This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft File: kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft (raw, json) Hash identifier: PO5ZMN7QAnJ//OEgd2pgpM9+/PeUy1AoiVUKTEdqVzc= Subject key identifier: 27:AD:4B:56:79:64:C5:5A:10:3E:00:63:22:D5:D6:7C:C3:59:15:E2 Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E Certificate issuer: /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e Certificate serial: 019AF12CE29C21FF83E5F5DEA932C8491799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft Manifest number: 0CE4 Signing time: Sat 06 Dec 2025 01:00:41 +0000 Manifest this update: Sat 06 Dec 2025 01:00:41 +0000 Manifest next update: Sun 07 Dec 2025 01:00:41 +0000 Files and hashes: 1: LZy1osNQUhfVUq7phinZnPKl6sg.roa (hash: reyk0Zvn/J6AzXb7QQ8ewqifkrvY/15JT8YFCCBaMEM=) 2: kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl (hash: nyoPjCH/tGMxLxuV6hV7J3lNhcpYOSDfJTu4IaKU9oA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e2:9c:21:ff:83:e5:f5:de:a9:32:c8:49:17:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e Validity Not Before: Dec 6 01:00:41 2025 GMT Not After : Dec 7 01:00:41 2025 GMT Subject: CN=27ad4b567964c55a103e006322d5d67cc35915e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:13:65:d4:e1:71:53:d2:3e:f3:4d:35:4f: 37:73:d0:1b:94:14:93:c9:f7:7f:7f:1c:e6:bb:ad: 39:10:a9:e1:6a:35:9e:e2:20:38:1d:ec:f5:04:ca: fa:e4:d4:7a:bb:5d:4f:55:85:69:47:b2:30:e5:ff: 7e:64:f6:9e:e0:b6:ee:da:ea:19:4e:10:bd:c4:01: 00:f0:cf:66:2a:7c:17:7e:2f:05:a2:0e:97:15:2d: 7d:ff:6e:01:ca:11:bd:bc:06:4d:fa:b1:5e:d4:9c: 04:0f:ab:d0:83:63:d5:6e:16:01:a8:ae:3a:d8:23: 15:10:9e:b4:6d:fd:ec:8a:c4:d0:64:e3:47:d3:bb: a2:d7:eb:81:7f:d9:e5:96:51:9d:4f:11:58:a4:9c: 38:45:08:bd:36:4a:6d:82:59:3a:eb:f6:34:8b:9d: a8:c6:a4:29:f7:80:c7:d4:16:73:e3:85:02:98:3a: 7b:ec:ea:3a:09:f2:79:d9:65:d4:85:f7:20:fb:1f: 65:6b:0c:7d:1d:12:da:37:eb:4d:bb:54:9e:cd:89: 47:83:64:ff:9c:41:4f:13:16:e0:92:72:7a:b4:90: ac:44:04:20:ca:9a:f7:e7:93:ef:45:aa:82:a8:2e: 8b:c7:45:7e:8f:9f:d5:30:6b:81:ed:00:b7:9a:29: 87:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AD:4B:56:79:64:C5:5A:10:3E:00:63:22:D5:D6:7C:C3:59:15:E2 X509v3 Authority Key Identifier: keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2b:7e:70:0d:2d:10:fa:5e:c0:c7:aa:78:36:7c:be:89:32: 72:21:da:03:59:19:29:9e:0b:ed:48:c4:0a:7f:ee:4a:79:4e: 9b:d5:29:c8:30:2f:10:8e:7f:c6:36:85:a3:07:65:b2:58:fd: 5d:cf:09:0f:21:76:61:29:f9:6e:02:20:6e:ef:91:ad:ad:d7: 58:c7:37:ef:00:10:92:15:98:16:f6:12:9b:60:2b:75:73:9e: 27:42:77:5b:5b:f6:d4:56:3d:9e:6a:12:1e:8f:84:e0:ef:52: 52:1d:60:79:63:82:21:c8:0c:26:ca:69:29:f6:7f:e7:33:82: b5:42:af:9d:0d:41:7a:2a:2e:70:7e:cd:67:f9:9c:0c:2d:25: d8:91:8a:84:ee:e0:c0:82:57:88:69:b6:e4:31:d0:d0:87:f0: 11:10:dd:04:44:e4:7a:4e:78:32:a7:98:b5:7f:74:b5:a9:92: e6:9a:6a:fb:00:26:82:b1:7f:56:47:ac:1d:cf:81:84:c8:e1: 1e:af:4b:ab:18:f3:21:9a:63:1f:45:31:f7:51:7e:68:ee:d1: db:05:0a:67:5e:e0:a2:8b:de:0c:e3:71:c5:3d:22:5f:54:42: 2f:77:32:7c:a4:85:ce:d3:3c:b5:46:5d:cf:e4:8b:b9:13:de: a2:23:1a:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOKcIf+D5fXeqTLISReZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNjBhOGM2NmFiZGI2ZTUwNjgxMDA3MDA2ZDU3ZjdkMWZl OWNhMmUwHhcNMjUxMjA2MDEwMDQxWhcNMjUxMjA3MDEwMDQxWjAzMTEwLwYDVQQD EygyN2FkNGI1Njc5NjRjNTVhMTAzZTAwNjMyMmQ1ZDY3Y2MzNTkxNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHwTZdThcVPSPvNNNU83c9AblBST yfd/fxzmu605EKnhajWe4iA4Hez1BMr65NR6u11PVYVpR7Iw5f9+ZPae4Lbu2uoZ ThC9xAEA8M9mKnwXfi8Fog6XFS19/24ByhG9vAZN+rFe1JwED6vQg2PVbhYBqK46 2CMVEJ60bf3sisTQZONH07ui1+uBf9nlllGdTxFYpJw4RQi9Nkptglk66/Y0i52o xqQp94DH1BZz44UCmDp77Oo6CfJ52WXUhfcg+x9lawx9HRLaN+tNu1SezYlHg2T/ nEFPExbgknJ6tJCsRAQgypr355PvRaqCqC6Lx0V+j5/VMGuB7QC3mimHoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCetS1Z5ZMVaED4AYyLV1nzDWRXiMB8GA1UdIwQY MBaAFJJgqMZqvbblBoEAcAbVf30f6couMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80NDRjY2MtMmI1Ni00YTVmLTlhM2Et ZGQ0YjUxNGZjZDA4LzEva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS80NDRjY2MtMmI1Ni00YTVmLTlhM2EtZGQ0YjUxNGZjZDA4 LzEva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyt+cA0t EPpewMeqeDZ8vokyciHaA1kZKZ4L7UjECn/uSnlOm9UpyDAvEI5/xjaFowdlslj9 Xc8JDyF2YSn5bgIgbu+Rra3XWMc37wAQkhWYFvYSm2ArdXOeJ0J3W1v21FY9nmoS Ho+E4O9SUh1geWOCIcgMJsppKfZ/5zOCtUKvnQ1BeioucH7NZ/mcDC0l2JGKhO7g wIJXiGm25DHQ0IfwERDdBETkek54MqeYtX90tamS5ppq+wAmgrF/VkesHc+BhMjh Hq9LqxjzIZpjH0Ux91F+aO7R2wUKZ17gooveDONxxT0iX1RCL3cyfKSFztM8tUZd z+SLuRPeoiMang== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:39 2025 by rpki-client