This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json) Hash identifier: o3gBbI6TSIQ0sLNs2HBkuDeOfXy4cZy3O4GLiUlMyCs= Subject key identifier: 0B:95:6D:85:9C:20:35:67:F1:60:ED:A1:30:B4:28:59:38:8C:2B:D8 Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7 Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7 Certificate serial: 019B59AD01F2AAFD61C59E96E52FD29EA074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 08:01:09 +0000 Manifest this update: Fri 26 Dec 2025 08:01:09 +0000 Manifest next update: Sat 27 Dec 2025 08:01:09 +0000 Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=) 2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=) 3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: lXrianaQ7/4LZWhQxTiwZrqtV+vqwGpYrQiIEfbM044=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:01:f2:aa:fd:61:c5:9e:96:e5:2f:d2:9e:a0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7 Validity Not Before: Dec 26 08:01:09 2025 GMT Not After : Dec 27 08:01:09 2025 GMT Subject: CN=0b956d859c203567f160eda130b42859388c2bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:2a:2a:44:6f:18:74:50:c6:35:90:d8:1d: f3:4c:cb:d1:61:6b:eb:28:b2:89:21:7d:3f:8d:4c: ca:6b:b1:15:48:02:18:66:61:6d:5e:22:4f:a9:8f: 46:11:11:15:c3:8e:04:6d:76:dd:5f:4d:83:13:ae: 55:8e:43:91:1c:bb:c9:fa:6c:29:13:e7:70:9d:d2: 6a:6f:ba:17:56:1f:3d:5a:fd:28:7f:c5:e1:0c:5b: 65:75:85:2e:eb:c3:bc:18:d7:20:e0:b9:82:66:7f: dc:7b:ea:6a:c8:67:31:4c:1c:08:b2:9e:be:d1:59: 87:e9:02:23:a2:94:46:58:98:db:81:c4:dc:b7:f5: 01:97:18:5f:a9:95:3d:f0:b3:e5:ca:4f:a7:e0:fb: 49:f8:c0:6d:a2:e5:2d:bf:31:46:b6:24:3b:c5:a0: c6:4e:a7:23:56:3e:e4:99:93:a2:9e:4d:f0:ee:85: 03:c6:de:1e:7e:08:7a:53:b1:17:ef:40:b9:e0:62: fe:38:99:ed:f5:65:17:59:f3:8b:97:fa:04:5f:da: 11:1d:0a:0b:78:0a:6a:ce:c2:0d:57:ee:69:e3:5b: cc:5e:dd:88:16:c6:a5:a0:3c:3e:69:9e:1c:c1:56: 27:70:8c:5e:4c:85:72:84:ba:70:03:14:bc:77:79: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:95:6D:85:9C:20:35:67:F1:60:ED:A1:30:B4:28:59:38:8C:2B:D8 X509v3 Authority Key Identifier: keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:10:06:fc:ef:e2:8f:b7:a9:05:26:d2:93:79:4a:9d:c3:4f: 39:89:8f:17:bc:50:e4:36:27:08:54:64:1f:5e:8c:37:c4:f7: 6b:b1:91:50:98:34:90:4f:d2:92:78:6c:1d:cd:ed:e6:2e:da: b3:87:a3:85:4d:b8:b3:87:81:10:39:95:55:ef:42:d5:46:ad: bd:ac:7f:c4:ff:95:54:38:04:de:80:f5:1d:b0:4d:a9:7f:61: be:a3:87:77:f1:21:7c:ac:48:36:f4:19:af:9d:97:4c:17:19: f3:da:2f:28:db:4f:08:b4:46:57:16:e4:71:30:68:7d:79:cb: 86:70:4b:4e:f4:fb:b9:a3:09:4c:b9:b6:2b:19:79:b3:d8:a0: 57:c4:a3:c9:fe:d6:76:0c:4d:cb:5f:dd:73:fb:e8:a2:d2:96: 76:3e:3f:08:7c:61:38:2c:ee:e9:13:53:73:31:85:8c:a4:ee: 0c:8f:d2:15:ec:6e:1d:e6:fa:58:f9:6f:d2:62:09:dd:0a:d0: 5e:4b:9f:b0:ac:bb:60:ff:c2:c2:7e:b2:28:97:58:69:9a:44: 71:5f:02:7b:ad:f1:d6:94:36:03:58:59:63:cd:52:db:32:46: 85:01:e9:0b:32:c8:f4:cc:aa:35:71:69:3b:b3:40:30:71:4c: 21:bc:c1:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrQHyqv1hxZ6W5S/SnqB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTEwYTY4NzFjMjliYzAyOTIwNjhhOWI3MmRjMzRmZjgx YjRmYzcwHhcNMjUxMjI2MDgwMTA5WhcNMjUxMjI3MDgwMTA5WjAzMTEwLwYDVQQD EygwYjk1NmQ4NTljMjAzNTY3ZjE2MGVkYTEzMGI0Mjg1OTM4OGMyYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17MqKkRvGHRQxjWQ2B3zTMvRYWvr KLKJIX0/jUzKa7EVSAIYZmFtXiJPqY9GEREVw44EbXbdX02DE65VjkORHLvJ+mwp E+dwndJqb7oXVh89Wv0of8XhDFtldYUu68O8GNcg4LmCZn/ce+pqyGcxTBwIsp6+ 0VmH6QIjopRGWJjbgcTct/UBlxhfqZU98LPlyk+n4PtJ+MBtouUtvzFGtiQ7xaDG TqcjVj7kmZOink3w7oUDxt4efgh6U7EX70C54GL+OJnt9WUXWfOLl/oEX9oRHQoL eApqzsINV+5p41vMXt2IFsaloDw+aZ4cwVYncIxeTIVyhLpwAxS8d3kJMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuVbYWcIDVn8WDtoTC0KFk4jCvYMB8GA1UdIwQY MBaAFJJRCmhxwpvAKSBoqbctw0/4G0/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUt MThhMzBjMzAyOTBkLzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUtMThhMzBjMzAyOTBk LzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRAG/O/i j7epBSbSk3lKncNPOYmPF7xQ5DYnCFRkH16MN8T3a7GRUJg0kE/SknhsHc3t5i7a s4ejhU24s4eBEDmVVe9C1Uatvax/xP+VVDgE3oD1HbBNqX9hvqOHd/EhfKxINvQZ r52XTBcZ89ovKNtPCLRGVxbkcTBofXnLhnBLTvT7uaMJTLm2Kxl5s9igV8Sjyf7W dgxNy1/dc/vootKWdj4/CHxhOCzu6RNTczGFjKTuDI/SFexuHeb6WPlv0mIJ3QrQ XkufsKy7YP/Cwn6yKJdYaZpEcV8Ce63x1pQ2A1hZY81S2zJGhQHpCzLI9MyqNXFp O7NAMHFMIbzBqg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:36 2025 by rpki-client