This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json) Hash identifier: eKEO5+BJdCTVzrpBkMOuAEwYli2wYPUD3SIIfLUEpXc= Subject key identifier: 24:00:64:30:1B:EA:BE:2D:4B:86:78:7E:44:66:37:DD:B4:C9:6F:20 Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d Certificate serial: 019AF0BEDAC63471C0F966F98C9F8206E8F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft Manifest number: 1726 Signing time: Fri 05 Dec 2025 23:00:30 +0000 Manifest this update: Fri 05 Dec 2025 23:00:30 +0000 Manifest next update: Sat 06 Dec 2025 23:00:30 +0000 Files and hashes: 1: MIfmeAoWN0nwDc_PxEMHlVixhH0.roa (hash: BGlglgWDBdgW/hvSdFfJEQ+q//PCVjKwrtXl1XRe9nc=) 2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: l779W15ob72XiP7mdGDRRRbGURR/+F/CLRSiKHCEoF8=) 3: ok0D6AFy1nokMBW7AtTQbtvoy-Q.roa (hash: OI8j87WnUAa44hUR7Jr4hBgPSlGVFL5uAjQD5u8Uzmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:da:c6:34:71:c0:f9:66:f9:8c:9f:82:06:e8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d Validity Not Before: Dec 5 23:00:30 2025 GMT Not After : Dec 6 23:00:30 2025 GMT Subject: CN=240064301beabe2d4b86787e446637ddb4c96f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9e:ce:ba:19:93:d1:4e:14:b0:e9:99:62:81: 92:65:ea:2c:b1:f5:d4:c8:36:ca:50:04:23:34:be: 22:7b:1c:aa:dd:cb:93:c2:05:c6:26:59:7e:88:56: da:e5:63:37:2d:bb:e5:29:21:92:b2:1e:55:ce:4e: 5a:0c:04:f8:58:0d:45:86:fb:6b:03:5c:a6:a7:aa: 12:c6:36:1b:93:b1:ee:62:e6:64:66:4e:7f:e7:36: f1:e7:09:79:06:58:3c:9d:e1:89:60:e4:3f:db:98: ab:d4:e9:4f:67:7c:e9:89:ae:57:f3:86:d4:fc:75: ae:35:92:a0:c6:9d:75:cd:de:8d:a7:79:a8:72:c2: 90:c1:d8:59:93:3f:b3:40:a5:82:9e:2b:1a:a5:d1: c0:e2:e7:21:d3:6d:0d:b1:18:6a:dd:0b:73:98:5f: 28:0a:9c:30:84:eb:d3:15:00:cc:5e:ea:7b:c0:01: 41:0a:48:d6:75:3c:7a:bb:41:bb:ed:b2:00:fb:b1: 21:c6:9d:d5:51:09:01:4b:75:04:94:72:3e:29:e9: aa:50:38:2a:03:ab:c7:50:6e:01:9c:6c:1f:07:c6: 1c:70:05:12:72:d2:e5:39:b5:1f:4f:13:1e:f1:94: 06:57:62:45:bd:f8:36:98:a4:c2:43:a4:eb:6b:59: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:64:30:1B:EA:BE:2D:4B:86:78:7E:44:66:37:DD:B4:C9:6F:20 X509v3 Authority Key Identifier: keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:1b:7a:a5:35:d6:d1:98:bb:f4:3d:bb:6e:a3:1d:1e:39:ce: b1:7c:c3:3f:f3:60:5b:0a:63:56:7a:a9:64:95:3a:71:55:3d: 22:bd:cb:f1:ba:40:de:0d:03:e4:ae:6c:1c:86:4e:ac:bb:0f: bf:ab:cb:0c:34:3f:ec:65:8b:df:c7:04:27:5f:db:83:ff:7a: 38:24:e5:07:a6:6e:3a:fa:e8:a1:ac:96:0f:e7:41:08:7b:c3: c8:b0:f6:c3:b2:06:0c:9b:7e:e1:04:57:b1:5c:79:12:40:dc: fa:eb:81:34:1a:a9:60:1e:ca:bf:c9:7a:26:75:ba:c6:a7:cc: 48:3d:4a:a6:5d:e5:f0:ec:dc:ae:d7:c1:ef:b2:d1:bc:30:17: 53:b4:a6:85:4f:be:db:3d:3b:34:9b:73:01:be:fa:51:08:a1: f6:d4:9f:27:fb:06:c4:16:d9:c9:e6:52:b3:7e:a0:4a:fa:5a: 63:51:21:8e:d4:14:70:0f:51:87:b2:84:e0:7f:73:13:a2:f1: f5:18:45:9e:6c:26:2a:20:7a:02:33:dc:3b:c6:4f:41:83:ee: 5f:75:e3:38:c9:99:60:f6:8f:e2:b4:1c:ac:ce:27:90:fa:ee: 1f:86:c8:29:dc:28:38:00:47:6d:01:0d:1d:72:7f:cd:72:a1: e6:57:04:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtrGNHHA+Wb5jJ+CBuj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTk4YjFkMGVjY2NjNGY2ZmYxYTdlN2RiODRiNGJiMmY1 NWIwOGQwHhcNMjUxMjA1MjMwMDMwWhcNMjUxMjA2MjMwMDMwWjAzMTEwLwYDVQQD EygyNDAwNjQzMDFiZWFiZTJkNGI4Njc4N2U0NDY2MzdkZGI0Yzk2ZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z7OuhmT0U4UsOmZYoGSZeossfXU yDbKUAQjNL4iexyq3cuTwgXGJll+iFba5WM3LbvlKSGSsh5Vzk5aDAT4WA1Fhvtr A1ymp6oSxjYbk7HuYuZkZk5/5zbx5wl5Blg8neGJYOQ/25ir1OlPZ3zpia5X84bU /HWuNZKgxp11zd6Np3mocsKQwdhZkz+zQKWCnisapdHA4uch020NsRhq3QtzmF8o CpwwhOvTFQDMXup7wAFBCkjWdTx6u0G77bIA+7Ehxp3VUQkBS3UElHI+KemqUDgq A6vHUG4BnGwfB8YccAUSctLlObUfTxMe8ZQGV2JFvfg2mKTCQ6Tra1lGHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQAZDAb6r4tS4Z4fkRmN920yW8gMB8GA1UdIwQY MBaAFPypix0OzMxPb/Gn59uEtLsvVbCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzIt NThmMGYzMjVjMmI4LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzItNThmMGYzMjVjMmI4 LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRt6pTXW 0Zi79D27bqMdHjnOsXzDP/NgWwpjVnqpZJU6cVU9Ir3L8bpA3g0D5K5sHIZOrLsP v6vLDDQ/7GWL38cEJ1/bg/96OCTlB6ZuOvrooayWD+dBCHvDyLD2w7IGDJt+4QRX sVx5EkDc+uuBNBqpYB7Kv8l6JnW6xqfMSD1Kpl3l8OzcrtfB77LRvDAXU7SmhU++ 2z07NJtzAb76UQih9tSfJ/sGxBbZyeZSs36gSvpaY1EhjtQUcA9Rh7KE4H9zE6Lx 9RhFnmwmKiB6AjPcO8ZPQYPuX3XjOMmZYPaP4rQcrM4nkPruH4bIKdwoOABHbQEN HXJ/zXKh5lcE+g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:49:20 2025 by rpki-client