This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json) Hash identifier: o38CVZcr7KsnFnP+09Ii+uguPQaxKEFyCoSblNvAxoo= Subject key identifier: 3B:84:FD:2C:F9:F7:64:61:E4:0E:F9:41:2A:E1:01:D6:F6:29:41:0E Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df Certificate serial: 019B34C5C98CAE4B43B3AB287544DD41737B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft Manifest number: 1480 Signing time: Fri 19 Dec 2025 04:02:15 +0000 Manifest this update: Fri 19 Dec 2025 04:02:15 +0000 Manifest next update: Sat 20 Dec 2025 04:02:15 +0000 Files and hashes: 1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=) 2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: oogMEz6CtWXK3yqUWZaVybDbdiLJ8AwQ2g21jY15+Gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:c9:8c:ae:4b:43:b3:ab:28:75:44:dd:41:73:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df Validity Not Before: Dec 19 04:02:15 2025 GMT Not After : Dec 20 04:02:15 2025 GMT Subject: CN=3b84fd2cf9f76461e40ef9412ae101d6f629410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:02:71:3e:e1:9b:67:9d:2b:c8:fd:6a:0f: d2:a7:48:4a:b7:f8:f6:1a:c9:9d:ab:3c:5a:40:9f: 1d:6f:09:16:b9:0d:bf:2c:80:b2:8c:a3:b3:cb:8d: 36:8a:cf:3b:69:e3:5a:19:bd:b8:a7:99:25:1e:d4: 46:ce:f3:8e:fe:b0:aa:e9:69:cc:15:25:7b:31:36: 13:7c:91:75:e3:70:51:a7:09:04:fb:67:48:9e:28: e0:9a:7d:cf:be:4e:c3:2a:af:41:4a:1e:59:32:f3: a9:af:f4:66:11:ca:01:61:6d:26:3b:44:ea:18:af: 29:84:04:b1:4e:77:76:f8:d7:92:f6:4e:7a:78:56: c2:fc:92:5e:ed:35:bc:01:f2:83:75:5e:fc:bd:99: d3:a8:87:b2:b5:41:b8:51:ef:45:7c:ce:d9:36:6c: 92:2f:fe:09:bb:68:45:0f:88:62:86:4d:af:7d:34: 45:e4:41:87:3e:65:b9:80:5d:1f:87:20:6a:0c:2d: d5:9c:14:64:42:68:d8:ca:68:36:d1:5f:99:74:9e: c9:bd:bc:49:d0:b1:5d:ca:41:81:54:8b:3a:d5:77: d1:67:7b:9d:f2:51:2c:d4:3a:36:75:36:0b:31:9e: e5:6a:9e:81:e1:9d:80:83:e3:4d:ce:94:cd:f7:73: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:84:FD:2C:F9:F7:64:61:E4:0E:F9:41:2A:E1:01:D6:F6:29:41:0E X509v3 Authority Key Identifier: keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:49:e3:c9:ed:f1:58:d3:5c:84:dd:3b:c4:80:db:b9:98:1f: 47:84:1b:df:4b:59:70:0d:13:03:c5:49:4d:35:4f:eb:65:1f: ba:22:9b:18:6b:d5:aa:3c:35:b4:b9:24:28:5a:c9:53:98:b4: d0:34:9a:f6:1b:3f:64:bb:52:7d:1a:b7:81:20:b2:b4:94:73: c4:6d:86:33:bf:4d:c7:1c:8f:94:c8:3c:d8:4e:f4:31:6b:9c: 00:83:0d:03:5a:c2:bb:f4:03:ec:83:13:96:2e:13:d6:16:12: c9:70:47:42:5c:b5:1c:2b:53:85:d9:e1:bb:e4:d4:84:1a:60: 45:91:b7:07:0e:fc:ac:20:bf:85:ff:cf:c9:ec:6e:f3:22:62: 49:90:35:14:41:c2:4f:7e:44:6b:6c:d5:c9:0a:fa:c5:d5:ea: d4:b2:46:78:44:62:7e:6e:7a:bd:2d:4b:bb:fa:a6:0d:97:a5: 11:c6:83:df:16:7b:80:01:97:aa:3a:bc:31:57:b5:82:f2:db: 10:6c:35:94:c9:6c:f2:d6:24:c1:a7:94:e8:38:b4:a3:34:af: 14:25:4f:5e:a9:fe:a7:a6:19:85:0f:69:81:15:2e:34:07:77: 7e:0c:ca:51:0d:2b:ef:d2:c7:40:22:2d:09:f8:30:f0:86:cc: 79:f5:7b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xcmMrktDs6sodUTdQXN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjE0YTkwZDQwOTVmZDI2NzY1Y2MwZTRkZjg5OWU4YzQ2 YzA2ZGYwHhcNMjUxMjE5MDQwMjE1WhcNMjUxMjIwMDQwMjE1WjAzMTEwLwYDVQQD EygzYjg0ZmQyY2Y5Zjc2NDYxZTQwZWY5NDEyYWUxMDFkNmY2Mjk0MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2ACcT7hm2edK8j9ag/Sp0hKt/j2 GsmdqzxaQJ8dbwkWuQ2/LICyjKOzy402is87aeNaGb24p5klHtRGzvOO/rCq6WnM FSV7MTYTfJF143BRpwkE+2dInijgmn3Pvk7DKq9BSh5ZMvOpr/RmEcoBYW0mO0Tq GK8phASxTnd2+NeS9k56eFbC/JJe7TW8AfKDdV78vZnTqIeytUG4Ue9FfM7ZNmyS L/4Ju2hFD4hihk2vfTRF5EGHPmW5gF0fhyBqDC3VnBRkQmjYymg20V+ZdJ7JvbxJ 0LFdykGBVIs61XfRZ3ud8lEs1Do2dTYLMZ7lap6B4Z2Ag+NNzpTN93NgLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuE/Sz592Rh5A75QSrhAdb2KUEOMB8GA1UdIwQY MBaAFJIhSpDUCV/SZ2XMDk34mejEbAbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEt NTdkODAzMGI2MWUxLzEva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEtNTdkODAzMGI2MWUx LzEva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXknjye3x WNNchN07xIDbuZgfR4Qb30tZcA0TA8VJTTVP62UfuiKbGGvVqjw1tLkkKFrJU5i0 0DSa9hs/ZLtSfRq3gSCytJRzxG2GM79NxxyPlMg82E70MWucAIMNA1rCu/QD7IMT li4T1hYSyXBHQly1HCtThdnhu+TUhBpgRZG3Bw78rCC/hf/Pyexu8yJiSZA1FEHC T35Ea2zVyQr6xdXq1LJGeERifm56vS1Lu/qmDZelEcaD3xZ7gAGXqjq8MVe1gvLb EGw1lMls8tYkwaeU6Di0ozSvFCVPXqn+p6YZhQ9pgRUuNAd3fgzKUQ0r79LHQCIt Cfgw8IbMefV70w== -----END CERTIFICATE-----Generated at Fri Dec 19 05:45:49 2025 by rpki-client