This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft File: kFTGmagd2WKohg8_sLfQM0Pev3Y.mft (raw, json) Hash identifier: i/TWnaMk8WnBzTFiW1PGlYpTF9o7WNTAxvcD1KFun7o= Subject key identifier: 11:64:84:0A:02:ED:A7:C4:6F:06:FA:2A:57:C7:CE:03:34:97:C1:04 Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76 Certificate serial: 019B34C5CF40EDBF91ADDF1ED854D8AA2AAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 04:02:17 +0000 Manifest this update: Fri 19 Dec 2025 04:02:17 +0000 Manifest next update: Sat 20 Dec 2025 04:02:17 +0000 Files and hashes: 1: AJkLm8QLqcA4cpdlMxjyYpGgKig.roa (hash: Kdq77qB2Z4PyfWGbDab2B0pk/vx4xIRx3C/YwD+0yYQ=) 2: kFTGmagd2WKohg8_sLfQM0Pev3Y.crl (hash: guLFdRwghMaXMIeLdDgMheDu5hRDiNfel2btsZrEdmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:cf:40:ed:bf:91:ad:df:1e:d8:54:d8:aa:2a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76 Validity Not Before: Dec 19 04:02:17 2025 GMT Not After : Dec 20 04:02:17 2025 GMT Subject: CN=1164840a02eda7c46f06fa2a57c7ce033497c104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:45:cb:25:1f:a2:63:dd:fe:0d:b6:e7:b2: ad:e9:e0:21:2a:98:4a:52:e2:bf:a8:4a:89:ce:62: 2d:9b:ed:bb:7b:6b:53:5a:ee:bf:71:72:06:73:ef: 24:38:58:02:a4:22:de:fd:1c:4e:b6:43:90:66:c7: 94:3d:ce:27:df:73:d2:46:16:2d:4e:65:4d:d3:77: df:0e:50:1c:01:5f:f5:4a:64:e2:5e:3d:cc:ac:63: f9:5e:47:1d:93:15:85:0f:af:8f:d2:22:e6:33:67: a3:69:b8:0d:f6:fa:97:68:21:3b:6d:b7:53:97:ad: bd:aa:e1:3e:ea:7e:6f:0c:bc:32:92:6f:55:e7:75: 44:c3:c5:1d:ad:30:15:75:4f:b4:d5:5d:c1:90:13: bb:91:55:27:4b:c3:22:4a:5c:1c:03:05:a2:d6:10: e2:21:f4:e9:02:f6:d6:30:cd:a2:c8:10:36:b5:63: 57:a8:41:65:96:3c:12:4a:85:28:90:68:63:93:76: b7:7e:ca:34:5b:47:97:8e:e2:9e:d3:a7:4c:06:51: d0:e6:13:a3:8a:fe:92:9b:32:eb:26:4e:4c:61:9b: d7:75:2d:21:00:b5:43:ee:90:45:da:3d:62:a0:e8: ff:87:e5:10:38:8e:65:4a:29:5d:8c:26:21:28:0b: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:64:84:0A:02:ED:A7:C4:6F:06:FA:2A:57:C7:CE:03:34:97:C1:04 X509v3 Authority Key Identifier: keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:bf:94:2f:48:76:c0:ca:97:32:bd:81:c5:c3:c0:03:db:09: f2:7f:4f:f5:f0:a7:33:1a:f3:28:b4:51:f9:9d:1f:a0:1d:35: 82:37:89:98:d5:9a:cb:da:2b:c0:ea:ec:87:62:9c:9b:49:72: 49:10:f6:27:c9:fe:38:ad:ad:83:f7:4e:b3:d8:74:2a:3a:e4: 91:dd:ed:de:9b:60:ed:69:66:7e:97:7e:de:46:e9:ce:70:22: fc:5e:7a:26:61:d8:90:c8:f1:1d:4b:cd:1d:94:7b:19:fc:df: b6:c9:41:b3:d0:61:63:f6:a9:d3:c3:46:14:bf:ea:67:92:67: 30:5d:d4:69:15:46:e8:05:98:55:b4:59:65:a2:02:13:5a:cb: 9b:40:a6:d6:34:4f:58:c7:ae:40:40:d3:04:a4:60:49:15:db: 16:de:18:14:a5:ff:7a:c5:7e:ee:a2:f4:46:3e:41:63:20:2e: cc:fe:39:60:a9:b9:c4:61:c3:45:a5:ef:25:f7:e8:2b:67:a3: 73:f6:cf:ee:62:98:9f:a7:dd:2b:20:0c:40:f6:03:10:8a:a1: 51:27:bb:05:2e:6a:3c:ca:5f:42:5a:7c:13:96:06:7b:f7:2e: fa:ac:9c:c2:3a:5b:7b:f3:6a:6c:c1:c8:3d:63:f1:5e:ff:2e: bb:a5:a7:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xc9A7b+Rrd8e2FTYqiqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNTRjNjk5YTgxZGQ5NjJhODg2MGYzZmIwYjdkMDMzNDNk ZWJmNzYwHhcNMjUxMjE5MDQwMjE3WhcNMjUxMjIwMDQwMjE3WjAzMTEwLwYDVQQD EygxMTY0ODQwYTAyZWRhN2M0NmYwNmZhMmE1N2M3Y2UwMzM0OTdjMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNlFyyUfomPd/g2257Kt6eAhKphK UuK/qEqJzmItm+27e2tTWu6/cXIGc+8kOFgCpCLe/RxOtkOQZseUPc4n33PSRhYt TmVN03ffDlAcAV/1SmTiXj3MrGP5XkcdkxWFD6+P0iLmM2ejabgN9vqXaCE7bbdT l629quE+6n5vDLwykm9V53VEw8UdrTAVdU+01V3BkBO7kVUnS8MiSlwcAwWi1hDi IfTpAvbWMM2iyBA2tWNXqEFlljwSSoUokGhjk3a3fso0W0eXjuKe06dMBlHQ5hOj iv6SmzLrJk5MYZvXdS0hALVD7pBF2j1ioOj/h+UQOI5lSildjCYhKAv+IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFkhAoC7afEbwb6KlfHzgM0l8EEMB8GA1UdIwQY MBaAFJBUxpmoHdliqIYPP7C30DND3r92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2Mt MmI0YTE2NTk0MjEzLzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2MtMmI0YTE2NTk0MjEz LzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgr+UL0h2 wMqXMr2BxcPAA9sJ8n9P9fCnMxrzKLRR+Z0foB01gjeJmNWay9orwOrsh2Kcm0ly SRD2J8n+OK2tg/dOs9h0Kjrkkd3t3ptg7Wlmfpd+3kbpznAi/F56JmHYkMjxHUvN HZR7GfzftslBs9BhY/ap08NGFL/qZ5JnMF3UaRVG6AWYVbRZZaICE1rLm0Cm1jRP WMeuQEDTBKRgSRXbFt4YFKX/esV+7qL0Rj5BYyAuzP45YKm5xGHDRaXvJffoK2ej c/bP7mKYn6fdKyAMQPYDEIqhUSe7BS5qPMpfQlp8E5YGe/cu+qycwjpbe/NqbMHI PWPxXv8uu6Wnvg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:18:17 2025 by rpki-client