This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json) Hash identifier: pjoy8F/z2+MvJUvXpmAUkfA1cKYBib7FAYP/SBnlQ4o= Subject key identifier: 4B:31:60:31:77:12:65:95:95:1A:DF:4D:39:59:A0:83:FB:D6:47:09 Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67 Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767 Certificate serial: 019AF1D24CA5542798B5DC7DAAB1E6866059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft Manifest number: 0427 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=) 2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: gsO8TShmGGUftdBgIm3g7nwu0hxh0CUpQgDlKa9N5l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4c:a5:54:27:98:b5:dc:7d:aa:b1:e6:86:60:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767 Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=4b31603177126595951adf4d3959a083fbd64709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:a9:1b:d3:e3:cc:a5:a7:67:30:06:c0:ca: 17:30:2c:0b:b1:de:af:ec:9d:5d:a2:a7:9d:a6:3a: 6c:71:0e:28:88:04:44:7d:e7:b1:00:1b:29:6b:bb: 1a:7e:07:19:06:10:29:f5:11:9d:30:79:16:72:0e: 93:b2:70:b2:2f:c8:8d:56:1b:ae:d3:79:83:df:f5: 14:6d:cb:fd:4a:d1:6d:ae:1c:33:61:ac:0c:01:4e: 03:9c:19:85:bc:34:3d:5c:32:dd:57:98:25:35:4b: e3:9c:26:95:07:02:b2:0b:c4:70:11:9e:86:5c:e1: 9d:54:b0:21:d9:bb:ea:9d:c5:ac:39:52:b7:f3:99: 96:a0:81:af:58:54:d4:5a:ba:83:8e:76:93:b9:bc: 6c:59:bc:6c:bd:22:8a:6e:9b:d0:5e:5d:99:b2:7f: 49:3f:e9:d6:e0:10:f7:32:69:45:7e:61:3d:2e:81: 31:94:2a:3e:04:e1:82:e7:ec:cd:60:7c:3a:a5:e1: dd:f4:b6:6e:8a:b4:01:fd:c3:72:3a:37:12:7a:51: 2a:58:0e:53:21:7b:7d:0d:dd:e5:9e:6c:de:e1:95: cb:59:19:62:28:1c:f3:1a:97:ee:ad:79:37:e7:5c: 1e:79:1f:95:78:40:3c:66:ed:a7:53:c9:dd:0a:5b: 61:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:31:60:31:77:12:65:95:95:1A:DF:4D:39:59:A0:83:FB:D6:47:09 X509v3 Authority Key Identifier: keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:94:34:6f:33:b6:d9:82:62:2d:c1:00:10:ed:06:21:43:19: b9:90:6f:d6:ce:bb:7d:5e:cc:2d:43:f5:89:ae:7d:eb:c1:72: e2:68:2c:8f:c2:a3:d5:59:8a:17:34:0a:2f:f2:23:dc:01:a9: aa:f7:bf:97:9c:53:db:8e:70:d9:c4:c4:49:e4:5a:cc:c2:78: 97:a8:21:92:ea:70:b8:ee:29:db:48:85:67:0b:84:24:50:ac: bd:1a:8d:b1:dc:11:94:39:40:c3:55:c7:b1:c3:eb:ae:8c:cb: 4d:de:3f:59:1c:15:f2:bb:5c:ad:ed:6d:52:81:b0:82:68:f7: 22:d3:20:90:86:44:ea:b7:44:74:8b:b0:2d:45:ed:74:ac:f9: c4:27:4e:ad:39:49:4a:c3:d9:60:d9:53:0e:e4:e0:1d:99:17: 61:de:11:9f:61:39:96:62:fd:b4:f7:df:b8:fb:f5:17:f5:08: d9:6e:4d:97:6d:a8:32:27:c8:fa:56:e8:08:1f:e1:e0:f8:0e: aa:9e:7e:30:02:f5:67:2a:4a:d5:7c:cf:c9:6d:cd:19:af:32: fd:63:13:6a:9d:d6:6e:7d:be:aa:02:59:07:f2:ec:2c:02:6e: 7e:ae:d5:30:f8:f4:bf:82:49:a3:30:6a:00:36:1c:14:30:70: 4c:e0:74:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kylVCeYtdx9qrHmhmBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjc5MmVhOGZmZjkwNDBiMmNkN2YxNzA3MzZlNDJlNzQ4 M2E3NjcwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD Eyg0YjMxNjAzMTc3MTI2NTk1OTUxYWRmNGQzOTU5YTA4M2ZiZDY0NzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVKpG9PjzKWnZzAGwMoXMCwLsd6v 7J1doqedpjpscQ4oiAREfeexABspa7safgcZBhAp9RGdMHkWcg6TsnCyL8iNVhuu 03mD3/UUbcv9StFtrhwzYawMAU4DnBmFvDQ9XDLdV5glNUvjnCaVBwKyC8RwEZ6G XOGdVLAh2bvqncWsOVK385mWoIGvWFTUWrqDjnaTubxsWbxsvSKKbpvQXl2Zsn9J P+nW4BD3MmlFfmE9LoExlCo+BOGC5+zNYHw6peHd9LZuirQB/cNyOjcSelEqWA5T IXt9Dd3lnmze4ZXLWRliKBzzGpfurXk351weeR+VeEA8Zu2nU8ndClthJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsxYDF3EmWVlRrfTTlZoIP71kcJMB8GA1UdIwQY MBaAFJD3kuqP/5BAss1/Fwc25C50g6dnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84NDUyYTgtYmFmZS00YTBmLThjNDQt Y2I3NDBkYjA2YjI5LzEva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC84NDUyYTgtYmFmZS00YTBmLThjNDQtY2I3NDBkYjA2YjI5 LzEva1BlUzZvX19rRUN5elg4WEJ6YmtMblNEcDJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZQ0bzO2 2YJiLcEAEO0GIUMZuZBv1s67fV7MLUP1ia5968Fy4mgsj8Kj1VmKFzQKL/Ij3AGp qve/l5xT245w2cTESeRazMJ4l6ghkupwuO4p20iFZwuEJFCsvRqNsdwRlDlAw1XH scPrrozLTd4/WRwV8rtcre1tUoGwgmj3ItMgkIZE6rdEdIuwLUXtdKz5xCdOrTlJ SsPZYNlTDuTgHZkXYd4Rn2E5lmL9tPffuPv1F/UI2W5Nl22oMifI+lboCB/h4PgO qp5+MAL1ZypK1XzPyW3NGa8y/WMTap3Wbn2+qgJZB/LsLAJufq7VMPj0v4JJozBq ADYcFDBwTOB09A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:13 2025 by rpki-client