This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft File: k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json) Hash identifier: 8YCRG+YI9wUpmFD5KUW17AxETHIc2sqWiiwAcRjZxno= Subject key identifier: 1B:15:9E:AA:BD:5D:AF:80:56:1B:71:73:42:60:FF:28:8D:18:E4:D9 Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74 Certificate issuer: /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774 Certificate serial: 019AF31B9A3BE47DB96B288A98F81E302EFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft Manifest number: 15B1 Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: BQgIr9QK549Gh-t8XQa2kJXJbXM.roa (hash: FyMx4NmgioW+v5IwQi287SWwxmKQZhpDHBnVgYBPbds=) 2: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: 4jKUfZSGVb3mqZa6l4TudWD4K6lhB4yY3vIs0SDw6Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9a:3b:e4:7d:b9:6b:28:8a:98:f8:1e:30:2e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=1b159eaabd5daf80561b71734260ff288d18e4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:e6:02:c7:5c:c5:7a:a1:b0:c1:71:81:c4: e7:18:48:32:22:5a:b5:5a:1b:9c:b7:3d:2f:e7:fb: 6e:64:0d:f8:cd:ad:5e:31:da:04:c1:97:1c:91:2e: a0:ac:e5:c9:2a:d2:28:b2:03:89:9a:d3:47:ae:c5: 5e:84:64:20:13:ca:20:21:81:0e:4d:4e:4b:9c:6b: 7e:ce:41:47:b4:28:9d:b5:cb:cf:3b:71:3b:58:51: 2a:24:c6:fb:29:42:10:c9:50:29:b2:c7:7c:8f:cb: 7b:3f:52:19:a8:be:f6:5b:a2:42:48:48:28:c6:9b: a9:7c:73:c4:2d:f5:00:e0:93:21:a1:63:18:7b:68: 73:3d:c2:40:6e:ca:7e:5b:a3:54:4f:df:6c:87:ab: df:e4:a4:40:88:64:55:eb:b6:7b:c0:a6:5a:fc:6d: 83:e4:f7:17:a9:e4:d0:8a:6a:2c:33:8c:fe:58:6f: 0b:e2:b2:16:1b:43:70:17:6f:1b:db:1a:ef:e3:91: 4a:03:fb:25:12:7b:97:2e:55:91:fe:d0:07:3b:20: d7:96:79:f2:87:3d:1d:b0:d8:d0:d4:46:7a:4e:4e: c1:e0:48:f6:8d:dc:02:b3:07:84:53:63:c2:97:50: 72:35:1d:0d:8f:c9:66:ed:66:af:23:cb:41:3f:ba: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:15:9E:AA:BD:5D:AF:80:56:1B:71:73:42:60:FF:28:8D:18:E4:D9 X509v3 Authority Key Identifier: keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1d:63:bf:dd:76:3d:d5:33:6e:58:44:75:9a:bd:10:7e:0e: 8e:f5:54:4d:22:37:53:d3:0b:99:b2:85:bb:4d:77:41:07:41: 15:5f:cd:8c:78:e1:fb:1d:07:54:7b:bd:84:38:cf:9e:4d:18: 7b:fa:0f:42:e3:49:6b:22:78:e9:b2:70:81:4f:2a:0f:30:d0: 2c:80:b1:34:d0:f5:5d:fe:28:5b:d0:33:06:68:fe:09:8f:39: 32:f0:c6:58:b4:ae:54:8a:44:28:b2:dc:da:72:26:7a:03:40: 9d:84:29:73:e7:e9:35:d9:12:ea:53:cb:1b:44:7f:c2:3b:96: 33:c6:3f:2c:c1:5a:d6:4c:fa:3f:f9:9f:97:06:b9:2c:ca:b6: b7:d1:d3:e1:ef:88:a0:1f:99:4b:5c:10:92:24:b9:33:57:7f: fe:2d:d6:ed:69:7b:a0:48:43:fe:dd:eb:19:42:4b:0e:f2:7c: d9:cb:2a:79:71:de:6d:a5:c6:94:d4:68:15:4e:ad:4e:e2:27: a8:a5:e9:58:4d:3a:f3:24:c6:b9:0e:b0:55:4b:f6:5b:a2:56: 5b:be:6e:60:3f:95:54:07:c5:ea:27:79:16:0a:9f:49:28:e1: aa:ec:f6:3b:ee:ef:17:c1:1b:8f:fb:a8:46:15:d9:17:bf:99: b3:75:d2:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5o75H25ayiKmPgeMC78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZjI1YjcyNzU4ZGE1OGYwZjNlYzBmMDcyNzM1M2ViZDJi NDQ3NzQwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD EygxYjE1OWVhYWJkNWRhZjgwNTYxYjcxNzM0MjYwZmYyODhkMThlNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUTmAsdcxXqhsMFxgcTnGEgyIlq1 Whuctz0v5/tuZA34za1eMdoEwZcckS6grOXJKtIosgOJmtNHrsVehGQgE8ogIYEO TU5LnGt+zkFHtCidtcvPO3E7WFEqJMb7KUIQyVApssd8j8t7P1IZqL72W6JCSEgo xpupfHPELfUA4JMhoWMYe2hzPcJAbsp+W6NUT99sh6vf5KRAiGRV67Z7wKZa/G2D 5PcXqeTQimosM4z+WG8L4rIWG0NwF28b2xrv45FKA/slEnuXLlWR/tAHOyDXlnny hz0dsNjQ1EZ6Tk7B4Ej2jdwCsweEU2PCl1ByNR0Nj8lm7WavI8tBP7p9SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsVnqq9Xa+AVhtxc0Jg/yiNGOTZMB8GA1UdIwQY MBaAFJPyW3J1jaWPDz7A8HJzU+vStEd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQt ODJhMzExMmY0OWM3LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80ZTY2YTItYTM3Mi00OGI0LTkwYjQtODJhMzExMmY0OWM3 LzEva19KYmNuV05wWThQUHNEd2NuTlQ2OUswUjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAh1jv912 PdUzblhEdZq9EH4OjvVUTSI3U9MLmbKFu013QQdBFV/NjHjh+x0HVHu9hDjPnk0Y e/oPQuNJayJ46bJwgU8qDzDQLICxNND1Xf4oW9AzBmj+CY85MvDGWLSuVIpEKLLc 2nImegNAnYQpc+fpNdkS6lPLG0R/wjuWM8Y/LMFa1kz6P/mflwa5LMq2t9HT4e+I oB+ZS1wQkiS5M1d//i3W7Wl7oEhD/t3rGUJLDvJ82csqeXHebaXGlNRoFU6tTuIn qKXpWE068yTGuQ6wVUv2W6JWW75uYD+VVAfF6id5FgqfSSjhquz2O+7vF8Ebj/uo RhXZF7+Zs3XSVA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:36 2025 by rpki-client