This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json) Hash identifier: +8MhqwAn0YF4IlyRwK5qgIHV8N2WQfTQs4DGzDsaHWM= Subject key identifier: 4F:E5:CC:1B:B7:41:42:EE:04:47:08:FA:96:63:4C:76:D9:C7:5C:2F Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21 Certificate serial: 019AF23FD379219E41098D6AE72771D10EFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=) 2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: sXFW8EO5BcMWZXWCxgFRSYCCCNisSzU13yPQP/rj6gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d3:79:21:9e:41:09:8d:6a:e7:27:71:d1:0e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=4fe5cc1bb74142ee044708fa96634c76d9c75c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:99:b8:20:c6:a6:5f:0a:80:c3:05:dc:40: b4:1f:8f:d9:15:b0:a8:89:45:36:6f:88:69:77:00: 18:b7:71:df:4e:fb:a4:35:55:ef:b7:f3:62:c2:a6: 9e:33:f7:ed:c1:47:c3:21:ea:ba:60:46:ff:6d:4b: ac:5b:63:4a:6c:b2:59:3e:96:4e:c2:78:e9:5a:13: 8d:bf:67:28:30:e8:d0:93:99:ce:8b:96:2f:41:37: 7a:36:c6:9b:26:c4:d6:a8:dd:c6:e1:4d:49:ec:28: 53:8f:e5:a5:0a:b8:a1:d2:63:f8:4c:d7:14:a7:10: 2d:83:af:d5:de:40:11:ef:cb:1a:ac:40:08:42:44: 5d:ad:40:80:75:b6:6e:2f:69:bc:63:50:5e:d6:06: 02:cd:06:9c:ff:f6:ea:95:5f:0a:89:2c:ba:11:b1: 29:24:15:c9:bd:ac:00:62:93:8b:29:b1:d2:2e:f1: 11:21:e1:1d:e6:81:33:82:01:fb:d3:fb:1e:0e:4a: 34:53:af:5c:e7:70:b6:fc:74:0f:f0:80:a0:30:e7: 52:c3:92:ff:44:54:46:7c:0e:e6:ed:e5:5c:58:91: ff:86:b5:5d:7b:c9:2a:9d:b6:77:d7:26:5e:8d:14: 41:b4:96:45:e9:a1:ea:1c:ce:88:a3:35:ab:2c:45: e9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E5:CC:1B:B7:41:42:EE:04:47:08:FA:96:63:4C:76:D9:C7:5C:2F X509v3 Authority Key Identifier: keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f5:9b:41:62:f2:c5:75:e4:fb:1e:31:45:7a:3d:93:87:4b: ef:0b:64:d0:3e:1a:0c:b6:a0:90:7f:74:19:30:9a:14:d1:c6: fa:2c:4b:0b:ba:f7:af:6e:5f:ce:ed:74:40:0e:75:b7:69:1e: a7:20:01:01:58:12:52:8d:8e:a3:b1:dd:74:6f:7a:ff:e2:5e: 2d:eb:84:76:99:f6:70:b5:62:9f:ec:6e:f9:53:54:87:d9:27: 5a:9e:f9:42:ca:85:2d:c4:60:b3:d3:e6:5b:12:d0:e6:0e:f9: db:aa:1b:6d:b6:20:33:ed:88:05:49:58:d6:69:1a:39:ca:d1: bb:8c:e7:f1:90:5d:a3:b0:f5:1f:51:08:71:a8:c3:26:0a:c6: 1a:c1:c6:a5:34:c6:4b:8c:80:cb:c9:8d:88:c5:6f:1c:84:59: f7:4d:3a:e3:6e:17:9b:ac:08:14:d8:7c:08:c6:45:ab:59:54: 63:ba:8d:11:5f:36:14:b9:2b:ae:3c:ef:b2:b2:6e:7b:e6:ce: a9:3c:aa:d0:79:60:e5:fb:36:52:10:09:95:9e:4c:03:4d:9b: c3:3e:a8:ec:d9:09:40:76:c0:45:0b:2b:6a:5f:58:1d:74:fb: 34:a8:3f:6e:b0:e5:e5:af:b3:24:80:d7:c1:13:4f:fc:0b:90: 1e:b2:df:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9N5IZ5BCY1q5ydx0Q79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZTZkMzI0MjI1N2IyOTY1YjYyNzhmZjhjMTdlMTZmZjNm MDhiMjEwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD Eyg0ZmU1Y2MxYmI3NDE0MmVlMDQ0NzA4ZmE5NjYzNGM3NmQ5Yzc1YzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SKZuCDGpl8KgMMF3EC0H4/ZFbCo iUU2b4hpdwAYt3HfTvukNVXvt/NiwqaeM/ftwUfDIeq6YEb/bUusW2NKbLJZPpZO wnjpWhONv2coMOjQk5nOi5YvQTd6NsabJsTWqN3G4U1J7ChTj+WlCrih0mP4TNcU pxAtg6/V3kAR78sarEAIQkRdrUCAdbZuL2m8Y1Be1gYCzQac//bqlV8KiSy6EbEp JBXJvawAYpOLKbHSLvERIeEd5oEzggH70/seDko0U69c53C2/HQP8ICgMOdSw5L/ RFRGfA7m7eVcWJH/hrVde8kqnbZ31yZejRRBtJZF6aHqHM6IozWrLEXp+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/lzBu3QULuBEcI+pZjTHbZx1wvMB8GA1UdIwQY MBaAFJHm0yQiV7KWW2J4/4wX4W/z8IshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4Njct N2U3NGE2YTk4ZWNkLzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4NjctN2U3NGE2YTk4ZWNk LzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovWbQWLy xXXk+x4xRXo9k4dL7wtk0D4aDLagkH90GTCaFNHG+ixLC7r3r25fzu10QA51t2ke pyABAVgSUo2Oo7HddG96/+JeLeuEdpn2cLVin+xu+VNUh9knWp75QsqFLcRgs9Pm WxLQ5g7526obbbYgM+2IBUlY1mkaOcrRu4zn8ZBdo7D1H1EIcajDJgrGGsHGpTTG S4yAy8mNiMVvHIRZ9006424Xm6wIFNh8CMZFq1lUY7qNEV82FLkrrjzvsrJue+bO qTyq0Hlg5fs2UhAJlZ5MA02bwz6o7NkJQHbARQsral9YHXT7NKg/brDl5a+zJIDX wRNP/AuQHrLfuA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:11 2025 by rpki-client