpMB8GA1UdIwQY MBaAFJCYFTveDjRYS6yR+hho1+8k1ovPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0Yjct MmY5MzNkOTg5NmUwLzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9iYTkwMDMtZDQzMy00MDk1LTg0YjctMmY5MzNkOTg5NmUw LzEva0pnVk85NE9ORmhMckpINkdHalg3eVRXaTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBgtkl+Z bC4J6fNBM5317FylSHFCzSU2hlsPWHUWS3j3J/zHzy4ODVA936+6hXAo0SyB9hrv qWCtKVbYsyszi7UXwt1KaBPEpPhiKscYYAhqIHUjSw+nUCK9mQrREajviartBXoN uh6MnqWtVXa96/MEGJnUSVv4sN1wchmSabE5qu697FMfaieMGOG7xzBaf53YHXGI 4FR/oAxnhoOjNgwGNlFdVvw12Uw31N6cZfvbQ/l1Fnz8YirxVn1QycrHIDOAPe5y qq1sx18NC5nNxfV6paf2bNZ8YdJyVfm7oBBWYsB4doPbPpkFLBBdvLVbUY3O6N50 naiHZ3Xas3daPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:58 2025 by rpki-client