This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json) Hash identifier: e2B3s7UXSY6mW2F5WEkdtl2zKvzr4Fm35QmfhldFBPY= Subject key identifier: B5:57:36:41:2F:24:A0:E6:5B:72:2E:AA:03:DD:8A:C8:62:44:48:57 Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24 Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924 Certificate serial: 019AF3C079021FAF09355DAAFE1D8DD238D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft Manifest number: 149F Signing time: Sat 06 Dec 2025 13:01:08 +0000 Manifest this update: Sat 06 Dec 2025 13:01:08 +0000 Manifest next update: Sun 07 Dec 2025 13:01:08 +0000 Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: iNvN8dkptgNXE9rH4DA9Vy6ckeXGVCI27gb3FihUW4M=) 2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:79:02:1f:af:09:35:5d:aa:fe:1d:8d:d2:38:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924 Validity Not Before: Dec 6 13:01:08 2025 GMT Not After : Dec 7 13:01:08 2025 GMT Subject: CN=b55736412f24a0e65b722eaa03dd8ac862444857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:81:4b:4d:28:6e:12:ab:14:e9:67:bd:8f:b0: 00:04:55:fe:18:e1:5b:28:fa:9c:c6:6e:91:65:78: e8:78:78:48:23:f9:2a:30:76:7d:db:25:cc:15:b4: 13:d8:79:08:94:cb:c4:68:b1:aa:b5:65:aa:cf:81: 90:89:c7:c7:c1:45:11:60:a8:2f:97:22:31:ba:f8: 2f:6c:58:a8:7a:bd:30:d7:51:40:9e:13:5d:ca:76: ef:f3:c9:aa:4e:e2:dc:77:38:34:53:b1:ed:f7:47: 52:8d:f3:6e:a3:96:88:ac:06:ab:8f:c1:63:08:0e: 80:a5:8d:b3:76:59:58:cb:1d:7a:47:dd:2b:49:7c: a5:c6:f3:23:7b:0e:5c:6f:35:5d:bc:2b:25:5c:2d: a2:e9:3f:fc:ae:7b:27:2c:c7:4f:cc:d3:b9:62:27: 97:6d:59:4b:e7:a6:b4:5b:1e:e6:d7:08:e8:da:bd: 7e:20:b5:b2:a4:74:d1:c9:3f:30:c1:2f:b5:9c:49: a5:18:d6:2e:e0:3b:08:ce:d7:f2:d1:8e:ac:8b:54: d4:ef:5c:92:c3:19:c5:7f:c1:1f:1f:69:51:08:51: 53:39:c2:fc:88:66:a0:21:c6:0f:b5:b9:aa:51:58: 0a:d4:23:68:f8:6d:30:9c:38:91:77:23:9d:fc:43: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:57:36:41:2F:24:A0:E6:5B:72:2E:AA:03:DD:8A:C8:62:44:48:57 X509v3 Authority Key Identifier: keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:19:16:c1:3a:a5:de:19:bc:cb:0d:dd:de:92:5e:63:ca:bb: ee:84:8c:d1:16:ef:ac:09:8d:cf:b7:53:85:3a:ce:4c:1a:eb: 64:a1:41:93:13:19:e8:71:69:bb:3b:18:6b:fc:db:6a:7e:d7: e8:fd:9b:30:cc:c3:be:34:66:df:bb:96:02:a1:14:24:c4:1e: 37:e1:d0:f3:a2:91:95:f4:32:b4:18:8c:ef:2c:fd:18:bd:e0: c1:ce:c5:fa:de:b6:03:f6:7b:1f:64:e6:2f:19:51:7b:43:fa: ab:61:03:40:36:39:d7:b9:1e:15:83:69:18:b4:48:61:1c:bf: ee:ae:bb:2d:b6:3a:6c:1c:66:04:e9:93:2e:ad:45:32:0f:e1: f7:8e:da:ab:d4:2b:ce:24:dd:53:22:35:43:d7:95:3c:b2:cf: d7:5c:e2:c7:49:d7:77:60:bf:fb:b2:85:d6:eb:36:a5:4f:60: c5:c6:60:62:27:be:7a:1e:ca:a8:0f:6d:43:61:a6:35:f9:e0: 2f:f7:81:47:53:5a:84:7a:e7:09:7a:71:0b:eb:3c:be:72:eb: 3d:43:13:70:25:65:68:32:69:2a:d9:92:70:45:fc:b8:ee:08: 5d:02:a4:68:0b:e3:95:5e:68:8f:eb:80:a1:ae:b0:e3:a3:22: 71:c7:ca:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHkCH68JNV2q/h2N0jjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTEwMGExNDVkY2I3YjM3OTUzNzliYjA5MzhmZTg5YWE4 NjE5MjQwHhcNMjUxMjA2MTMwMTA4WhcNMjUxMjA3MTMwMTA4WjAzMTEwLwYDVQQD EyhiNTU3MzY0MTJmMjRhMGU2NWI3MjJlYWEwM2RkOGFjODYyNDQ0ODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oFLTShuEqsU6We9j7AABFX+GOFb KPqcxm6RZXjoeHhII/kqMHZ92yXMFbQT2HkIlMvEaLGqtWWqz4GQicfHwUURYKgv lyIxuvgvbFioer0w11FAnhNdynbv88mqTuLcdzg0U7Ht90dSjfNuo5aIrAarj8Fj CA6ApY2zdllYyx16R90rSXylxvMjew5cbzVdvCslXC2i6T/8rnsnLMdPzNO5YieX bVlL56a0Wx7m1wjo2r1+ILWypHTRyT8wwS+1nEmlGNYu4DsIztfy0Y6si1TU71yS wxnFf8EfH2lRCFFTOcL8iGagIcYPtbmqUVgK1CNo+G0wnDiRdyOd/EMkrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVXNkEvJKDmW3IuqgPdishiREhXMB8GA1UdIwQY MBaAFCqRAKFF3LezeVN5uwk4/omqhhkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzct NzkyNDZjODk0NTkxLzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzctNzkyNDZjODk0NTkx LzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxkWwTql 3hm8yw3d3pJeY8q77oSM0RbvrAmNz7dThTrOTBrrZKFBkxMZ6HFpuzsYa/zban7X 6P2bMMzDvjRm37uWAqEUJMQeN+HQ86KRlfQytBiM7yz9GL3gwc7F+t62A/Z7H2Tm LxlRe0P6q2EDQDY517keFYNpGLRIYRy/7q67LbY6bBxmBOmTLq1FMg/h947aq9Qr ziTdUyI1Q9eVPLLP11zix0nXd2C/+7KF1us2pU9gxcZgYie+eh7KqA9tQ2GmNfng L/eBR1NahHrnCXpxC+s8vnLrPUMTcCVlaDJpKtmScEX8uO4IXQKkaAvjlV5oj+uA oa6w46MiccfKYA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:00 2025 by rpki-client