This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json) Hash identifier: pj0XwVY6+AK+aQO3yqYWmfrm1HvTbYPih+uQi1NcG90= Subject key identifier: D5:1E:B7:2D:C6:1F:64:82:07:C8:A4:DD:72:A0:AC:68:E7:7F:14:1D Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7 Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7 Certificate serial: 019B39EABF76D9647BB7403CAC709B92F829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft Manifest number: 1181 Signing time: Sat 20 Dec 2025 04:00:44 +0000 Manifest this update: Sat 20 Dec 2025 04:00:44 +0000 Manifest next update: Sun 21 Dec 2025 04:00:44 +0000 Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=) 2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: JGH+WNPob3Ql0m6pzsrGaUkoIyNCcyzB4RKDpJk4YD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:bf:76:d9:64:7b:b7:40:3c:ac:70:9b:92:f8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7 Validity Not Before: Dec 20 04:00:44 2025 GMT Not After : Dec 21 04:00:44 2025 GMT Subject: CN=d51eb72dc61f648207c8a4dd72a0ac68e77f141d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:71:71:b9:96:83:8b:48:39:a2:f9:39:c8: 93:00:46:cd:58:ee:4f:35:af:e6:63:ed:56:de:a8: b7:5f:a1:e8:ae:be:75:44:c1:50:ee:5c:d7:1e:46: c7:e7:50:a0:2d:ed:b6:0d:76:c3:23:d8:ac:62:08: bd:98:1d:20:7f:5a:3b:fd:65:21:cc:b2:cb:80:ad: 8b:cb:6e:0d:58:44:31:e3:90:8d:9f:a9:76:5c:df: 1d:d7:3f:b9:66:c2:d5:97:74:4d:11:1f:6b:87:33: be:a1:ce:e9:f5:3c:ea:af:ac:38:06:c7:c2:51:75: 1f:22:43:64:90:c3:4b:75:51:30:12:c6:ce:c5:6a: d5:bf:1c:93:c6:d6:39:59:d2:c3:d6:80:62:d4:d7: 18:bb:19:1f:36:60:c2:86:03:0e:68:18:bc:50:3b: 8f:42:90:26:7d:83:78:47:f2:d3:73:1f:b2:74:fb: 3a:1a:bc:a5:ec:ae:a5:ed:ca:58:f0:f9:ae:26:f6: 0d:ad:cc:01:69:4c:65:20:22:d9:75:be:c7:ac:5e: 94:1c:7b:1a:dc:f2:a1:a0:c5:81:2d:87:e9:92:01: c2:a7:26:49:2f:4a:66:d6:f1:56:55:92:07:fc:f4: 56:92:89:41:95:c9:8e:5c:56:f0:e9:6b:24:5d:3b: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1E:B7:2D:C6:1F:64:82:07:C8:A4:DD:72:A0:AC:68:E7:7F:14:1D X509v3 Authority Key Identifier: keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:96:b0:dc:c1:27:7f:3a:be:9c:58:85:fb:ba:f1:dd:81:40: 21:81:6b:cb:f3:8f:1f:ad:25:82:c3:80:69:1e:ee:41:ce:72: bf:d1:5a:40:ec:12:e0:98:0d:bf:c6:3b:b9:83:30:35:9c:72: 2e:48:c0:e5:06:51:8d:0c:4d:6a:89:67:98:a1:71:36:69:a0: 49:7b:89:33:fc:59:85:a2:6b:e8:4a:9a:03:a5:a5:b7:c9:54: 33:2f:68:bc:3a:d5:38:d4:62:5c:d7:60:1c:e6:5b:bb:b8:f2: 05:d8:73:64:a5:81:49:c9:a2:91:a5:2a:64:92:1f:0a:0f:43: d8:68:46:d2:09:fa:88:28:7f:0e:86:56:68:a3:52:d6:d5:84: 3f:bf:d1:17:0f:af:18:4e:19:53:9c:a7:bc:a1:68:2a:27:4d: 0b:63:5c:4f:9b:81:0a:f9:64:a9:75:53:94:be:c3:70:8c:7f: 59:ee:fe:7b:cc:48:ed:2e:9d:4f:0b:01:b9:e5:c5:4d:f1:34: 09:3c:8b:7f:7e:fb:2d:2c:b0:a3:6a:1e:eb:43:80:e0:e3:85: 8e:91:e0:ce:7b:b0:07:79:49:1a:08:e3:37:fc:0b:58:43:89: 0b:7b:3a:b7:00:29:4c:39:72:9e:6a:29:8c:3f:98:cd:b8:5c: db:04:4d:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56r922WR7t0A8rHCbkvgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMWM0Yzc2ZWM3NTU2NThkNDVmZDBkM2Y1Y2EzY2M4ZWJk Mzc0YjcwHhcNMjUxMjIwMDQwMDQ0WhcNMjUxMjIxMDQwMDQ0WjAzMTEwLwYDVQQD EyhkNTFlYjcyZGM2MWY2NDgyMDdjOGE0ZGQ3MmEwYWM2OGU3N2YxNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BVxcbmWg4tIOaL5OciTAEbNWO5P Na/mY+1W3qi3X6Horr51RMFQ7lzXHkbH51CgLe22DXbDI9isYgi9mB0gf1o7/WUh zLLLgK2Ly24NWEQx45CNn6l2XN8d1z+5ZsLVl3RNER9rhzO+oc7p9Tzqr6w4BsfC UXUfIkNkkMNLdVEwEsbOxWrVvxyTxtY5WdLD1oBi1NcYuxkfNmDChgMOaBi8UDuP QpAmfYN4R/LTcx+ydPs6Gryl7K6l7cpY8PmuJvYNrcwBaUxlICLZdb7HrF6UHHsa 3PKhoMWBLYfpkgHCpyZJL0pm1vFWVZIH/PRWkolBlcmOXFbw6WskXTvIcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUety3GH2SCB8ik3XKgrGjnfxQdMB8GA1UdIwQY MBaAFJEcTHbsdVZY1F/Q0/XKPMjr03S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2Ut NjJkMjc1NGYyODhiLzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mYTQyNTYtODQxNS00YWIyLTk2Y2UtNjJkMjc1NGYyODhi LzEva1J4TWR1eDFWbGpVWDlEVDljbzh5T3ZUZExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5aw3MEn fzq+nFiF+7rx3YFAIYFry/OPH60lgsOAaR7uQc5yv9FaQOwS4JgNv8Y7uYMwNZxy LkjA5QZRjQxNaolnmKFxNmmgSXuJM/xZhaJr6EqaA6Wlt8lUMy9ovDrVONRiXNdg HOZbu7jyBdhzZKWBScmikaUqZJIfCg9D2GhG0gn6iCh/DoZWaKNS1tWEP7/RFw+v GE4ZU5ynvKFoKidNC2NcT5uBCvlkqXVTlL7DcIx/We7+e8xI7S6dTwsBueXFTfE0 CTyLf377LSywo2oe60OA4OOFjpHgznuwB3lJGgjjN/wLWEOJC3s6twApTDlynmop jD+Yzbhc2wRN+A== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:12 2025 by rpki-client