This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json) Hash identifier: Zl3epV+ovKlcTys1iYSTWsRHfmRi123b3U1Um+8/xaU= Subject key identifier: 75:B6:B4:D6:73:BE:3E:6E:D2:98:DC:1C:47:0E:65:D0:69:A4:90:F7 Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Certificate serial: 019AF19B7917822F4311517DB5BC735F92E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=) 2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=) 3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=) 4: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=) 5: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=) 6: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: 5sirbI3/moy4aFB2/SgfoYRUj8wdXb7VimKUfMN1v+k=) 7: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:79:17:82:2f:43:11:51:7d:b5:bc:73:5f:92:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139 Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=75b6b4d673be3e6ed298dc1c470e65d069a490f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:78:cc:97:86:09:76:0f:65:e4:70:ad:84: 52:49:ce:05:fc:e8:15:6d:0e:50:83:22:1b:b3:a8: 5a:b0:b1:63:74:d0:06:3e:c3:e8:a5:43:61:c2:18: e9:a6:72:17:58:9c:ea:8d:a2:3f:ae:da:cd:16:b3: 4f:50:5d:89:f7:b6:5b:6b:e6:e9:95:d0:e6:17:71: b5:44:cd:eb:ed:56:c9:f4:06:f0:b2:20:0f:ba:6b: 82:bc:de:3a:3a:7b:b0:38:91:c0:bd:c8:90:42:a1: 42:5b:d8:9d:47:69:f6:87:1c:c5:94:c7:c7:3d:f8: 8a:42:97:6c:96:b2:55:d0:ff:f0:10:2a:f6:19:95: e4:f2:7d:c2:d6:89:90:c7:6d:ed:42:4b:a7:fc:c6: 3c:1e:06:60:7c:a2:66:1b:bb:01:52:9d:ab:8a:2d: f0:11:14:18:5f:4e:d1:d7:6e:88:12:76:70:f3:5b: ef:cc:07:25:41:73:b9:30:08:5d:06:8c:09:f0:a0: d0:3c:ed:fe:5a:7a:ff:6f:5a:58:e1:be:7d:81:b4: 06:e7:e8:82:4b:cf:37:4a:45:1d:4a:44:96:c5:8c: 37:55:3c:5f:7d:4d:77:62:45:dc:37:21:34:ed:57: 57:9c:f9:34:e4:81:8a:5a:da:0e:6f:52:d4:d7:68: 3d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B6:B4:D6:73:BE:3E:6E:D2:98:DC:1C:47:0E:65:D0:69:A4:90:F7 X509v3 Authority Key Identifier: keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:4d:8c:8d:9a:a9:61:57:9b:b1:4b:63:a9:7b:28:ab:95:ec: 70:57:df:ca:96:83:36:e1:d1:9c:50:21:61:e8:d7:d1:5f:33: 2d:66:86:0a:ec:fd:6e:0a:cc:64:e4:35:46:8e:c5:c7:0f:6a: 15:07:4a:9e:e5:5c:89:17:47:29:da:05:76:ef:3f:6d:3e:39: fe:75:66:6f:78:a6:69:f8:c0:49:3f:c3:5c:84:2d:05:49:5c: cf:09:30:61:43:f9:4c:82:54:79:91:95:f5:6b:8b:f4:c6:7e: 76:4c:84:ae:4f:70:3b:40:28:35:cd:46:03:ee:9d:af:b2:94: 97:d9:0d:e9:1a:32:a3:3b:02:4c:a0:14:c0:5c:a7:95:4b:3e: 35:ba:b5:ec:e9:b6:40:43:5b:94:a3:94:c9:b4:98:b1:f8:2d: 7f:2c:58:b6:ab:a4:86:62:7e:02:26:ed:3e:3b:19:c3:36:40: 9f:e4:0c:6c:ca:9b:20:b1:5b:8f:bb:2d:da:8f:8a:06:e4:2e: 3e:e7:2c:41:72:69:9a:5a:8b:0e:a8:29:60:a9:19:28:80:8f: db:26:7d:11:61:4b:f7:23:2a:4a:4f:3f:46:8e:62:32:66:9f: ec:03:7d:bd:94:fd:f4:0f:0e:89:53:98:bb:a6:3e:56:4c:92: 03:97:b1:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3kXgi9DEVF9tbxzX5LjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyOTM1MmE4ZDJkZDcwYzkxZmZjZWM4ZTMyM2ZlNjlmMWU5 YTQxMzkwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD Eyg3NWI2YjRkNjczYmUzZTZlZDI5OGRjMWM0NzBlNjVkMDY5YTQ5MGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qh4zJeGCXYPZeRwrYRSSc4F/OgV bQ5QgyIbs6hasLFjdNAGPsPopUNhwhjppnIXWJzqjaI/rtrNFrNPUF2J97Zba+bp ldDmF3G1RM3r7VbJ9AbwsiAPumuCvN46OnuwOJHAvciQQqFCW9idR2n2hxzFlMfH PfiKQpdslrJV0P/wECr2GZXk8n3C1omQx23tQkun/MY8HgZgfKJmG7sBUp2rii3w ERQYX07R126IEnZw81vvzAclQXO5MAhdBowJ8KDQPO3+Wnr/b1pY4b59gbQG5+iC S883SkUdSkSWxYw3VTxffU13YkXcNyE07VdXnPk05IGKWtoOb1LU12g9eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW2tNZzvj5u0pjcHEcOZdBppJD3MB8GA1UdIwQY MBaAFJKTUqjS3XDJH/zsjjI/5p8emkE5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYt MGExYTM1ODk3ZjEwLzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83YjZlZGMtYWQyMy00ZDczLWFiNTYtMGExYTM1ODk3ZjEw LzEva3BOU3FOTGRjTWtmX095T01qX21ueDZhUVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACE2MjZqp YVebsUtjqXsoq5XscFffypaDNuHRnFAhYejX0V8zLWaGCuz9bgrMZOQ1Ro7Fxw9q FQdKnuVciRdHKdoFdu8/bT45/nVmb3imafjAST/DXIQtBUlczwkwYUP5TIJUeZGV 9WuL9MZ+dkyErk9wO0AoNc1GA+6dr7KUl9kN6RoyozsCTKAUwFynlUs+Nbq17Om2 QENblKOUybSYsfgtfyxYtqukhmJ+AibtPjsZwzZAn+QMbMqbILFbj7st2o+KBuQu PucsQXJpmlqLDqgpYKkZKICP2yZ9EWFL9yMqSk8/Ro5iMmaf7AN9vZT99A8OiVOY u6Y+VkySA5exSg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:09 2025 by rpki-client