This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json) Hash identifier: dfnblBdvxljENwhZQCBMfbA6NavpLPKo+Mh0K2+mrhI= Subject key identifier: 90:BE:03:CF:2C:9F:B9:1E:D3:ED:72:98:78:59:82:D9:57:B3:BC:96 Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Certificate serial: 019B22BE2F762E663735B41CE79896C924D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 16:00:47 +0000 Manifest this update: Mon 15 Dec 2025 16:00:47 +0000 Manifest next update: Tue 16 Dec 2025 16:00:47 +0000 Files and hashes: 1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=) 2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: XBONbUEcUafQFBBiFtg+3XLFo9vbx5vJIhnQYhRafKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:2f:76:2e:66:37:35:b4:1c:e7:98:96:c9:24:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e Validity Not Before: Dec 15 16:00:47 2025 GMT Not After : Dec 16 16:00:47 2025 GMT Subject: CN=90be03cf2c9fb91ed3ed7298785982d957b3bc96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1a:f1:42:a2:03:fe:15:79:e2:83:5e:bb:a6: f5:5a:e1:bf:4d:2d:65:be:fe:ec:f2:82:cc:e0:c0: 59:3e:82:f7:b8:c5:56:8f:04:cd:33:5f:10:a4:f7: eb:20:17:c3:9d:68:82:1e:93:74:09:93:f9:7f:12: e6:e3:77:87:4c:ba:21:cf:5f:26:f8:6f:05:86:ef: 53:e5:36:e2:e8:fc:95:b2:91:4e:9a:56:23:52:4a: c9:1f:da:f8:7f:0f:d7:68:7f:76:0f:15:c1:ed:17: 93:5b:40:1b:cc:82:d5:07:09:cb:cf:2c:e3:e6:77: e2:72:b1:47:f2:8e:23:b0:1a:47:04:1a:c2:b4:31: 0c:06:f4:7d:c9:35:17:1a:1c:37:08:3a:d0:7f:39: 5b:79:ae:27:bf:ef:7c:0a:26:23:59:1d:a8:28:d3: 6b:e7:f8:a5:d6:2b:c3:f1:59:34:e8:2a:d9:61:74: 5c:c6:07:0e:87:42:8c:4c:b8:87:a5:b7:b2:d9:e9: c1:2c:c5:2d:30:65:52:a3:54:e3:d4:00:df:89:e2: a2:6c:c1:32:a0:d9:de:29:47:a7:12:38:23:74:56: 7c:5e:fb:86:ad:f7:40:ff:62:b0:ed:90:e1:68:e9: 98:16:3f:b1:53:d8:b2:56:fe:f9:c5:b2:22:a8:fe: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BE:03:CF:2C:9F:B9:1E:D3:ED:72:98:78:59:82:D9:57:B3:BC:96 X509v3 Authority Key Identifier: keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cc:53:dc:7c:98:78:59:6a:b1:be:cc:89:aa:45:8d:ff:4d: e0:f9:5e:57:bd:2f:da:4c:e0:85:f8:92:bc:fc:85:4f:35:2e: a1:af:58:af:60:ba:a0:34:a8:ad:1e:90:ec:a4:d8:9a:7f:27: 95:2b:21:eb:45:31:c3:bf:33:84:26:f1:ce:c9:8f:6f:84:80: e5:16:ef:ab:22:e2:cb:59:a8:c8:59:2e:4d:94:bf:cf:a2:85: 4b:0c:85:ed:50:cb:23:12:a6:60:2a:71:c4:9f:07:63:72:02: 89:4e:e7:ed:14:52:9b:93:5b:aa:08:53:2f:3a:00:57:5b:18: 91:9e:3a:ab:b6:62:af:19:20:2a:b0:cd:d2:9b:3a:80:a9:58: e0:de:45:95:bd:5c:fb:99:b3:f3:74:6e:01:5e:b8:01:cc:d5: 54:3d:7f:f0:9e:13:f2:8e:8f:48:f8:42:82:ca:1c:5b:06:85: 40:fb:04:2c:d1:6b:c4:a6:10:5b:62:49:aa:47:c8:bc:9d:50: eb:bb:4d:96:84:8f:5e:49:26:56:86:a4:1f:af:97:1e:71:34: e1:38:f6:17:0e:31:3f:bb:02:08:1b:b0:de:cf:4e:ba:25:33: c8:9a:84:a4:e1:e0:7d:79:2d:a2:bf:33:ee:54:7c:aa:9e:83: d5:ed:77:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivi92LmY3NbQc55iWySTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4OTU2NDdkOWZkMTZhMTY5NGY4MDI2ZWJlODc3NjBjYjUz MWViMGUwHhcNMjUxMjE1MTYwMDQ3WhcNMjUxMjE2MTYwMDQ3WjAzMTEwLwYDVQQD Eyg5MGJlMDNjZjJjOWZiOTFlZDNlZDcyOTg3ODU5ODJkOTU3YjNiYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xrxQqID/hV54oNeu6b1WuG/TS1l vv7s8oLM4MBZPoL3uMVWjwTNM18QpPfrIBfDnWiCHpN0CZP5fxLm43eHTLohz18m +G8Fhu9T5Tbi6PyVspFOmlYjUkrJH9r4fw/XaH92DxXB7ReTW0AbzILVBwnLzyzj 5nficrFH8o4jsBpHBBrCtDEMBvR9yTUXGhw3CDrQfzlbea4nv+98CiYjWR2oKNNr 5/il1ivD8Vk06CrZYXRcxgcOh0KMTLiHpbey2enBLMUtMGVSo1Tj1ADfieKibMEy oNneKUenEjgjdFZ8XvuGrfdA/2Kw7ZDhaOmYFj+xU9iyVv75xbIiqP7WYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJC+A88sn7ke0+1ymHhZgtlXs7yWMB8GA1UdIwQY MBaAFCiVZH2f0WoWlPgCbr6Hdgy1MesOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMt ZWNjZGMwY2U3ZDE0LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80ODk1NzYtNGRmYi00YTAzLWIwYTMtZWNjZGMwY2U3ZDE0 LzEvS0pWa2ZaX1JhaGFVLUFKdXZvZDJETFV4Nnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosxT3HyY eFlqsb7MiapFjf9N4PleV70v2kzghfiSvPyFTzUuoa9Yr2C6oDSorR6Q7KTYmn8n lSsh60Uxw78zhCbxzsmPb4SA5RbvqyLiy1moyFkuTZS/z6KFSwyF7VDLIxKmYCpx xJ8HY3ICiU7n7RRSm5NbqghTLzoAV1sYkZ46q7ZirxkgKrDN0ps6gKlY4N5Flb1c +5mz83RuAV64AczVVD1/8J4T8o6PSPhCgsocWwaFQPsELNFrxKYQW2JJqkfIvJ1Q 67tNloSPXkkmVoakH6+XHnE04Tj2Fw4xP7sCCBuw3s9OuiUzyJqEpOHgfXktor8z 7lR8qp6D1e13lA== -----END CERTIFICATE-----Generated at Mon Dec 15 18:34:09 2025 by rpki-client