This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json) Hash identifier: P5FckMp1S5fuhEbAmTqJ3Ht4jnh/X82CGU2Jla6qC48= Subject key identifier: 8D:37:FB:9B:59:4D:EC:49:49:55:BE:1F:01:5D:62:5D:7E:23:1F:AE Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0 Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0 Certificate serial: 019B05C6A42392F72820B104E78D48BE59A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft Manifest number: 13D9 Signing time: Wed 10 Dec 2025 01:01:02 +0000 Manifest this update: Wed 10 Dec 2025 01:01:02 +0000 Manifest next update: Thu 11 Dec 2025 01:01:02 +0000 Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=) 2: ZKs_PtzOl6JXrfZ_pu8ccHotJPY.roa (hash: 2dIpFoPyA8jItE82jeKy7Ii+7GgLwrgqHDUnlv82DBU=) 3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: xXeOqS/mI5+G4k3tyiteJsI2W8HQDHnvPy7aYL3TyT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:a4:23:92:f7:28:20:b1:04:e7:8d:48:be:59:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0 Validity Not Before: Dec 10 01:01:02 2025 GMT Not After : Dec 11 01:01:02 2025 GMT Subject: CN=8d37fb9b594dec494955be1f015d625d7e231fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:11:1f:be:a7:d1:44:44:39:78:87:51:7b:bc: dc:d3:0e:bc:41:47:04:81:7f:6b:7a:0e:26:2b:c5: 2b:05:d3:62:20:b6:96:f4:30:8f:69:6b:f2:46:57: 46:40:ab:3f:f8:7b:67:9a:ad:68:c7:cd:f4:77:b3: 67:cb:95:83:b4:89:a4:ed:e8:c3:30:38:17:45:10: d6:55:1a:d3:20:eb:7a:5a:ee:5b:71:fd:17:7a:82: f3:db:84:8d:53:6e:8d:70:ca:fd:65:0e:a8:25:3d: 70:9f:da:0e:bf:23:c2:60:32:52:6e:9e:04:ab:23: b7:00:2c:7d:6f:d1:00:92:76:c9:f6:5a:57:98:26: b1:9e:8a:15:19:30:8c:e7:8c:4e:2a:06:64:82:7e: 1e:5d:df:1a:91:b5:fe:68:b9:26:fd:12:20:74:62: a7:b4:58:4a:5b:09:3c:d9:49:e6:3c:68:d6:3f:76: c2:c6:00:50:27:97:86:59:94:98:52:62:09:9d:33: b2:4d:42:bf:61:bd:ca:0f:57:ea:31:b3:63:61:f0: ef:13:83:fe:d0:fa:0c:41:5c:c2:c1:19:0e:7f:25: 2a:f1:69:3d:a5:3c:0e:8f:3d:3e:bf:70:1b:04:21: 50:13:4a:e2:31:a2:cb:f6:81:f8:9c:5f:6c:f8:df: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:FB:9B:59:4D:EC:49:49:55:BE:1F:01:5D:62:5D:7E:23:1F:AE X509v3 Authority Key Identifier: keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7b:fe:5f:4f:06:e1:75:41:45:6b:72:06:eb:4a:90:dc:02: 8a:21:c8:e0:53:8b:65:0d:41:87:2d:45:81:81:9d:73:29:54: 56:37:b3:c4:10:55:59:9a:a9:a6:ec:d1:ad:be:db:83:86:70: 11:4f:b0:bb:1a:a5:9b:41:77:00:7a:0e:46:37:f8:28:cd:1d: 34:70:74:83:3d:8b:bd:11:b4:d1:f5:fa:7a:c3:9a:78:8d:b3: 86:3b:87:1d:ab:36:d0:06:3e:bb:29:f2:61:2f:17:75:35:f8: 8d:18:7b:25:09:ec:36:04:fe:63:48:f9:a9:60:e7:e7:27:7a: 29:93:c2:e9:21:fe:98:e3:f2:6a:8e:74:c7:7f:f6:a6:dc:15: 3f:07:d9:12:f1:f1:00:ce:d3:fb:99:54:55:d8:da:04:c2:f3: 99:06:bf:fd:ba:74:2f:8d:2d:27:12:9b:a9:c7:7e:1f:60:ca: 7a:fd:08:aa:8b:ba:89:1a:d9:be:83:f2:80:dc:5e:70:34:5d: 2f:ff:98:44:19:9b:09:e1:bb:64:3a:75:6e:90:ae:88:a7:40: 02:48:46:8d:eb:fe:1a:19:62:e5:29:54:c4:79:2b:2b:5b:70: dc:d0:58:4f:4e:5e:c1:99:82:36:4b:61:18:de:70:7d:8b:3b: d9:e5:21:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxqQjkvcoILEE541IvlmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZmQ4YWFlMWI2ZTE1OWEyZmE4ZjAzZDdhMzE4OGExZTE4 MDcyYTAwHhcNMjUxMjEwMDEwMTAyWhcNMjUxMjExMDEwMTAyWjAzMTEwLwYDVQQD Eyg4ZDM3ZmI5YjU5NGRlYzQ5NDk1NWJlMWYwMTVkNjI1ZDdlMjMxZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmREfvqfRREQ5eIdRe7zc0w68QUcE gX9reg4mK8UrBdNiILaW9DCPaWvyRldGQKs/+Htnmq1ox830d7Nny5WDtImk7ejD MDgXRRDWVRrTIOt6Wu5bcf0XeoLz24SNU26NcMr9ZQ6oJT1wn9oOvyPCYDJSbp4E qyO3ACx9b9EAknbJ9lpXmCaxnooVGTCM54xOKgZkgn4eXd8akbX+aLkm/RIgdGKn tFhKWwk82UnmPGjWP3bCxgBQJ5eGWZSYUmIJnTOyTUK/Yb3KD1fqMbNjYfDvE4P+ 0PoMQVzCwRkOfyUq8Wk9pTwOjz0+v3AbBCFQE0riMaLL9oH4nF9s+N+U0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI03+5tZTexJSVW+HwFdYl1+Ix+uMB8GA1UdIwQY MBaAFJD9iq4bbhWaL6jwPXoxiKHhgHKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDct Nzk5MzU5MTExM2U0LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi81ZGZjNzYtZTdlYi00ZDM1LThhZDctNzk5MzU5MTExM2U0 LzEva1AyS3JodHVGWm92cVBBOWVqR0lvZUdBY3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3v+X08G 4XVBRWtyButKkNwCiiHI4FOLZQ1Bhy1FgYGdcylUVjezxBBVWZqppuzRrb7bg4Zw EU+wuxqlm0F3AHoORjf4KM0dNHB0gz2LvRG00fX6esOaeI2zhjuHHas20AY+uyny YS8XdTX4jRh7JQnsNgT+Y0j5qWDn5yd6KZPC6SH+mOPyao50x3/2ptwVPwfZEvHx AM7T+5lUVdjaBMLzmQa//bp0L40tJxKbqcd+H2DKev0Iqou6iRrZvoPygNxecDRd L/+YRBmbCeG7ZDp1bpCuiKdAAkhGjev+Ghli5SlUxHkrK1tw3NBYT05ewZmCNkth GN5wfYs72eUhhw== -----END CERTIFICATE-----Generated at Wed Dec 10 07:08:30 2025 by rpki-client