This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json) Hash identifier: 0Fygnyn3j+ahiS003LeB1HjvZlBhccnvrHlk85AXkuI= Subject key identifier: 74:F4:67:DC:75:DA:51:E0:53:95:AA:27:CF:1D:24:1E:EE:BA:BD:D1 Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76 Certificate serial: 019AF6533A0F8BAABFF32C055CC91B125B13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft Manifest number: 1136 Signing time: Sun 07 Dec 2025 01:00:40 +0000 Manifest this update: Sun 07 Dec 2025 01:00:40 +0000 Manifest next update: Mon 08 Dec 2025 01:00:40 +0000 Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=) 2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: /E6CdyEspeBGkYt7QmINPDJpRGmdB8Eaa2QqrR7lCEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:3a:0f:8b:aa:bf:f3:2c:05:5c:c9:1b:12:5b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76 Validity Not Before: Dec 7 01:00:40 2025 GMT Not After : Dec 8 01:00:40 2025 GMT Subject: CN=74f467dc75da51e05395aa27cf1d241eeebabdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:c2:23:c0:7c:89:4e:e9:95:05:60:d6:c1: c8:9d:ad:29:6b:77:45:38:f7:df:6c:8a:fe:3c:ae: 0a:aa:ac:11:30:96:9e:10:fd:48:32:b7:42:58:9f: 09:67:21:2c:96:25:64:cb:3f:12:07:3e:86:06:85: f8:66:3a:06:dd:92:ad:04:ee:74:24:56:52:87:5e: 23:8a:33:83:5c:ab:5d:f5:8c:8d:9b:c2:a3:b0:79: 4d:b5:e6:56:0a:92:46:72:a0:91:7a:60:b0:77:64: 9d:33:3f:fe:f0:02:7e:4a:33:85:22:98:2c:94:e6: e5:a7:12:82:1f:f4:fc:db:19:95:d8:37:1e:b4:95: fc:6d:c1:31:5e:0e:b5:a0:a4:80:34:21:4b:6d:97: ca:d9:9a:5b:ad:32:62:43:8b:44:2c:e0:c1:21:f6: 91:6c:f1:60:ed:34:0c:10:3a:4f:ca:a1:2f:e5:57: 42:4c:31:24:3b:30:c7:9e:90:18:31:80:ae:a8:17: 1f:3a:8e:15:a6:f8:4d:c5:67:a5:5c:e6:bd:bc:b6: a4:9c:3f:7c:b0:51:ed:d7:c3:88:96:6e:68:6a:05: c9:f1:db:07:d8:f1:ba:33:50:f5:5f:34:dd:bf:1a: 7d:5c:6c:db:ff:65:cd:43:d5:4b:84:ec:e8:89:ba: 9f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F4:67:DC:75:DA:51:E0:53:95:AA:27:CF:1D:24:1E:EE:BA:BD:D1 X509v3 Authority Key Identifier: keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1b:72:f5:c8:54:de:fe:81:7c:4d:18:bb:95:1d:9d:d9:37: 92:2b:3c:33:ce:de:88:f4:0d:05:f3:91:0e:ea:3a:a0:c6:f2: af:93:73:1d:32:ac:fd:4c:41:2f:db:b9:e4:41:7e:67:15:82: 90:68:9f:5a:04:31:67:b5:18:f3:d8:d8:ac:9c:8d:7b:72:c8: 34:2b:4d:c5:77:cb:0c:e4:68:da:7c:34:ce:d9:65:0f:4e:bd: b2:a0:57:f4:5c:8a:4d:57:fc:b2:ca:c6:02:03:d0:b0:30:e6: 36:14:8a:5e:e7:88:2a:ce:a1:ed:48:79:4b:04:a2:17:05:bf: 80:5b:c2:2f:ea:7d:90:48:fd:db:a5:1c:07:2f:f4:68:a9:75: 31:4d:85:34:ff:d3:68:57:e3:30:68:68:e2:cd:30:d1:39:e3: df:00:4c:d9:93:ad:a5:38:25:cc:8a:14:c6:2e:d2:36:d1:a6: 86:1a:f3:86:91:12:2a:f0:88:8f:fe:8c:37:af:48:7f:cf:d9: 8d:93:85:34:2f:7e:1e:fd:ab:eb:02:88:20:92:9c:66:8e:9c: 88:38:24:79:a5:91:76:5d:fc:81:0b:df:fa:0f:e7:42:f3:bb: 1f:0a:cc:e6:3b:03:1b:a5:08:33:23:73:f3:c7:33:81:e7:ad: 59:91:43:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UzoPi6q/8ywFXMkbElsTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj ZWZjNzYwHhcNMjUxMjA3MDEwMDQwWhcNMjUxMjA4MDEwMDQwWjAzMTEwLwYDVQQD Eyg3NGY0NjdkYzc1ZGE1MWUwNTM5NWFhMjdjZjFkMjQxZWVlYmFiZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOjCI8B8iU7plQVg1sHIna0pa3dF OPffbIr+PK4KqqwRMJaeEP1IMrdCWJ8JZyEsliVkyz8SBz6GBoX4ZjoG3ZKtBO50 JFZSh14jijODXKtd9YyNm8KjsHlNteZWCpJGcqCRemCwd2SdMz/+8AJ+SjOFIpgs lOblpxKCH/T82xmV2DcetJX8bcExXg61oKSANCFLbZfK2ZpbrTJiQ4tELODBIfaR bPFg7TQMEDpPyqEv5VdCTDEkOzDHnpAYMYCuqBcfOo4VpvhNxWelXOa9vLaknD98 sFHt18OIlm5oagXJ8dsH2PG6M1D1XzTdvxp9XGzb/2XNQ9VLhOzoibqfkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT0Z9x12lHgU5WqJ88dJB7uur3RMB8GA1UdIwQY MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct MDU1N2JkNzIxN2YxLzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxty9chU 3v6BfE0Yu5Udndk3kis8M87eiPQNBfORDuo6oMbyr5NzHTKs/UxBL9u55EF+ZxWC kGifWgQxZ7UY89jYrJyNe3LINCtNxXfLDORo2nw0ztllD069sqBX9FyKTVf8ssrG AgPQsDDmNhSKXueIKs6h7Uh5SwSiFwW/gFvCL+p9kEj926UcBy/0aKl1MU2FNP/T aFfjMGho4s0w0Tnj3wBM2ZOtpTglzIoUxi7SNtGmhhrzhpESKvCIj/6MN69If8/Z jZOFNC9+Hv2r6wKIIJKcZo6ciDgkeaWRdl38gQvf+g/nQvO7HwrM5jsDG6UIMyNz 88czgeetWZFD9w== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:07 2025 by rpki-client