This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json) Hash identifier: kOXOwUvIDRMfc2t//64wWV7vGMep+dgosMGCOojsmQ0= Subject key identifier: 65:E6:2D:87:78:59:F7:03:B2:33:00:ED:C8:A5:2D:E5:DE:06:78:B3 Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df Certificate serial: 019AF50B4B092E6ABE32B59E7EE7694A40A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft Manifest number: 145F Signing time: Sat 06 Dec 2025 19:02:29 +0000 Manifest this update: Sat 06 Dec 2025 19:02:29 +0000 Manifest next update: Sun 07 Dec 2025 19:02:29 +0000 Files and hashes: 1: CXJP9kYgvGSt4VoYKuQPShczMME.roa (hash: gqOSApFpGsIytyW52e0emdHCeVR15916QBJkj7VrVD8=) 2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: nJUsDqGtfYUM8k5UDmw0KmBgACF8ezFza0JGKjfmDBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:4b:09:2e:6a:be:32:b5:9e:7e:e7:69:4a:40:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df Validity Not Before: Dec 6 19:02:29 2025 GMT Not After : Dec 7 19:02:29 2025 GMT Subject: CN=65e62d877859f703b23300edc8a52de5de0678b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:1e:2f:25:80:66:0a:4d:da:f3:78:64:83: a2:83:95:39:b4:96:f6:3f:73:46:30:e5:09:42:bc: a9:64:d5:7c:c2:82:ac:08:d4:6d:11:9e:86:30:91: d4:ec:67:88:4b:60:23:c5:d3:2c:8c:32:0c:12:6d: f2:bf:14:89:c9:39:58:59:79:71:04:dd:92:77:92: ce:11:2a:2c:87:bf:a1:1e:6c:3e:b3:df:87:62:7c: da:f8:5e:fa:3a:e4:7b:17:64:81:e4:5a:e3:49:69: be:b0:71:fa:3b:7e:b2:c1:01:9a:99:6e:73:63:7c: b5:da:de:f2:5d:af:1f:e6:af:d2:c9:88:23:d3:26: 49:f9:f4:c7:74:3c:f4:2e:d0:db:30:c0:3e:cf:3d: 2b:6f:db:70:a6:62:a1:91:e0:0e:80:d4:e0:80:07: cd:c1:b8:2e:d1:ae:95:46:cf:58:74:ef:d6:1d:e2: aa:29:e2:a9:55:f4:13:29:1b:cc:b8:9b:74:28:e5: 7e:9e:a6:b7:f3:98:a8:39:78:84:f9:49:45:88:fa: b3:e0:c7:26:04:69:db:93:cf:77:81:65:96:4c:e8: 4b:19:27:50:50:cf:55:bb:99:e4:35:06:7a:87:d2: 7e:03:f7:28:98:b7:92:03:f4:81:f5:c5:c9:52:0e: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E6:2D:87:78:59:F7:03:B2:33:00:ED:C8:A5:2D:E5:DE:06:78:B3 X509v3 Authority Key Identifier: keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:02:db:56:1f:be:3a:0a:0c:05:c7:bb:8f:ac:fc:3c:1d:8f: 6e:60:fc:cf:fa:4b:9e:c0:77:90:06:bc:8b:aa:cd:ab:19:9a: bc:b1:94:44:9b:71:df:de:26:cb:4e:e4:3b:e0:aa:cd:71:83: ad:50:94:92:3e:5a:1c:de:73:cd:a0:ff:0b:9f:ae:71:1a:6c: 3d:a4:74:82:f4:e9:8b:da:0b:c8:82:4b:4a:e7:f3:e3:73:7f: 0c:d7:3c:c2:1c:10:bd:63:89:2f:c8:d7:4c:d0:da:a2:0e:35: c5:44:55:ff:6e:4d:f0:fd:82:c3:0f:74:82:db:6f:7c:40:98: 95:6f:29:b1:47:62:cb:ba:fd:92:13:e4:74:1c:9d:50:88:28: e9:2e:71:fd:78:35:04:85:82:8f:b5:f7:de:2b:b2:0c:9f:19: dd:fa:66:01:be:44:72:d9:1c:67:58:6c:72:cf:e8:99:9e:34: 5b:1c:d3:88:21:77:0d:64:50:32:03:e6:df:ef:c9:29:01:01: ff:1e:9b:18:d7:04:21:c0:be:36:b8:49:84:8f:1c:93:54:67: aa:f6:12:bd:0f:c0:70:23:24:cb:df:1a:7f:66:fe:37:0e:fa: e4:c4:e4:83:1b:f9:5c:b8:76:b5:f1:6b:44:f1:6f:c0:45:a3: 48:cc:38:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0sJLmq+MrWefudpSkChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjE0YTkwZDQwOTVmZDI2NzY1Y2MwZTRkZjg5OWU4YzQ2 YzA2ZGYwHhcNMjUxMjA2MTkwMjI5WhcNMjUxMjA3MTkwMjI5WjAzMTEwLwYDVQQD Eyg2NWU2MmQ4Nzc4NTlmNzAzYjIzMzAwZWRjOGE1MmRlNWRlMDY3OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3weLyWAZgpN2vN4ZIOig5U5tJb2 P3NGMOUJQrypZNV8woKsCNRtEZ6GMJHU7GeIS2AjxdMsjDIMEm3yvxSJyTlYWXlx BN2Sd5LOESosh7+hHmw+s9+HYnza+F76OuR7F2SB5FrjSWm+sHH6O36ywQGamW5z Y3y12t7yXa8f5q/SyYgj0yZJ+fTHdDz0LtDbMMA+zz0rb9twpmKhkeAOgNTggAfN wbgu0a6VRs9YdO/WHeKqKeKpVfQTKRvMuJt0KOV+nqa385ioOXiE+UlFiPqz4Mcm BGnbk893gWWWTOhLGSdQUM9Vu5nkNQZ6h9J+A/comLeSA/SB9cXJUg4+swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXmLYd4WfcDsjMA7cilLeXeBnizMB8GA1UdIwQY MBaAFJIhSpDUCV/SZ2XMDk34mejEbAbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEt NTdkODAzMGI2MWUxLzEva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85YWU5YWQtNmE4Yy00N2NiLWJkZDEtNTdkODAzMGI2MWUx LzEva2lGS2tOUUpYOUpuWmN3T1RmaVo2TVJzQnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQLbVh++ OgoMBce7j6z8PB2PbmD8z/pLnsB3kAa8i6rNqxmavLGURJtx394my07kO+CqzXGD rVCUkj5aHN5zzaD/C5+ucRpsPaR0gvTpi9oLyIJLSufz43N/DNc8whwQvWOJL8jX TNDaog41xURV/25N8P2Cww90gttvfECYlW8psUdiy7r9khPkdBydUIgo6S5x/Xg1 BIWCj7X33iuyDJ8Z3fpmAb5EctkcZ1hscs/omZ40WxzTiCF3DWRQMgPm3+/JKQEB /x6bGNcEIcC+NrhJhI8ck1RnqvYSvQ/AcCMky98af2b+Nw765MTkgxv5XLh2tfFr RPFvwEWjSMw4Eg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:16 2025 by rpki-client