This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json) Hash identifier: 6Xmr1iK+1wPXjDUtDC3x/sHJictMIV7qtLRHa10FLec= Subject key identifier: 19:06:58:41:4C:CD:88:2B:6A:8C:A3:08:96:7A:AA:E1:81:D8:A8:27 Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59 Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59 Certificate serial: 019B104A511FB1CA4513868C7ADEDE90382D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 02:01:04 +0000 Manifest this update: Fri 12 Dec 2025 02:01:04 +0000 Manifest next update: Sat 13 Dec 2025 02:01:04 +0000 Files and hashes: 1: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=) 2: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=) 3: ZgG20-53jQJwsyA9Uj-HDlUNiyA.roa (hash: r4Yw7FV6MragLYSnWbxNhJIL4Bz5tpt7zooYhdKRX2U=) 4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: qAHayx3aSky0aZ/LPyoPCsoTbjahYWVo779CJBXnwgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:51:1f:b1:ca:45:13:86:8c:7a:de:de:90:38:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59 Validity Not Before: Dec 12 02:01:04 2025 GMT Not After : Dec 13 02:01:04 2025 GMT Subject: CN=190658414ccd882b6a8ca308967aaae181d8a827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:9d:7b:1c:4d:ab:dd:96:45:b8:68:98:a3: 9d:14:77:fa:31:c2:7b:95:fc:00:f1:5f:c7:a3:de: 7b:8f:15:57:af:61:08:69:3f:a9:08:c9:69:5d:d2: 71:ba:2d:0a:be:98:a5:03:ac:fa:e3:e6:cd:2c:1f: 24:74:1c:7d:f5:d5:8f:20:78:8a:01:6a:67:e2:c6: 40:54:95:ee:a0:e3:eb:00:a2:af:bd:fe:3f:70:d1: 43:55:f1:aa:8a:14:49:96:3e:65:e4:e8:d5:82:e4: f0:e7:e2:88:9f:d7:1e:b1:9c:6c:bd:cd:1a:3b:ed: 24:6d:eb:cf:7f:69:01:0f:9d:70:b9:a3:14:96:a6: 61:f7:3d:e5:70:da:8a:e1:16:a0:c2:54:e8:4f:53: f7:9d:2e:55:93:aa:01:dc:ff:04:35:88:dc:05:2e: 89:fd:47:b8:92:89:17:08:bb:e7:71:2f:c3:ea:7e: f0:2d:5b:15:3f:81:7f:68:4b:65:dd:11:fc:e1:8c: 45:e1:94:dc:b8:a0:c3:42:41:86:d3:e7:ec:5c:bb: e8:b8:d6:92:0b:77:e8:14:f0:17:3b:c7:a7:b5:23: fb:a9:f3:90:a0:fd:d9:f2:0d:ea:55:7d:02:0c:b9: a3:05:19:63:50:44:a5:a8:3f:bd:6b:43:56:69:a1: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:06:58:41:4C:CD:88:2B:6A:8C:A3:08:96:7A:AA:E1:81:D8:A8:27 X509v3 Authority Key Identifier: keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8b:8b:fe:54:6f:d1:a9:9f:e4:a5:d3:8f:40:ea:ec:9d:d4: 0f:8e:ec:32:e4:78:48:34:6d:b0:1d:a2:b9:ce:25:3f:ca:c3: 0e:c4:b4:97:ab:2f:6f:23:85:fb:1b:91:39:c1:04:59:c9:74: a8:ed:88:d8:be:80:41:37:20:34:0f:3c:a8:34:42:26:4d:cd: da:4e:0e:74:fe:b5:4a:5e:86:55:17:81:5c:87:26:e0:e7:f7: 5b:5a:87:43:94:99:ac:3d:e2:44:1a:36:e3:a3:94:1e:08:27: ab:d6:8a:fb:6d:d2:3a:f4:9d:10:e3:c8:42:2e:c6:08:12:38: ca:02:2e:2b:4d:9b:b8:db:4e:7a:33:7f:00:19:64:8f:54:c7: e1:1c:6b:ab:70:a5:93:e0:5c:26:1d:05:18:ca:2e:4c:a9:b1: 5a:aa:9d:ed:e4:0f:82:b9:26:0a:da:bd:a6:60:61:78:68:85: ff:21:3c:5b:97:d4:f6:b2:5d:a5:31:da:21:ad:33:bb:b3:07: 77:ce:18:2f:2c:e6:1f:42:21:30:c9:4b:0e:51:81:97:77:b9: a7:e3:22:32:3f:00:30:3a:ee:40:61:90:3e:99:0b:cd:9e:74: 7e:1e:ff:7f:39:8e:af:81:39:a1:f8:95:a0:bc:23:a7:cf:16: a1:5b:79:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSlEfscpFE4aMet7ekDgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyM2EyYjNkZDc2NjcyNzVmMDk4ODZkZjdkYTA3OWY3NTVj ZWVkNTkwHhcNMjUxMjEyMDIwMTA0WhcNMjUxMjEzMDIwMTA0WjAzMTEwLwYDVQQD EygxOTA2NTg0MTRjY2Q4ODJiNmE4Y2EzMDg5NjdhYWFlMTgxZDhhODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKqdexxNq92WRbhomKOdFHf6McJ7 lfwA8V/Ho957jxVXr2EIaT+pCMlpXdJxui0KvpilA6z64+bNLB8kdBx99dWPIHiK AWpn4sZAVJXuoOPrAKKvvf4/cNFDVfGqihRJlj5l5OjVguTw5+KIn9cesZxsvc0a O+0kbevPf2kBD51wuaMUlqZh9z3lcNqK4RagwlToT1P3nS5Vk6oB3P8ENYjcBS6J /Ue4kokXCLvncS/D6n7wLVsVP4F/aEtl3RH84YxF4ZTcuKDDQkGG0+fsXLvouNaS C3foFPAXO8entSP7qfOQoP3Z8g3qVX0CDLmjBRljUESlqD+9a0NWaaFWUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkGWEFMzYgraoyjCJZ6quGB2KgnMB8GA1UdIwQY MBaAFJI6Kz3XZnJ18JiG332gefdVzu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjkt MjczOGJjYjQzZDZkLzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iNzk2ZjQtMmU4OC00ZWFhLWEyNjktMjczOGJjYjQzZDZk LzEva2pvclBkZG1jblh3bUliZmZhQjU5MVhPN1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAouL/lRv 0amf5KXTj0Dq7J3UD47sMuR4SDRtsB2iuc4lP8rDDsS0l6svbyOF+xuROcEEWcl0 qO2I2L6AQTcgNA88qDRCJk3N2k4OdP61Sl6GVReBXIcm4Of3W1qHQ5SZrD3iRBo2 46OUHggnq9aK+23SOvSdEOPIQi7GCBI4ygIuK02buNtOejN/ABlkj1TH4Rxrq3Cl k+BcJh0FGMouTKmxWqqd7eQPgrkmCtq9pmBheGiF/yE8W5fU9rJdpTHaIa0zu7MH d84YLyzmH0IhMMlLDlGBl3e5p+MiMj8AMDruQGGQPpkLzZ50fh7/fzmOr4E5ofiV oLwjp88WoVt5gQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:28:46 2025 by rpki-client