This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft File: kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json) Hash identifier: 78grpCW94SrvQ6fvCkRjmayhW9yDlo+viIFvrTxYhWo= Subject key identifier: C3:E8:B3:ED:A7:84:0D:86:13:B9:FE:DA:1B:61:96:DF:F1:4B:A5:3A Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09 Certificate issuer: /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09 Certificate serial: 019AF61C4F83A060BFB1FF3D81F143C114F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 00:00:41 +0000 Manifest this update: Sun 07 Dec 2025 00:00:41 +0000 Manifest next update: Mon 08 Dec 2025 00:00:41 +0000 Files and hashes: 1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: L5PspgXL/8DNfW41U8HYpKU9Mo/6bJFhea7tVfPz8R0=) 2: y0VMz-pFHy2RJvHhIyZB92njV7Y.roa (hash: uVs/qgL9urgJyfwUIJcBcgFvjGj1s6IUF07oWo8sQcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:4f:83:a0:60:bf:b1:ff:3d:81:f1:43:c1:14:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09 Validity Not Before: Dec 7 00:00:41 2025 GMT Not After : Dec 8 00:00:41 2025 GMT Subject: CN=c3e8b3eda7840d8613b9feda1b6196dff14ba53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c8:30:e2:6c:6e:2b:2c:79:0c:91:81:d8:e3: a7:7c:54:93:60:da:75:8a:e1:ef:a4:32:da:98:24: 4c:97:39:16:c8:62:0f:44:19:4f:00:b8:2e:e2:a2: 31:5e:2e:91:d2:5a:51:24:3a:ad:6b:e4:4c:16:a7: 97:33:0c:76:8e:05:6b:fb:e7:85:4a:ff:78:8c:40: ef:81:b4:81:72:57:f9:0c:00:79:62:c1:27:06:57: 6a:81:88:8b:5d:b8:83:30:66:8a:5a:c3:8b:bc:5b: fe:7e:60:99:b7:c6:96:7f:c6:c2:f1:dd:44:75:d7: ce:b2:40:e7:b8:2a:00:24:42:1f:2b:8d:f8:85:bb: 98:18:1a:25:5b:95:3a:f8:e2:01:9c:1a:d6:ba:4b: 2b:08:ab:f8:93:3c:83:6d:04:87:11:b5:5c:f4:1e: 28:78:e9:fa:eb:5e:90:76:e3:a1:24:48:ad:cf:c0: d5:aa:09:d4:c0:c3:6c:e4:54:40:bf:e3:83:82:5a: d7:48:d3:fd:06:5b:2b:81:18:5a:8f:7d:d9:2a:0b: f9:bc:e0:fe:73:67:20:f4:94:1f:d6:38:60:be:b5: 25:54:f6:22:d8:2a:9f:b4:6f:96:d0:2a:dc:e0:eb: 15:ad:18:2b:8a:31:6b:e5:32:9b:66:88:96:28:45: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E8:B3:ED:A7:84:0D:86:13:B9:FE:DA:1B:61:96:DF:F1:4B:A5:3A X509v3 Authority Key Identifier: keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:a4:d4:71:84:0b:08:8d:64:ce:09:d2:96:ce:2d:ca:f4:99: 5d:e9:f7:35:d5:b8:be:48:1f:70:58:dc:b1:ea:00:1a:7a:6d: 1c:a1:3b:6f:3f:de:e9:fa:09:82:d2:e7:de:ce:39:34:f8:9c: 8d:82:75:c1:b3:da:fb:69:ab:4c:77:fd:fc:0b:70:74:30:48: 7b:95:21:5c:81:bb:91:99:8d:5e:d4:ba:bf:e6:07:22:84:ba: d0:09:d6:11:9c:52:74:da:e7:51:44:77:1e:27:a9:43:04:af: 9c:7e:4c:a8:01:78:cd:11:65:31:55:a7:5e:a0:f5:d9:93:40: 6c:f4:e5:57:12:67:a4:2b:a7:6f:eb:19:50:89:82:b5:0c:ee: f9:b9:55:43:9a:b5:95:61:19:f3:0b:8e:eb:b5:34:d2:87:b0: ae:4b:33:d4:93:7a:99:47:85:5b:c6:ea:5c:cf:2f:af:29:28: d6:dd:ac:6e:f4:b8:97:ea:0a:b9:da:5d:a0:ab:10:e4:37:88: 7e:9b:18:da:51:ee:74:ff:65:b8:09:10:45:5e:1e:5c:45:b4: b9:41:0d:19:b1:97:0c:2e:8b:cc:96:f6:61:64:34:b7:59:b6: c0:d3:78:64:ac:b8:f8:ff:fa:16:c5:ce:ed:a9:05:5c:ac:2e: 73:da:f9:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HE+DoGC/sf89gfFDwRT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxM2M1ZWEyZjRlYWJmM2YzYzQyZGYzYzMzMWU5Y2JhMTBj OTNhMDkwHhcNMjUxMjA3MDAwMDQxWhcNMjUxMjA4MDAwMDQxWjAzMTEwLwYDVQQD EyhjM2U4YjNlZGE3ODQwZDg2MTNiOWZlZGExYjYxOTZkZmYxNGJhNTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sgw4mxuKyx5DJGB2OOnfFSTYNp1 iuHvpDLamCRMlzkWyGIPRBlPALgu4qIxXi6R0lpRJDqta+RMFqeXMwx2jgVr++eF Sv94jEDvgbSBclf5DAB5YsEnBldqgYiLXbiDMGaKWsOLvFv+fmCZt8aWf8bC8d1E ddfOskDnuCoAJEIfK434hbuYGBolW5U6+OIBnBrWuksrCKv4kzyDbQSHEbVc9B4o eOn6616QduOhJEitz8DVqgnUwMNs5FRAv+ODglrXSNP9BlsrgRhaj33ZKgv5vOD+ c2cg9JQf1jhgvrUlVPYi2CqftG+W0Crc4OsVrRgrijFr5TKbZoiWKEXi4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPos+2nhA2GE7n+2hthlt/xS6U6MB8GA1UdIwQY MBaAFJE8XqL06r8/PELfPDMenLoQyToJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUt YjEwOGFkOWUyMmM4LzEva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80YjQwZDktOTc4ZS00MmEzLTgzMWUtYjEwOGFkOWUyMmM4 LzEva1R4ZW92VHF2ejg4UXQ4OE14NmN1aERKT2drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4qTUcYQL CI1kzgnSls4tyvSZXen3NdW4vkgfcFjcseoAGnptHKE7bz/e6foJgtLn3s45NPic jYJ1wbPa+2mrTHf9/AtwdDBIe5UhXIG7kZmNXtS6v+YHIoS60AnWEZxSdNrnUUR3 HiepQwSvnH5MqAF4zRFlMVWnXqD12ZNAbPTlVxJnpCunb+sZUImCtQzu+blVQ5q1 lWEZ8wuO67U00oewrksz1JN6mUeFW8bqXM8vryko1t2sbvS4l+oKudpdoKsQ5DeI fpsY2lHudP9luAkQRV4eXEW0uUENGbGXDC6LzJb2YWQ0t1m2wNN4ZKy4+P/6FsXO 7akFXKwuc9r5AA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:46 2025 by rpki-client