This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json) Hash identifier: z7xzi/EXnE6OJ1Ft9/pAjUj3Y3zm/AW6Gdvaetllj0Q= Subject key identifier: 16:6D:07:3D:86:50:0B:6D:F7:11:70:18:A2:84:9C:00:A0:45:B6:14 Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a Certificate serial: 019AF38A01A9B488212942957C9A33755F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft Manifest number: 0E99 Signing time: Sat 06 Dec 2025 12:01:38 +0000 Manifest this update: Sat 06 Dec 2025 12:01:38 +0000 Manifest next update: Sun 07 Dec 2025 12:01:38 +0000 Files and hashes: 1: TNPcdBpnbKooEgmUt2YrkLdYDmQ.roa (hash: WQcIls3E5pX4tymrsMPubCPP31sHiDGN5xYJkHTcWEg=) 2: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: fnaKPj95vzhIl1EkSh2xIVfYf5rAyq2iRxXmt6e21PA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:01:a9:b4:88:21:29:42:95:7c:9a:33:75:5f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a Validity Not Before: Dec 6 12:01:38 2025 GMT Not After : Dec 7 12:01:38 2025 GMT Subject: CN=166d073d86500b6df7117018a2849c00a045b614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:16:ca:40:18:77:6c:bc:7b:d8:2f:e5:57: 59:25:f3:d5:d8:e2:ee:15:60:b6:33:7a:39:9d:20: d2:69:4f:b8:6f:ad:68:0f:51:19:51:ca:5c:0a:7b: ec:38:c9:14:83:a2:a3:3f:1b:2d:eb:f7:23:9f:31: de:bc:2f:4c:a2:20:f9:ed:ee:34:1b:21:db:09:93: bd:9d:0d:82:9a:4c:6b:a3:38:35:aa:ef:4a:59:d8: 3f:0c:b7:27:75:1a:a8:56:93:4b:20:50:31:ee:5b: d8:a0:83:48:bb:89:b2:ef:42:bd:af:dd:a3:be:41: f6:c7:46:91:25:da:8a:7b:08:73:6c:a3:c3:53:58: 77:3c:31:ad:ff:16:c5:7e:1c:18:f1:25:e4:4e:33: c8:9d:46:0a:35:55:af:c7:97:1e:fa:fa:ed:f4:8b: c9:2c:3a:06:25:2c:5c:6f:22:ab:ef:be:75:e5:64: 04:ca:5c:ce:e6:d4:f4:95:ff:91:8a:ee:ad:2a:3a: 8a:b9:c0:bd:e3:65:96:aa:5d:ee:23:33:c6:65:32: 9c:aa:73:e1:24:7c:b7:98:95:9e:5e:38:92:b4:63: 6d:14:d0:d0:ca:bb:c4:85:fc:dc:32:f6:90:7a:f5: c0:2d:a9:a2:8a:05:b0:28:02:d6:44:85:f8:21:58: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6D:07:3D:86:50:0B:6D:F7:11:70:18:A2:84:9C:00:A0:45:B6:14 X509v3 Authority Key Identifier: keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c1:32:4f:5f:84:2f:ad:20:52:54:2a:12:1d:17:85:8f:2b: 02:e5:9f:cd:b0:d2:bb:00:0f:71:6a:8f:3e:82:f3:a1:fc:8e: b7:1f:26:b2:17:ae:f7:c6:ac:df:8a:b2:dc:fb:ed:82:b8:98: b1:f5:0c:fd:fe:6e:15:8b:c7:48:7d:43:d3:96:a8:66:b2:66: cb:2b:12:72:c9:27:81:9b:b3:35:47:da:39:0d:83:9d:f1:37: 25:92:c0:21:0e:fe:07:c8:c7:c4:12:ed:82:8f:a0:0f:4d:11: 43:e3:48:f0:3f:50:62:bf:65:ac:78:b2:8a:ab:70:4d:05:a2: fd:25:ee:28:9b:ac:7c:4d:b1:57:90:e0:ab:48:e0:f7:c5:7c: d8:8d:98:ef:27:bf:c8:73:8f:68:49:0c:10:b2:d5:f7:1d:a2: e6:09:9e:d7:21:16:ba:d8:be:8a:e5:ec:e0:e4:f6:b8:f9:e0: cf:51:f7:23:a8:7c:8d:bf:65:6e:f1:32:69:ec:2b:fa:ff:25: e6:af:ba:bb:0c:e5:7e:6d:d0:86:67:69:8b:67:cd:96:da:03: 34:26:4f:d7:52:27:98:bd:c4:72:25:67:be:fe:37:b0:dc:d9: 48:86:ee:51:56:5f:23:af:07:ba:8a:d2:0b:95:45:43:6f:d4: c0:d9:fe:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigGptIghKUKVfJozdV+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYThlY2ZlZTUxZjY4ZDVmODAzYWFlNmZiZmMxZmRjNDE5 MDI2MmEwHhcNMjUxMjA2MTIwMTM4WhcNMjUxMjA3MTIwMTM4WjAzMTEwLwYDVQQD EygxNjZkMDczZDg2NTAwYjZkZjcxMTcwMThhMjg0OWMwMGEwNDViNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkQWykAYd2y8e9gv5VdZJfPV2OLu FWC2M3o5nSDSaU+4b61oD1EZUcpcCnvsOMkUg6KjPxst6/cjnzHevC9MoiD57e40 GyHbCZO9nQ2Cmkxrozg1qu9KWdg/DLcndRqoVpNLIFAx7lvYoINIu4my70K9r92j vkH2x0aRJdqKewhzbKPDU1h3PDGt/xbFfhwY8SXkTjPInUYKNVWvx5ce+vrt9IvJ LDoGJSxcbyKr77515WQEylzO5tT0lf+Riu6tKjqKucC942WWql3uIzPGZTKcqnPh JHy3mJWeXjiStGNtFNDQyrvEhfzcMvaQevXALamiigWwKALWRIX4IVg9wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZtBz2GUAtt9xFwGKKEnACgRbYUMB8GA1UdIwQY MBaAFKyo7P7lH2jV+AOq5vv8H9xBkCYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUt YmJkN2IwYWJhNmFiLzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUtYmJkN2IwYWJhNmFi LzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8EyT1+E L60gUlQqEh0XhY8rAuWfzbDSuwAPcWqPPoLzofyOtx8msheu98as34qy3PvtgriY sfUM/f5uFYvHSH1D05aoZrJmyysScskngZuzNUfaOQ2DnfE3JZLAIQ7+B8jHxBLt go+gD00RQ+NI8D9QYr9lrHiyiqtwTQWi/SXuKJusfE2xV5Dgq0jg98V82I2Y7ye/ yHOPaEkMELLV9x2i5gme1yEWuti+iuXs4OT2uPngz1H3I6h8jb9lbvEyaewr+v8l 5q+6uwzlfm3Qhmdpi2fNltoDNCZP11InmL3EciVnvv43sNzZSIbuUVZfI68HuorS C5VFQ2/UwNn+Lw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:20:52 2025 by rpki-client