This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json) Hash identifier: ObfDeT4B12DycoCpigaq0DrZQ8KNaJ92UjYiqm/zxb4= Subject key identifier: 7C:F5:3B:F3:8B:8D:95:6D:DF:27:7D:97:4D:42:1D:19:16:55:F2:78 Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51 Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351 Certificate serial: 019B42B7129FC81C35491EC3369575133770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft Manifest number: 0659 Signing time: Sun 21 Dec 2025 21:00:52 +0000 Manifest this update: Sun 21 Dec 2025 21:00:52 +0000 Manifest next update: Mon 22 Dec 2025 21:00:52 +0000 Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=) 2: ZStJjyYeeW80s3UrenWKL6Fviiw.roa (hash: QylBnhEyvnv79g3JL425L8t6RW7UscFPY8hGIf7mOwQ=) 3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: Q8c4iYp0uFPNwT45ZO3wCgjT5y2zeqQM1KxEEfxVUkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:12:9f:c8:1c:35:49:1e:c3:36:95:75:13:37:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351 Validity Not Before: Dec 21 21:00:52 2025 GMT Not After : Dec 22 21:00:52 2025 GMT Subject: CN=7cf53bf38b8d956ddf277d974d421d191655f278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3e:e7:b8:62:b0:44:89:92:d1:4a:7b:7c:5e: 35:ad:40:ec:18:00:3d:8e:86:be:c5:30:11:19:99: f8:64:99:f8:b3:6f:31:5a:4d:e1:af:45:eb:f5:cd: 2b:8a:de:ea:85:74:38:70:c5:bc:e4:46:46:1c:9d: f3:34:87:62:83:ea:52:68:24:d6:21:71:a5:2d:b9: 55:2a:21:79:19:06:86:06:74:c4:21:73:b2:5b:ed: 5e:f9:fa:b2:c8:62:5f:92:98:77:f9:23:58:06:b6: c9:cc:56:b4:2d:c5:cc:13:2a:c6:35:b1:aa:64:6a: a7:d6:60:bc:b0:ea:ef:95:54:89:31:06:1b:cb:35: b3:5f:3c:e4:16:c8:84:c7:b9:ad:bf:4d:4f:cb:6c: 84:9d:11:5c:5d:ce:37:0d:d8:ca:10:f2:4c:a0:82: 71:7e:03:f9:42:dd:26:7c:79:bd:fb:21:f7:eb:25: 10:b2:2e:fc:c0:e0:f6:a7:16:0b:f4:70:74:15:55: 11:c7:a7:1f:8a:8a:74:fd:27:5e:2b:9c:f0:f1:02: 8f:8c:36:ea:27:b0:a8:99:79:e7:c9:d9:a3:4a:63: 41:75:ce:84:42:97:33:1d:c6:ad:ac:9b:71:ec:bc: 67:c8:41:6a:3b:7c:aa:17:69:d3:23:81:31:2a:2d: e8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F5:3B:F3:8B:8D:95:6D:DF:27:7D:97:4D:42:1D:19:16:55:F2:78 X509v3 Authority Key Identifier: keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:fb:85:3e:31:ea:4c:1d:f8:6e:58:ec:6c:bc:61:71:ac:b8: 10:ae:74:13:29:f5:a5:2b:3d:99:75:aa:7d:2d:38:6d:d7:71: 66:2f:ac:ca:da:3b:26:cc:3a:6c:e7:f3:fb:1b:b0:55:33:a9: 09:a4:63:65:29:31:40:f5:04:b0:58:79:4d:b7:d2:d3:f7:8e: de:92:1f:52:83:7f:8b:3d:2b:8e:47:8b:71:63:99:56:cb:5f: 68:c1:d4:c8:a9:19:2d:e7:7e:2e:20:cf:4c:6a:c1:33:5b:c2: eb:47:35:b8:ef:99:bb:16:83:f7:da:bb:f2:ea:87:7d:a6:4f: 20:d5:11:44:7b:b8:e1:87:ad:34:bc:76:8d:eb:91:9c:f4:b2: 80:7b:f3:b5:84:54:10:5b:49:5f:1d:39:22:a1:3f:ee:be:7a: 72:9f:a0:64:d3:5c:34:07:44:8e:7f:33:c4:a1:bb:a4:33:5c: a0:e8:12:87:f2:b7:11:b8:d1:48:9a:ca:b5:e0:7f:a4:e4:2f: 1b:d7:fb:39:75:a8:7e:94:82:a1:e9:34:fc:c1:c6:28:9e:54: 99:a0:46:f4:43:40:ce:dd:02:53:63:3d:a8:51:20:0b:49:fd: 4d:cb:28:4e:79:7d:73:c5:eb:4c:7d:86:7d:54:78:54:69:46: 85:2d:77:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtxKfyBw1SR7DNpV1EzdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi MmYzNTEwHhcNMjUxMjIxMjEwMDUyWhcNMjUxMjIyMjEwMDUyWjAzMTEwLwYDVQQD Eyg3Y2Y1M2JmMzhiOGQ5NTZkZGYyNzdkOTc0ZDQyMWQxOTE2NTVmMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD7nuGKwRImS0Up7fF41rUDsGAA9 joa+xTARGZn4ZJn4s28xWk3hr0Xr9c0rit7qhXQ4cMW85EZGHJ3zNIdig+pSaCTW IXGlLblVKiF5GQaGBnTEIXOyW+1e+fqyyGJfkph3+SNYBrbJzFa0LcXMEyrGNbGq ZGqn1mC8sOrvlVSJMQYbyzWzXzzkFsiEx7mtv01Py2yEnRFcXc43DdjKEPJMoIJx fgP5Qt0mfHm9+yH36yUQsi78wOD2pxYL9HB0FVURx6cfiop0/SdeK5zw8QKPjDbq J7ComXnnydmjSmNBdc6EQpczHcatrJtx7LxnyEFqO3yqF2nTI4ExKi3oxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHz1O/OLjZVt3yd9l01CHRkWVfJ4MB8GA1UdIwQY MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvuFPjHq TB34bljsbLxhcay4EK50Eyn1pSs9mXWqfS04bddxZi+syto7Jsw6bOfz+xuwVTOp CaRjZSkxQPUEsFh5TbfS0/eO3pIfUoN/iz0rjkeLcWOZVstfaMHUyKkZLed+LiDP TGrBM1vC60c1uO+ZuxaD99q78uqHfaZPINURRHu44YetNLx2jeuRnPSygHvztYRU EFtJXx05IqE/7r56cp+gZNNcNAdEjn8zxKG7pDNcoOgSh/K3EbjRSJrKteB/pOQv G9f7OXWofpSCoek0/MHGKJ5UmaBG9ENAzt0CU2M9qFEgC0n9TcsoTnl9c8XrTH2G fVR4VGlGhS13tw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:32:55 2025 by rpki-client