This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json) Hash identifier: 9TAEp9s7OUOuDz4XX8gtf7SnRyjySOqk/lq3x6D2rq8= Subject key identifier: 71:9D:9F:55:24:5D:71:E8:B4:80:EF:5F:2A:F6:A3:E3:5D:58:07:E7 Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8 Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8 Certificate serial: 019AF31C4BEB91922272D8DAFF0D256B986A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft Manifest number: 0B76 Signing time: Sat 06 Dec 2025 10:01:49 +0000 Manifest this update: Sat 06 Dec 2025 10:01:49 +0000 Manifest next update: Sun 07 Dec 2025 10:01:49 +0000 Files and hashes: 1: bRhGJqv0p8mJ4Y5Zi3hw3lkQdsk.roa (hash: z2JalsCXdVTGdLdK888EdCX/YOon+kmiEVhkkUSf3/w=) 2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: pjrdIYcKKVncpZqOh6BiobgF/Ux71W69IFCYNozHAZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4b:eb:91:92:22:72:d8:da:ff:0d:25:6b:98:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8 Validity Not Before: Dec 6 10:01:49 2025 GMT Not After : Dec 7 10:01:49 2025 GMT Subject: CN=719d9f55245d71e8b480ef5f2af6a3e35d5807e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:87:85:0a:53:43:d3:46:56:67:cd:da:d5:a1: 9b:ca:2e:52:dc:3d:e8:12:54:2c:f3:7b:a2:f3:f3: e0:b5:4b:76:16:40:9a:a3:8e:af:ca:4c:a1:f2:3a: 4c:dc:05:4b:67:09:44:15:bd:d0:a2:40:1c:e9:6a: a6:4b:19:e9:d2:a2:2c:08:ba:e9:3a:60:ce:de:44: 79:d1:8e:a0:96:28:07:39:9e:8d:a1:e0:b0:77:70: 8b:f7:94:a5:83:5f:8a:8f:ea:20:8e:40:6d:77:3c: 91:f7:14:4a:1d:e5:13:f6:41:a1:5a:14:37:a9:54: ee:08:ea:76:c5:df:34:f8:d9:51:49:86:f9:0c:ba: 2e:ad:9a:be:60:a9:64:f3:ff:b0:1f:9a:ee:90:6d: ab:f1:21:80:7e:7d:ff:10:b0:d1:aa:c4:e5:2a:4c: 9e:bf:44:c6:48:c0:da:d6:a4:b4:fc:45:18:de:58: f7:f0:60:3e:eb:a4:bc:ad:48:a0:dd:1b:e4:7f:0c: bb:58:70:48:45:c0:ce:1a:9d:4f:36:11:3b:57:f5: be:ff:cb:f7:34:bc:78:4f:83:ad:d9:35:b7:52:13: f7:33:a2:3c:4e:43:1f:2a:2a:9c:dc:4d:91:63:65: 3a:98:bf:d2:45:8e:85:bb:22:e1:07:13:2f:01:ad: b3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9D:9F:55:24:5D:71:E8:B4:80:EF:5F:2A:F6:A3:E3:5D:58:07:E7 X509v3 Authority Key Identifier: keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:46:49:ec:d4:ed:56:23:47:3b:a6:43:6a:13:9b:e4:9d:16: 9d:b1:b8:1d:bd:99:a2:15:15:61:12:7c:8c:49:c1:10:da:c0: 97:a6:22:9c:d8:95:c6:90:6b:fb:21:e8:4f:94:77:d6:17:27: 65:e9:25:27:d6:96:bb:4c:ec:03:7a:5f:3e:7b:f3:3b:5b:e0: 47:69:2c:c3:19:66:4f:b3:f8:c9:8d:d9:d0:37:e6:f1:5e:1f: 98:a2:48:3d:30:5d:ca:13:d2:5d:22:80:ad:9a:f7:4a:20:e0: a2:f0:0b:16:5b:78:8e:31:fb:9d:86:fe:ef:77:d3:b4:de:4d: 4f:0d:40:d7:a2:11:d6:7a:e0:6e:de:79:7f:0e:79:d1:db:3c: ad:34:ce:35:33:52:c1:b9:05:cd:7f:8c:5b:12:88:44:ff:9b: 46:1e:a3:cc:64:45:66:1f:76:53:39:13:56:8a:a0:b1:88:fa: 58:c9:26:dc:e8:ff:75:cb:04:09:75:15:f5:db:02:36:b7:ea: f2:e6:61:5b:d2:db:ce:1e:07:51:e7:19:9b:02:26:04:20:7f: 3e:da:c5:07:a6:b6:ce:ac:47:11:6f:ca:0a:1e:1f:ee:f1:2a: 24:3f:9d:22:8a:ba:91:92:09:5f:36:f4:f3:1e:c6:98:45:32: 5c:85:f1:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEvrkZIictja/w0la5hqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMTAxMDBmM2NjNzg3ZDYzMTUzMDNjYjdmYzg4ZDllMjVl NTZlYTgwHhcNMjUxMjA2MTAwMTQ5WhcNMjUxMjA3MTAwMTQ5WjAzMTEwLwYDVQQD Eyg3MTlkOWY1NTI0NWQ3MWU4YjQ4MGVmNWYyYWY2YTNlMzVkNTgwN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYeFClND00ZWZ83a1aGbyi5S3D3o ElQs83ui8/PgtUt2FkCao46vykyh8jpM3AVLZwlEFb3QokAc6WqmSxnp0qIsCLrp OmDO3kR50Y6gligHOZ6NoeCwd3CL95Slg1+Kj+ogjkBtdzyR9xRKHeUT9kGhWhQ3 qVTuCOp2xd80+NlRSYb5DLourZq+YKlk8/+wH5rukG2r8SGAfn3/ELDRqsTlKkye v0TGSMDa1qS0/EUY3lj38GA+66S8rUig3Rvkfwy7WHBIRcDOGp1PNhE7V/W+/8v3 NLx4T4Ot2TW3UhP3M6I8TkMfKiqc3E2RY2U6mL/SRY6FuyLhBxMvAa2zCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGdn1UkXXHotIDvXyr2o+NdWAfnMB8GA1UdIwQY MBaAFJEQEA88x4fWMVMDy3/IjZ4l5W6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAt MGUwMzc3ZDRlNmQ2LzEva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kOTAwYjMtNTQ2Mi00ZWI0LTljOTAtMGUwMzc3ZDRlNmQ2 LzEva1JBUUR6ekhoOVl4VXdQTGY4aU5uaVhsYnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEZJ7NTt ViNHO6ZDahOb5J0WnbG4Hb2ZohUVYRJ8jEnBENrAl6YinNiVxpBr+yHoT5R31hcn ZeklJ9aWu0zsA3pfPnvzO1vgR2kswxlmT7P4yY3Z0Dfm8V4fmKJIPTBdyhPSXSKA rZr3SiDgovALFlt4jjH7nYb+73fTtN5NTw1A16IR1nrgbt55fw550ds8rTTONTNS wbkFzX+MWxKIRP+bRh6jzGRFZh92UzkTVoqgsYj6WMkm3Oj/dcsECXUV9dsCNrfq 8uZhW9Lbzh4HUecZmwImBCB/PtrFB6a2zqxHEW/KCh4f7vEqJD+dIoq6kZIJXzb0 8x7GmEUyXIXxnw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:30 2025 by rpki-client