This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft File: kFFjeaBC33RF5C77NkbR8lpn1QQ.mft (raw, json) Hash identifier: lSNetN5kAhlfUhveNXtkun0/LZbRokuwWuEh574IOQI= Subject key identifier: 22:6E:A5:ED:BC:C9:F1:38:6F:6D:4F:9A:5C:75:4D:A9:BB:93:FA:82 Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504 Certificate serial: 019B2B5387E0C6C360E5B284D0797DA2B5F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 08:00:52 +0000 Manifest this update: Wed 17 Dec 2025 08:00:52 +0000 Manifest next update: Thu 18 Dec 2025 08:00:52 +0000 Files and hashes: 1: kFFjeaBC33RF5C77NkbR8lpn1QQ.crl (hash: ErbtHFLwp2NwhdKanKn0k7HpgahPQbr5LFQtuFczuk4=) 2: rczaP9LTvMdCWFhSuJS68LMo07w.roa (hash: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:87:e0:c6:c3:60:e5:b2:84:d0:79:7d:a2:b5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504 Validity Not Before: Dec 17 08:00:52 2025 GMT Not After : Dec 18 08:00:52 2025 GMT Subject: CN=226ea5edbcc9f1386f6d4f9a5c754da9bb93fa82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:09:21:d9:68:a0:d3:47:15:f9:3d:18:8a: 89:36:8b:b2:b5:6b:42:64:c3:6f:51:10:8b:7e:f4: 16:ca:ff:15:40:be:1c:6e:a8:2e:2c:a2:b4:3f:c7: 6e:a7:8b:90:7e:51:da:cc:84:47:05:18:24:a4:75: 7a:8b:79:09:69:6f:90:2a:18:d7:1d:cd:36:6d:18: 3b:11:dc:f4:be:15:7c:9c:26:4c:21:7d:b5:f7:87: d0:6c:f1:a8:60:9c:9b:7d:20:94:ff:92:3a:86:a8: c6:63:27:d3:39:86:eb:bb:52:30:a9:1c:03:e6:ec: 7a:6b:7e:4a:d0:50:5f:ae:e3:ea:82:de:b7:c6:11: 48:4c:4a:7a:92:4a:eb:62:56:6e:2f:a0:c3:31:e9: 5c:10:26:87:f6:3a:f9:9e:1c:29:2e:55:39:58:ac: 15:ef:4c:1e:92:ea:9b:d3:f4:85:c2:29:4a:9e:a8: 4c:e2:e7:26:36:33:45:db:e3:95:a6:c7:f4:e9:0b: 95:8e:48:9d:ce:1e:9e:c4:ca:02:95:3b:42:de:b6: d9:09:02:57:3a:8a:2b:54:bd:33:dc:e2:fa:35:57: 88:0d:a6:07:33:ff:3a:58:68:2e:ad:e8:1e:99:f8: 68:19:95:57:9e:df:73:98:7d:dd:7b:d5:53:51:a2: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6E:A5:ED:BC:C9:F1:38:6F:6D:4F:9A:5C:75:4D:A9:BB:93:FA:82 X509v3 Authority Key Identifier: keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:45:d4:58:38:ba:96:63:73:91:d8:59:3c:d9:92:4c:ee:a1: 8b:ce:f3:47:59:81:03:d2:fd:43:d3:29:06:c0:0b:28:f3:db: 41:25:96:2f:cb:f9:7d:17:e0:ee:8a:67:fd:55:39:b3:6a:cc: fa:05:7c:cb:b9:30:f7:53:ae:34:22:a8:14:4e:f4:3b:9b:b3: 80:79:11:8a:36:b2:f1:d5:8d:64:ba:4a:de:4e:4e:7c:71:60: 01:57:10:fa:15:8d:0e:14:09:b0:fe:d2:e3:97:42:3e:b8:4a: 26:95:7d:03:8b:ef:47:54:55:e4:9c:ca:8d:39:59:86:05:4c: 46:32:8f:1e:4e:76:68:a7:b9:f2:9c:a1:c9:ba:a7:b8:a9:b2: 18:20:29:9d:e2:fe:7a:5f:f4:02:32:9c:3b:52:9e:4a:4e:db: d2:0b:be:c1:cd:97:1c:97:b9:39:72:67:e6:7d:92:a8:60:71: c6:14:ae:da:5e:16:f5:bc:14:c3:f0:03:d5:ed:0f:b0:c8:7f: 70:84:45:a8:97:85:6f:97:51:a1:26:e7:f8:a8:0e:82:5c:b0: 46:9d:d5:63:14:66:11:fe:83:2f:bb:37:d1:1a:c5:1e:d0:2e: ce:ec:9d:a8:b4:a4:f3:b5:a5:09:52:2a:8e:55:f7:fb:13:36: 1f:cd:77:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU4fgxsNg5bKE0Hl9orX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTE2Mzc5YTA0MmRmNzQ0NWU0MmVmYjM2NDZkMWYyNWE2 N2Q1MDQwHhcNMjUxMjE3MDgwMDUyWhcNMjUxMjE4MDgwMDUyWjAzMTEwLwYDVQQD EygyMjZlYTVlZGJjYzlmMTM4NmY2ZDRmOWE1Yzc1NGRhOWJiOTNmYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPcJIdlooNNHFfk9GIqJNouytWtC ZMNvURCLfvQWyv8VQL4cbqguLKK0P8dup4uQflHazIRHBRgkpHV6i3kJaW+QKhjX Hc02bRg7Edz0vhV8nCZMIX2194fQbPGoYJybfSCU/5I6hqjGYyfTOYbru1IwqRwD 5ux6a35K0FBfruPqgt63xhFITEp6kkrrYlZuL6DDMelcECaH9jr5nhwpLlU5WKwV 70wekuqb0/SFwilKnqhM4ucmNjNF2+OVpsf06QuVjkidzh6exMoClTtC3rbZCQJX OoorVL0z3OL6NVeIDaYHM/86WGguregemfhoGZVXnt9zmH3de9VTUaJgEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJupe28yfE4b21Pmlx1Tam7k/qCMB8GA1UdIwQY MBaAFJBRY3mgQt90ReQu+zZG0fJaZ9UEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYt NDRhOTFiYTE3YjA4LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNWQ5OGYtZmE3ZS00MDFmLTgwOGYtNDRhOTFiYTE3YjA4 LzEva0ZGamVhQkMzM1JGNUM3N05rYlI4bHBuMVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckXUWDi6 lmNzkdhZPNmSTO6hi87zR1mBA9L9Q9MpBsALKPPbQSWWL8v5fRfg7opn/VU5s2rM +gV8y7kw91OuNCKoFE70O5uzgHkRijay8dWNZLpK3k5OfHFgAVcQ+hWNDhQJsP7S 45dCPrhKJpV9A4vvR1RV5JzKjTlZhgVMRjKPHk52aKe58pyhybqnuKmyGCApneL+ el/0AjKcO1KeSk7b0gu+wc2XHJe5OXJn5n2SqGBxxhSu2l4W9bwUw/AD1e0PsMh/ cIRFqJeFb5dRoSbn+KgOglywRp3VYxRmEf6DL7s30RrFHtAuzuydqLSk87WlCVIq jlX3+xM2H813Eg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:09:58 2025 by rpki-client