This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft File: kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json) Hash identifier: JiAiXMcQbzRCPEm0kAHqLQ9rlkqEC3Uih2HV3csBdj8= Subject key identifier: 8C:4D:7D:5A:98:9D:21:67:CE:6B:7F:0F:34:3E:3F:D9:92:FF:21:A5 Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0 Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0 Certificate serial: 019AF3F74838BDB7A9632FC0AA940BDE9015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft Manifest number: 0AD4 Signing time: Sat 06 Dec 2025 14:01:00 +0000 Manifest this update: Sat 06 Dec 2025 14:01:00 +0000 Manifest next update: Sun 07 Dec 2025 14:01:00 +0000 Files and hashes: 1: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: To+c/o2CU4D7TlCw9Dm0sF8Aagoap8Rp12jIiUw+PPg=) 2: zkP1QU3MF0GoTFmSaWvEQsODbsE.roa (hash: qo/m2b8+nCxd1dPgymjA/2fWlVcNJMND2bMF+AfYiPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:48:38:bd:b7:a9:63:2f:c0:aa:94:0b:de:90:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0 Validity Not Before: Dec 6 14:01:00 2025 GMT Not After : Dec 7 14:01:00 2025 GMT Subject: CN=8c4d7d5a989d2167ce6b7f0f343e3fd992ff21a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:20:26:62:e0:86:5e:af:a6:60:7b:57:6f: 5f:96:03:24:3d:40:ff:f7:fc:03:3c:15:6e:e1:ae: ac:a9:08:30:ce:07:88:78:c0:f6:14:b0:ab:28:65: 6c:09:a8:70:93:3b:d7:c7:72:24:f1:a9:7c:74:2d: 51:8c:b8:36:03:09:c7:2f:e8:4f:34:28:2f:ce:12: f5:97:26:ef:73:f3:a8:1d:ed:84:d9:77:85:91:30: e3:1b:1f:e2:fb:ee:ab:b2:7c:36:57:c5:75:34:ab: 44:47:99:64:48:7f:45:5b:ff:ed:97:df:14:e8:c3: 9a:bd:4f:fa:c6:bb:4f:17:05:9e:68:5f:49:3b:a5: e3:47:ca:9d:11:6d:34:b7:30:fc:f7:39:bb:e5:d0: d4:86:ea:8e:d4:6e:71:7f:0d:46:e5:e5:50:ad:55: a9:46:19:f4:ca:86:96:85:b3:1e:73:26:1a:ac:90: b7:fa:3a:34:36:9b:e1:61:62:4f:ea:48:aa:59:ac: 9d:5b:a6:a4:b0:81:d1:cc:25:31:8a:70:7f:2d:b1: 67:00:7c:c5:ab:19:3a:8a:9b:57:82:40:a9:03:b3: 78:8d:b1:33:72:4c:d5:55:f3:33:e8:e1:7a:d3:ca: f0:65:f0:bc:bf:d8:cd:ed:f2:d1:2c:e8:23:3f:09: b6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4D:7D:5A:98:9D:21:67:CE:6B:7F:0F:34:3E:3F:D9:92:FF:21:A5 X509v3 Authority Key Identifier: keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:df:cc:9d:e7:80:da:d5:5e:35:c5:e9:ce:99:5c:4b:93:53: 8b:cd:b6:56:cc:af:19:67:e5:c0:d2:2a:07:18:44:31:61:ec: f3:95:83:42:14:95:a0:d7:f8:d1:a6:23:13:73:72:08:f4:fd: 3b:96:41:41:10:a4:ed:2a:b6:81:5a:0c:14:7f:67:bf:10:62: a1:f4:c5:fa:54:68:f3:5b:b9:45:b9:fc:f3:b7:57:bd:6c:35: 1b:31:70:32:87:87:f9:39:e1:b9:34:60:c9:98:26:49:44:d6: e8:57:4a:2f:da:d8:72:0f:66:c9:ef:56:fc:af:95:84:a2:7c: f8:88:df:4e:5f:5c:71:7a:6b:22:d3:7b:39:ac:7c:35:69:24: 11:b9:c1:48:0a:42:9c:58:fe:66:be:9b:6c:e2:93:12:bd:50: 0b:11:ac:69:04:25:d8:e2:3e:6b:85:04:e6:10:d9:fb:8f:9c: 2e:49:90:d3:95:81:e1:ce:57:3f:eb:b0:64:00:a5:2e:ff:64: a7:9e:0b:4a:db:95:d2:91:83:5a:ae:1d:c7:59:48:c5:56:f6: 6f:c1:33:21:8c:88:15:a4:0d:15:7f:37:4b:bb:bc:93:27:78: 1e:95:a6:4d:8a:8a:1e:c2:57:3e:ad:0f:3e:72:d6:88:38:41: ef:0d:12:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90g4vbepYy/AqpQL3pAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYzU3YjQ3NTE2YTkwZTBjZmUwNzIxNTc5MzdhNzMzYmQ1 MDNiZTAwHhcNMjUxMjA2MTQwMTAwWhcNMjUxMjA3MTQwMTAwWjAzMTEwLwYDVQQD Eyg4YzRkN2Q1YTk4OWQyMTY3Y2U2YjdmMGYzNDNlM2ZkOTkyZmYyMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI4gJmLghl6vpmB7V29flgMkPUD/ 9/wDPBVu4a6sqQgwzgeIeMD2FLCrKGVsCahwkzvXx3Ik8al8dC1RjLg2AwnHL+hP NCgvzhL1lybvc/OoHe2E2XeFkTDjGx/i++6rsnw2V8V1NKtER5lkSH9FW//tl98U 6MOavU/6xrtPFwWeaF9JO6XjR8qdEW00tzD89zm75dDUhuqO1G5xfw1G5eVQrVWp Rhn0yoaWhbMecyYarJC3+jo0NpvhYWJP6kiqWaydW6aksIHRzCUxinB/LbFnAHzF qxk6iptXgkCpA7N4jbEzckzVVfMz6OF608rwZfC8v9jN7fLRLOgjPwm2eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxNfVqYnSFnzmt/DzQ+P9mS/yGlMB8GA1UdIwQY MBaAFJDFe0dRapDgz+ByFXk3pzO9UDvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva01WN1IxRnFrT0RQNEhJVmVUZW5NNzFRTy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTZmOGItYjRkMi00MzFjLWJlNDct Y2ZhY2IyNTA4NGQ3LzEva01WN1IxRnFrT0RQNEhJVmVUZW5NNzFRTy1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81MTZmOGItYjRkMi00MzFjLWJlNDctY2ZhY2IyNTA4NGQ3 LzEva01WN1IxRnFrT0RQNEhJVmVUZW5NNzFRTy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApt/MneeA 2tVeNcXpzplcS5NTi822VsyvGWflwNIqBxhEMWHs85WDQhSVoNf40aYjE3NyCPT9 O5ZBQRCk7Sq2gVoMFH9nvxBiofTF+lRo81u5Rbn887dXvWw1GzFwMoeH+TnhuTRg yZgmSUTW6FdKL9rYcg9mye9W/K+VhKJ8+IjfTl9ccXprItN7Oax8NWkkEbnBSApC nFj+Zr6bbOKTEr1QCxGsaQQl2OI+a4UE5hDZ+4+cLkmQ05WB4c5XP+uwZAClLv9k p54LStuV0pGDWq4dx1lIxVb2b8EzIYyIFaQNFX83S7u8kyd4HpWmTYqKHsJXPq0P PnLWiDhB7w0SCw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:20:03 2025 by rpki-client