This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft File: kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json) Hash identifier: wXh1b3i6P3XtHpIKvIWRJe4hknX0hw7tn6NJz+ok7Jc= Subject key identifier: 47:44:9E:7A:5A:BB:AC:E5:D9:FB:C3:D3:27:BE:FC:54:D1:43:A7:DB Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76 Certificate serial: 019AF12E70F040F22D610720BCF86F264E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=) 2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: 7pTwbaS7/G8li3W+g+lRt8hmNoqYcvTC5lK6PcjZFdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:70:f0:40:f2:2d:61:07:20:bc:f8:6f:26:4e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76 Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=47449e7a5abbace5d9fbc3d327befc54d143a7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:08:71:dd:6d:3f:a0:74:f4:a5:a5:ee:59: 19:c6:12:49:3b:ad:ef:7f:e7:82:62:a4:47:05:3f: 9c:af:50:ee:5b:0b:f4:2c:59:27:d1:f5:c3:b8:9d: c9:4f:9a:1c:84:c0:32:b7:18:06:98:b7:86:48:c2: 36:e2:a7:d7:d8:4d:82:22:9b:a7:58:b9:58:a6:7a: fc:f1:cb:94:56:b4:e7:16:01:1c:d4:b3:92:06:e8: 0a:98:d8:3b:29:89:32:5c:90:fd:45:51:3a:a8:d6: 43:0d:26:bd:38:16:bd:22:19:0d:c4:9f:96:ac:48: db:f1:7e:93:dc:af:36:c5:f6:5b:5d:be:15:db:d3: 68:56:6b:e9:11:b9:49:bf:8d:d3:f7:5d:99:f2:be: 3e:f4:56:d9:29:1a:f7:23:a5:56:9c:1d:64:26:20: 44:53:b4:0b:b7:e6:f7:1b:01:ce:0b:0d:4f:7e:53: 9a:e2:20:13:3e:01:03:aa:53:e0:8a:a7:4c:95:c6: ef:6a:ff:bd:82:4b:b5:23:a6:f5:39:45:09:b9:39: 4e:09:ed:be:c5:17:de:00:67:06:dd:ed:43:25:8f: 5b:52:5e:fc:ed:1b:cc:d0:75:79:c7:9e:c5:9f:f4: 34:00:47:c4:7c:16:b7:c2:91:65:a9:20:12:06:90: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:44:9E:7A:5A:BB:AC:E5:D9:FB:C3:D3:27:BE:FC:54:D1:43:A7:DB X509v3 Authority Key Identifier: keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:54:e4:39:a9:85:05:e4:3e:ff:6b:fc:c7:73:fa:3b:07:cd: e2:a5:cd:e2:3c:29:75:84:2e:78:ca:3b:ca:28:b0:af:36:08: 3d:96:26:5a:17:70:47:cc:58:6f:50:6e:0a:1d:02:51:f8:7a: 73:f7:ed:62:3d:3c:b6:99:e5:fd:76:a5:5f:82:fe:f0:9a:ac: 93:70:73:54:97:e4:c5:a1:5c:e5:e4:c8:d9:70:27:04:5d:56: 07:20:bb:c1:d0:c4:b8:8b:4a:ca:7f:b8:5b:94:23:31:ab:f1: ca:06:d5:c1:2b:c4:79:06:03:7d:7f:6a:aa:6e:8f:b8:13:91: 28:0b:06:b3:69:02:a7:f4:81:fb:fc:33:31:96:24:d5:bb:7b: 83:4b:67:df:17:31:2f:13:95:52:2d:54:47:cb:de:e2:67:0a: 2c:c4:f8:46:62:7d:87:e6:98:67:8e:be:77:14:97:38:a7:b5: 41:fa:7b:b2:5c:a9:e9:48:2d:f7:0a:ad:c8:d1:d6:85:a2:f2: 80:14:b9:44:da:f2:56:6e:d1:d1:d1:41:3a:db:45:e2:0c:4e: 03:46:8d:d2:e8:fb:c9:e1:00:5a:46:4e:09:e7:50:d8:d8:b1: 97:af:28:2f:b6:52:a3:b5:5a:ab:7b:94:7c:ce:65:0c:27:c7: 54:9b:18:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnDwQPItYQcgvPhvJk5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTRjNjk5YTgxZGQ5NjJhODg2MGYzZmIwYjdkMDMzNDNk ZWJmNzYwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD Eyg0NzQ0OWU3YTVhYmJhY2U1ZDlmYmMzZDMyN2JlZmM1NGQxNDNhN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyUIcd1tP6B09KWl7lkZxhJJO63v f+eCYqRHBT+cr1DuWwv0LFkn0fXDuJ3JT5ochMAytxgGmLeGSMI24qfX2E2CIpun WLlYpnr88cuUVrTnFgEc1LOSBugKmNg7KYkyXJD9RVE6qNZDDSa9OBa9IhkNxJ+W rEjb8X6T3K82xfZbXb4V29NoVmvpEblJv43T912Z8r4+9FbZKRr3I6VWnB1kJiBE U7QLt+b3GwHOCw1PflOa4iATPgEDqlPgiqdMlcbvav+9gku1I6b1OUUJuTlOCe2+ xRfeAGcG3e1DJY9bUl787RvM0HV5x57Fn/Q0AEfEfBa3wpFlqSASBpC6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdEnnpau6zl2fvD0ye+/FTRQ6fbMB8GA1UdIwQY MBaAFJBUxpmoHdliqIYPP7C30DND3r92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2Mt MmI0YTE2NTk0MjEzLzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2MtMmI0YTE2NTk0MjEz LzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVTkOamF BeQ+/2v8x3P6OwfN4qXN4jwpdYQueMo7yiiwrzYIPZYmWhdwR8xYb1BuCh0CUfh6 c/ftYj08tpnl/XalX4L+8Jqsk3BzVJfkxaFc5eTI2XAnBF1WByC7wdDEuItKyn+4 W5QjMavxygbVwSvEeQYDfX9qqm6PuBORKAsGs2kCp/SB+/wzMZYk1bt7g0tn3xcx LxOVUi1UR8ve4mcKLMT4RmJ9h+aYZ46+dxSXOKe1Qfp7slyp6Ugt9wqtyNHWhaLy gBS5RNryVm7R0dFBOttF4gxOA0aN0uj7yeEAWkZOCedQ2Nixl68oL7ZSo7Vaq3uU fM5lDCfHVJsYkw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:57 2025 by rpki-client