This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft File: kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json) Hash identifier: VK+kg9zADZyy5jjvVf8PkapeL/e6QbDOL7pfDowpt+4= Subject key identifier: 3F:00:6E:0D:70:44:F0:5C:AF:F1:50:C5:4C:9F:83:E1:54:2F:A6:C4 Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78 Certificate issuer: /CN=92391353f6e1f502504a0868ebf8ad0debc9da78 Certificate serial: 019B33B1CC99CC7288DB05FF168AE7E93F89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 23:00:48 +0000 Manifest this update: Thu 18 Dec 2025 23:00:48 +0000 Manifest next update: Fri 19 Dec 2025 23:00:48 +0000 Files and hashes: 1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=) 2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: jbM/0OsCUXJWyogHjd7jLiEYrZnyEM3iBWTG6Tdmlfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:cc:99:cc:72:88:db:05:ff:16:8a:e7:e9:3f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78 Validity Not Before: Dec 18 23:00:48 2025 GMT Not After : Dec 19 23:00:48 2025 GMT Subject: CN=3f006e0d7044f05caff150c54c9f83e1542fa6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:94:f9:61:cc:6c:27:41:d8:ef:76:a5:ad: 0b:be:84:2f:aa:7a:4c:b6:ab:39:6c:b3:a6:3d:0a: b0:ae:a2:55:43:83:d8:92:1c:b1:35:59:1b:51:ca: f1:6c:06:8e:51:29:bb:67:18:85:2e:60:d6:af:ff: d8:5c:b0:29:48:2f:5a:77:d9:6d:c9:70:eb:94:70: 08:a9:3d:f1:4b:fb:a5:d2:fc:f1:dc:dd:61:18:34: 50:43:37:a5:f0:e7:3f:65:17:66:60:d8:db:64:6f: cd:de:62:6b:e2:f1:37:e4:3b:86:c6:74:f0:8f:a0: e9:8f:9e:b5:88:86:c6:6a:89:9d:8e:75:58:0e:05: 32:64:d9:f3:18:03:9d:c1:5d:e0:52:52:6f:3a:f5: 7e:ab:70:ed:1c:b3:ae:3e:b7:58:02:08:d9:e3:eb: 3d:ac:81:35:4f:9f:a6:5d:6e:64:b9:2e:b6:98:25: 42:98:b3:42:02:4b:70:df:03:db:ec:a7:c1:ed:b8: eb:4b:e6:6f:5b:f0:5a:d8:c7:80:0a:f0:78:5c:13: 6e:5b:cd:38:2c:51:ed:24:42:7b:05:b1:3b:c8:c7: 67:cc:33:f8:52:08:cd:b7:85:dc:3c:dd:a2:b7:94: a5:83:f1:26:13:ec:9c:d5:27:b3:b1:d5:91:7e:59: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:6E:0D:70:44:F0:5C:AF:F1:50:C5:4C:9F:83:E1:54:2F:A6:C4 X509v3 Authority Key Identifier: keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2c:6f:d4:5f:01:5d:3f:43:fa:96:f8:4b:21:71:d9:54:11: b0:0b:af:12:20:0a:63:af:51:d5:81:38:91:73:86:ff:ad:2e: 2d:f6:22:5e:f6:2e:3d:9d:0e:a1:a8:3c:72:c8:d5:ad:28:c0: fa:1e:9c:38:25:e9:ba:af:b6:89:95:94:4e:1d:82:e1:e4:cb: 6e:99:d6:2c:ef:1c:f2:52:07:85:54:76:7e:d4:b6:af:b2:ee: 13:c6:ba:57:31:7f:33:71:df:f3:e3:39:dd:6f:59:aa:72:1a: 0e:e5:44:c8:e8:c4:b9:38:50:3c:2e:85:75:60:9d:b9:95:f5: e9:5b:bb:2a:11:11:60:81:b3:76:53:cd:1a:08:f6:96:3d:7d: 91:92:1c:20:89:83:31:46:c0:15:42:6a:8f:29:a0:bc:bb:c2: 12:61:0a:27:0b:11:48:2b:4d:64:4b:d5:df:0e:8b:5b:a2:f7: ab:4a:03:72:5d:00:ff:79:66:d1:d7:15:eb:62:31:b6:1f:2d: e2:f5:0e:d4:48:83:e3:84:4f:c9:ac:62:07:0a:26:3f:aa:fc: 08:69:b1:32:a1:58:1f:29:d2:77:35:6e:f2:b0:29:42:d8:50: 4a:39:8c:ce:2a:41:d5:3c:4a:72:cc:bb:ad:a9:3a:c5:38:24: 4a:07:23:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszscyZzHKI2wX/Forn6T+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMzkxMzUzZjZlMWY1MDI1MDRhMDg2OGViZjhhZDBkZWJj OWRhNzgwHhcNMjUxMjE4MjMwMDQ4WhcNMjUxMjE5MjMwMDQ4WjAzMTEwLwYDVQQD EygzZjAwNmUwZDcwNDRmMDVjYWZmMTUwYzU0YzlmODNlMTU0MmZhNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB2U+WHMbCdB2O92pa0LvoQvqnpM tqs5bLOmPQqwrqJVQ4PYkhyxNVkbUcrxbAaOUSm7ZxiFLmDWr//YXLApSC9ad9lt yXDrlHAIqT3xS/ul0vzx3N1hGDRQQzel8Oc/ZRdmYNjbZG/N3mJr4vE35DuGxnTw j6Dpj561iIbGaomdjnVYDgUyZNnzGAOdwV3gUlJvOvV+q3DtHLOuPrdYAgjZ4+s9 rIE1T5+mXW5kuS62mCVCmLNCAktw3wPb7KfB7bjrS+ZvW/Ba2MeACvB4XBNuW804 LFHtJEJ7BbE7yMdnzDP4UgjNt4XcPN2it5Slg/EmE+yc1SezsdWRfllvywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8Abg1wRPBcr/FQxUyfg+FUL6bEMB8GA1UdIwQY MBaAFJI5E1P24fUCUEoIaOv4rQ3rydp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yMjc2NzAtZmU0ZC00YmQ2LWJmMjgt YjI1NDViNDA0ZWVjLzEva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yMjc2NzAtZmU0ZC00YmQ2LWJmMjgtYjI1NDViNDA0ZWVj LzEva2prVFVfYmg5UUpRU2dobzZfaXREZXZKMm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSxv1F8B XT9D+pb4SyFx2VQRsAuvEiAKY69R1YE4kXOG/60uLfYiXvYuPZ0Ooag8csjVrSjA +h6cOCXpuq+2iZWUTh2C4eTLbpnWLO8c8lIHhVR2ftS2r7LuE8a6VzF/M3Hf8+M5 3W9ZqnIaDuVEyOjEuThQPC6FdWCduZX16Vu7KhERYIGzdlPNGgj2lj19kZIcIImD MUbAFUJqjymgvLvCEmEKJwsRSCtNZEvV3w6LW6L3q0oDcl0A/3lm0dcV62Ixth8t 4vUO1EiD44RPyaxiBwomP6r8CGmxMqFYHynSdzVu8rApQthQSjmMzipB1TxKcsy7 rak6xTgkSgcjmA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:10:17 2025 by rpki-client