This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json) Hash identifier: oRGHqMOHu4DADRgF1ORc/a0vQtReaa0NJQAxjrp1H7E= Subject key identifier: 73:07:90:E4:4D:2F:A3:99:E8:4D:DB:4D:37:7F:7A:B2:CB:AE:92:F7 Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3 Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3 Certificate serial: 019AF08817F7FE6B0D8BD42DAD500D3C81D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 22:00:42 +0000 Manifest this update: Fri 05 Dec 2025 22:00:42 +0000 Manifest next update: Sat 06 Dec 2025 22:00:42 +0000 Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: GXmbwp7pVqUwOoRR+Sk9ukPN8bPGqeOqsJXe6Ld6iQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:17:f7:fe:6b:0d:8b:d4:2d:ad:50:0d:3c:81:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3 Validity Not Before: Dec 5 22:00:42 2025 GMT Not After : Dec 6 22:00:42 2025 GMT Subject: CN=730790e44d2fa399e84ddb4d377f7ab2cbae92f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:0b:e5:49:cf:d0:23:80:cc:53:94:29:14: 88:ca:37:e1:00:51:6f:7d:64:46:78:b3:ad:05:f6: 07:ed:e5:30:8b:be:24:e7:4f:c3:cb:3d:9c:b2:19: 3d:64:60:8a:27:f1:51:a1:7c:6b:0b:6d:1e:8e:3f: b1:13:fa:be:b2:ee:99:ca:5a:21:8a:64:68:82:20: 33:da:92:30:ab:a5:39:ea:d8:74:9b:77:5a:0b:a3: 4c:59:de:ef:31:5c:98:e2:61:ce:b9:8e:f4:65:3f: 31:6a:49:b5:93:6f:08:b8:45:12:0d:d1:43:f9:d1: 51:23:28:9c:0b:59:fe:df:c7:37:15:ee:66:6c:06: c4:c8:35:ac:13:47:58:6a:ca:71:01:8e:da:f1:5f: bf:3d:a0:bf:b1:3f:b9:61:1d:c1:cb:50:bd:d4:bd: 1c:ef:13:d1:49:86:18:15:be:26:98:f6:1f:c5:4d: 3a:41:f5:54:e1:98:fc:47:ee:c4:c6:af:04:c1:95: 71:20:c5:8e:21:bc:34:e1:47:f3:34:9a:06:88:c1: c1:88:ca:f2:2b:8a:1e:27:67:4a:9d:a2:30:3b:d4: e9:10:1c:07:33:c9:58:6b:0d:87:16:a7:c8:b6:ea: f3:29:c8:9f:65:04:d5:04:85:d8:6b:52:14:3e:dc: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:07:90:E4:4D:2F:A3:99:E8:4D:DB:4D:37:7F:7A:B2:CB:AE:92:F7 X509v3 Authority Key Identifier: keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:19:8e:7c:0a:4c:82:94:67:9d:27:72:81:e1:bb:61:a2:7c: 8c:ba:11:d5:91:1f:30:ce:98:2c:73:29:39:46:85:9d:65:ec: 91:27:62:04:19:32:44:13:d5:ee:45:f7:1c:b2:a6:87:63:24: 6b:69:00:0d:b7:43:fa:2f:27:8c:12:1d:b1:20:bc:11:8b:46: c3:06:2b:95:8c:78:9e:47:bb:77:a2:67:b3:07:1b:e4:6c:1c: ed:3e:ff:9b:9c:03:3b:b4:d8:9b:b1:3b:fa:be:fe:4a:df:d3: 3a:05:48:f0:85:23:6c:ba:88:8b:68:9e:43:bc:25:0d:d7:59: 84:75:82:8e:d0:a1:8b:66:ff:d9:b5:9d:e1:c8:dd:1e:10:26: 1a:19:36:f9:a1:7a:1f:1b:ea:44:f4:ba:e4:93:92:3d:c1:37: 8b:d6:20:55:9f:20:c4:54:9d:54:de:fd:10:b6:4e:d2:a7:69: 6b:a0:98:e3:c7:2d:72:ae:f4:94:61:fd:d5:00:54:34:b5:9d: b3:4a:00:fc:27:15:a7:05:c5:2f:8f:e0:fc:d7:0a:b2:6d:b5: 5f:47:49:8c:48:86:b0:2b:7d:79:39:cf:9b:e4:ee:d5:ab:76: 81:2b:5e:cf:69:a5:12:a1:17:6f:72:fa:67:7c:7b:16:04:53: 84:66:46:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBf3/msNi9QtrVANPIHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNThhMzc3NWQwYzVlYjM4ZjIwZjBlZjlhMzYxMTA2MWE1 MTk1YjMwHhcNMjUxMjA1MjIwMDQyWhcNMjUxMjA2MjIwMDQyWjAzMTEwLwYDVQQD Eyg3MzA3OTBlNDRkMmZhMzk5ZTg0ZGRiNGQzNzdmN2FiMmNiYWU5MmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fcL5UnP0COAzFOUKRSIyjfhAFFv fWRGeLOtBfYH7eUwi74k50/Dyz2cshk9ZGCKJ/FRoXxrC20ejj+xE/q+su6Zyloh imRogiAz2pIwq6U56th0m3daC6NMWd7vMVyY4mHOuY70ZT8xakm1k28IuEUSDdFD +dFRIyicC1n+38c3Fe5mbAbEyDWsE0dYaspxAY7a8V+/PaC/sT+5YR3By1C91L0c 7xPRSYYYFb4mmPYfxU06QfVU4Zj8R+7Exq8EwZVxIMWOIbw04UfzNJoGiMHBiMry K4oeJ2dKnaIwO9TpEBwHM8lYaw2HFqfIturzKcifZQTVBIXYa1IUPtyNawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMHkORNL6OZ6E3bTTd/erLLrpL3MB8GA1UdIwQY MBaAFJFYo3ddDF6zjyDw75o2EQYaUZWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAt OGQwNGY4Nzc5NDIzLzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAtOGQwNGY4Nzc5NDIz LzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxmOfApM gpRnnSdygeG7YaJ8jLoR1ZEfMM6YLHMpOUaFnWXskSdiBBkyRBPV7kX3HLKmh2Mk a2kADbdD+i8njBIdsSC8EYtGwwYrlYx4nke7d6Jnswcb5Gwc7T7/m5wDO7TYm7E7 +r7+St/TOgVI8IUjbLqIi2ieQ7wlDddZhHWCjtChi2b/2bWd4cjdHhAmGhk2+aF6 HxvqRPS65JOSPcE3i9YgVZ8gxFSdVN79ELZO0qdpa6CY48ctcq70lGH91QBUNLWd s0oA/CcVpwXFL4/g/NcKsm21X0dJjEiGsCt9eTnPm+Tu1at2gStez2mlEqEXb3L6 Z3x7FgRThGZGTg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:07 2025 by rpki-client