This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json) Hash identifier: /AT10mWaPuiF0Ck03L2Z3M+GQbc/vpzXpsuyWCOaSyw= Subject key identifier: 67:28:48:E0:94:24:C0:53:47:5E:D9:D0:6A:FF:FB:C8:D7:E0:C3:CF Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504 Certificate serial: 019AF1642A7ABEB991302861DFD22F181212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: lvR8uT1XdfdzPl62rkuChpSc4CrZqnuFOmpiO2hUWHQ=) 2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2a:7a:be:b9:91:30:28:61:df:d2:2f:18:12:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=672848e09424c053475ed9d06afffbc8d7e0c3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:fc:87:66:a6:04:da:8c:74:6a:54:f1:08: 16:24:42:48:7d:7e:e0:e9:27:a8:de:52:4c:da:be: b0:6c:72:32:dc:83:dd:92:e0:cd:d8:eb:53:7b:27: 87:d9:19:ff:66:03:d3:d1:2e:58:7c:20:df:06:43: 17:4d:19:85:c9:c1:fe:02:63:94:46:ed:1b:bc:9c: 73:af:9d:b3:f6:1a:b3:73:20:c1:ac:7d:39:b9:19: 98:d8:15:2c:f4:f7:6b:54:3b:24:0c:e8:30:f5:85: 64:b1:38:61:d5:a4:bb:50:0c:73:f3:b5:f2:64:c3: 5e:ba:9e:cc:14:ab:05:da:bf:25:fc:db:23:97:84: 85:11:b6:aa:74:39:41:af:77:3e:29:f3:b2:eb:57: 76:28:4e:4d:a9:e2:01:fa:30:5b:8e:48:11:61:e6: 85:9b:73:2f:6f:d6:01:eb:87:4c:61:01:90:f0:13: ae:54:59:1f:d7:20:c7:c8:08:b6:a3:04:bd:9b:5f: a0:b9:03:f1:94:f9:0a:71:5b:a6:ef:41:1c:57:d9: 90:af:1b:71:40:58:6b:b0:08:96:e9:5a:c0:88:55: 75:95:a0:69:8b:df:c3:e0:1b:2a:17:37:10:14:17: 53:fe:fe:20:7d:fb:9f:c9:6d:da:e6:1d:5b:81:9a: 30:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:28:48:E0:94:24:C0:53:47:5E:D9:D0:6A:FF:FB:C8:D7:E0:C3:CF X509v3 Authority Key Identifier: keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e2:7b:66:b1:80:43:c4:d4:99:97:52:ba:95:4d:1e:e5:53: 39:81:a1:5e:bd:a9:89:a7:c7:84:c6:5a:04:92:1f:64:98:46: e1:9e:2e:3e:ed:89:f6:dd:7c:cf:b6:16:cd:15:96:a9:6e:ae: 2e:ac:e0:77:84:43:c4:df:f5:03:bb:6b:8f:f2:ab:fd:2f:75: 78:d1:4b:5d:62:cf:40:2b:fd:80:4a:2b:29:37:4c:5f:a2:da: 80:1e:13:7b:d5:67:b9:d1:30:99:ff:6a:49:00:b0:de:d5:9e: 5a:f1:cf:1e:67:db:c1:0b:6e:a3:b1:18:3b:38:dc:8a:fc:71: 01:fb:ec:44:51:bf:c7:28:3a:f6:ec:d3:17:7c:eb:60:a9:a0: 9a:b4:cb:78:cf:6a:52:dc:e6:a6:9b:8b:b8:30:e9:49:da:a5: 58:fc:48:f3:ae:71:6f:19:da:1e:80:e5:6a:ef:84:ab:03:d1: dd:ed:ba:0f:0d:4f:80:01:ff:07:cc:6b:0f:28:ca:7c:e6:57: f2:cd:49:fb:41:33:16:0a:0e:fa:d2:96:fc:a3:f8:80:38:0b: 3e:d9:bd:17:9b:bb:0d:f7:91:f6:41:c7:8b:1d:25:89:ad:3f: 16:f0:1f:f0:20:90:0f:88:15:94:8a:d3:0c:40:e7:75:c1:33: fb:8a:cc:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCp6vrmRMChh39IvGBISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTE2Mzc5YTA0MmRmNzQ0NWU0MmVmYjM2NDZkMWYyNWE2 N2Q1MDQwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD Eyg2NzI4NDhlMDk0MjRjMDUzNDc1ZWQ5ZDA2YWZmZmJjOGQ3ZTBjM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR78h2amBNqMdGpU8QgWJEJIfX7g 6Seo3lJM2r6wbHIy3IPdkuDN2OtTeyeH2Rn/ZgPT0S5YfCDfBkMXTRmFycH+AmOU Ru0bvJxzr52z9hqzcyDBrH05uRmY2BUs9PdrVDskDOgw9YVksThh1aS7UAxz87Xy ZMNeup7MFKsF2r8l/Nsjl4SFEbaqdDlBr3c+KfOy61d2KE5NqeIB+jBbjkgRYeaF m3Mvb9YB64dMYQGQ8BOuVFkf1yDHyAi2owS9m1+guQPxlPkKcVum70EcV9mQrxtx QFhrsAiW6VrAiFV1laBpi9/D4BsqFzcQFBdT/v4gffufyW3a5h1bgZowYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcoSOCUJMBTR17Z0Gr/+8jX4MPPMB8GA1UdIwQY MBaAFJBRY3mgQt90ReQu+zZG0fJaZ9UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYt NDRhOTFiYTE3YjA4LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYtNDRhOTFiYTE3YjA4 LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+J7ZrGA Q8TUmZdSupVNHuVTOYGhXr2piafHhMZaBJIfZJhG4Z4uPu2J9t18z7YWzRWWqW6u Lqzgd4RDxN/1A7trj/Kr/S91eNFLXWLPQCv9gEorKTdMX6LagB4Te9VnudEwmf9q SQCw3tWeWvHPHmfbwQtuo7EYOzjcivxxAfvsRFG/xyg69uzTF3zrYKmgmrTLeM9q UtzmppuLuDDpSdqlWPxI865xbxnaHoDlau+EqwPR3e26Dw1PgAH/B8xrDyjKfOZX 8s1J+0EzFgoO+tKW/KP4gDgLPtm9F5u7DfeR9kHHix0lia0/FvAf8CCQD4gVlIrT DEDndcEz+4rMmg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:26 2025 by rpki-client