This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json) Hash identifier: 5rrmFsFdtcV+dSDZPlGjztna7m0ey6ZU6fvAWg+H1jA= Subject key identifier: 67:F3:63:1C:61:5B:67:4F:97:55:36:DD:08:C9:8A:87:81:96:EE:C6 Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Certificate serial: 019AF5098DE2A4A8520229D2707883B9A24E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:00:35 +0000 Manifest this update: Sat 06 Dec 2025 19:00:35 +0000 Manifest next update: Sun 07 Dec 2025 19:00:35 +0000 Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=) 2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: ay7+tRGQ+GVptFR2x8CMOVVw4qX3l3nEJnM6nXLMv1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8d:e2:a4:a8:52:02:29:d2:70:78:83:b9:a2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1 Validity Not Before: Dec 6 19:00:35 2025 GMT Not After : Dec 7 19:00:35 2025 GMT Subject: CN=67f3631c615b674f975536dd08c98a878196eec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:7b:e0:e0:a9:e9:44:d3:cf:8b:ac:2b:74: 42:68:64:72:3c:26:df:69:b3:a3:0b:dd:ec:fa:d6: 3c:69:4e:81:30:4e:a7:4e:bc:e9:ba:48:69:1d:9d: 59:64:91:31:22:eb:68:a4:d0:48:1e:86:4e:ef:74: a0:5f:ea:2f:70:c5:a2:ab:66:eb:aa:e5:1f:04:f4: 64:61:53:5d:eb:1d:12:8f:c0:47:06:08:7b:b2:58: 69:2e:42:3a:f8:e7:88:52:44:e1:33:70:be:23:97: 07:c8:f3:cd:c2:6e:44:eb:55:33:c6:be:7f:1f:4e: ba:cc:9f:2f:3d:71:d1:d0:65:bf:40:cd:e0:d1:99: 32:14:d6:a7:3d:83:0e:fc:8a:a1:37:83:47:dc:5e: db:51:aa:59:fd:8f:01:35:61:02:e3:4b:57:ff:97: 24:48:b4:6f:a0:50:74:83:9b:01:a4:ee:aa:0c:e6: b7:62:f7:e5:27:87:51:14:7c:00:b4:1f:5a:db:5b: 32:49:84:18:2d:79:aa:67:7e:c5:8b:46:3f:aa:41: ff:29:07:60:3c:18:45:13:d1:5a:27:08:c5:29:a6: 46:82:26:3a:91:cb:71:15:94:7a:3d:ff:e0:2a:8f: fc:22:54:6b:b9:83:b0:50:5d:9a:0e:65:d7:05:d0: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F3:63:1C:61:5B:67:4F:97:55:36:DD:08:C9:8A:87:81:96:EE:C6 X509v3 Authority Key Identifier: keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:34:eb:03:c3:7c:23:ed:1a:3f:07:62:3a:c3:23:a6:07:83: 52:53:f4:51:bd:0a:11:16:44:c9:19:ee:f3:0c:a1:b3:68:ce: 6d:74:ad:50:01:7f:4d:38:50:10:00:0c:61:42:64:a1:23:45: 8b:56:07:27:c9:9b:67:11:06:a3:a0:68:c9:63:bc:24:e2:db: 6c:bd:ce:34:8e:10:66:24:3c:34:ec:16:07:a9:0a:3c:b5:27: a3:04:32:1f:17:24:5c:41:5e:e1:69:19:39:60:53:06:0c:79: d0:99:39:f4:8a:ba:6c:bf:29:6d:c3:7a:46:a4:2f:2e:6e:a2: 5d:61:0b:75:7a:27:da:2b:34:1a:29:3c:c1:7e:f4:dc:c9:fd: 61:c4:a7:66:ca:1c:f7:eb:78:e3:f4:6f:9f:f6:3d:e5:d3:cd: e1:56:01:d5:13:b0:f4:0e:09:d7:e5:60:c3:6a:68:f5:5d:d8: 56:61:8c:28:51:b5:2e:d3:ce:8c:0a:43:be:4a:ee:96:14:f8: b8:44:27:c5:07:ee:36:08:85:b2:56:e9:ba:9e:0b:76:24:43: 41:6a:27:1b:57:c4:0f:49:8e:ef:16:1d:fe:5a:2c:45:5e:bc: 0e:40:80:da:ec:9c:3d:81:86:d3:61:73:27:32:b7:35:5a:b6: c7:6f:59:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CY3ipKhSAinScHiDuaJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGE3ZWE3MTI4MDFlNGM4ZmViODViM2YwNzhkMDViYTEw MWFhZTEwHhcNMjUxMjA2MTkwMDM1WhcNMjUxMjA3MTkwMDM1WjAzMTEwLwYDVQQD Eyg2N2YzNjMxYzYxNWI2NzRmOTc1NTM2ZGQwOGM5OGE4NzgxOTZlZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPF74OCp6UTTz4usK3RCaGRyPCbf abOjC93s+tY8aU6BME6nTrzpukhpHZ1ZZJExIutopNBIHoZO73SgX+ovcMWiq2br quUfBPRkYVNd6x0Sj8BHBgh7slhpLkI6+OeIUkThM3C+I5cHyPPNwm5E61Uzxr5/ H066zJ8vPXHR0GW/QM3g0ZkyFNanPYMO/IqhN4NH3F7bUapZ/Y8BNWEC40tX/5ck SLRvoFB0g5sBpO6qDOa3YvflJ4dRFHwAtB9a21sySYQYLXmqZ37Fi0Y/qkH/KQdg PBhFE9FaJwjFKaZGgiY6kctxFZR6Pf/gKo/8IlRruYOwUF2aDmXXBdAarQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfzYxxhW2dPl1U23QjJioeBlu7GMB8GA1UdIwQY MBaAFJCKfqcSgB5Mj+uFs/B40FuhAarhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEt MWExMmNjMGIwNDA2LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NjA1ZTYtZDlmNC00YzMyLWI0ZDEtMWExMmNjMGIwNDA2 LzEva0lwLXB4S0FIa3lQNjRXejhIalFXNkVCcXVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjTrA8N8 I+0aPwdiOsMjpgeDUlP0Ub0KERZEyRnu8wyhs2jObXStUAF/TThQEAAMYUJkoSNF i1YHJ8mbZxEGo6BoyWO8JOLbbL3ONI4QZiQ8NOwWB6kKPLUnowQyHxckXEFe4WkZ OWBTBgx50Jk59Iq6bL8pbcN6RqQvLm6iXWELdXon2is0Gik8wX703Mn9YcSnZsoc 9+t44/Rvn/Y95dPN4VYB1ROw9A4J1+Vgw2po9V3YVmGMKFG1LtPOjApDvkrulhT4 uEQnxQfuNgiFslbpup4LdiRDQWonG1fED0mO7xYd/losRV68DkCA2uycPYGG02Fz JzK3NVq2x29ZTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:54 2025 by rpki-client