This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json) Hash identifier: LXQNKtSi8hYtMNxHtf+u7x2BD7iTElCRO9J7IebZb6E= Subject key identifier: 31:99:DF:24:70:AE:4C:42:4D:70:19:35:86:E4:F0:CA:45:73:E9:8C Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb Certificate serial: 019AF5780D7801EDFCAE50D56A4096DFF628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft Manifest number: 070E Signing time: Sat 06 Dec 2025 21:01:16 +0000 Manifest this update: Sat 06 Dec 2025 21:01:16 +0000 Manifest next update: Sun 07 Dec 2025 21:01:16 +0000 Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=) 2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: 5k+rS+KFg+iTJLIHG0sC+ehxRgGtxTJGtI2grFt/bYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:0d:78:01:ed:fc:ae:50:d5:6a:40:96:df:f6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb Validity Not Before: Dec 6 21:01:16 2025 GMT Not After : Dec 7 21:01:16 2025 GMT Subject: CN=3199df2470ae4c424d70193586e4f0ca4573e98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:0a:44:73:e8:90:cb:fb:ac:3d:f3:b9:e9: 27:d6:9a:30:81:3f:5f:20:6e:c1:85:63:dc:82:56: 40:e4:6c:75:06:26:43:cd:54:7c:32:b4:de:33:56: 55:3f:de:6b:12:da:d7:89:b1:1e:15:57:ad:04:0e: 0d:fd:27:db:65:18:f4:6e:4b:0a:11:85:a6:9a:29: d5:e7:c0:48:33:43:22:f7:f3:0c:93:d1:02:c5:d8: 0f:8f:a0:57:25:b4:f8:65:7b:95:96:2e:12:7b:e3: ae:7e:ec:31:0f:b5:f3:fe:a9:83:d1:7d:55:63:69: 0e:a7:40:b8:02:98:09:78:54:1b:c2:54:dc:71:eb: 09:23:c4:e0:2d:72:da:5f:51:4c:e0:40:99:2f:9c: e7:b7:89:cb:b3:90:29:d8:ee:09:01:7e:8d:89:4a: 11:e9:99:55:9b:7d:0c:d0:7a:f0:68:5e:61:dd:f1: 3e:10:9c:af:e2:6d:0e:33:fd:45:0a:f3:ff:5f:68: 60:6e:18:d6:10:96:37:2b:44:5c:6c:c3:83:a2:60: 28:27:34:96:6f:fc:6a:0e:36:8a:6b:6a:3c:d5:e9: 2a:e8:bb:21:20:63:ca:c9:44:6a:d9:15:ff:6b:27: a6:94:06:2f:f1:84:54:ca:c9:5d:12:06:94:d4:be: 25:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:99:DF:24:70:AE:4C:42:4D:70:19:35:86:E4:F0:CA:45:73:E9:8C X509v3 Authority Key Identifier: keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e2:21:63:c2:29:60:c4:82:a6:3b:57:92:23:42:2b:43:ac: 61:53:81:3d:e3:75:42:9f:69:98:96:bd:bc:90:72:f3:13:f2: d4:60:85:37:52:cc:bf:f2:c5:0f:52:7a:6d:b0:28:68:76:2a: 2d:10:11:44:cf:69:c4:2f:c6:72:9b:d9:d0:65:dd:9a:cc:e2: 7a:92:28:e6:f8:39:0e:f7:4f:93:09:39:25:08:79:fa:ba:ef: d7:1d:91:4e:04:1a:b3:32:ff:71:1c:79:23:d2:94:de:c6:2b: e0:13:87:68:d0:9d:64:e8:4f:cd:92:3b:d9:c1:3c:f5:b4:fe: b1:06:3f:aa:61:8e:23:4a:79:cd:ca:86:0c:17:d0:f1:a0:67: 37:e9:18:15:71:72:1f:82:19:d0:6a:fd:a8:a7:88:d6:31:0a: ce:5e:c2:39:ed:9f:3d:69:e1:43:c3:18:67:35:35:b8:71:c4: 4f:fd:ab:9a:01:61:e7:63:26:f9:e0:6e:2d:76:4d:49:42:03: 2b:13:8d:a8:b4:74:de:cf:52:07:78:a1:3d:8d:33:91:38:68: dd:77:ff:b0:c9:10:43:74:6f:d4:8a:a3:28:d1:5c:ab:81:68: 1c:b9:e6:1b:57:81:28:b4:1c:b6:85:19:d6:9f:17:93:13:5d: be:b8:3b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eA14Ae38rlDVakCW3/YoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODc4MzNlMDI1YjIzMjBmOTA1M2ExMDNiYTYxZGU1MmVh YjJhZmIwHhcNMjUxMjA2MjEwMTE2WhcNMjUxMjA3MjEwMTE2WjAzMTEwLwYDVQQD EygzMTk5ZGYyNDcwYWU0YzQyNGQ3MDE5MzU4NmU0ZjBjYTQ1NzNlOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldcKRHPokMv7rD3zuekn1powgT9f IG7BhWPcglZA5Gx1BiZDzVR8MrTeM1ZVP95rEtrXibEeFVetBA4N/SfbZRj0bksK EYWmminV58BIM0Mi9/MMk9ECxdgPj6BXJbT4ZXuVli4Se+OufuwxD7Xz/qmD0X1V Y2kOp0C4ApgJeFQbwlTccesJI8TgLXLaX1FM4ECZL5znt4nLs5Ap2O4JAX6NiUoR 6ZlVm30M0HrwaF5h3fE+EJyv4m0OM/1FCvP/X2hgbhjWEJY3K0RcbMODomAoJzSW b/xqDjaKa2o81ekq6LshIGPKyURq2RX/ayemlAYv8YRUysldEgaU1L4lGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGZ3yRwrkxCTXAZNYbk8MpFc+mMMB8GA1UdIwQY MBaAFJCHgz4CWyMg+QU6EDumHeUuqyr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2Qt MTE5ZGNkMmVhOWRiLzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2QtMTE5ZGNkMmVhOWRi LzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+IhY8Ip YMSCpjtXkiNCK0OsYVOBPeN1Qp9pmJa9vJBy8xPy1GCFN1LMv/LFD1J6bbAoaHYq LRARRM9pxC/GcpvZ0GXdmsziepIo5vg5DvdPkwk5JQh5+rrv1x2RTgQaszL/cRx5 I9KU3sYr4BOHaNCdZOhPzZI72cE89bT+sQY/qmGOI0p5zcqGDBfQ8aBnN+kYFXFy H4IZ0Gr9qKeI1jEKzl7COe2fPWnhQ8MYZzU1uHHET/2rmgFh52Mm+eBuLXZNSUID KxONqLR03s9SB3ihPY0zkTho3Xf/sMkQQ3Rv1IqjKNFcq4FoHLnmG1eBKLQctoUZ 1p8XkxNdvrg7bA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:17 2025 by rpki-client