This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json) Hash identifier: W7hBqLpKL0omDawUffGKUzsFkS86YJLLWtJA1f2gFKA= Subject key identifier: B0:7D:1C:ED:1C:6F:8C:02:AE:F9:FA:BB:03:BD:86:99:B4:05:A4:FA Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44 Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744 Certificate serial: 019AF3F7212EEB79E892371B8CB57D846959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 14:00:50 +0000 Manifest this update: Sat 06 Dec 2025 14:00:50 +0000 Manifest next update: Sun 07 Dec 2025 14:00:50 +0000 Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: rW04MxC0qkTlJ0s+g7Qo3t8rZPtDQaG5ZMqpfpOnQIA=) 2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:21:2e:eb:79:e8:92:37:1b:8c:b5:7d:84:69:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744 Validity Not Before: Dec 6 14:00:50 2025 GMT Not After : Dec 7 14:00:50 2025 GMT Subject: CN=b07d1ced1c6f8c02aef9fabb03bd8699b405a4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:fa:26:a0:7d:36:7a:dc:66:d8:b0:53:41: a4:3b:ff:6e:14:cb:4b:b8:f4:21:93:09:63:cb:3c: a7:5a:d8:fb:06:ba:92:bb:25:0c:6a:bc:b9:76:99: 96:cb:9c:f7:5d:a4:28:18:f1:5e:dd:4e:8d:b1:82: aa:c0:4d:06:01:a7:ab:7e:92:16:e1:d3:bf:99:ee: af:1a:95:a6:39:12:e3:9a:4f:75:c3:60:c3:c7:6f: 15:22:1b:a1:f1:60:79:a9:e8:67:6c:5a:84:8d:f3: e7:76:9d:9c:b2:59:ad:1c:19:db:40:89:eb:2d:11: 55:4d:e1:e0:c0:40:ff:13:75:9f:86:14:40:b5:fb: db:00:15:72:95:43:66:3d:c3:f5:ad:cd:2f:44:71: 06:6a:0d:b2:05:10:35:92:a3:bd:b5:86:9e:f7:4c: ed:dc:4f:1c:dc:6b:3c:f9:19:85:51:99:b8:4d:70: cc:4d:f4:63:a2:29:9b:6c:77:53:4c:75:25:ea:f5: 07:37:75:5d:e9:14:07:09:85:60:29:5e:be:04:0f: 6d:93:cb:36:cd:0c:45:88:3e:85:45:fe:f4:65:82: 6b:53:ec:7c:e1:15:49:6d:66:f4:14:2f:0c:84:9f: d8:83:24:ad:4c:4d:cf:34:e7:ee:d5:9f:00:34:cb: 09:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7D:1C:ED:1C:6F:8C:02:AE:F9:FA:BB:03:BD:86:99:B4:05:A4:FA X509v3 Authority Key Identifier: keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:60:df:06:2f:9b:8a:4b:eb:4a:9b:5c:46:38:67:85:82:e0: 9c:98:29:53:23:43:70:87:50:b7:99:08:cb:04:3b:4a:c5:8a: a8:f4:27:e1:7b:28:01:45:7a:12:26:22:38:3b:48:b1:99:1d: e8:ef:55:ad:bd:4c:bb:be:a3:a4:f6:98:79:8c:32:4b:90:e4: 91:ea:80:82:f6:2b:62:05:4b:34:91:d1:ca:51:57:70:f2:f0: 05:76:b1:95:34:4e:75:a2:3c:27:8e:d3:2b:b8:1a:fc:8b:1f: 38:eb:dc:06:79:c7:e3:9c:6e:df:69:ae:d9:5a:2b:7a:7e:eb: 7b:ba:a8:bc:c9:88:3f:47:91:55:0c:af:b9:54:e8:cb:c1:da: 5d:f1:c2:7f:98:56:c8:07:f6:3e:e4:03:12:cb:f4:e6:35:b5: f7:8f:80:dd:1b:43:ae:00:48:63:78:45:f8:10:6c:d5:72:66: 9e:d4:38:f1:01:43:28:fc:9b:16:16:84:11:74:64:90:7d:62: 92:b9:7a:b7:34:98:c4:5e:f3:48:b8:da:4f:fb:1a:5d:5d:39: c5:d9:6a:04:fb:36:da:1e:ae:b7:a3:8e:0a:82:21:fd:08:26: 38:8a:98:db:b2:7d:1d:3e:7f:1b:0b:ee:c4:fc:39:7a:fa:48: e2:ea:60:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yEu63nokjcbjLV9hGlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NDVmMWY0ZDU5ZjgxMWQ2MzIzZGI0ZDg2ZDRmNDE4NTRl ZGU3NDQwHhcNMjUxMjA2MTQwMDUwWhcNMjUxMjA3MTQwMDUwWjAzMTEwLwYDVQQD EyhiMDdkMWNlZDFjNmY4YzAyYWVmOWZhYmIwM2JkODY5OWI0MDVhNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAn6JqB9NnrcZtiwU0GkO/9uFMtL uPQhkwljyzynWtj7BrqSuyUMary5dpmWy5z3XaQoGPFe3U6NsYKqwE0GAaerfpIW 4dO/me6vGpWmORLjmk91w2DDx28VIhuh8WB5qehnbFqEjfPndp2cslmtHBnbQInr LRFVTeHgwED/E3WfhhRAtfvbABVylUNmPcP1rc0vRHEGag2yBRA1kqO9tYae90zt 3E8c3Gs8+RmFUZm4TXDMTfRjoimbbHdTTHUl6vUHN3Vd6RQHCYVgKV6+BA9tk8s2 zQxFiD6FRf70ZYJrU+x84RVJbWb0FC8MhJ/YgyStTE3PNOfu1Z8ANMsJCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLB9HO0cb4wCrvn6uwO9hpm0BaT6MB8GA1UdIwQY MBaAFChF8fTVn4EdYyPbTYbU9BhU7edEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMt MjI2ZjNiODAzMWI3LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS85MDY5Y2UtZGZlMS00YjhhLWFmMDMtMjI2ZjNiODAzMWI3 LzEvS0VYeDlOV2ZnUjFqSTl0Tmh0VDBHRlR0NTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGDfBi+b ikvrSptcRjhnhYLgnJgpUyNDcIdQt5kIywQ7SsWKqPQn4XsoAUV6EiYiODtIsZkd 6O9Vrb1Mu76jpPaYeYwyS5DkkeqAgvYrYgVLNJHRylFXcPLwBXaxlTROdaI8J47T K7ga/IsfOOvcBnnH45xu32mu2Voren7re7qovMmIP0eRVQyvuVToy8HaXfHCf5hW yAf2PuQDEsv05jW194+A3RtDrgBIY3hF+BBs1XJmntQ48QFDKPybFhaEEXRkkH1i krl6tzSYxF7zSLjaT/saXV05xdlqBPs22h6ut6OOCoIh/QgmOIqY27J9HT5/Gwvu xPw5evpI4upg1w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:18 2025 by rpki-client